@openagt/install 0.1.0 → 0.2.0

package/dist/address.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The secure address, the same on every computer: its name, the address it points at, its hosts
+ * line and its certificate. Each platform's own parts are in its module (mac.ts, linux.ts).
+ */
+/**
+ * The dashboard's secure address: the website's own name, which this computer then answers
+ * itself, the dashboard with the website's copy beside it (#1919).
+ */
+export declare const ADDRESS = "openagent.build";
+/**
+ * The address the name points at: one of this computer's own, the address's alone. The port rule
+ * then touches nothing else this computer sends itself on port 443 (a container a developer
+ * publishes there, say), as a rule for `127.0.0.1` would.
+ */
+export declare const LOOPBACK_ADDRESS = "127.0.0.42";
+/** The end of the hosts line the install adds, which is how the uninstall finds it again. */
+export declare const HOSTS_MARK = "# OpenAgent";
+/** `value` as one word of a shell script, whatever it holds. */
+export declare function quoted(value: string): string;
+/**
+ * Shell lines that take the install's line out of the hosts file `file`, and leave the rest as it
+ * was. The file is written over, not replaced, so it keeps its owner, its permissions and a link
+ * that points at it.
+ */
+export declare function removeHostsLine(file: string): string;
+/** Shell lines that point `name` at this computer in the hosts file `file`, once, however often they run. */
+export declare function addHostsLine(file: string, name: string): string;
+/** The certificate's openssl settings: for `name` alone, for a server, and no authority over any other. */
+export declare function certificateConfig(name: string): string;
+/** The longest a certificate may last for Safari and macOS: 825 days. */
+export declare const CERTIFICATE_DAYS = 825;
+//# sourceMappingURL=address.d.ts.map

package/dist/address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.d.ts","sourceRoot":"","sources":["../src/address.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO,oBAAoB,CAAA;AACxC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,eAAe,CAAA;AAE5C,6FAA6F;AAC7F,eAAO,MAAM,UAAU,gBAAgB,CAAA;AAEvC,gEAAgE;AAChE,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,6GAA6G;AAC7G,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAO/D;AAED,2GAA2G;AAC3G,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYtD;AAED,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,MAAM,CAAA"}

package/dist/address.js

@@ -0,0 +1,56 @@
+/**
+ * The secure address, the same on every computer: its name, the address it points at, its hosts
+ * line and its certificate. Each platform's own parts are in its module (mac.ts, linux.ts).
+ */
+/**
+ * The dashboard's secure address: the website's own name, which this computer then answers
+ * itself, the dashboard with the website's copy beside it (#1919).
+ */
+export const ADDRESS = 'openagent.build';
+/**
+ * The address the name points at: one of this computer's own, the address's alone. The port rule
+ * then touches nothing else this computer sends itself on port 443 (a container a developer
+ * publishes there, say), as a rule for `127.0.0.1` would.
+ */
+export const LOOPBACK_ADDRESS = '127.0.0.42';
+/** The end of the hosts line the install adds, which is how the uninstall finds it again. */
+export const HOSTS_MARK = '# OpenAgent';
+/** `value` as one word of a shell script, whatever it holds. */
+export function quoted(value) {
+    return `'${value.replaceAll("'", `'\\''`)}'`;
+}
+/**
+ * Shell lines that take the install's line out of the hosts file `file`, and leave the rest as it
+ * was. The file is written over, not replaced, so it keeps its owner, its permissions and a link
+ * that points at it.
+ */
+export function removeHostsLine(file) {
+    const kept = quoted(`${file}.openagent`);
+    return `if grep -q ${quoted(` ${HOSTS_MARK}$`)} ${quoted(file)}; then sed ${quoted(`/ ${HOSTS_MARK}$/d`)} ${quoted(file)} > ${kept} && cat ${kept} > ${quoted(file)} && rm ${kept}; fi`;
+}
+/** Shell lines that point `name` at this computer in the hosts file `file`, once, however often they run. */
+export function addHostsLine(file, name) {
+    return [
+        removeHostsLine(file),
+        // A file that does not end its last line would have this one joined to it.
+        `if [ -s ${quoted(file)} ] && [ -n "$(tail -c 1 ${quoted(file)})" ]; then echo >> ${quoted(file)}; fi`,
+        `printf '%s\\n' ${quoted(`${LOOPBACK_ADDRESS} ${name} ${HOSTS_MARK}`)} >> ${quoted(file)}`,
+    ].join('\n');
+}
+/** The certificate's openssl settings: for `name` alone, for a server, and no authority over any other. */
+export function certificateConfig(name) {
+    return `[req]
+distinguished_name = dn
+prompt = no
+[dn]
+CN = ${name}
+[ext]
+subjectAltName = DNS:${name}
+basicConstraints = critical, CA:FALSE
+keyUsage = critical, digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth
+`;
+}
+/** The longest a certificate may last for Safari and macOS: 825 days. */
+export const CERTIFICATE_DAYS = 825;
+//# sourceMappingURL=address.js.map

package/dist/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../src/address.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,CAAA;AACxC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAA;AAE5C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAA;AAEvC,gEAAgE;AAChE,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAA;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAA;IACxC,OAAO,cAAc,MAAM,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAA;AACzL,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAY;IACrD,OAAO;QACL,eAAe,CAAC,IAAI,CAAC;QACrB,2EAA2E;QAC3E,WAAW,MAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,MAAM;QACtG,kBAAkB,MAAM,CAAC,GAAG,gBAAgB,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE;KAC3F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO;;;;OAIF,IAAI;;uBAEY,IAAI;;;;CAI1B,CAAA;AACD,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAA"}

package/dist/install.d.ts

@@ -1,15 +1,17 @@
-/** Where the commands write. */
-export interface InstallIO {
-    out: (line: string) => void;
-    err: (line: string) => void;
-}
+import type { InstallIO } from './platform.js';
+export type { InstallIO };
 /**
- * `npx @openagt/install`: the dashboard starts at login, at `https://openagent.build`. Asks
- * for the person's password twice: macOS's own window, to trust the certificate made here, and
- * once in this terminal, as the administrator, for the name and its port. Typed again, it does
- * the same, and asks nothing it needs no more.
+ * Whether `port` is free within `ms`: a dashboard told to stop closes its runs' views first, for
+ * up to ten seconds, and holds its port until it has.
+ */
+export declare function freed(port: number, ms: number): Promise<boolean>;
+/**
+ * `npx @openagt/install`: the dashboard starts at login, at `https://openagent.build`. Asks for
+ * the person's password as the administrator, for the name and its port; on a Mac also macOS's
+ * own window, to trust the certificate made here. Typed again, it does the same, and asks nothing
+ * it needs no more.
  */
 export declare function install(io?: InstallIO, env?: NodeJS.ProcessEnv): Promise<number>;
-/** `npx @openagt/uninstall`: everything {@link install} put on this Mac, taken off. Each part is taken off even when another fails. */
+/** `npx @openagt/uninstall`: everything {@link install} put on this computer, taken off. Each part is taken off even when another fails. */
 export declare function uninstall(io?: InstallIO, env?: NodeJS.ProcessEnv): Promise<number>;
 //# sourceMappingURL=install.d.ts.map

package/dist/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAWA,gCAAgC;AAChC,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5B;AAuGD;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,EAAE,GAAE,SAAqB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CA6C9G;AAED,uIAAuI;AACvI,wBAAsB,SAAS,CAAC,EAAE,GAAE,SAAqB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkChH"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAY,MAAM,eAAe,CAAA;AAGxD,YAAY,EAAE,SAAS,EAAE,CAAA;AAsBzB;;;GAGG;AACH,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOtE;AA0DD;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,EAAE,GAAE,SAAqB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuC9G;AAED,4IAA4I;AAC5I,wBAAsB,SAAS,CAAC,EAAE,GAAE,SAAqB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBhH"}

package/dist/install.js

@@ -1,43 +1,22 @@
-import { execFile, spawn } from 'node:child_process';
-import { X509Certificate } from 'node:crypto';
+import { spawn } from 'node:child_process';
 import { mkdir, readFile, realpath, rm, writeFile } from 'node:fs/promises';
 import { request } from 'node:https';
 import { createRequire } from 'node:module';
 import { connect } from 'node:net';
-import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { CERTIFICATE_FILE, KEY_FILE, readSecureAddress, secureAddressDir } from '@openagt/dashboard/secure-address';
-import { ADDRESS, CERTIFICATE_DAYS, DASHBOARD_LABEL, LOOPBACK_ADDRESS, adminInstallScript, adminUninstallScript, certificateConfig, dashboardPlist } from './mac.js';
+import { ADDRESS, CERTIFICATE_DAYS, LOOPBACK_ADDRESS, certificateConfig } from './address.js';
+import { linux } from './linux.js';
+import { mac } from './mac.js';
+import { run } from './run.js';
 const defaultIO = {
     out: line => process.stdout.write(line + '\n'),
     err: line => process.stderr.write(line + '\n'),
 };
+/** The kinds of computer OpenAgent installs on. */
+const PLATFORMS = { darwin: mac, linux };
 /** The port the dashboard's plain address is on, which the install's dashboard takes. */
 const DASHBOARD_PORT = 4200;
-/** Where the install keeps what it puts on this Mac, outside the secure address's own folder. */
-function places(env) {
-    const home = env.HOME || homedir();
-    return {
-        home,
-        agent: join(home, 'Library', 'LaunchAgents', `${DASHBOARD_LABEL}.plist`),
-        logs: join(home, 'Library', 'Logs', 'OpenAgent'),
-        app: join(home, 'Library', 'Application Support', 'OpenAgent'),
-        keychain: join(home, 'Library', 'Keychains', 'login.keychain-db'),
-    };
-}
-/** Run a command to its end; rejects with what it said when it fails. `interactive` gives it this terminal, for a password. */
-function run(command, args, opts = {}) {
-    if (opts.interactive) {
-        return new Promise((resolvePromise, rejectPromise) => {
-            spawn(command, args, { stdio: 'inherit' })
-                .on('error', rejectPromise)
-                .on('exit', code => (code === 0 ? resolvePromise() : rejectPromise(new Error(`${command} ended with ${code}`))));
-        });
-    }
-    return new Promise((resolvePromise, rejectPromise) => {
-        execFile(command, args, (error, _stdout, stderr) => (error ? rejectPromise(new Error(String(stderr).trim() || error.message)) : resolvePromise()));
-    });
-}
 /** Whether something answers on this computer's `port`. */
 function taken(port) {
     return new Promise(resolvePromise => {
@@ -47,9 +26,22 @@ function taken(port) {
     });
 }
 /**
- * The dashboard the launch agent runs. Run from a checkout, or from a folder of its own, it is
- * the one this command came with. Run by `npx`, that one is in npm's cache, which npm empties
- * when it likes: the same version is installed to a folder of OpenAgent's own.
+ * Whether `port` is free within `ms`: a dashboard told to stop closes its runs' views first, for
+ * up to ten seconds, and holds its port until it has.
+ */
+export async function freed(port, ms) {
+    const until = Date.now() + ms;
+    while (await taken(port)) {
+        if (Date.now() >= until)
+            return false;
+        await new Promise(resolvePromise => setTimeout(resolvePromise, 250));
+    }
+    return true;
+}
+/**
+ * The dashboard the computer starts at login. Run from a checkout, or from a folder of its own,
+ * it is the one this command came with. Run by `npx`, that one is in npm's cache, which npm
+ * empties when it likes: the same version is installed to a folder of OpenAgent's own.
  */
 async function lastingDashboard(app, io) {
     const manifest = await realpath(createRequire(import.meta.url).resolve('@openagt/dashboard/package.json'));
@@ -74,10 +66,6 @@ async function ensureCertificate(env) {
     await rm(config);
     return readFile(join(dir, CERTIFICATE_FILE), 'utf8');
 }
-/** Whether this Mac trusts the certificate for {@link ADDRESS} already, so a second install asks nothing. */
-function trusted(certFile) {
-    return run('security', ['verify-cert', '-c', certFile, '-p', 'ssl', '-s', ADDRESS, '-q']).then(() => true, () => false);
-}
 /** Whether the secure address answers with the dashboard, as a browser reaches it. */
 function answers(cert) {
     return new Promise(resolvePromise => {
@@ -99,48 +87,50 @@ async function waitUntilAnswers(cert, ms) {
     }
     return false;
 }
+/** Runs `step` as the administrator, in this terminal, which asks for the password. */
+function asAdmin(step, io) {
+    io.out(`◆ ${step.says}`);
+    return run('sudo', ['/bin/sh', '-c', step.script], { interactive: true });
+}
 /**
- * `npx @openagt/install`: the dashboard starts at login, at `https://openagent.build`. Asks
- * for the person's password twice: macOS's own window, to trust the certificate made here, and
- * once in this terminal, as the administrator, for the name and its port. Typed again, it does
- * the same, and asks nothing it needs no more.
+ * `npx @openagt/install`: the dashboard starts at login, at `https://openagent.build`. Asks for
+ * the person's password as the administrator, for the name and its port; on a Mac also macOS's
+ * own window, to trust the certificate made here. Typed again, it does the same, and asks nothing
+ * it needs no more.
  */
 export async function install(io = defaultIO, env = process.env) {
-    if (process.platform !== 'darwin') {
-        io.err('For now OpenAgent installs on a Mac only. On this computer, run `npx @openagt/dashboard`.');
+    const platform = PLATFORMS[process.platform];
+    if (!platform) {
+        io.err('For now OpenAgent installs on a Mac or on Linux only. On this computer, run `npx @openagt/dashboard`.');
         return 1;
     }
-    const place = places(env);
-    const uid = process.getuid?.() ?? 0;
-    // One installed already stops first, so what holds the port below is someone else's.
-    await run('launchctl', ['bootout', `gui/${uid}/${DASHBOARD_LABEL}`]).catch(() => { });
-    if (await taken(DASHBOARD_PORT)) {
+    const unable = await platform.unable(env);
+    if (unable) {
+        io.err(unable);
+        return 1;
+    }
+    // One installed already stops first, and is waited for, so what holds the port below is someone else's.
+    const stopped = await platform.stopDashboard(env);
+    if (!(await freed(DASHBOARD_PORT, stopped ? 15_000 : 0))) {
         io.err(`A dashboard runs on port ${DASHBOARD_PORT} already. Stop it (Ctrl+C in its terminal), then run this again.`);
         return 1;
     }
     try {
-        const dashboard = await lastingDashboard(place.app, io);
+        const dashboard = await lastingDashboard(platform.appDir(env), io);
+        await platform.prepare(io, env);
         const cert = await ensureCertificate(env);
         const certFile = join(secureAddressDir(env), CERTIFICATE_FILE);
-        if (!(await trusted(certFile))) {
-            io.out(`◆ a certificate for ${ADDRESS} was made on this Mac. macOS asks for your password to trust it.`);
-            await run('security', ['add-trusted-cert', '-r', 'trustRoot', '-p', 'ssl', '-k', place.keychain, certFile]);
-        }
-        io.out(`◆ your password as the administrator, once: ${ADDRESS} is pointed at this Mac (/etc/hosts), and its port 443 at the dashboard (a packet filter rule).`);
-        await run('sudo', ['/bin/sh', '-c', adminInstallScript(ADDRESS)], { interactive: true });
-        await mkdir(place.logs, { recursive: true });
-        await mkdir(dirname(place.agent), { recursive: true });
-        const log = join(place.logs, 'dashboard.log');
-        const agentEnv = { PATH: env.PATH ?? '/usr/bin:/bin:/usr/sbin:/sbin', ...(env.XDG_CONFIG_HOME ? { XDG_CONFIG_HOME: env.XDG_CONFIG_HOME } : {}) };
-        await writeFile(place.agent, dashboardPlist({ node: process.execPath, dashboard, home: place.home, env: agentEnv, log }));
-        await run('launchctl', ['bootstrap', `gui/${uid}`, place.agent]);
+        await asAdmin(platform.adminInstall(certFile), io);
+        await platform.trust(certFile, io, env);
+        const vars = { PATH: env.PATH ?? '/usr/bin:/bin:/usr/sbin:/sbin', ...(env.XDG_CONFIG_HOME ? { XDG_CONFIG_HOME: env.XDG_CONFIG_HOME } : {}) };
+        const output = await platform.startDashboard({ node: process.execPath, dashboard, vars }, env);
         if (!(await waitUntilAnswers(cert, 30_000))) {
-            io.err(`The dashboard does not answer at https://${ADDRESS} yet. What it says is in ${log}.`);
+            io.err(`The dashboard does not answer at https://${ADDRESS} yet. What it says is in ${output}.`);
             return 1;
         }
         io.out(`◆ OpenAgent is installed: https://${ADDRESS}`);
         io.out('  It starts when you log in. `npx @openagt/uninstall` takes it off again.');
-        spawn('open', [`https://${ADDRESS}`], { stdio: 'ignore', detached: true }).on('error', () => { }).unref();
+        spawn(platform.openCommand, [`https://${ADDRESS}`], { stdio: 'ignore', detached: true }).on('error', () => { }).unref();
         return 0;
     }
     catch (err) {
@@ -148,34 +138,28 @@ export async function install(io = defaultIO, env = process.env) {
         return 1;
     }
 }
-/** `npx @openagt/uninstall`: everything {@link install} put on this Mac, taken off. Each part is taken off even when another fails. */
+/** `npx @openagt/uninstall`: everything {@link install} put on this computer, taken off. Each part is taken off even when another fails. */
 export async function uninstall(io = defaultIO, env = process.env) {
-    if (process.platform !== 'darwin') {
-        io.err('OpenAgent installs on a Mac only, so there is nothing to take off here.');
+    const platform = PLATFORMS[process.platform];
+    if (!platform) {
+        io.err('OpenAgent installs on a Mac or on Linux only, so there is nothing to take off here.');
         return 1;
     }
-    const place = places(env);
-    const uid = process.getuid?.() ?? 0;
-    await run('launchctl', ['bootout', `gui/${uid}/${DASHBOARD_LABEL}`]).catch(() => { });
-    await rm(place.agent, { force: true });
+    const left = await platform.leftBehind(env);
+    await platform.removeDashboard(env);
     const dir = secureAddressDir(env);
-    const pem = await readFile(join(dir, CERTIFICATE_FILE), 'utf8').catch(() => undefined);
-    if (pem !== undefined) {
-        io.out('◆ macOS asks for your password to stop trusting the certificate.');
-        await run('security', ['remove-trusted-cert', join(dir, CERTIFICATE_FILE)]).catch(() => { });
-        const sha1 = new X509Certificate(pem).fingerprint.replaceAll(':', '');
-        await run('security', ['delete-certificate', '-Z', sha1, place.keychain]).catch(() => { });
-    }
-    io.out(`◆ your password as the administrator, once: the hosts line for ${ADDRESS} and its port rule are taken off.`);
-    const admin = await run('sudo', ['/bin/sh', '-c', adminUninstallScript()], { interactive: true }).then(() => true, () => false);
+    await platform.untrust(join(dir, CERTIFICATE_FILE), io, env);
+    const admin = await asAdmin(platform.adminUninstall(), io).then(() => true, () => false);
     await rm(dir, { recursive: true, force: true });
-    await rm(place.app, { recursive: true, force: true });
-    await rm(place.logs, { recursive: true, force: true });
+    for (const folder of platform.folders(env))
+        await rm(folder, { recursive: true, force: true });
     if (!admin) {
-        io.err(`The hosts line and the port rule are still there: run this again to take them off.`);
+        io.err('The hosts line and the port rule are still there: run this again to take them off.');
         return 1;
     }
-    io.out('◆ OpenAgent is off this Mac. Your projects and their agents’ records are left as they were.');
+    io.out('◆ OpenAgent is off this computer. Your projects and their agents’ records are left as they were.');
+    if (left)
+        io.out(`  ${left}`);
     return 0;
 }
 //# sourceMappingURL=install.js.map

package/dist/install.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACnH,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAQpK,MAAM,SAAS,GAAc;IAC3B,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAC9C,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;CAC/C,CAAA;AAED,yFAAyF;AACzF,MAAM,cAAc,GAAG,IAAI,CAAA;AAE3B,iGAAiG;AACjG,SAAS,MAAM,CAAC,GAAsB;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IAClC,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,eAAe,QAAQ,CAAC;QACxE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC;QAChD,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,CAAC;QAC9D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC;KAClE,CAAA;AACH,CAAC;AAED,+HAA+H;AAC/H,SAAS,GAAG,CAAC,OAAe,EAAE,IAAc,EAAE,IAAI,GAA8B,EAAE;IAChF,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;YACnD,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;iBACvC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;iBAC1B,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACnD,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAA;IACpJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,2DAA2D;AAC3D,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,EAAa;IACxD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAA;IAC1G,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACzF,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAwB,CAAA;IACvF,EAAE,CAAC,GAAG,CAAC,2BAA2B,OAAO,OAAO,GAAG,EAAE,CAAC,CAAA;IACtD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC,CAAA;IAC1G,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AACpF,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,iBAAiB,CAAC,GAAsB;IACrD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAChE,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,CAAA;IAC5C,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IACvC,MAAM,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAA;IACnD,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAA;IACxN,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;IAChB,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAA;AACtD,CAAC;AAED,6GAA6G;AAC7G,SAAS,OAAO,CAAC,QAAgB;IAC/B,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAC5F,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE;YACpJ,GAAG,CAAC,MAAM,EAAE,CAAA;YACZ,cAAc,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5C,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QACtC,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;IAC7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC1B,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACpC,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,GAAc,SAAS,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,EAAE,CAAC,GAAG,CAAC,2FAA2F,CAAC,CAAA;QACnG,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAA;IACnC,qFAAqF;IACrF,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpF,IAAI,MAAM,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,GAAG,CAAC,4BAA4B,cAAc,kEAAkE,CAAC,CAAA;QACpH,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAEvD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAA;QAC9D,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/B,EAAE,CAAC,GAAG,CAAC,uBAAuB,OAAO,kEAAkE,CAAC,CAAA;YACxG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC7G,CAAC;QAED,EAAE,CAAC,GAAG,CAAC,+CAA+C,OAAO,iGAAiG,CAAC,CAAA;QAC/J,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QAExF,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,+BAA+B,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAChJ,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QACzH,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAEhE,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5C,EAAE,CAAC,GAAG,CAAC,4CAA4C,OAAO,4BAA4B,GAAG,GAAG,CAAC,CAAA;YAC7F,OAAO,CAAC,CAAA;QACV,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAA;QACtD,EAAE,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAA;QACnF,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;QACxG,OAAO,CAAC,CAAA;IACV,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,GAAG,CAAC,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/F,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC;AAED,uIAAuI;AACvI,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAAE,GAAc,SAAS,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7F,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,EAAE,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAA;QACjF,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAA;IACnC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpF,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAEtC,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACtF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,EAAE,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAA;QAC1E,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC3F,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QACrE,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC3F,CAAC;IAED,EAAE,CAAC,GAAG,CAAC,kEAAkE,OAAO,mCAAmC,CAAC,CAAA;IACpH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACpG,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;IAED,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,EAAE,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAA;IACV,CAAC;IACD,EAAE,CAAC,GAAG,CAAC,6FAA6F,CAAC,CAAA;IACrG,OAAO,CAAC,CAAA;AACV,CAAC"}
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACnH,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAC7F,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAE9B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAI9B,MAAM,SAAS,GAAc;IAC3B,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAC9C,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;CAC/C,CAAA;AAED,mDAAmD;AACnD,MAAM,SAAS,GAA+C,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;AAEpF,yFAAyF;AACzF,MAAM,cAAc,GAAG,IAAI,CAAA;AAE3B,2DAA2D;AAC3D,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,EAAU;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;IAC7B,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QACrC,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,EAAa;IACxD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,CAAA;IAC1G,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;IACzF,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAwB,CAAA;IACvF,EAAE,CAAC,GAAG,CAAC,2BAA2B,OAAO,OAAO,GAAG,EAAE,CAAC,CAAA;IACtD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAC,CAAA;IAC1G,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAA;AACpF,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,iBAAiB,CAAC,GAAsB;IACrD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAChE,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,CAAA;IAC5C,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IACvC,MAAM,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAA;IACnD,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAA;IACxN,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;IAChB,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAA;AACtD,CAAC;AAED,sFAAsF;AACtF,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE;QAClC,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE;YACpJ,GAAG,CAAC,MAAM,EAAE,CAAA;YACZ,cAAc,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5C,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QACtC,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;IAC7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC1B,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACpC,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,uFAAuF;AACvF,SAAS,OAAO,CAAC,IAAsC,EAAE,EAAa;IACpE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACxB,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,GAAc,SAAS,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC3F,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CAAC,uGAAuG,CAAC,CAAA;QAC/G,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,MAAM,EAAE,CAAC;QACX,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACd,OAAO,CAAC,CAAA;IACV,CAAC;IACD,wGAAwG;IACxG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IACjD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,EAAE,CAAC,GAAG,CAAC,4BAA4B,cAAc,kEAAkE,CAAC,CAAA;QACpH,OAAO,CAAC,CAAA;IACV,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAClE,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC/B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAA;QAC9D,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;QAClD,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAEvC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,+BAA+B,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAC5I,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9F,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5C,EAAE,CAAC,GAAG,CAAC,4CAA4C,OAAO,4BAA4B,MAAM,GAAG,CAAC,CAAA;YAChG,OAAO,CAAC,CAAA;QACV,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAA;QACtD,EAAE,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAA;QACnF,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;QACtH,OAAO,CAAC,CAAA;IACV,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,GAAG,CAAC,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC/F,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC;AAED,4IAA4I;AAC5I,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAAE,GAAc,SAAS,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7F,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAA;QAC7F,OAAO,CAAC,CAAA;IACV,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IAC3C,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACjC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;IAC5D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAC7D,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;IACD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,EAAE,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAA;QAC5F,OAAO,CAAC,CAAA;IACV,CAAC;IACD,EAAE,CAAC,GAAG,CAAC,kGAAkG,CAAC,CAAA;IAC1G,IAAI,IAAI;QAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IAC7B,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/linux.d.ts

@@ -0,0 +1,79 @@
+import type { Platform } from './platform.js';
+/**
+ * What the install puts on a Linux computer. Its files and its scripts as the administrator are
+ * text, made by pure functions a test reads; {@link linux} writes and runs them.
+ */
+/** What starts the dashboard at login: a systemd service of the person's own. */
+export declare const DASHBOARD_UNIT = "openagent-dashboard.service";
+/** What sends the address's port 443 to the dashboard at every start of the computer: a systemd service, the system's. */
+export declare const PORT_UNIT = "openagent-port.service";
+export declare const PORT_UNIT_FILE = "/etc/systemd/system/openagent-port.service";
+/** The nftables table the port rule is in, of its own, so taking it off touches no other rule. */
+export declare const PORT_TABLE = "ip openagent";
+/** The certificate's name in the browsers' certificate stores, which is how the uninstall finds it again. */
+export declare const NSS_NICKNAME = "OpenAgent (openagent.build)";
+/**
+ * How the browsers trust it: as a server (`P`), which Chrome asks for, and as its own authority
+ * (`C`), which Firefox asks for of a certificate that signs itself. It still signs no other: it
+ * says it is no authority (`CA:FALSE`), and may not sign certificates.
+ */
+export declare const NSS_TRUST = "CP,,";
+/** The package managers the install knows, each with how it installs and removes packages. */
+export type PackageManager = 'apt-get' | 'dnf' | 'pacman' | 'zypper';
+/** The commands the install runs that a Linux computer may lack, and the package that has each, by package manager. */
+export declare const TOOLS: Record<'openssl' | 'certutil' | 'nft', Record<PackageManager, string>>;
+export type Tool = keyof typeof TOOLS;
+/** The shell line that installs `packages` with `manager`. An `apt-get` that knows no package yet reads the list of packages first. */
+export declare function installPackagesLine(manager: PackageManager, packages: string[]): string;
+/** The script that installs `packages` with `manager`, and says what the package manager said only when it fails. */
+export declare function installPackagesScript(manager: PackageManager, packages: string[]): string;
+/**
+ * The system's own store of trusted certificates, which `curl` and other tools read, where it takes
+ * this certificate: Debian's and Ubuntu's. Fedora, Arch and openSUSE build theirs with p11-kit,
+ * which keeps out of the bundle tools read any certificate that is no authority, as this one is.
+ */
+export declare const SYSTEM_STORE: {
+    file: string;
+    refresh: string;
+};
+export type SystemStore = typeof SYSTEM_STORE;
+/** `value` as one word of a systemd unit file; `exec` for a command line, which also reads `$`. */
+export declare function unitWord(value: string, opts?: {
+    exec?: boolean;
+}): string;
+/**
+ * The person's service that runs the dashboard from login on, in their home folder. It runs with
+ * the variables of the install's terminal it needs (`vars`): a service's own `PATH` finds no `git`,
+ * `gh` or coding agent the person installed in their home, and a moved config folder holds the
+ * registry and the certificate. Started again only when it fails: a dashboard that ends well (one
+ * ran on its port already, and it handed over) stays ended.
+ */
+export declare function dashboardUnit(opts: {
+    node: string;
+    dashboard: string;
+    vars: {
+        [name: string]: string;
+    };
+}): string;
+/** The nftables commands that send the address's port 443 to the dashboard's secure port, however often they run. */
+export declare function portRule(port?: number): string;
+/**
+ * The system's service that loads the port rule at each start of the computer, and takes it off
+ * when stopped. It loads after the firewall's own rules, which may clear every rule first, and
+ * again whenever they are loaded again, or started after a stop.
+ */
+export declare function portUnit(): string;
+/** The install's script as the administrator: the hosts line, the port rule's service, started now, and the certificate in the system's store. */
+export declare function adminInstallScript(certFile: string, store: SystemStore | undefined, name?: string): string;
+/** The uninstall's script as the administrator: everything {@link adminInstallScript} put there, taken off. */
+export declare function adminUninstallScript(store: SystemStore | undefined): string;
+/**
+ * The browsers' certificate stores in `home`: Chrome's and Chromium's, which they share, the one
+ * of Chromium installed as a snap, and one per Firefox profile, wherever Firefox was installed
+ * from. `withChrome` counts Chrome's in even before Chrome made it.
+ */
+export declare function certificateStores(home: string, opts: {
+    withChrome: boolean;
+}): Promise<string[]>;
+export declare const linux: Platform;
+//# sourceMappingURL=linux.d.ts.map

package/dist/linux.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux.d.ts","sourceRoot":"","sources":["../src/linux.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAG7C;;;GAGG;AAEH,iFAAiF;AACjF,eAAO,MAAM,cAAc,gCAAgC,CAAA;AAC3D,0HAA0H;AAC1H,eAAO,MAAM,SAAS,2BAA2B,CAAA;AACjD,eAAO,MAAM,cAAc,+CAAqC,CAAA;AAChE,kGAAkG;AAClG,eAAO,MAAM,UAAU,iBAAiB,CAAA;AAExC,6GAA6G;AAC7G,eAAO,MAAM,YAAY,gCAA2B,CAAA;AACpD;;;;GAIG;AACH,eAAO,MAAM,SAAS,SAAS,CAAA;AAE/B,8FAA8F;AAC9F,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAepE,uHAAuH;AACvH,eAAO,MAAM,KAAK,EAAE,MAAM,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAIxF,CAAA;AACD,MAAM,MAAM,IAAI,GAAG,MAAM,OAAO,KAAK,CAAA;AAErC,uIAAuI;AACvI,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAGvF;AAED,qHAAqH;AACrH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAKzF;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;IAAK,IAAI;IAAqD,OAAO;CAA4B,CAAA;AAC1H,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAA;AAM7C,mGAAmG;AACnG,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAI7E;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE;QAAE,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG,MAAM,CAejH;AAED,qHAAqH;AACrH,wBAAgB,QAAQ,CAAC,IAAI,GAAE,MAAoB,GAAG,MAAM,CAO3D;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,IAAI,MAAM,CAejC;AAED,kJAAkJ;AAClJ,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,SAAS,EAAE,IAAI,GAAE,MAAgB,GAAG,MAAM,CASnH;AAED,+GAA+G;AAC/G,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,MAAM,CAM3E;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CActG;AAqCD,eAAO,MAAM,KAAK,EAAE,QAkFnB,CAAA"}

package/dist/linux.js

@@ -0,0 +1,289 @@
+import { existsSync } from 'node:fs';
+import { mkdir, readFile, readdir, rm, writeFile } from 'node:fs/promises';
+import { homedir, release } from 'node:os';
+import { join } from 'node:path';
+import { SECURE_PORT } from '@openagt/dashboard/secure-address';
+import { ADDRESS, LOOPBACK_ADDRESS, addHostsLine, quoted, removeHostsLine } from './address.js';
+import { installed, run, succeeds } from './run.js';
+/**
+ * What the install puts on a Linux computer. Its files and its scripts as the administrator are
+ * text, made by pure functions a test reads; {@link linux} writes and runs them.
+ */
+/** What starts the dashboard at login: a systemd service of the person's own. */
+export const DASHBOARD_UNIT = 'openagent-dashboard.service';
+/** What sends the address's port 443 to the dashboard at every start of the computer: a systemd service, the system's. */
+export const PORT_UNIT = 'openagent-port.service';
+export const PORT_UNIT_FILE = `/etc/systemd/system/${PORT_UNIT}`;
+/** The nftables table the port rule is in, of its own, so taking it off touches no other rule. */
+export const PORT_TABLE = 'ip openagent';
+/** The certificate's name in the browsers' certificate stores, which is how the uninstall finds it again. */
+export const NSS_NICKNAME = `OpenAgent (${ADDRESS})`;
+/**
+ * How the browsers trust it: as a server (`P`), which Chrome asks for, and as its own authority
+ * (`C`), which Firefox asks for of a certificate that signs itself. It still signs no other: it
+ * says it is no authority (`CA:FALSE`), and may not sign certificates.
+ */
+export const NSS_TRUST = 'CP,,';
+const INSTALL_PACKAGES = {
+    'apt-get': 'DEBIAN_FRONTEND=noninteractive apt-get install -y',
+    dnf: 'dnf install -y',
+    pacman: 'pacman -S --needed --noconfirm',
+    zypper: 'zypper --non-interactive install',
+};
+const REMOVE_PACKAGES = {
+    'apt-get': 'apt-get remove',
+    dnf: 'dnf remove',
+    pacman: 'pacman -R',
+    zypper: 'zypper remove',
+};
+/** The commands the install runs that a Linux computer may lack, and the package that has each, by package manager. */
+export const TOOLS = {
+    openssl: { 'apt-get': 'openssl', dnf: 'openssl', pacman: 'openssl', zypper: 'openssl' },
+    certutil: { 'apt-get': 'libnss3-tools', dnf: 'nss-tools', pacman: 'nss', zypper: 'mozilla-nss-tools' },
+    nft: { 'apt-get': 'nftables', dnf: 'nftables', pacman: 'nftables', zypper: 'nftables' },
+};
+/** The shell line that installs `packages` with `manager`. An `apt-get` that knows no package yet reads the list of packages first. */
+export function installPackagesLine(manager, packages) {
+    const line = `${INSTALL_PACKAGES[manager]} ${packages.map(quoted).join(' ')}`;
+    return manager === 'apt-get' ? `${line} || { apt-get update && ${line}; }` : line;
+}
+/** The script that installs `packages` with `manager`, and says what the package manager said only when it fails. */
+export function installPackagesScript(manager, packages) {
+    return `said=$(mktemp)
+if ! { ${installPackagesLine(manager, packages)}; } >"$said" 2>&1; then cat "$said" >&2; rm -f "$said"; exit 1; fi
+rm -f "$said"
+`;
+}
+/**
+ * The system's own store of trusted certificates, which `curl` and other tools read, where it takes
+ * this certificate: Debian's and Ubuntu's. Fedora, Arch and openSUSE build theirs with p11-kit,
+ * which keeps out of the bundle tools read any certificate that is no authority, as this one is.
+ */
+export const SYSTEM_STORE = { file: `/usr/local/share/ca-certificates/${ADDRESS}.crt`, refresh: 'update-ca-certificates' };
+function systemStore() {
+    return existsSync(SYSTEM_STORE.file.slice(0, SYSTEM_STORE.file.lastIndexOf('/'))) ? SYSTEM_STORE : undefined;
+}
+/** `value` as one word of a systemd unit file; `exec` for a command line, which also reads `$`. */
+export function unitWord(value, opts = {}) {
+    let word = value.replaceAll('\\', '\\\\').replaceAll('"', '\\"').replaceAll('%', '%%');
+    if (opts.exec)
+        word = word.replaceAll('$', '$$$$');
+    return `"${word}"`;
+}
+/**
+ * The person's service that runs the dashboard from login on, in their home folder. It runs with
+ * the variables of the install's terminal it needs (`vars`): a service's own `PATH` finds no `git`,
+ * `gh` or coding agent the person installed in their home, and a moved config folder holds the
+ * registry and the certificate. Started again only when it fails: a dashboard that ends well (one
+ * ran on its port already, and it handed over) stays ended.
+ */
+export function dashboardUnit(opts) {
+    return `[Unit]
+Description=OpenAgent dashboard, at https://${ADDRESS}
+
+[Service]
+ExecStart=${unitWord(opts.node, { exec: true })} ${unitWord(opts.dashboard, { exec: true })}
+WorkingDirectory=%h
+${Object.entries(opts.vars)
+        .map(([name, value]) => `Environment=${unitWord(`${name}=${value}`)}`)
+        .join('\n')}
+Restart=on-failure
+
+[Install]
+WantedBy=default.target
+`;
+}
+/** The nftables commands that send the address's port 443 to the dashboard's secure port, however often they run. */
+export function portRule(port = SECURE_PORT) {
+    return [
+        `add table ${PORT_TABLE}`,
+        `flush table ${PORT_TABLE}`,
+        `add chain ${PORT_TABLE} output { type nat hook output priority -100 ; }`,
+        `add rule ${PORT_TABLE} output ip daddr ${LOOPBACK_ADDRESS} tcp dport 443 redirect to :${port}`,
+    ].join('; ');
+}
+/**
+ * The system's service that loads the port rule at each start of the computer, and takes it off
+ * when stopped. It loads after the firewall's own rules, which may clear every rule first, and
+ * again whenever they are loaded again, or started after a stop.
+ */
+export function portUnit() {
+    return `[Unit]
+Description=OpenAgent: port 443 of ${ADDRESS}, to the dashboard
+After=nftables.service firewalld.service
+PartOf=nftables.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=nft ${unitWord(portRule(), { exec: true })}
+ExecStop=nft ${unitWord(`delete table ${PORT_TABLE}`, { exec: true })}
+
+[Install]
+WantedBy=multi-user.target nftables.service
+`;
+}
+/** The install's script as the administrator: the hosts line, the port rule's service, started now, and the certificate in the system's store. */
+export function adminInstallScript(certFile, store, name = ADDRESS) {
+    return `set -e
+${addHostsLine('/etc/hosts', name)}
+printf '%s' ${quoted(portUnit())} > ${PORT_UNIT_FILE}
+chmod 644 ${PORT_UNIT_FILE}
+systemctl daemon-reload
+systemctl enable ${PORT_UNIT} 2>/dev/null
+systemctl restart ${PORT_UNIT}
+${store ? `install -m 644 ${quoted(certFile)} ${quoted(store.file)}\n${store.refresh} >/dev/null 2>&1\n` : ''}`;
+}
+/** The uninstall's script as the administrator: everything {@link adminInstallScript} put there, taken off. */
+export function adminUninstallScript(store) {
+    return `${removeHostsLine('/etc/hosts')}
+systemctl disable --now ${PORT_UNIT} 2>/dev/null || true
+rm -f ${PORT_UNIT_FILE}
+systemctl daemon-reload
+${store ? `if [ -e ${quoted(store.file)} ]; then rm -f ${quoted(store.file)}; ${store.refresh} >/dev/null 2>&1; fi\n` : ''}`;
+}
+/**
+ * The browsers' certificate stores in `home`: Chrome's and Chromium's, which they share, the one
+ * of Chromium installed as a snap, and one per Firefox profile, wherever Firefox was installed
+ * from. `withChrome` counts Chrome's in even before Chrome made it.
+ */
+export async function certificateStores(home, opts) {
+    const chrome = join(home, '.pki', 'nssdb');
+    const firefoxes = [
+        join(home, '.mozilla', 'firefox'),
+        join(home, '.config', 'mozilla', 'firefox'),
+        join(home, 'snap', 'firefox', 'common', '.mozilla', 'firefox'),
+        join(home, '.var', 'app', 'org.mozilla.firefox', '.mozilla', 'firefox'),
+    ];
+    const candidates = [chrome, join(home, 'snap', 'chromium', 'current', '.pki', 'nssdb')];
+    for (const folder of firefoxes) {
+        const profiles = await readdir(folder, { withFileTypes: true }).catch(() => []);
+        candidates.push(...profiles.filter(entry => entry.isDirectory()).map(entry => join(folder, entry.name)));
+    }
+    return candidates.filter(store => existsSync(join(store, 'cert9.db')) || (opts.withChrome && store === chrome));
+}
+/** Where the install keeps what it puts in the person's home. */
+function places(env) {
+    const home = env.HOME || homedir();
+    const app = join(env.XDG_DATA_HOME || join(home, '.local', 'share'), 'openagent');
+    return {
+        home,
+        // systemd's own folder for a person's services, which it reads whatever the terminal's variables say.
+        unit: join(home, '.config', 'systemd', 'user', DASHBOARD_UNIT),
+        app,
+        /** The packages the install put on this computer, which the uninstall leaves, and names. */
+        packages: join(app, 'packages.json'),
+    };
+}
+/** The commands the install needs that this computer lacks. */
+async function missingTools(env) {
+    const missing = [];
+    for (const tool of Object.keys(TOOLS))
+        if (!(await installed(tool, env.PATH)))
+            missing.push(tool);
+    return missing;
+}
+async function packageManager(env) {
+    for (const manager of Object.keys(INSTALL_PACKAGES))
+        if (await installed(manager, env.PATH))
+            return manager;
+    return undefined;
+}
+/** What the install says each missing command is for. */
+const FOR = {
+    openssl: 'makes the certificate',
+    certutil: 'puts the certificate in the browsers',
+    nft: 'sends port 443 to the dashboard',
+};
+const user = (args) => ['--user', ...args];
+export const linux = {
+    async unable(env) {
+        if (release().toLowerCase().includes('microsoft')) {
+            return 'Your browsers run on Windows, which this Linux cannot set up. Run `npx @openagt/dashboard` instead.';
+        }
+        if (!(await succeeds('systemctl', user(['show-environment'])))) {
+            return 'This computer runs no systemd for you, which starts the dashboard when you log in. Run `npx @openagt/dashboard` instead.';
+        }
+        const missing = await missingTools(env);
+        if (missing.length > 0 && !(await packageManager(env))) {
+            return `Install the commands ${missing.join(', ')} (${missing.map(tool => TOOLS[tool]['apt-get']).join(', ')} on Debian), then run this again.`;
+        }
+        return undefined;
+    },
+    async stopDashboard() {
+        if (!(await succeeds('systemctl', user(['is-active', '--quiet', DASHBOARD_UNIT]))))
+            return false;
+        await run('systemctl', user(['stop', DASHBOARD_UNIT]));
+        return true;
+    },
+    appDir: env => places(env).app,
+    async prepare(io, env) {
+        const missing = await missingTools(env);
+        const manager = await packageManager(env);
+        if (missing.length === 0 || !manager)
+            return;
+        const packages = missing.map(tool => TOOLS[tool][manager]);
+        io.out(`◆ your password as the administrator: ${packages.join(', ')} ${packages.length === 1 ? 'is' : 'are'} installed (${missing.map(tool => `${tool}, which ${FOR[tool]}`).join('; ')}).`);
+        await run('sudo', ['/bin/sh', '-c', installPackagesScript(manager, packages)], { interactive: true });
+        const place = places(env);
+        const before = await readPackages(place.packages);
+        await mkdir(place.app, { recursive: true });
+        await writeFile(place.packages, JSON.stringify({ manager, packages: [...new Set([...before.packages, ...packages])] }) + '\n');
+    },
+    adminInstall(certFile) {
+        const store = systemStore();
+        return {
+            says: `your password as the administrator: ${ADDRESS} is pointed at this computer (/etc/hosts), and its port 443 at the dashboard (an nftables rule, loaded at each start)${store ? '; the system trusts its certificate, for curl and other tools' : ''}.`,
+            script: adminInstallScript(certFile, store),
+        };
+    },
+    async trust(certFile, io, env) {
+        const stores = await certificateStores(places(env).home, { withChrome: true });
+        for (const store of stores) {
+            if (!existsSync(join(store, 'cert9.db'))) {
+                await mkdir(store, { recursive: true, mode: 0o700 });
+                await run('certutil', ['-N', '-d', `sql:${store}`, '--empty-password']);
+            }
+            // One made by an install before, for a certificate since made again, goes first.
+            await run('certutil', ['-D', '-d', `sql:${store}`, '-n', NSS_NICKNAME]).catch(() => { });
+            await run('certutil', ['-A', '-d', `sql:${store}`, '-n', NSS_NICKNAME, '-t', NSS_TRUST, '-i', certFile]);
+        }
+        io.out(`◆ Chrome and Firefox trust the certificate (${stores.length} certificate store${stores.length === 1 ? '' : 's'}). A Firefox profile made later: run this again.`);
+    },
+    async startDashboard(opts, env) {
+        const place = places(env);
+        await mkdir(join(place.unit, '..'), { recursive: true });
+        await writeFile(place.unit, dashboardUnit(opts));
+        await run('systemctl', user(['daemon-reload']));
+        await run('systemctl', user(['enable', DASHBOARD_UNIT]));
+        await run('systemctl', user(['restart', DASHBOARD_UNIT]));
+        return `\`journalctl --user -u ${DASHBOARD_UNIT}\``;
+    },
+    openCommand: 'xdg-open',
+    async removeDashboard(env) {
+        await run('systemctl', user(['disable', '--now', DASHBOARD_UNIT])).catch(() => { });
+        await rm(places(env).unit, { force: true });
+        await run('systemctl', user(['daemon-reload'])).catch(() => { });
+    },
+    async untrust(_certFile, _io, env) {
+        for (const store of await certificateStores(places(env).home, { withChrome: false })) {
+            await run('certutil', ['-D', '-d', `sql:${store}`, '-n', NSS_NICKNAME]).catch(() => { });
+        }
+    },
+    adminUninstall: () => ({
+        says: `your password as the administrator, once: the hosts line for ${ADDRESS} and its port rule are taken off${systemStore() ? ', and the system trusts its certificate no more' : ''}.`,
+        script: adminUninstallScript(systemStore()),
+    }),
+    folders: env => [places(env).app],
+    async leftBehind(env) {
+        const { manager, packages } = await readPackages(places(env).packages);
+        if (!manager || packages.length === 0)
+            return undefined;
+        return `${packages.join(', ')} ${packages.length === 1 ? 'stays' : 'stay'} installed, as other programs may use ${packages.length === 1 ? 'it' : 'them'}: \`sudo ${REMOVE_PACKAGES[manager]} ${packages.join(' ')}\` takes ${packages.length === 1 ? 'it' : 'them'} off.`;
+    },
+};
+async function readPackages(file) {
+    const text = await readFile(file, 'utf8').catch(() => undefined);
+    return text === undefined ? { packages: [] } : JSON.parse(text);
+}
+//# sourceMappingURL=linux.js.map

package/dist/linux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux.js","sourceRoot":"","sources":["../src/linux.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAA;AAC/D,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE/F,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAEnD;;;GAGG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAA;AAC3D,0HAA0H;AAC1H,MAAM,CAAC,MAAM,SAAS,GAAG,wBAAwB,CAAA;AACjD,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAuB,SAAS,EAAE,CAAA;AAChE,kGAAkG;AAClG,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAA;AAExC,6GAA6G;AAC7G,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,OAAO,GAAG,CAAA;AACpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAA;AAK/B,MAAM,gBAAgB,GAAmC;IACvD,SAAS,EAAE,mDAAmD;IAC9D,GAAG,EAAE,gBAAgB;IACrB,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,kCAAkC;CAC3C,CAAA;AACD,MAAM,eAAe,GAAmC;IACtD,SAAS,EAAE,gBAAgB;IAC3B,GAAG,EAAE,YAAY;IACjB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;CACxB,CAAA;AAED,uHAAuH;AACvH,MAAM,CAAC,MAAM,KAAK,GAA2E;IAC3F,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;IACvF,QAAQ,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACtG,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;CACxF,CAAA;AAGD,uIAAuI;AACvI,MAAM,UAAU,mBAAmB,CAAC,OAAuB,EAAE,QAAkB;IAC7E,MAAM,IAAI,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAC7E,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,2BAA2B,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACnF,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,qBAAqB,CAAC,OAAuB,EAAE,QAAkB;IAC/E,OAAO;SACA,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC;;CAE9C,CAAA;AACD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,oCAAoC,OAAO,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAA;AAG1H,SAAS,WAAW;IAClB,OAAO,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9G,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,IAAI,GAAuB,EAAE;IACnE,IAAI,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACtF,IAAI,IAAI,CAAC,IAAI;QAAE,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAClD,OAAO,IAAI,IAAI,GAAG,CAAA;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAA2E;IACvG,OAAO;8CACqC,OAAO;;;YAGzC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;EAEzF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,eAAe,QAAQ,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,EAAE,CAAC;SACrE,IAAI,CAAC,IAAI,CAAC;;;;;CAKZ,CAAA;AACD,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,QAAQ,CAAC,IAAI,GAAW,WAAW;IACjD,OAAO;QACL,aAAa,UAAU,EAAE;QACzB,eAAe,UAAU,EAAE;QAC3B,aAAa,UAAU,kDAAkD;QACzE,YAAY,UAAU,oBAAoB,gBAAgB,+BAA+B,IAAI,EAAE;KAChG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO;qCAC4B,OAAO;;;;;;;gBAO5B,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;eACrC,QAAQ,CAAC,gBAAgB,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;;;CAIpE,CAAA;AACD,CAAC;AAED,kJAAkJ;AAClJ,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,KAA8B,EAAE,IAAI,GAAW,OAAO;IACzG,OAAO;EACP,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC;cACpB,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,cAAc;YACxC,cAAc;;mBAEP,SAAS;oBACR,SAAS;EAC3B,KAAK,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AAC/G,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,oBAAoB,CAAC,KAA8B;IACjE,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC;0BACf,SAAS;QAC3B,cAAc;;EAEpB,KAAK,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AAC5H,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAA6B;IACjF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,MAAM,SAAS,GAAG;QAChB,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC;QACjC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;QAC9D,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,SAAS,CAAC;KACxE,CAAA;IACD,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACvF,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAC/E,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1G,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAA;AACjH,CAAC;AAED,iEAAiE;AACjE,SAAS,MAAM,CAAC,GAAsB;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;IACjF,OAAO;QACL,IAAI;QACJ,sGAAsG;QACtG,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC;QAC9D,GAAG;QACH,4FAA4F;QAC5F,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC;KACrC,CAAA;AACH,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,YAAY,CAAC,GAAsB;IAChD,MAAM,OAAO,GAAW,EAAE,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAW;QAAE,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3G,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAsB;IAClD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAqB;QAAE,IAAI,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAA;IAC/H,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,yDAAyD;AACzD,MAAM,GAAG,GAAyB;IAChC,OAAO,EAAE,uBAAuB;IAChC,QAAQ,EAAE,sCAAsC;IAChD,GAAG,EAAE,iCAAiC;CACvC,CAAA;AAED,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAA;AAEpD,MAAM,CAAC,MAAM,KAAK,GAAa;IAC7B,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,IAAI,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,OAAO,qGAAqG,CAAA;QAC9G,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,0HAA0H,CAAA;QACnI,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvD,OAAO,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAA;QACjJ,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QAChG,MAAM,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;QACtD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG;IAC9B,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG;QACnB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;QACvC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO;YAAE,OAAM;QAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QAC1D,EAAE,CAAC,GAAG,CAAC,yCAAyC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,eAAe,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5L,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;QACrG,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACjD,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAA;IAChI,CAAC;IACD,YAAY,CAAC,QAAQ;QACnB,MAAM,KAAK,GAAG,WAAW,EAAE,CAAA;QAC3B,OAAO;YACL,IAAI,EAAE,uCAAuC,OAAO,wHAAwH,KAAK,CAAC,CAAC,CAAC,+DAA+D,CAAC,CAAC,CAAC,EAAE,GAAG;YAC3P,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC;SAC5C,CAAA;IACH,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG;QAC3B,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9E,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;gBACzC,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;gBACpD,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;YACzE,CAAC;YACD,iFAAiF;YACjF,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACvF,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC1G,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,+CAA+C,MAAM,CAAC,MAAM,qBAAqB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,kDAAkD,CAAC,CAAA;IAC3K,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;QAChD,MAAM,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;QACzD,OAAO,0BAA0B,cAAc,IAAI,CAAA;IACrD,CAAC;IACD,WAAW,EAAE,UAAU;IACvB,KAAK,CAAC,eAAe,CAAC,GAAG;QACvB,MAAM,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClF,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3C,MAAM,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG;QAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACrF,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IACD,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE,gEAAgE,OAAO,mCAAmC,WAAW,EAAE,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC,CAAC,EAAE,GAAG;QACzL,MAAM,EAAE,oBAAoB,CAAC,WAAW,EAAE,CAAC;KAC5C,CAAC;IACF,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;IACjC,KAAK,CAAC,UAAU,CAAC,GAAG;QAClB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;QACtE,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QACvD,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,yCAAyC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,eAAe,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,CAAA;IAC3Q,CAAC;CACF,CAAA;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAChE,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqD,CAAA;AACtH,CAAC"}

package/dist/mac.d.ts

@@ -1,18 +1,8 @@
+import type { Platform } from './platform.js';
 /**
- * What the install puts on a Mac, as text: the files it writes and the one script it runs as the
- * administrator. Pure, so a test reads each one; {@link install} and {@link uninstall} write and run them.
+ * What the install puts on a Mac. Its files and its script as the administrator are text, made by
+ * pure functions a test reads; {@link mac} writes and runs them.
  */
-/**
- * The dashboard's secure address: the website's own name, which this computer then answers
- * itself, the dashboard with the website's copy beside it (#1919).
- */
-export declare const ADDRESS = "openagent.build";
-/**
- * The address the name points at: one of this computer's own, the address's alone. The port rule
- * then touches nothing else this computer sends itself on port 443 (a container a developer
- * publishes there, say), as a rule for `127.0.0.1` would.
- */
-export declare const LOOPBACK_ADDRESS = "127.0.0.42";
 /** What starts the dashboard at login: a launch agent of the person's own. */
 export declare const DASHBOARD_LABEL = "build.openagent.dashboard";
 /** What sends the address's port 443 to the dashboard at every start of the Mac: a launch daemon, the system's. */
@@ -24,8 +14,6 @@ export declare const PORT_PLIST = "/Library/LaunchDaemons/build.openagent.port.p
  */
 export declare const PORT_ANCHOR = "com.apple/openagent";
 export declare const PORT_RULE_FILE = "/etc/pf.anchors/build.openagent";
-/** The end of the hosts line the install adds, which is how the uninstall finds it again. */
-export declare const HOSTS_MARK = "# OpenAgent";
 /** One value in a launchd property list. */
 type PlistValue = string | boolean | PlistValue[] | {
     [key: string]: PlistValue;
@@ -58,19 +46,10 @@ export declare function portRule(port?: number): string;
  * its own until told more.
  */
 export declare function portPlist(): string;
-/** `value` as one word of a shell script, whatever it holds. */
-export declare function quoted(value: string): string;
-/** Shell lines that take the install's line out of the hosts file `file`, and leave the rest as it was. */
-export declare function removeHostsLine(file: string): string;
-/** Shell lines that point `name` at this computer in the hosts file `file`, once, however often they run. */
-export declare function addHostsLine(file: string, name: string): string;
 /** The install's one script as the administrator: the hosts line, and the port rule with its launch daemon, started now. */
 export declare function adminInstallScript(name?: string): string;
 /** The uninstall's one script as the administrator: everything {@link adminInstallScript} put there, taken off. */
 export declare function adminUninstallScript(): string;
-/** The certificate's openssl settings: for `name` alone, for a server, and no authority over any other. */
-export declare function certificateConfig(name: string): string;
-/** The longest a certificate may last for Safari and macOS: 825 days. */
-export declare const CERTIFICATE_DAYS = 825;
+export declare const mac: Platform;
 export {};
 //# sourceMappingURL=mac.d.ts.map

package/dist/mac.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mac.d.ts","sourceRoot":"","sources":["../src/mac.ts"],"names":[],"mappings":"AAEA;;;GAGG;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO,oBAAoB,CAAA;AACxC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,eAAe,CAAA;AAE5C,8EAA8E;AAC9E,eAAO,MAAM,eAAe,8BAA8B,CAAA;AAC1D,mHAAmH;AACnH,eAAO,MAAM,UAAU,yBAAyB,CAAA;AAChD,eAAO,MAAM,UAAU,sDAA+C,CAAA;AACtE;;;GAGG;AACH,eAAO,MAAM,WAAW,wBAAwB,CAAA;AAChD,eAAO,MAAM,cAAc,oCAAoC,CAAA;AAE/D,6FAA6F;AAC7F,eAAO,MAAM,UAAU,gBAAgB,CAAA;AAEvC,4CAA4C;AAC5C,KAAK,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAA;AAajF,8CAA8C;AAC9C,wBAAgB,KAAK,CAAC,IAAI,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,GAAG,MAAM,CAOjE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE;QAAE,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAW5I;AAED,iFAAiF;AACjF,wBAAgB,QAAQ,CAAC,IAAI,GAAE,MAAoB,GAAG,MAAM,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAMlC;AAED,gEAAgE;AAChE,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,2GAA2G;AAC3G,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,6GAA6G;AAC7G,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAO/D;AAKD,4HAA4H;AAC5H,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,MAAgB,GAAG,MAAM,CAWjE;AAED,mHAAmH;AACnH,wBAAgB,oBAAoB,IAAI,MAAM,CAQ7C;AAED,2GAA2G;AAC3G,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAYtD;AAED,yEAAyE;AACzE,eAAO,MAAM,gBAAgB,MAAM,CAAA"}
+{"version":3,"file":"mac.d.ts","sourceRoot":"","sources":["../src/mac.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAG7C;;;GAGG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,eAAe,8BAA8B,CAAA;AAC1D,mHAAmH;AACnH,eAAO,MAAM,UAAU,yBAAyB,CAAA;AAChD,eAAO,MAAM,UAAU,sDAA+C,CAAA;AACtE;;;GAGG;AACH,eAAO,MAAM,WAAW,wBAAwB,CAAA;AAChD,eAAO,MAAM,cAAc,oCAAoC,CAAA;AAE/D,4CAA4C;AAC5C,KAAK,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAA;AAajF,8CAA8C;AAC9C,wBAAgB,KAAK,CAAC,IAAI,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,GAAG,MAAM,CAOjE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE;QAAE,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAW5I;AAED,iFAAiF;AACjF,wBAAgB,QAAQ,CAAC,IAAI,GAAE,MAAoB,GAAG,MAAM,CAE3D;AAED;;;;GAIG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAMlC;AAKD,4HAA4H;AAC5H,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,MAAgB,GAAG,MAAM,CAWjE;AAED,mHAAmH;AACnH,wBAAgB,oBAAoB,IAAI,MAAM,CAQ7C;AAgBD,eAAO,MAAM,GAAG,EAAE,QA2CjB,CAAA"}

package/dist/mac.js

@@ -1,19 +1,14 @@
+import { X509Certificate } from 'node:crypto';
+import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
 import { SECURE_PORT } from '@openagt/dashboard/secure-address';
+import { ADDRESS, LOOPBACK_ADDRESS, addHostsLine, quoted, removeHostsLine } from './address.js';
+import { run, succeeds } from './run.js';
 /**
- * What the install puts on a Mac, as text: the files it writes and the one script it runs as the
- * administrator. Pure, so a test reads each one; {@link install} and {@link uninstall} write and run them.
+ * What the install puts on a Mac. Its files and its script as the administrator are text, made by
+ * pure functions a test reads; {@link mac} writes and runs them.
  */
-/**
- * The dashboard's secure address: the website's own name, which this computer then answers
- * itself, the dashboard with the website's copy beside it (#1919).
- */
-export const ADDRESS = 'openagent.build';
-/**
- * The address the name points at: one of this computer's own, the address's alone. The port rule
- * then touches nothing else this computer sends itself on port 443 (a container a developer
- * publishes there, say), as a rule for `127.0.0.1` would.
- */
-export const LOOPBACK_ADDRESS = '127.0.0.42';
 /** What starts the dashboard at login: a launch agent of the person's own. */
 export const DASHBOARD_LABEL = 'build.openagent.dashboard';
 /** What sends the address's port 443 to the dashboard at every start of the Mac: a launch daemon, the system's. */
@@ -25,8 +20,6 @@ export const PORT_PLIST = `/Library/LaunchDaemons/${PORT_LABEL}.plist`;
  */
 export const PORT_ANCHOR = 'com.apple/openagent';
 export const PORT_RULE_FILE = '/etc/pf.anchors/build.openagent';
-/** The end of the hosts line the install adds, which is how the uninstall finds it again. */
-export const HOSTS_MARK = '# OpenAgent';
 function escapeXml(text) {
     return text.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');
 }
@@ -83,23 +76,6 @@ export function portPlist() {
         RunAtLoad: true,
     });
 }
-/** `value` as one word of a shell script, whatever it holds. */
-export function quoted(value) {
-    return `'${value.replaceAll("'", `'\\''`)}'`;
-}
-/** Shell lines that take the install's line out of the hosts file `file`, and leave the rest as it was. */
-export function removeHostsLine(file) {
-    return `if grep -q ${quoted(` ${HOSTS_MARK}$`)} ${quoted(file)}; then sed -i '' ${quoted(`/ ${HOSTS_MARK}$/d`)} ${quoted(file)}; fi`;
-}
-/** Shell lines that point `name` at this computer in the hosts file `file`, once, however often they run. */
-export function addHostsLine(file, name) {
-    return [
-        removeHostsLine(file),
-        // A file that does not end its last line would have this one joined to it.
-        `if [ -s ${quoted(file)} ] && [ -n "$(tail -c 1 ${quoted(file)})" ]; then echo >> ${quoted(file)}; fi`,
-        `printf '%s\\n' ${quoted(`${LOOPBACK_ADDRESS} ${name} ${HOSTS_MARK}`)} >> ${quoted(file)}`,
-    ].join('\n');
-}
 /** Forget what the Mac remembers of names, so the hosts line counts at once. */
 const FORGET_NAMES = 'dscacheutil -flushcache; killall -HUP mDNSResponder 2>/dev/null || true';
 /** The install's one script as the administrator: the hosts line, and the port rule with its launch daemon, started now. */
@@ -125,20 +101,62 @@ rm -f ${PORT_RULE_FILE} ${PORT_PLIST}
 ${FORGET_NAMES}
 `;
 }
-/** The certificate's openssl settings: for `name` alone, for a server, and no authority over any other. */
-export function certificateConfig(name) {
-    return `[req]
-distinguished_name = dn
-prompt = no
-[dn]
-CN = ${name}
-[ext]
-subjectAltName = DNS:${name}
-basicConstraints = critical, CA:FALSE
-keyUsage = critical, digitalSignature, keyEncipherment
-extendedKeyUsage = serverAuth
-`;
+/** Where the install keeps what it puts on this Mac, outside the secure address's own folder. */
+function places(env) {
+    const home = env.HOME || homedir();
+    return {
+        home,
+        agent: join(home, 'Library', 'LaunchAgents', `${DASHBOARD_LABEL}.plist`),
+        logs: join(home, 'Library', 'Logs', 'OpenAgent'),
+        app: join(home, 'Library', 'Application Support', 'OpenAgent'),
+        keychain: join(home, 'Library', 'Keychains', 'login.keychain-db'),
+    };
 }
-/** The longest a certificate may last for Safari and macOS: 825 days. */
-export const CERTIFICATE_DAYS = 825;
+const uid = () => process.getuid?.() ?? 0;
+export const mac = {
+    unable: async () => undefined,
+    stopDashboard: () => succeeds('launchctl', ['bootout', `gui/${uid()}/${DASHBOARD_LABEL}`]),
+    appDir: env => places(env).app,
+    prepare: async () => { },
+    adminInstall: () => ({
+        says: `your password as the administrator, once: ${ADDRESS} is pointed at this Mac (/etc/hosts), and its port 443 at the dashboard (a packet filter rule).`,
+        script: adminInstallScript(ADDRESS),
+    }),
+    async trust(certFile, io, env) {
+        // Trusted already, by an install before: macOS asks nothing.
+        if (await succeeds('security', ['verify-cert', '-c', certFile, '-p', 'ssl', '-s', ADDRESS, '-q']))
+            return;
+        io.out(`◆ a certificate for ${ADDRESS} was made on this Mac. macOS asks for your password to trust it.`);
+        await run('security', ['add-trusted-cert', '-r', 'trustRoot', '-p', 'ssl', '-k', places(env).keychain, certFile]);
+    },
+    async startDashboard({ node, dashboard, vars }, env) {
+        const place = places(env);
+        await mkdir(place.logs, { recursive: true });
+        await mkdir(dirname(place.agent), { recursive: true });
+        const log = join(place.logs, 'dashboard.log');
+        await writeFile(place.agent, dashboardPlist({ node, dashboard, home: place.home, env: vars, log }));
+        await run('launchctl', ['bootstrap', `gui/${uid()}`, place.agent]);
+        return log;
+    },
+    openCommand: 'open',
+    async removeDashboard(env) {
+        await run('launchctl', ['bootout', `gui/${uid()}/${DASHBOARD_LABEL}`]).catch(() => { });
+        await rm(places(env).agent, { force: true });
+    },
+    async untrust(certFile, io, env) {
+        const pem = await readFile(certFile, 'utf8').catch(() => undefined);
+        if (pem === undefined)
+            return;
+        io.out('◆ macOS asks for your password to stop trusting the certificate.');
+        await run('security', ['remove-trusted-cert', certFile]).catch(() => { });
+        const sha1 = new X509Certificate(pem).fingerprint.replaceAll(':', '');
+        await run('security', ['delete-certificate', '-Z', sha1, places(env).keychain]).catch(() => { });
+    },
+    adminUninstall: () => ({
+        says: `your password as the administrator, once: the hosts line for ${ADDRESS} and its port rule are taken off.`,
+        script: adminUninstallScript(),
+    }),
+    folders: env => [places(env).app, places(env).logs],
+    leftBehind: async () => undefined,
+};
 //# sourceMappingURL=mac.js.map

package/dist/mac.js.map

@@ -1 +1 @@
-{"version":3,"file":"mac.js","sourceRoot":"","sources":["../src/mac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAA;AAE/D;;;GAGG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,iBAAiB,CAAA;AACxC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAA;AAE5C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAC1D,mHAAmH;AACnH,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAA;AAChD,MAAM,CAAC,MAAM,UAAU,GAAG,0BAA0B,UAAU,QAAQ,CAAA;AACtE;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,qBAAqB,CAAA;AAChD,MAAM,CAAC,MAAM,cAAc,GAAG,iCAAiC,CAAA;AAE/D,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAA;AAKvC,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAc;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,MAAM,WAAW,SAAS,CAAC,KAAK,CAAC,WAAW,CAAA;IACrF,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,MAAM,IAAI,KAAK,IAAI,CAAA;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,MAAM,SAAS,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5I,OAAO,CAAC,GAAG,MAAM,QAAQ,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,UAAU,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC5L,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,KAAK,CAAC,IAAmC;IACvD,OAAO;;;EAGP,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;;CAErB,CAAA;AACD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAqG;IAClI,OAAO,KAAK,CAAC;QACX,KAAK,EAAE,eAAe;QACtB,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;QAC7C,gBAAgB,EAAE,IAAI,CAAC,IAAI;QAC3B,oBAAoB,EAAE,IAAI,CAAC,GAAG;QAC9B,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;QACpC,eAAe,EAAE,IAAI,CAAC,GAAG;QACzB,iBAAiB,EAAE,IAAI,CAAC,GAAG;KAC5B,CAAC,CAAA;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,QAAQ,CAAC,IAAI,GAAW,WAAW;IACjD,OAAO,8CAA8C,gBAAgB,+BAA+B,IAAI,IAAI,CAAA;AAC9G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC;QACX,KAAK,EAAE,UAAU;QACjB,gBAAgB,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,4BAA4B,gBAAgB,yBAAyB,WAAW,OAAO,cAAc,oBAAoB,CAAC;QAC9J,SAAS,EAAE,IAAI;KAChB,CAAC,CAAA;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAA;AAC9C,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,cAAc,MAAM,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAA;AACtI,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAY;IACrD,OAAO;QACL,eAAe,CAAC,IAAI,CAAC;QACrB,2EAA2E;QAC3E,WAAW,MAAM,CAAC,IAAI,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,MAAM;QACtG,kBAAkB,MAAM,CAAC,GAAG,gBAAgB,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE;KAC3F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAAG,yEAAyE,CAAA;AAE9F,4HAA4H;AAC5H,MAAM,UAAU,kBAAkB,CAAC,IAAI,GAAW,OAAO;IACvD,OAAO;EACP,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC;cACpB,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,cAAc;cACtC,MAAM,CAAC,SAAS,EAAE,CAAC,MAAM,UAAU;mBAC9B,cAAc,IAAI,UAAU;YACnC,cAAc,IAAI,UAAU;2BACb,UAAU;6BACR,UAAU;EACrC,YAAY;CACb,CAAA;AACD,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,oBAAoB;IAClC,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC;2BACd,UAAU;iBACpB,WAAW;4BACA,gBAAgB;QACpC,cAAc,IAAI,UAAU;EAClC,YAAY;CACb,CAAA;AACD,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO;;;;OAIF,IAAI;;uBAEY,IAAI;;;;CAI1B,CAAA;AACD,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAA"}
+{"version":3,"file":"mac.js","sourceRoot":"","sources":["../src/mac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAA;AAC/D,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE/F,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAExC;;;GAGG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,2BAA2B,CAAA;AAC1D,mHAAmH;AACnH,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAA;AAChD,MAAM,CAAC,MAAM,UAAU,GAAG,0BAA0B,UAAU,QAAQ,CAAA;AACtE;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,qBAAqB,CAAA;AAChD,MAAM,CAAC,MAAM,cAAc,GAAG,iCAAiC,CAAA;AAK/D,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAc;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,MAAM,WAAW,SAAS,CAAC,KAAK,CAAC,WAAW,CAAA;IACrF,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,MAAM,IAAI,KAAK,IAAI,CAAA;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,MAAM,SAAS,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5I,OAAO,CAAC,GAAG,MAAM,QAAQ,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,UAAU,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC5L,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,KAAK,CAAC,IAAmC;IACvD,OAAO;;;EAGP,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;;CAErB,CAAA;AACD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAqG;IAClI,OAAO,KAAK,CAAC;QACX,KAAK,EAAE,eAAe;QACtB,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;QAC7C,gBAAgB,EAAE,IAAI,CAAC,IAAI;QAC3B,oBAAoB,EAAE,IAAI,CAAC,GAAG;QAC9B,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;QACpC,eAAe,EAAE,IAAI,CAAC,GAAG;QACzB,iBAAiB,EAAE,IAAI,CAAC,GAAG;KAC5B,CAAC,CAAA;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,QAAQ,CAAC,IAAI,GAAW,WAAW;IACjD,OAAO,8CAA8C,gBAAgB,+BAA+B,IAAI,IAAI,CAAA;AAC9G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC;QACX,KAAK,EAAE,UAAU;QACjB,gBAAgB,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,4BAA4B,gBAAgB,yBAAyB,WAAW,OAAO,cAAc,oBAAoB,CAAC;QAC9J,SAAS,EAAE,IAAI;KAChB,CAAC,CAAA;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAAG,yEAAyE,CAAA;AAE9F,4HAA4H;AAC5H,MAAM,UAAU,kBAAkB,CAAC,IAAI,GAAW,OAAO;IACvD,OAAO;EACP,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC;cACpB,MAAM,CAAC,QAAQ,EAAE,CAAC,MAAM,cAAc;cACtC,MAAM,CAAC,SAAS,EAAE,CAAC,MAAM,UAAU;mBAC9B,cAAc,IAAI,UAAU;YACnC,cAAc,IAAI,UAAU;2BACb,UAAU;6BACR,UAAU;EACrC,YAAY;CACb,CAAA;AACD,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,oBAAoB;IAClC,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC;2BACd,UAAU;iBACpB,WAAW;4BACA,gBAAgB;QACpC,cAAc,IAAI,UAAU;EAClC,YAAY;CACb,CAAA;AACD,CAAC;AAED,iGAAiG;AACjG,SAAS,MAAM,CAAC,GAAsB;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IAClC,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,eAAe,QAAQ,CAAC;QACxE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC;QAChD,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,CAAC;QAC9D,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC;KAClE,CAAA;AACH,CAAC;AAED,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAA;AAEzC,MAAM,CAAC,MAAM,GAAG,GAAa;IAC3B,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;IAC7B,aAAa,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,IAAI,eAAe,EAAE,CAAC,CAAC;IAC1F,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG;IAC9B,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;IACvB,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;QACnB,IAAI,EAAE,6CAA6C,OAAO,iGAAiG;QAC3J,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC;KACpC,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG;QAC3B,6DAA6D;QAC7D,IAAI,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YAAE,OAAM;QACzG,EAAE,CAAC,GAAG,CAAC,uBAAuB,OAAO,kEAAkE,CAAC,CAAA;QACxG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;IACnH,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;QACzB,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QAC7C,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QACnG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAClE,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,WAAW,EAAE,MAAM;IACnB,KAAK,CAAC,eAAe,CAAC,GAAG;QACvB,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACtF,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG;QAC7B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACnE,IAAI,GAAG,KAAK,SAAS;YAAE,OAAM;QAC7B,EAAE,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAA;QAC1E,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACxE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QACrE,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACjG,CAAC;IACD,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE,gEAAgE,OAAO,mCAAmC;QAChH,MAAM,EAAE,oBAAoB,EAAE;KAC/B,CAAC;IACF,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACnD,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;CAClC,CAAA"}

package/dist/platform.d.ts

@@ -0,0 +1,49 @@
+/** Where the commands write. */
+export interface InstallIO {
+    out: (line: string) => void;
+    err: (line: string) => void;
+}
+/** A step run as the administrator: what it is said to do before the password, and its shell script. */
+export interface AdminStep {
+    says: string;
+    script: string;
+}
+/**
+ * What the install does its own way on each kind of computer. {@link install} and
+ * {@link uninstall} run the same steps everywhere, each through one of these.
+ */
+export interface Platform {
+    /** Why OpenAgent cannot be installed on this computer, or `undefined`. Asked before anything changes. */
+    unable(env: NodeJS.ProcessEnv): Promise<string | undefined>;
+    /** The installed dashboard stopped, when it runs; whether one did. */
+    stopDashboard(env: NodeJS.ProcessEnv): Promise<boolean>;
+    /** The folder of OpenAgent's own the dashboard is installed in, when the command came by `npx`. */
+    appDir(env: NodeJS.ProcessEnv): string;
+    /** Before the certificate is made: the commands the install needs, put on this computer. */
+    prepare(io: InstallIO, env: NodeJS.ProcessEnv): Promise<void>;
+    /** The install's step as the administrator, for the certificate in `certFile`. */
+    adminInstall(certFile: string): AdminStep;
+    /** The browsers made to trust the certificate in `certFile`. */
+    trust(certFile: string, io: InstallIO, env: NodeJS.ProcessEnv): Promise<void>;
+    /** The dashboard started now and at each login, from `node` and its `dashboard` file, with `vars`; says where its output is read. */
+    startDashboard(opts: {
+        node: string;
+        dashboard: string;
+        vars: {
+            [name: string]: string;
+        };
+    }, env: NodeJS.ProcessEnv): Promise<string>;
+    /** The command that opens an address in the person's browser. */
+    openCommand: string;
+    /** The dashboard stopped, and no more started at login. */
+    removeDashboard(env: NodeJS.ProcessEnv): Promise<void>;
+    /** The browsers made to stop trusting the certificate in `certFile`. */
+    untrust(certFile: string, io: InstallIO, env: NodeJS.ProcessEnv): Promise<void>;
+    /** The uninstall's step as the administrator: everything {@link adminInstall} put there, taken off. */
+    adminUninstall(): AdminStep;
+    /** The folders the install made, beside the certificate's. */
+    folders(env: NodeJS.ProcessEnv): string[];
+    /** What the uninstall leaves on purpose, said once it is done; read before {@link folders} are removed. */
+    leftBehind(env: NodeJS.ProcessEnv): Promise<string | undefined>;
+}
+//# sourceMappingURL=platform.d.ts.map

package/dist/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5B;AAED,wGAAwG;AACxG,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,yGAAyG;IACzG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC3D,sEAAsE;IACtE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACvD,mGAAmG;IACnG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAA;IACtC,4FAA4F;IAC5F,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7D,kFAAkF;IAClF,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,gEAAgE;IAChE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7E,qIAAqI;IACrI,cAAc,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE;YAAE,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;SAAE,CAAA;KAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACpI,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAA;IACnB,2DAA2D;IAC3D,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtD,wEAAwE;IACxE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,uGAAuG;IACvG,cAAc,IAAI,SAAS,CAAA;IAC3B,8DAA8D;IAC9D,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,CAAA;IACzC,2GAA2G;IAC3G,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;CAChE"}

package/dist/platform.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=platform.js.map

package/dist/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":""}

package/dist/run.d.ts

@@ -0,0 +1,12 @@
+/** Run a command to its end; rejects with what it said when it fails. `interactive` gives it this terminal, for a password. */
+export declare function run(command: string, args: string[], opts?: {
+    interactive?: boolean;
+}): Promise<void>;
+/** Whether `command` runs to its end without failing. */
+export declare function succeeds(command: string, args: string[]): Promise<boolean>;
+/**
+ * Whether `command` is on this computer: in `PATH`, or in a folder of the administrator's
+ * commands, which a person's own `PATH` may leave out (`nft` is in `/usr/sbin`).
+ */
+export declare function installed(command: string, path: string | undefined): Promise<boolean>;
+//# sourceMappingURL=run.d.ts.map

package/dist/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAIA,+HAA+H;AAC/H,wBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAWxG;AAED,yDAAyD;AACzD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAK1E;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAM3F"}

package/dist/run.js

@@ -0,0 +1,33 @@
+import { execFile, spawn } from 'node:child_process';
+import { access, constants } from 'node:fs/promises';
+import { delimiter, join } from 'node:path';
+/** Run a command to its end; rejects with what it said when it fails. `interactive` gives it this terminal, for a password. */
+export function run(command, args, opts = {}) {
+    if (opts.interactive) {
+        return new Promise((resolvePromise, rejectPromise) => {
+            spawn(command, args, { stdio: 'inherit' })
+                .on('error', rejectPromise)
+                .on('exit', code => (code === 0 ? resolvePromise() : rejectPromise(new Error(`${command} ended with ${code}`))));
+        });
+    }
+    return new Promise((resolvePromise, rejectPromise) => {
+        execFile(command, args, (error, _stdout, stderr) => (error ? rejectPromise(new Error(String(stderr).trim() || error.message)) : resolvePromise()));
+    });
+}
+/** Whether `command` runs to its end without failing. */
+export function succeeds(command, args) {
+    return run(command, args).then(() => true, () => false);
+}
+/**
+ * Whether `command` is on this computer: in `PATH`, or in a folder of the administrator's
+ * commands, which a person's own `PATH` may leave out (`nft` is in `/usr/sbin`).
+ */
+export async function installed(command, path) {
+    const folders = [...(path ?? '').split(delimiter).filter(Boolean), '/usr/local/sbin', '/usr/sbin', '/sbin'];
+    for (const folder of folders) {
+        if (await access(join(folder, command), constants.X_OK).then(() => true, () => false))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAE3C,+HAA+H;AAC/H,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,IAAc,EAAE,IAAI,GAA8B,EAAE;IACvF,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;YACnD,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;iBACvC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;iBAC1B,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACpH,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACnD,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAA;IACpJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,IAAc;IACtD,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAC5B,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,IAAwB;IACvE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IAC3G,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACpG,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openagt/install",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Install OpenAgent on this computer: the dashboard starts when you log in, at https://openagent.build, which this computer then answers itself. `npx @openagt/uninstall` takes it all off again.",
   "license": "MIT",
   "repository": {
@@ -29,7 +29,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@openagt/dashboard": "0.55.0"
+    "@openagt/dashboard": "0.56.0"
   },
   "devDependencies": {
     "@types/node": "^20.0.0",