@prismshadow/penguin-server 0.2.11 → 0.2.15

package/dist/initial-password.js

@@ -3,6 +3,7 @@ import {
   initialAdminPasswordPath,
   renderFirstLoginNotice
 } from "./chunk-K4ZSUT72.js";
+import "./chunk-B5IP37ZQ.js";
 export {
   clearInitialAdminPassword,
   initialAdminPasswordPath,

package/dist/install.ps1

@@ -12,6 +12,8 @@
 #   $env:PENGUIN_DOWNLOAD_SPEED_PROBE = "0" disable same-version OSS/GitHub probe timing in auto mode
 #   $env:PENGUIN_DOWNLOAD_BASE_URL = "https://..." exact online asset directory selected by the stable forwarder
 #   $env:PENGUIN_DOWNLOAD_FALLBACK_BASE_URL = "https://..." fallback for PENGUIN_DOWNLOAD_BASE_URL
+#   -NoModifyPath                       do not add <install>\bin to the user Path; for a second installation
+#                                       beside the one the `penguin` command belongs to
 #
 # Each Release attaches exactly one Windows artifact: penguin-win32-x64.zip, a shallow installer
 # bundle holding install.cmd, this script, the program payload (payload.zip) and the payload's
@@ -32,7 +34,8 @@
 param(
   [string]$Version = "",
   [string]$InstallDir = "",
-  [string]$ArchivePath = ""
+  [string]$ArchivePath = "",
+  [switch]$NoModifyPath
 )
 
 $ErrorActionPreference = "Stop"
@@ -672,9 +675,11 @@ try {
 #     (unexpanded) value, append to it, and write it back with its original value kind.
 #     The registry only exists on Windows; skip the block elsewhere (functional test runs
 #     of this script on pwsh/Linux — where the old API was a silent no-op anyway). ---
+#     -NoModifyPath skips it: `penguin` resolves to the first bin directory on the
+#     Path, and a second installation's entry there would answer whenever the first is absent.
 $BinDir = Join-Path $InstallDir "bin"
 $PathUpdateMessage = ""
-if ($env:OS -eq "Windows_NT") {
+if (-not $NoModifyPath -and $env:OS -eq "Windows_NT") {
   $EnvKey = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey("Environment", $true)
   if ($null -eq $EnvKey) { $EnvKey = [Microsoft.Win32.Registry]::CurrentUser.CreateSubKey("Environment") }
   try {
@@ -714,7 +719,12 @@ public static extern System.IntPtr SendMessageTimeout(System.IntPtr hWnd, uint M
   }
 }
 # Make `penguin` work in this session too.
-if (($env:Path -split ";") -notcontains $BinDir) { $env:Path = "$env:Path;$BinDir" }
+$PenguinCommand = "penguin"
+if (-not $NoModifyPath) {
+  if (($env:Path -split ";") -notcontains $BinDir) { $env:Path = "$env:Path;$BinDir" }
+} else {
+  $PenguinCommand = "& `"$(Join-Path $BinDir "penguin.cmd")`""
+}
 
 Write-Host ""
 Write-Host "PenguinHarness $InstalledVersion installed to $InstallDir"
@@ -724,6 +734,6 @@ if ($PathUpdateMessage) {
 }
 Write-Host ""
 Write-Host "Get started:"
-Write-Host "  penguin --help    # all commands"
-Write-Host "  penguin web       # start the Web UI at http://127.0.0.1:7364 (a first-login link is printed on first start)"
-Write-Host "  penguin server    # headless server (PORT / HOST to override)"
+Write-Host "  $PenguinCommand --help    # all commands"
+Write-Host "  $PenguinCommand web       # start the Web UI at http://127.0.0.1:7364 (a first-login link is printed on first start)"
+Write-Host "  $PenguinCommand server    # headless server (PORT / HOST to override)"

package/dist/install.sh

@@ -14,6 +14,8 @@
 #   PENGUIN_DOWNLOAD_BASE_URL=<url> exact online asset directory selected by the stable forwarder
 #   PENGUIN_DOWNLOAD_FALLBACK_BASE_URL=<url> fallback for PENGUIN_DOWNLOAD_BASE_URL
 #   --universal               install the universal package (no bundled Node runtime; needs system Node >= 24)
+#   --no-modify-path          do not put `penguin` on PATH (no ~/.local/bin/penguin symlink); for a second
+#                              installation beside the one the command belongs to
 #
 # Each Release attaches exactly one artifact per target: penguin-<target>.tar.gz, a shallow
 # installer bundle holding this script, the program payload (payload.tar.gz) and the payload's
@@ -37,6 +39,7 @@ GITHUB_LATEST_BASE="$REPO/releases/latest/download"
 VERSION="${PENGUIN_VERSION:-}"
 INSTALL_DIR="${PENGUIN_INSTALL_DIR:-$HOME/.penguin}"
 BIN_DIR="$HOME/.local/bin"
+MODIFY_PATH=1
 UNIVERSAL=0
 ARCHIVE="${PENGUIN_ARCHIVE:-}"
 SOURCE_MODE="${PENGUIN_DOWNLOAD_SOURCE:-auto}"
@@ -119,6 +122,10 @@ while [ $# -gt 0 ]; do
       UNIVERSAL=1
       shift
       ;;
+    --no-modify-path)
+      MODIFY_PATH=0
+      shift
+      ;;
     --archive)
       [ $# -ge 2 ] || fail "--archive requires a path to a Release archive"
       ARCHIVE="$2"
@@ -757,14 +764,21 @@ OLD_DIR=""
 rm -rf "$STAGING"
 STAGING=""
 
-# --- Symlink into ~/.local/bin and check PATH only after the install is known to work. ---
-mkdir -p "$BIN_DIR"
-ln -sf "$INSTALL_DIR/bin/penguin" "$BIN_DIR/penguin"
+# --- Symlink into ~/.local/bin and check PATH only after the install is known to work.
+#     --no-modify-path skips both: ~/.local/bin/penguin is one name, and a second
+#     installation that took it would hand its program to whoever types `penguin`. ---
 PATH_MISSING=0
-case ":$PATH:" in
-  *":$BIN_DIR:"*) ;;
-  *) PATH_MISSING=1 ;;
-esac
+PENGUIN_COMMAND="penguin"
+if [ "$MODIFY_PATH" -eq 1 ]; then
+  mkdir -p "$BIN_DIR"
+  ln -sf "$INSTALL_DIR/bin/penguin" "$BIN_DIR/penguin"
+  case ":$PATH:" in
+    *":$BIN_DIR:"*) ;;
+    *) PATH_MISSING=1 ;;
+  esac
+else
+  PENGUIN_COMMAND="$INSTALL_DIR/bin/penguin"
+fi
 
 echo ""
 echo "PenguinHarness $installed_version installed to $INSTALL_DIR"
@@ -780,6 +794,6 @@ if [ "$PATH_MISSING" -eq 1 ]; then
 fi
 echo ""
 echo "Get started:"
-echo "  penguin --help    # all commands"
-echo "  penguin web       # start the Web UI at http://127.0.0.1:7364 (a first-login link is printed on first start)"
-echo "  penguin server    # headless server (PORT / HOST to override)"
+echo "  $PENGUIN_COMMAND --help    # all commands"
+echo "  $PENGUIN_COMMAND web       # start the Web UI at http://127.0.0.1:7364 (a first-login link is printed on first start)"
+echo "  $PENGUIN_COMMAND server    # headless server (PORT / HOST to override)"

package/dist/lock.js

@@ -7,6 +7,7 @@ import {
   releaseServerLock,
   serverLockPath
 } from "./chunk-GOO5VUAB.js";
+import "./chunk-B5IP37ZQ.js";
 export {
   acquireServerLock,
   isServerLockAlive,

package/dist/machine-status.js

@@ -6,7 +6,8 @@ import {
 } from "./chunk-GOO5VUAB.js";
 import {
   openDatabaseReadOnly
-} from "./chunk-ADZJYDNC.js";
+} from "./chunk-NVWAYYRX.js";
+import "./chunk-B5IP37ZQ.js";
 
 // src/machine-status.ts
 import fs from "fs";

package/dist/machine-status.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/machine-status.ts"],"sourcesContent":["/**\n * \"Is a server running on this data root, and which machine is this?\" — answered from the\n * root itself, by whoever can read it, with no server needed and safely while one runs (the\n * same terms as `penguin auth token`, which writes to this database live).\n *\n * Exported as `@prismshadow/penguin-server/machine-status` for `penguin server status`, which\n * is how a CONTROLLER asks: it runs that one command over ssh and reads back JSON. The\n * question used to be asked in shell — `cat` the lock, `sed` the pid out of it, `kill -0`,\n * `cat` a second file for the id — which meant a parser on this side for a format with no\n * definition, and no answer at all from a Windows remote, `kill -0` having no cmd.exe\n * equivalent. Asking the machine's own CLI moves both problems to the side that has Node.\n *\n * Liveness is the local lock's own test (pid alive AND the port accepting), which the shell\n * version could not do: it only had `kill -0`, and a recycled pid reads as a live server.\n */\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { openDatabaseReadOnly } from \"./db/database.js\";\nimport { MachinesRepo } from \"./db/repos/machines.js\";\nimport { liveServerLock } from \"./lock.js\";\n\n/** What `penguin server status` prints, as one line of JSON. */\nexport interface MachineStatus {\n  /** A server owns this root right now: its pid is alive and its port answers. */\n  running: boolean;\n  /** The live server's port and pid; null when nothing is running. */\n  port: number | null;\n  pid: number | null;\n  /**\n   * This machine's own id, or null when it has none yet — the id is minted the first time a\n   * server boots here, so an installed-but-never-run machine legitimately has none, and\n   * saying null is better than minting one to answer a question.\n   */\n  machineId: string | null;\n}\n\n/** `dbPath` may be elsewhere (PENGUIN_WEB_DB), as everywhere else that reads this database. */\nexport async function readMachineStatus(\n  root: string,\n  dbPath: string = path.join(root, \"web.db\"),\n): Promise<MachineStatus> {\n  const lock = await liveServerLock(root);\n  return {\n    running: lock !== null,\n    port: lock?.port ?? null,\n    pid: lock?.pid ?? null,\n    machineId: readMachineId(dbPath),\n  };\n}\n\n/**\n * Reads the id and changes nothing — and cannot: the connection is read-only.\n *\n * `openDatabaseReadOnly`, never `openDatabase`: the latter is the SCHEMA path — CREATE TABLE,\n * the ensureColumn list, an ALTER with a backfill, and the migrations. A controller asking a\n * machine what it is would then reshape that machine's database under the prepared statements\n * of the server running there, on a build that may be older than this question. A read-only\n * open makes that impossible rather than merely not done.\n *\n * Existence-checked first, because opening would create the file (and its directory) on a\n * root no server has ever used — a probe must not leave a data root behind it. A machine\n * whose database predates the `machine` table answers with no id rather than an error: it is\n * one that has never run a build that mints one, which is the truth about it.\n */\nfunction readMachineId(dbPath: string): string | null {\n  if (!fs.existsSync(dbPath)) return null;\n  const db = openDatabaseReadOnly(dbPath);\n  try {\n    return new MachinesRepo(db).peekOwnId();\n  } catch {\n    return null;\n  } finally {\n    db.close();\n  }\n}\n"],"mappings":";;;;;;;;;;;AAeA,OAAO,QAAQ;AACf,OAAO,UAAU;AAqBjB,eAAsB,kBACpB,MACA,SAAiB,KAAK,KAAK,MAAM,QAAQ,GACjB;AACxB,QAAM,OAAO,MAAM,eAAe,IAAI;AACtC,SAAO;AAAA,IACL,SAAS,SAAS;AAAA,IAClB,MAAM,MAAM,QAAQ;AAAA,IACpB,KAAK,MAAM,OAAO;AAAA,IAClB,WAAW,cAAc,MAAM;AAAA,EACjC;AACF;AAgBA,SAAS,cAAc,QAA+B;AACpD,MAAI,CAAC,GAAG,WAAW,MAAM,EAAG,QAAO;AACnC,QAAM,KAAK,qBAAqB,MAAM;AACtC,MAAI;AACF,WAAO,IAAI,aAAa,EAAE,EAAE,UAAU;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;","names":[]}
+{"version":3,"sources":["../src/machine-status.ts"],"sourcesContent":["/**\n * \"Is a server running on this data root, and which machine is this?\" — answered from the\n * root itself, by whoever can read it, with no server needed and safely while one runs (the\n * same terms as `penguin auth token`, which writes to this database live).\n *\n * Exported as `@prismshadow/penguin-server/machine-status` for `penguin server status`, which\n * is how a CONTROLLER asks: it runs that one command over ssh and reads back JSON. The\n * question used to be asked in shell — `cat` the lock, `sed` the pid out of it, `kill -0`,\n * `cat` a second file for the id — which meant a parser on this side for a format with no\n * definition, and no answer at all from a Windows remote, `kill -0` having no cmd.exe\n * equivalent. Asking the machine's own CLI moves both problems to the side that has Node.\n *\n * Liveness is the local lock's own test (pid alive AND the port accepting), which the shell\n * version could not do: it only had `kill -0`, and a recycled pid reads as a live server.\n */\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { openDatabaseReadOnly } from \"./db/database.js\";\nimport { MachinesRepo } from \"./db/repos/machines.js\";\nimport { liveServerLock } from \"./lock.js\";\n\n/** What `penguin server status` prints, as one line of JSON. */\nexport interface MachineStatus {\n  /** A server owns this root right now: its pid is alive and its port answers. */\n  running: boolean;\n  /** The live server's port and pid; null when nothing is running. */\n  port: number | null;\n  pid: number | null;\n  /**\n   * This machine's own id, or null when it has none yet — the id is minted the first time a\n   * server boots here, so an installed-but-never-run machine legitimately has none, and\n   * saying null is better than minting one to answer a question.\n   */\n  machineId: string | null;\n}\n\n/** `dbPath` may be elsewhere (PENGUIN_WEB_DB), as everywhere else that reads this database. */\nexport async function readMachineStatus(\n  root: string,\n  dbPath: string = path.join(root, \"web.db\"),\n): Promise<MachineStatus> {\n  const lock = await liveServerLock(root);\n  return {\n    running: lock !== null,\n    port: lock?.port ?? null,\n    pid: lock?.pid ?? null,\n    machineId: readMachineId(dbPath),\n  };\n}\n\n/**\n * Reads the id and changes nothing — and cannot: the connection is read-only.\n *\n * `openDatabaseReadOnly`, never `openDatabase`: the latter is the SCHEMA path — CREATE TABLE,\n * the ensureColumn list, an ALTER with a backfill, and the migrations. A controller asking a\n * machine what it is would then reshape that machine's database under the prepared statements\n * of the server running there, on a build that may be older than this question. A read-only\n * open makes that impossible rather than merely not done.\n *\n * Existence-checked first, because opening would create the file (and its directory) on a\n * root no server has ever used — a probe must not leave a data root behind it. A machine\n * whose database predates the `machine` table answers with no id rather than an error: it is\n * one that has never run a build that mints one, which is the truth about it.\n */\nfunction readMachineId(dbPath: string): string | null {\n  if (!fs.existsSync(dbPath)) return null;\n  const db = openDatabaseReadOnly(dbPath);\n  try {\n    return new MachinesRepo(db).peekOwnId();\n  } catch {\n    return null;\n  } finally {\n    db.close();\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAeA,OAAO,QAAQ;AACf,OAAO,UAAU;AAqBjB,eAAsB,kBACpB,MACA,SAAiB,KAAK,KAAK,MAAM,QAAQ,GACjB;AACxB,QAAM,OAAO,MAAM,eAAe,IAAI;AACtC,SAAO;AAAA,IACL,SAAS,SAAS;AAAA,IAClB,MAAM,MAAM,QAAQ;AAAA,IACpB,KAAK,MAAM,OAAO;AAAA,IAClB,WAAW,cAAc,MAAM;AAAA,EACjC;AACF;AAgBA,SAAS,cAAc,QAA+B;AACpD,MAAI,CAAC,GAAG,WAAW,MAAM,EAAG,QAAO;AACnC,QAAM,KAAK,qBAAqB,MAAM;AACtC,MAAI;AACF,WAAO,IAAI,aAAa,EAAE,EAAE,UAAU;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;","names":[]}