@proagentstore/cli 0.4.149 → 0.4.151

package/dist/index.js

@@ -2,12 +2,19 @@
 import {
   BOOTSTRAP_ENV,
   CLI_PACKAGE,
+  badVersions,
+  beginTrial,
   installPayload,
   isVersion,
   latestPublishedRelease,
+  logUpdateStep,
+  markPayloadHealthy,
   olderThan,
-  runNpm
-} from "./chunk-NNA7VZ6W.js";
+  payloadRoot,
+  runNpm,
+  takeRollbackNotice,
+  updateLogUpload
+} from "./chunk-PKMXQJEJ.js";
 
 // src/index.ts
 import { createRequire as createRequire3 } from "module";
@@ -1361,6 +1368,7 @@ function deferredUpdateLeaseActive(lease, now = Date.now()) {
   return now < lease.expiresAt;
 }
 function leaveForRestart(restarter, deps = { spawn: spawn3, exit: (code) => process.exit(code) }) {
+  logUpdateStep(`restart: leaving for the ${restarter} restarter (${restarter === "command" ? "restart command started, exit 0" : `exit ${RUNNER_RESTART_EXIT_CODE}`})`);
   if (restarter === "command") {
     deps.spawn(process.env[RESTART_COMMAND_ENV], { shell: true, detached: true, stdio: "ignore", env: process.env }).unref();
     deps.exit(0);
@@ -1379,6 +1387,8 @@ function planRunnerUpdate(f) {
   if (f.fromSource) return { action: "refused", current: f.current, reason: "This runner runs from a source checkout \u2014 update it with `git pull` there, not npm." };
   if (!f.latest) return { action: "refused", current: f.current, reason: `npm could not be asked for the latest ${CLI_PACKAGE} from this machine${f.latestError ? `: ${f.latestError}` : "."}`, retryable: true };
   if (!olderThan(f.current, f.latest)) return { action: "up-to-date", current: f.current };
+  const rolledBack = f.rolledBack?.[f.latest];
+  if (rolledBack) return { action: "refused", current: f.current, reason: `${f.latest} was installed here and rolled back: ${rolledBack}. This machine stays on ${f.current} until a newer release is published.`, retryable: true };
   if (!f.restarter) {
     return {
       action: "refused",
@@ -1411,17 +1421,24 @@ function planRunnerRestart(f) {
   }
   return { action: "restart", current: f.current, restarter: f.restarter };
 }
-async function installVersion(version2) {
-  if (process.env[BOOTSTRAP_ENV]) {
-    await installPayload(version2);
-    return;
-  }
+async function installVersion(version2, current = null) {
+  const bootstrapped = !!process.env[BOOTSTRAP_ENV];
+  logUpdateStep(`install: ${current ?? "?"} \u2192 ${version2} starting (${bootstrapped ? "payload cache" : "npm i -g"})`);
   try {
-    await runNpm(["i", "-g", `${CLI_PACKAGE}@${version2}`], { timeout: 5 * 6e4 });
+    if (bootstrapped) {
+      await installPayload(version2);
+      beginTrial(payloadRoot(), version2, current);
+    } else {
+      await runNpm(["i", "-g", `${CLI_PACKAGE}@${version2}`], { timeout: 5 * 6e4 }).catch((e) => {
+        const stderr = String(e.stderr ?? "").trim();
+        throw new Error((stderr || (e instanceof Error ? e.message : String(e))).slice(-400));
+      });
+    }
   } catch (e) {
-    const stderr = String(e.stderr ?? "").trim();
-    throw new Error((stderr || (e instanceof Error ? e.message : String(e))).slice(-400));
+    logUpdateStep(`install: ${version2} FAILED \u2014 ${e instanceof Error ? e.message : String(e)}`);
+    throw e;
   }
+  logUpdateStep(`install: ${version2} installed`);
 }
 
 // src/commands/runner/membership.ts
@@ -1776,13 +1793,15 @@ function parseAutoUpdatePolicy(value) {
   const lastAttemptAt = raw.lastAttemptAt ?? raw.last_attempt_at;
   const reason = raw.reason;
   const recovery = parseRecovery(raw.recovery);
+  const fleet = raw.fleetUpdating ?? raw.fleet_updating;
   return {
     autoUpdate,
     ...status ? { status } : {},
     ...typeof latestVersion === "string" ? { latestVersion } : {},
     ...typeof lastAttemptAt === "string" ? { lastAttemptAt } : {},
     ...typeof reason === "string" ? { reason } : {},
-    ...recovery ? { recovery } : {}
+    ...recovery ? { recovery } : {},
+    ...typeof fleet === "number" && Number.isInteger(fleet) && fleet >= 0 ? { fleetUpdating: fleet } : {}
   };
 }
 function policyFromResponse(value) {
@@ -1843,7 +1862,9 @@ function acceptPolicyResponse(local, wasAuthoritative, response) {
   const { recovery: _fromService, ...remote } = parsed;
   const action = policyScheduleAction(local, remote, wasAuthoritative);
   const ownerTransition = action === "cancel" || !local.autoUpdate;
-  return { policy: ownerTransition ? { ...local, ...remote } : { ...local, autoUpdate: remote.autoUpdate }, action };
+  const { fleetUpdating: _stale, ...base } = local;
+  const fleet = remote.fleetUpdating === void 0 ? {} : { fleetUpdating: remote.fleetUpdating };
+  return { policy: ownerTransition ? { ...base, ...remote, ...fleet } : { ...base, autoUpdate: remote.autoUpdate, ...fleet }, action };
 }
 var ResponseFence = class {
   sent = 0;
@@ -2068,6 +2089,12 @@ var AutomaticUpdateController = class {
       this.defer();
       return;
     }
+    if (policy.fleetUpdating) {
+      this.blockerClass = "fleet_stagger";
+      this.deps.status("waiting-for-idle", { latestVersion: plan.latest, reason: `${policy.fleetUpdating} other machine(s) on this account are mid-update; this one updates after them.` });
+      this.defer(plan.latest);
+      return;
+    }
     const target = open && isVersion(open.target) ? open.target : plan.latest;
     const attempt = { ...plan, latest: target };
     const recovery = open ?? { target, attachments: [...this.deps.attachments?.() ?? []], at: new Date(this.now()).toISOString() };
@@ -2077,7 +2104,7 @@ var AutomaticUpdateController = class {
       this.deps.status("restarting", { latestVersion: target, reason: void 0 });
       return;
     }
-    this.blockerClass = "idle_wait";
+    this.blockerClass = this.deps.policy().value.fleetUpdating ? "fleet_stagger" : "idle_wait";
     this.defer(target);
   }
   defer(latest) {
@@ -2250,7 +2277,10 @@ function createPolicyChannel(deps) {
     if (action === "cancel") deps.onAction("cancel");
     else if (action === "start" && !deps.cell.refreshing) deps.onAction("start");
   };
-  const accept = (response, sentAs) => act(deps.cell.accept(response, sentAs));
+  const accept = (response, sentAs) => {
+    act(deps.cell.accept(response, sentAs));
+    deps.onAnswer?.();
+  };
   const register = async (id, force = deps.force, signal) => {
     const sent = deps.cell.next();
     try {
@@ -2300,7 +2330,7 @@ function createInstallBridge(deps) {
     if (automatic) {
       const fresh = await within((signal) => deps.refresh(signal));
       if (fresh === null) expired(false, "The owner policy refresh before installing");
-      if (!fresh || !deps.cell.policy.autoUpdate) {
+      if (!fresh || !deps.cell.policy.autoUpdate || deps.cell.policy.fleetUpdating) {
         release(false);
         return false;
       }
@@ -2344,6 +2374,122 @@ function createInstallBridge(deps) {
   return { run, inFlight: () => inFlight, installedPendingRestart: () => installedPendingRestart };
 }
 
+// src/commands/runner/release-trial.ts
+function releaseTrial(version2, cell, log, env = process.env, root = payloadRoot) {
+  if (!env[BOOTSTRAP_ENV]) return { rollbackReason: null, proven: () => void 0, rolledBack: () => ({}) };
+  const notice = takeRollbackNotice(root());
+  const rollbackReason = notice ? `Rolled back from ${notice.from} to ${version2}: ${notice.reason}.` : null;
+  if (rollbackReason) {
+    log(`auto-update: ${rollbackReason}`);
+    cell.record("failure", { reason: rollbackReason, recovery: void 0 });
+  }
+  let done = false;
+  return {
+    rollbackReason,
+    proven: () => {
+      if (done) return;
+      done = true;
+      if (markPayloadHealthy(root(), version2)) log(`auto-update: ${version2} registered \u2014 it is kept.`);
+    },
+    rolledBack: () => badVersions(root())
+  };
+}
+
+// src/commands/up-restart.ts
+import { spawn as nodeSpawn, spawnSync as nodeSpawnSync } from "child_process";
+var UP_LAUNCHER_ENV = "PAGS_UP_LAUNCHER";
+var UP_LAUNCHER_PID_ENV = "PAGS_UP_LAUNCHER_PID";
+var RUNNER_DIED_EXIT_CODE = 76;
+function upRestartMode(env, parent = { pid: process.ppid, alive: pidAlive }) {
+  if (env[SERVICE_ENV] === "1") return "service";
+  if (env[RESTART_COMMAND_ENV]?.trim()) return "command";
+  const launcher = Number(env[UP_LAUNCHER_PID_ENV]);
+  if (env[UP_LAUNCHER_ENV] === "1" && launcher === parent.pid && parent.alive(launcher)) return "launcher-child";
+  return "launcher";
+}
+function runnerExitAction(code, stopping) {
+  if (code === RUNNER_RESTART_EXIT_CODE) return "restart";
+  if (stopping) return "ignore";
+  return code === 0 ? "stop" : "died";
+}
+function restartOwner(env = process.env, alive = pidAlive) {
+  if (env[SERVICE_ENV] === "1") return "service";
+  return env[UP_LAUNCHER_ENV] === "1" && alive(Number(env[UP_LAUNCHER_PID_ENV])) ? "launcher" : "none";
+}
+function relaunchDelayMs(failures) {
+  return Math.min(5 * 6e4, 1e4 * 2 ** Math.max(0, failures - 1));
+}
+var RAN_MS = 6e4;
+var RESET_MS = 10 * 6e4;
+function processRestartDeps() {
+  return {
+    env: process.env,
+    execPath: process.execPath,
+    execArgv: process.execArgv,
+    script: process.argv[1],
+    spawn: nodeSpawn,
+    spawnSync: nodeSpawnSync,
+    exit: (code) => process.exit(code),
+    log: () => {
+    },
+    sleep: (ms) => Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms),
+    step: (line) => logUpdateStep(line),
+    parent: { pid: process.ppid, alive: pidAlive },
+    pid: process.pid,
+    now: Date.now
+  };
+}
+function restartPagsUp(args, extraEnv, deps, opts = {}) {
+  const env = { ...deps.env, ...extraEnv };
+  const argv = [...deps.execArgv, deps.script, ...args];
+  const exitCode = opts.exitCode ?? RUNNER_RESTART_EXIT_CODE;
+  const mode = upRestartMode(env, deps.parent);
+  deps.step(`${opts.initial ? "start" : "restart"}: pags ${args.join(" ")} \u2014 ${opts.initial ? "as" : "leaving via"} ${mode}${exitCode === RUNNER_DIED_EXIT_CODE ? " (the runner died)" : ""}`);
+  if (mode === "service") {
+    deps.exit(exitCode);
+    return;
+  }
+  if (mode === "command") {
+    leaveForRestart(mode, { spawn: deps.spawn, exit: deps.exit });
+    return;
+  }
+  if (mode === "launcher-child") {
+    deps.exit(exitCode);
+    return;
+  }
+  const childEnv = { ...env, [UP_LAUNCHER_ENV]: "1", [UP_LAUNCHER_PID_ENV]: String(deps.pid) };
+  let failures = 0;
+  for (let first = true; ; first = false) {
+    const unattended = !first || env.PAGS_NO_PROMPT === "1";
+    deps.step(`launcher: starting pags up${unattended ? " (unattended)" : ""}`);
+    const startedAt = deps.now();
+    const r = deps.spawnSync(deps.execPath, argv, { stdio: "inherit", env: first ? childEnv : { ...childEnv, PAGS_NO_PROMPT: "1" } });
+    const ran = deps.now() - startedAt;
+    const how = r.error ? `could not start (${r.error.message})` : r.signal ? `was killed by ${r.signal}` : `exited ${r.status}`;
+    deps.step(`launcher: pags up ${how} after ${Math.round(ran / 1e3)}s`);
+    if (ran >= RESET_MS) failures = 0;
+    if (r.status === RUNNER_RESTART_EXIT_CODE) {
+      failures = 0;
+      continue;
+    }
+    if (!r.error && (r.status === 0 || r.signal === "SIGINT")) {
+      deps.exit(0);
+      return;
+    }
+    if (unattended || r.status === RUNNER_DIED_EXIT_CODE || ran >= RAN_MS) {
+      failures++;
+      const wait = relaunchDelayMs(failures);
+      deps.log(`pags up ${how} \u2014 starting it again in ${Math.round(wait / 1e3)}s (attempt ${failures + 1}).`);
+      deps.step(`launcher: retrying in ${Math.round(wait / 1e3)}s (failure ${failures})`);
+      deps.sleep(wait);
+      continue;
+    }
+    if (!opts.initial) deps.log(`Restart failed${typeof r.status === "number" ? ` (exit ${r.status})` : ""} \u2014 the runner is NOT running. Run 'pags up' again.`);
+    deps.exit(typeof r.status === "number" && r.status !== 0 ? r.status : 1);
+    return;
+  }
+}
+
 // src/commands/runner/relay.ts
 var MEMBERSHIP_SYNC_PATH = "/pags/membership/sync";
 var CLI_CONTROL_PATHS = /* @__PURE__ */ new Set([MEMBERSHIP_SYNC_PATH, RUNNER_UPDATE_PATH, RUNNER_RESTART_PATH]);
@@ -2355,12 +2501,15 @@ async function connectViaRelay(instanceIds, localUrl, runnerToken, opts, force =
   const machine = loadMachineIdentity(runnerNode);
   const autoUpdateKey = machine.id ? autoUpdatePolicyKey(machine.id) : "";
   const cell = new PolicyCell(autoUpdateKey ? loadAutoUpdatePolicy(autoUpdateKey) ?? { autoUpdate: false } : { autoUpdate: false }, (p) => saveAutoUpdatePolicy(autoUpdateKey, p), !!autoUpdateKey);
+  const trial = releaseTrial(CLI_VERSION, cell, writeLine);
   let scheduleAutomaticUpdate = () => void 0;
   let autoUpdateDiagnostics = () => ({});
+  const updateLog = updateLogUpload(CLI_VERSION);
   const autoUpdateStatusBody = () => ({
     status: autoUpdateStatusWire(cell.policy.status),
     latestVersion: cell.policy.latestVersion,
     error: cell.policy.reason,
+    ...updateLog.body(),
     ...autoUpdateDiagnostics()
   });
   const capabilities = await requestRunner("GET", "/capabilities", { url: localUrl, token: runnerToken, instanceId: instanceIds[0] });
@@ -2387,7 +2536,11 @@ async function connectViaRelay(instanceIds, localUrl, runnerToken, opts, force =
       lastRegisterError = msg;
       writeError(`register ${id.slice(0, 8)}\u2026 failed: ${msg}`);
     },
-    onAction: (action) => scheduleAutomaticUpdate(action === "start", action === "cancel")
+    onAction: (action) => scheduleAutomaticUpdate(action === "start", action === "cancel"),
+    onAnswer: () => {
+      trial.proven();
+      updateLog.answered();
+    }
   });
   const registered = channel.registered;
   const registerRuntime = (id, forceClaim = force) => channel.register(id, forceClaim);
@@ -2424,6 +2577,7 @@ async function connectViaRelay(instanceIds, localUrl, runnerToken, opts, force =
       ..."error" in release ? { latestError: release.error } : {},
       fromSource: runsFromSource(),
       restarter: restarterFrom(process.env),
+      rolledBack: trial.rolledBack(),
       // A restart ends browser/application work too. Give these durable names to the same
       // planner so neither manual nor automatic update can mistake them for an idle machine.
       busy
@@ -2434,7 +2588,7 @@ async function connectViaRelay(instanceIds, localUrl, runnerToken, opts, force =
     cell,
     refresh: channel.refresh,
     facts: updateFacts,
-    install: installVersion,
+    install: (version2) => installVersion(version2, CLI_VERSION),
     admission: relayMutationAdmission,
     leaseActive: deferredUpdateLeaseActive,
     detachAll: () => {
@@ -2631,7 +2785,9 @@ async function connectViaRelay(instanceIds, localUrl, runnerToken, opts, force =
           // #896: who is heartbeating. Set by `runner connect` from the lock it took.
           ...process.env.PAGS_RUNNER_RSID ? { rsid: process.env.PAGS_RUNNER_RSID } : {},
           pid: process.pid,
-          ...process.env.PAGS_RUNNER_LAUNCH ? { launch: process.env.PAGS_RUNNER_LAUNCH } : {}
+          ...process.env.PAGS_RUNNER_LAUNCH ? { launch: process.env.PAGS_RUNNER_LAUNCH } : {},
+          supervisor: restartOwner()
+          // #1154: what starts it again if it dies
         },
         relayRttMs,
         sessions: sessions ?? void 0
@@ -3198,6 +3354,8 @@ function createRunnerCommand() {
         process.exit(1);
       }
       lockHeld = { path: taken.path, rsid: taken.lock.rsid, nonce: taken.lock.nonce, launch: taken.lock.launch };
+      process.env.PAGS_RUNNER_RSID = taken.lock.rsid;
+      process.env.PAGS_RUNNER_LAUNCH = taken.lock.launch;
       writeLine(`STATUS runner-session=${taken.lock.rsid}`);
     }
     const releaseHeldLock = () => {
@@ -3394,7 +3552,7 @@ import { readFileSync as readFileSync11, statSync as statSync2, watchFile } from
 import { Command as Command9 } from "commander";
 
 // src/background.ts
-import { spawn as nodeSpawn } from "child_process";
+import { spawn as nodeSpawn2 } from "child_process";
 import { closeSync as closeSync3, existsSync as existsSync10, mkdirSync as mkdirSync8, openSync as openSync3, readFileSync as readFileSync10, renameSync as renameSync4, statSync, writeFileSync as writeFileSync6 } from "fs";
 import { dirname as dirname5, join as join11 } from "path";
 var BACKGROUND_ENV = "PAGS_BACKGROUND";
@@ -3433,7 +3591,7 @@ function backgroundRestartCommand(execPath, script, upArgs, platform = process.p
   const argv = [execPath, script, ...upArgs, "--background"].map((a) => shellQuote(a, platform)).join(" ");
   return platform === "win32" ? `set ${BACKGROUND_RESTART_ENV}=1&& ${argv}` : `${BACKGROUND_RESTART_ENV}=1 ${argv}`;
 }
-function spawnDetached(command, args, env, logPath, spawn5 = nodeSpawn) {
+function spawnDetached(command, args, env, logPath, spawn5 = nodeSpawn2) {
   mkdirSync8(dirname5(logPath), { recursive: true });
   rotateLog(logPath);
   const fd = openSync3(logPath, "a", 384);
@@ -3531,7 +3689,7 @@ var logsCommand = new Command9("logs").description("Show the background runner's
 // src/commands/up.ts
 import { createRequire as createRequire2 } from "module";
 import { Command as Command10 } from "commander";
-import { hostname as hostname7 } from "os";
+import { homedir as homedir5, hostname as hostname7, userInfo } from "os";
 
 // src/tui.ts
 import chalk from "chalk";
@@ -3650,65 +3808,6 @@ async function waitForKey(keys, onInterrupt) {
   });
 }
 
-// src/commands/up-restart.ts
-import { spawn as nodeSpawn2, spawnSync as nodeSpawnSync } from "child_process";
-var UP_LAUNCHER_ENV = "PAGS_UP_LAUNCHER";
-function upRestartMode(env, platform, canExecve) {
-  if (env[SERVICE_ENV] === "1") return "service";
-  if (env[RESTART_COMMAND_ENV]?.trim()) return "command";
-  if (env[UP_LAUNCHER_ENV] === "1") return "launcher-child";
-  return platform !== "win32" && canExecve ? "exec" : "launcher";
-}
-function processRestartDeps() {
-  const execve = process.execve;
-  return {
-    env: process.env,
-    platform: process.platform,
-    execPath: process.execPath,
-    execArgv: process.execArgv,
-    script: process.argv[1],
-    execve: typeof execve === "function" ? execve.bind(process) : void 0,
-    spawn: nodeSpawn2,
-    spawnSync: nodeSpawnSync,
-    exit: (code) => process.exit(code),
-    log: () => {
-    }
-  };
-}
-function restartPagsUp(args, extraEnv, deps) {
-  const env = { ...deps.env, ...extraEnv };
-  const argv = [...deps.execArgv, deps.script, ...args];
-  const mode = upRestartMode(env, deps.platform, !!deps.execve);
-  if (mode === "service" || mode === "command") {
-    leaveForRestart(mode, { spawn: deps.spawn, exit: deps.exit });
-    return;
-  }
-  if (mode === "launcher-child") {
-    deps.exit(RUNNER_RESTART_EXIT_CODE);
-    return;
-  }
-  if (mode === "exec") {
-    try {
-      deps.execve(deps.execPath, [deps.execPath, ...argv], env);
-    } catch (e) {
-      deps.log(`Restart failed (${e instanceof Error ? e.message : String(e)}) \u2014 the runner is NOT running. Run 'pags up' again.`);
-      deps.exit(1);
-    }
-    return;
-  }
-  for (let first = true; ; first = false) {
-    const r = deps.spawnSync(deps.execPath, argv, { stdio: "inherit", env: { ...env, [UP_LAUNCHER_ENV]: "1", ...first ? {} : { PAGS_NO_PROMPT: "1" } } });
-    if (r.status === RUNNER_RESTART_EXIT_CODE) continue;
-    if (r.error || r.status !== 0) {
-      deps.log(`Restart failed${typeof r.status === "number" ? ` (exit ${r.status})` : ""} \u2014 the runner is NOT running. Run 'pags up' again.`);
-      deps.exit(typeof r.status === "number" && r.status !== 0 ? r.status : 1);
-      return;
-    }
-    deps.exit(0);
-    return;
-  }
-}
-
 // src/runner-replace.ts
 var REPLACE_EXIT_TIMEOUT_MS = 3e4;
 function describeWork(work) {
@@ -3850,11 +3949,263 @@ async function startInBackground(start, deps = processDeps()) {
   return 1;
 }
 
+// src/service-install.ts
+import { execFileSync as execFileSync3 } from "child_process";
+import { mkdirSync as mkdirSync9, rmSync, writeFileSync as writeFileSync7 } from "fs";
+import { posix, win32 as win322 } from "path";
+var SERVICE_LABEL = "online.proagentstore.pags-up";
+var SYSTEMD_UNIT = "pags-up.service";
+var WINDOWS_TASK = "pags up";
+var pathFor = (ctx) => ctx.platform === "win32" ? win322 : posix;
+var supervisorPath = (ctx) => pathFor(ctx).join(ctx.configDir, "pags-up-supervisor.mjs");
+var serviceLogPath = (ctx) => pathFor(ctx).join(ctx.configDir, "pags-up.log");
+function supervisorScript(ctx) {
+  const config = JSON.stringify({ node: ctx.nodePath, script: ctx.script, log: serviceLogPath(ctx), path: ctx.pathEnv });
+  return `// Written by \`pags up --install-service\` (#1141). Keeps \`pags up\` running; see packages/cli/src/service-install.ts.
+import { spawn } from "node:child_process";
+import { appendFileSync, closeSync, openSync } from "node:fs";
+
+const config = ${config};
+const num = (name, fallback) => { const n = Number(process.env[name]); return Number.isFinite(n) && n > 0 ? n : fallback; };
+const MIN = num("PAGS_SUPERVISOR_MIN_MS", 10_000);
+const MAX = num("PAGS_SUPERVISOR_MAX_MS", 300_000);
+const RESET = num("PAGS_SUPERVISOR_RESET_MS", 600_000);
+const RESTART_CODE = 75; // \`pags up\` asking to be started again: an update, or runner_restart
+
+const say = (line) => { try { appendFileSync(config.log, \`[\${new Date().toISOString()}] supervisor: \${line}\\n\`); } catch { /* a log that cannot be written must not stop the runner */ } };
+let delay = MIN;
+let child = null;
+let stopping = false;
+
+function start() {
+	if (stopping) return;
+	const startedAt = Date.now();
+	let out = "ignore";
+	try { out = openSync(config.log, "a"); } catch { /* run without a log rather than not at all */ }
+	say("starting pags up");
+	child = spawn(config.node, [config.script, "up", "--headless"], {
+		stdio: ["ignore", out, out],
+		env: { ...process.env, PATH: config.path || process.env.PATH, PAGS_SERVICE: "1", PAGS_SERVICE_NAME: "${SERVICE_LABEL}", PAGS_NO_PROMPT: "1" },
+		windowsHide: true,
+	});
+	if (typeof out === "number") closeSync(out);
+	child.on("error", (e) => say(\`could not start pags up: \${e.message}\`));
+	child.on("exit", (code, signal) => {
+		child = null;
+		if (stopping) return;
+		if (Date.now() - startedAt >= RESET) delay = MIN;
+		const wait = code === RESTART_CODE ? 1_000 : delay;
+		say(\`pags up exited (\${signal ?? code}); starting it again in \${Math.round(wait / 1000)}s\`);
+		if (code !== RESTART_CODE) delay = Math.min(delay * 2, MAX);
+		setTimeout(start, wait);
+	});
+}
+
+for (const sig of ["SIGTERM", "SIGINT"]) {
+	process.on(sig, () => {
+		stopping = true;
+		say(\`stopping (\${sig})\`);
+		if (child) child.kill("SIGTERM");
+		setTimeout(() => process.exit(0), 5_000).unref();
+		if (!child) process.exit(0);
+		else child.once("exit", () => process.exit(0));
+	});
+}
+start();
+`;
+}
+var xml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+var unitWord = (s) => `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+var ps = (s) => `'${s.replace(/'/g, "''")}'`;
+function versionManagedNode(nodePath) {
+  if (/[\\/]n[\\/]versions[\\/]/.test(nodePath)) return "n";
+  const m = /[\\/]\.?(nvm|fnm|volta|asdf|nodenv)[\\/]/i.exec(nodePath);
+  return m ? m[1].toLowerCase() : null;
+}
+var pinnedNodeNote = (ctx) => {
+  const manager = versionManagedNode(ctx.nodePath);
+  return manager ? [`It runs Node ${ctx.nodePath}, installed by ${manager}. Removing or switching away from that Node version stops the service; after changing Node, run \`pags up --install-service\` again.`] : [];
+};
+function servicePlan(ctx) {
+  const supervisor = supervisorPath(ctx);
+  const log = serviceLogPath(ctx);
+  const files = [{ path: supervisor, content: supervisorScript(ctx) }];
+  if (ctx.platform === "darwin") {
+    const plist = posix.join(ctx.home, "Library", "LaunchAgents", `${SERVICE_LABEL}.plist`);
+    const domain = `gui/${ctx.uid ?? 501}`;
+    files.push({
+      path: plist,
+      content: `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>Label</key><string>${SERVICE_LABEL}</string>
+	<key>ProgramArguments</key>
+	<array>
+		<string>${xml(ctx.nodePath)}</string>
+		<string>${xml(supervisor)}</string>
+	</array>
+	<key>RunAtLoad</key><true/>
+	<key>KeepAlive</key><true/>
+	<key>ThrottleInterval</key><integer>30</integer>
+	<key>ProcessType</key><string>Background</string>
+	<key>WorkingDirectory</key><string>${xml(ctx.home)}</string>
+	<key>StandardOutPath</key><string>${xml(log)}</string>
+	<key>StandardErrorPath</key><string>${xml(log)}</string>
+</dict>
+</plist>
+`
+    });
+    return {
+      kind: "launchd",
+      files,
+      commands: [
+        { file: "launchctl", args: ["bootout", `${domain}/${SERVICE_LABEL}`], optional: true, why: "unload an earlier copy" },
+        { file: "launchctl", args: ["bootstrap", domain, plist], why: "load the LaunchAgent" },
+        { file: "launchctl", args: ["kickstart", "-k", `${domain}/${SERVICE_LABEL}`], why: "start it now" }
+      ],
+      notes: [
+        ...pinnedNodeNote(ctx),
+        `LaunchAgent ${plist} \u2014 runs while this user is logged in. On a machine that must survive a reboot unattended, turn on automatic login for this user.`,
+        `Remove it with: pags up --uninstall-service`
+      ]
+    };
+  }
+  if (ctx.platform === "win32") {
+    const task = win322.join(ctx.configDir, "pags-up-task.ps1");
+    const principal = `${ctx.domain ? `${ctx.domain}\\` : ""}${ctx.user ?? ""}`;
+    files.push({
+      path: task,
+      content: `# Written by \`pags up --install-service\` (#1141). Registers the "${WINDOWS_TASK}" Scheduled Task; needs an elevated PowerShell.
+$ErrorActionPreference = 'Stop'
+$action    = New-ScheduledTaskAction -Execute ${ps(ctx.nodePath)} -Argument ${ps(`"${supervisor}"`)}
+$trigger   = New-ScheduledTaskTrigger -AtStartup
+# Task Scheduler restarts a task that failed to START; a supervisor killed later just ends. Re-trigger it every five
+# minutes, forever \u2014 MultipleInstances IgnoreNew makes a trigger that finds it running do nothing (#1154).
+$trigger.Repetition = (New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Minutes 5)).Repetition
+$principal = New-ScheduledTaskPrincipal -UserId ${ps(principal)} -LogonType S4U -RunLevel Limited
+$settings  = New-ScheduledTaskSettingsSet -ExecutionTimeLimit ([TimeSpan]::Zero) -RestartCount 999 -RestartInterval (New-TimeSpan -Minutes 1) -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable -MultipleInstances IgnoreNew
+Unregister-ScheduledTask -TaskName ${ps(WINDOWS_TASK)} -Confirm:$false -ErrorAction SilentlyContinue
+Register-ScheduledTask -TaskName ${ps(WINDOWS_TASK)} -Action $action -Trigger $trigger -Principal $principal -Settings $settings | Out-Null
+Start-ScheduledTask -TaskName ${ps(WINDOWS_TASK)}
+`
+    });
+    return {
+      kind: "scheduled-task",
+      files,
+      commands: [{ file: "powershell.exe", args: ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", task], why: "register and start the Scheduled Task" }],
+      notes: [
+        ...pinnedNodeNote(ctx),
+        `Scheduled Task "${WINDOWS_TASK}" \u2014 starts at boot as ${principal || "this user"}, with nobody logged in. Registering it needs an elevated PowerShell: if it was refused, run ${task} from one.`,
+        `Remove it with: pags up --uninstall-service`
+      ]
+    };
+  }
+  const unit = posix.join(ctx.home, ".config", "systemd", "user", SYSTEMD_UNIT);
+  files.push({
+    path: unit,
+    content: `# Written by \`pags up --install-service\` (#1141).
+[Unit]
+Description=ProAgentStore runner (pags up)
+After=network-online.target
+Wants=network-online.target
+StartLimitIntervalSec=0
+
+[Service]
+ExecStart=${unitWord(ctx.nodePath)} ${unitWord(supervisor)}
+Environment=${unitWord(`PATH=${ctx.pathEnv}`)}
+Restart=always
+RestartSec=10
+KillMode=mixed
+
+[Install]
+WantedBy=default.target
+`
+  });
+  return {
+    kind: "systemd",
+    files,
+    commands: [
+      { file: "systemctl", args: ["--user", "daemon-reload"], why: "read the unit" },
+      { file: "systemctl", args: ["--user", "enable", "--now", SYSTEMD_UNIT], why: "enable and start it" },
+      { file: "loginctl", args: ["enable-linger", ...ctx.user ? [ctx.user] : []], optional: true, why: "keep it running with nobody logged in" }
+    ],
+    notes: [...pinnedNodeNote(ctx), `systemd user unit ${unit}. Logs: ${log} (and journalctl --user -u ${SYSTEMD_UNIT}).`, `Remove it with: pags up --uninstall-service`]
+  };
+}
+function serviceRemovalPlan(ctx) {
+  const plan = servicePlan(ctx);
+  const files = plan.files.map((f) => f.path);
+  if (plan.kind === "launchd") return { files, commands: [{ file: "launchctl", args: ["bootout", `gui/${ctx.uid ?? 501}/${SERVICE_LABEL}`], optional: true, why: "unload the LaunchAgent" }] };
+  if (plan.kind === "systemd") return { files, commands: [{ file: "systemctl", args: ["--user", "disable", "--now", SYSTEMD_UNIT], optional: true, why: "stop and disable the unit" }] };
+  return {
+    files,
+    commands: [{ file: "powershell.exe", args: ["-NoProfile", "-Command", `Stop-ScheduledTask -TaskName ${ps(WINDOWS_TASK)} -ErrorAction SilentlyContinue; Unregister-ScheduledTask -TaskName ${ps(WINDOWS_TASK)} -Confirm:$false`], optional: true, why: "remove the Scheduled Task" }]
+  };
+}
+var defaultWrite = (path, content) => {
+  mkdirSync9(path.replace(/[\\/][^\\/]*$/, ""), { recursive: true });
+  writeFileSync7(path, content);
+};
+var defaultRun = (file, args) => void execFileSync3(file, args, { stdio: "pipe", timeout: 6e4 });
+function installService(ctx, deps = {}) {
+  const plan = servicePlan(ctx);
+  const lines = [];
+  for (const f of plan.files) {
+    (deps.write ?? defaultWrite)(f.path, f.content);
+    lines.push(`wrote ${f.path}`);
+  }
+  let ok = true;
+  for (const c2 of plan.commands) {
+    try {
+      (deps.run ?? defaultRun)(c2.file, c2.args);
+      lines.push(`${c2.why}: ok`);
+    } catch (e) {
+      const why = String(e.stderr ?? "").trim() || (e instanceof Error ? e.message : String(e));
+      lines.push(`${c2.why}: ${c2.optional ? "skipped" : "FAILED"} \u2014 ${why.split(/\r?\n/)[0].slice(0, 200)}`);
+      if (!c2.optional) ok = false;
+    }
+  }
+  return { ok, lines: [...lines, ...plan.notes] };
+}
+function uninstallService(ctx, deps = {}) {
+  const plan = serviceRemovalPlan(ctx);
+  const lines = [];
+  for (const c2 of plan.commands) {
+    try {
+      (deps.run ?? defaultRun)(c2.file, c2.args);
+      lines.push(`${c2.why}: ok`);
+    } catch (e) {
+      lines.push(`${c2.why}: skipped \u2014 ${(e instanceof Error ? e.message : String(e)).split(/\r?\n/)[0].slice(0, 200)}`);
+    }
+  }
+  for (const f of plan.files) {
+    (deps.remove ?? ((p) => rmSync(p, { force: true })))(f);
+    lines.push(`removed ${f}`);
+  }
+  return { lines };
+}
+
 // src/commands/up.ts
 var API_BASE3 = "https://api.proagentstore.online";
 var CLI_VERSION2 = createRequire2(import.meta.url)("../package.json").version;
-var upCommand = new Command10("up").description("Start the browser runner for all your agent instances").option("--headless", "Run browser in headless mode").option("--instance <id>", "Connect to a specific instance only").option("--force", "Take over from another connected machine").option("--replace", "Stop the `pags up` already running here for this account, then take over").option("--now", "With --replace: stop it even though work is running on it (that work is lost)").option("--background", "Run the runner in the background, with no terminal open (stop it with `pags down`)").action(async (opts) => {
+var upCommand = new Command10("up").description("Start the browser runner for all your agent instances").option("--headless", "Run browser in headless mode").option("--instance <id>", "Connect to a specific instance only").option("--force", "Take over from another connected machine").option("--replace", "Stop the `pags up` already running here for this account, then take over").option("--now", "With --replace: stop it even though work is running on it (that work is lost)").option("--background", "Run the runner in the background, with no terminal open (stop it with `pags down`)").option("--install-service", "Install an OS service that keeps `pags up` running (launchd, systemd or a Scheduled Task), then exit").option("--uninstall-service", "Remove the service --install-service installed, then exit").action(async (opts) => {
+  if (opts.uninstallService) {
+    for (const line of uninstallService(serviceContext()).lines) writeLine(line);
+    return;
+  }
+  if (!opts.background && !opts.installService && upRestartMode(process.env) === "launcher") {
+    restartPagsUp(process.argv.slice(2), {}, { ...processRestartDeps(), log: (line) => writeLine(`  ${line}`) }, { initial: true });
+    return;
+  }
   const session = requireSession();
+  if (opts.installService) {
+    const result = installService(serviceContext());
+    for (const line of result.lines) writeLine(line);
+    writeLine(result.ok ? "The service starts `pags up` now and whenever it exits. A `pags up` already running here keeps the lock; the service takes over once it stops." : "The service was not fully installed \u2014 see the FAILED line above.");
+    if (!result.ok) process.exitCode = 1;
+    return;
+  }
   const state = {
     user: session.user.login,
     instances: [],
@@ -3871,18 +4222,34 @@ var upCommand = new Command10("up").description("Start the browser runner for al
     // as taking a few seconds, indefinitely, because nothing counted (#497).
     startedAt: Date.now()
   };
+  const unattended = process.env.PAGS_NO_PROMPT === "1";
+  logUpdateStep(`start: pags up ${CLI_VERSION2}${unattended ? " (unattended)" : ""}`);
   clearScreen();
   printLogo(CLI_VERSION2);
   printStep("Signed in as " + session.user.login, "ok");
   printStep("Fetching instances...", "wait");
-  const res = await fetch(`${API_BASE3}/v1/instances/my/instances`, {
-    headers: { Authorization: `Bearer ${session.token}` }
-  });
-  if (!res.ok) {
-    printStep("Failed to fetch instances: " + res.status, "fail");
-    process.exit(1);
+  let data;
+  for (let failures = 1; ; failures++) {
+    let failure;
+    try {
+      const res = await fetch(`${API_BASE3}/v1/instances/my/instances`, { headers: { Authorization: `Bearer ${session.token}` } });
+      if (res.ok) {
+        data = await res.json();
+        break;
+      }
+      failure = `HTTP ${res.status}`;
+    } catch (e) {
+      failure = e instanceof Error ? e.message : String(e);
+    }
+    logUpdateStep(`start: fetching instances failed (${failure})${unattended ? "" : " \u2014 exiting"}`);
+    if (!unattended) {
+      printStep("Failed to fetch instances: " + failure, "fail");
+      process.exit(1);
+    }
+    const wait = Math.min(5 * 6e4, 5e3 * 2 ** (failures - 1));
+    printStep(`Failed to fetch instances (${failure}) \u2014 retrying in ${Math.round(wait / 1e3)}s`, "wait");
+    await new Promise((resolve5) => setTimeout(resolve5, wait));
   }
-  const data = await res.json();
   const active = (data.instances || []).filter((i) => i.status === "active");
   let instances = active;
   let elsewhere = [];
@@ -3930,9 +4297,10 @@ var upCommand = new Command10("up").description("Start the browser runner for al
   state.activeInstance = instances.length === 1 ? instances[0].name || instances[0].slug || instances[0].id.slice(0, 8) : `${instances.length} agents`;
   printStep(`Connecting ${state.activeInstance}\u2026`, "wait");
   const lockFile = lockPath(session.user.login);
-  if (opts.background && process.env[BACKGROUND_RESTART_ENV] === "1") await waitUntilTakeable(() => inspectHolder(lockFile));
+  if (unattended || opts.background && process.env[BACKGROUND_RESTART_ENV] === "1") await waitUntilTakeable(() => inspectHolder(lockFile), { timeoutMs: 6e4 });
   const held = await inspectHolder(lockFile);
   if (held.lock && !isTakeable(held.verdict)) {
+    logUpdateStep(`start: the lock is held by pid ${held.lock.pid} (${held.verdict})${opts.replace ? " \u2014 replacing it" : " \u2014 exiting"}`);
     if (!opts.replace) {
       clearScreen();
       printLogo(CLI_VERSION2);
@@ -4036,31 +4404,29 @@ var upCommand = new Command10("up").description("Start the browser runner for al
     void deliverCrashReports({ apiBase: API_BASE3, token: session.token, account: session.user.login, paths: crashes }).catch(() => void 0);
   };
   child.on("exit", (code, signal) => {
-    if (code === RUNNER_RESTART_EXIT_CODE) {
+    const action = runnerExitAction(code, stopping);
+    if (action === "restart") {
+      logUpdateStep("restart: runner connect asked for a restart (exit 75)");
       restartUp("Runner updated remotely \u2014 restarting pags up on the new version\u2026", { PAGS_NO_PROMPT: "1" });
       return;
     }
     childDead = true;
-    if (code !== 0 && !stopping) recordConnectExit(code, signal ?? null, logs.slice(-20));
-    if (code === null) {
-      state.runner = "error";
-      state.lastEvent = "Runner stopped by another process (signal) \u2014 it is not connected any more";
-      printStatus(state);
-      return;
-    }
-    if (code !== 0) {
-      state.runner = "error";
-      state.lastEvent = `Runner exited (code ${code})`;
-      const recent = logs.slice(-5);
-      if (recent.length) state.lastEvent += ": " + recent[recent.length - 1].slice(0, 60);
-      printStatus(state);
+    logUpdateStep(`runner connect ${signal ? `was killed by ${signal}` : `exited ${code}`}${stopping ? " (stopping)" : ""}`);
+    if (action === "ignore") return;
+    if (action === "stop") {
+      clearScreen();
+      writeLine("  Runner stopped (pags down, or replaced by another pags up).");
+      process.exit(0);
     }
+    recordConnectExit(code, signal ?? null, logs.slice(-20));
+    const recent = logs.slice(-5).at(-1);
+    restartUp(`Runner ${signal ? `was killed by ${signal}` : `exited (code ${code})`}${recent ? `: ${recent.slice(0, 60)}` : ""} \u2014 starting it again\u2026`, { PAGS_NO_PROMPT: "1" }, RUNNER_DIED_EXIT_CODE);
   });
-  function restartUp(why, env = {}) {
+  function restartUp(why, env = {}, exitCode) {
     writeLine(`  ${why}`);
     if (process.stdin.isTTY) process.stdin.setRawMode(false);
     process.stdin.pause();
-    restartPagsUp(restartUpArgs(opts), env, { ...processRestartDeps(), log: (line) => writeLine(`  ${line}`) });
+    restartPagsUp(restartUpArgs(opts), env, { ...processRestartDeps(), log: (line) => writeLine(`  ${line}`) }, { exitCode });
     process.exit(1);
   }
   const shutdown = () => {
@@ -4125,6 +4491,26 @@ var downCommand = new Command10("down").description("Stop the browser runner and
   }
   writeLine("");
 });
+function serviceContext() {
+  const user = (() => {
+    try {
+      return userInfo().username;
+    } catch {
+      return process.env.USER || process.env.USERNAME || void 0;
+    }
+  })();
+  return {
+    platform: process.platform,
+    home: homedir5(),
+    nodePath: process.execPath,
+    script: process.argv[1],
+    configDir: configDir(),
+    pathEnv: process.env.PATH ?? "",
+    uid: process.getuid?.(),
+    user,
+    domain: process.env.USERDOMAIN
+  };
+}
 
 // src/index.ts
 var require2 = createRequire3(import.meta.url);