@runeya/runeya 2.0.140 → 2.0.141

package/{chunk-GOMF7NWS.js → chunk-7L6AQUBR.js}

@@ -1,6 +1,6 @@
 import {
   machineRoot
-} from "./chunk-EV3TBM7E.js";
+} from "./chunk-IXO5KIO5.js";
 
 // ../server/src/services/disk-freshness.ts
 import { stat } from "fs/promises";
@@ -130,4 +130,4 @@ export {
   atomicWriteJsonSecure,
   readJsonFileSafe
 };
-//# sourceMappingURL=chunk-GOMF7NWS.js.map
+//# sourceMappingURL=chunk-7L6AQUBR.js.map

package/{chunk-O2KOX4LU.js → chunk-C2BGNVBT.js}

@@ -1,23 +1,48 @@
 // src/free-port.ts
-import { createServer } from "net";
+import { connect, createServer } from "net";
 import { randomInt } from "crypto";
 var MIN_PORT = 1e4;
 var MAX_PORT = 3e4;
-function tryBind(port, host) {
+function bind(port, host) {
   return new Promise((resolve) => {
     const server = createServer();
-    server.once("error", () => resolve(null));
+    server.once("error", (err) => resolve(err.code ?? "EUNKNOWN"));
     server.listen(port, host, () => resolve(server));
   });
 }
+async function tryBind(port, host) {
+  const result = await bind(port, host);
+  return typeof result === "string" ? null : result;
+}
+var ALL_HOSTS = ["127.0.0.1", "0.0.0.0", "::"];
+var NO_SUCH_ADDRESS = /* @__PURE__ */ new Set(["EAFNOSUPPORT", "EADDRNOTAVAIL"]);
 function close(server) {
   return new Promise((resolve) => server.close(() => resolve()));
 }
-async function isPortFree(port, host = "127.0.0.1") {
-  const server = await tryBind(port, host);
-  if (!server) return false;
-  await close(server);
-  return true;
+function answers(port, host) {
+  return new Promise((resolve) => {
+    const socket = connect({ port, host });
+    const done = (value) => {
+      socket.destroy();
+      resolve(value);
+    };
+    socket.setTimeout(500, () => done(false));
+    socket.once("connect", () => done(true));
+    socket.once("error", () => done(false));
+  });
+}
+async function isPortFree(port, host) {
+  for (const h of host ? [host] : ALL_HOSTS) {
+    const result = await bind(port, h);
+    if (typeof result === "string") {
+      if (!host && h === "::" && NO_SUCH_ADDRESS.has(result)) continue;
+      return false;
+    }
+    await close(result);
+  }
+  if (host) return true;
+  const [v4, v6] = await Promise.all([answers(port, "127.0.0.1"), answers(port, "::1")]);
+  return !v4 && !v6;
 }
 async function findFreePortPair({ host = "127.0.0.1", attempts = 200 } = {}) {
   for (let i = 0; i < attempts; i++) {
@@ -30,6 +55,7 @@ async function findFreePortPair({ host = "127.0.0.1", attempts = 200 } = {}) {
       continue;
     }
     await Promise.all([close(first), close(second)]);
+    if (!await isPortFree(base) || !await isPortFree(base + 1)) continue;
     return base;
   }
   return null;
@@ -63,4 +89,4 @@ export {
   parsePort,
   probeRuneya
 };
-//# sourceMappingURL=chunk-O2KOX4LU.js.map
+//# sourceMappingURL=chunk-C2BGNVBT.js.map

package/chunk-C2BGNVBT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/free-port.ts"],"sourcesContent":["/**\n * Free-port discovery for desktop launchers.\n *\n * A launcher needs a port it can keep: the whole point of baking one into the\n * shortcut is that clicking it tomorrow lands on the same address. Runeya\n * derives the agent port from the server port (`server + 1`), so a usable\n * suggestion is a *pair* of consecutive free ports, not just one free port.\n */\nimport { connect, createServer, type Server } from 'node:net';\nimport { randomInt } from 'node:crypto';\n\n/**\n * Range the suggestion is drawn from. Deliberately below every platform's\n * ephemeral range (Linux 32768+, macOS and Windows 49152+): a port handed out\n * there could be taken by a transient outbound socket between our check and\n * the next launch.\n */\nconst MIN_PORT = 10_000;\nconst MAX_PORT = 30_000;\n\n/** Le serveur lié, ou le code d'erreur du `listen`. */\nfunction bind(port: number, host: string): Promise<Server | string> {\n  return new Promise((resolve) => {\n    const server = createServer();\n    server.once('error', (err: NodeJS.ErrnoException) => resolve(err.code ?? 'EUNKNOWN'));\n    server.listen(port, host, () => resolve(server));\n  });\n}\n\nasync function tryBind(port: number, host: string): Promise<Server | null> {\n  const result = await bind(port, host);\n  return typeof result === 'string' ? null : result;\n}\n\n/**\n * Les adresses où un port peut être pris. En tester une ne suffit pas : sous\n * macOS et Windows, un service lié à `0.0.0.0` n'empêche pas de se lier à\n * `127.0.0.1` sur le même port, et Runeya en mode réseau local écoute sur\n * `0.0.0.0`. Beaucoup de serveurs Node écoutent aussi sur `::` par défaut.\n */\nconst ALL_HOSTS = ['127.0.0.1', '0.0.0.0', '::'];\n\n/** Erreurs qui disent que l'adresse n'existe pas sur cette machine (IPv6 désactivé), pas que le port est pris. */\nconst NO_SUCH_ADDRESS = new Set(['EAFNOSUPPORT', 'EADDRNOTAVAIL']);\n\nfunction close(server: Server): Promise<void> {\n  return new Promise((resolve) => server.close(() => resolve()));\n}\n\n/** Un service répond-il sur `host:port` ? Refus, adresse absente ou délai : non. */\nfunction answers(port: number, host: string): Promise<boolean> {\n  return new Promise((resolve) => {\n    const socket = connect({ port, host });\n    const done = (value: boolean) => { socket.destroy(); resolve(value); };\n    socket.setTimeout(500, () => done(false));\n    socket.once('connect', () => done(true));\n    socket.once('error', () => done(false));\n  });\n}\n\n/**\n * True when nothing is listening on `port`: on `host` when given, otherwise on\n * any of the loopback, IPv4 wildcard and IPv6 wildcard addresses.\n *\n * Sans `host`, deux contrôles. Se lier au port d'abord ; puis s'y connecter en\n * local, en IPv4 et en IPv6. Le second rattrape ce que le premier laisse passer\n * sous Windows, où un service IPv6 seul n'empêche pas de se lier au même port.\n * Qu'un service réponde suffit : le port est pris, quelle que soit la façon\n * dont le système partage ses adresses.\n */\nexport async function isPortFree(port: number, host?: string): Promise<boolean> {\n  for (const h of host ? [host] : ALL_HOSTS) {\n    const result = await bind(port, h);\n    if (typeof result === 'string') {\n      if (!host && h === '::' && NO_SUCH_ADDRESS.has(result)) continue;\n      return false;\n    }\n    await close(result);\n  }\n  if (host) return true;\n  const [v4, v6] = await Promise.all([answers(port, '127.0.0.1'), answers(port, '::1')]);\n  return !v4 && !v6;\n}\n\n/**\n * Find a port `p` such that `p` and `p + 1` are both free, and return `p`.\n *\n * Both are held at the same time before either is released: binding one,\n * closing it, then binding the next would leave a window where the first is\n * reclaimed and the pair is not actually a pair.\n *\n * The result is a suggestion, not a reservation — nothing stops another\n * process from taking the port a moment later. That is why the failure path\n * matters more than the check: a launcher that cannot bind now shows the\n * startup report instead of dying silently.\n */\nexport async function findFreePortPair(\n  { host = '127.0.0.1', attempts = 200 }: { host?: string; attempts?: number } = {},\n): Promise<number | null> {\n  for (let i = 0; i < attempts; i++) {\n    // MAX_PORT - 1 so that base + 1 stays inside the range\n    const base = randomInt(MIN_PORT, MAX_PORT - 1);\n\n    const first = await tryBind(base, host);\n    if (!first) continue;\n\n    const second = await tryBind(base + 1, host);\n    if (!second) {\n      await close(first);\n      continue;\n    }\n\n    await Promise.all([close(first), close(second)]);\n    // Libres sur `host`, mais peut-être pris sur une autre adresse.\n    if (!(await isPortFree(base)) || !(await isPortFree(base + 1))) continue;\n    return base;\n  }\n  return null;\n}\n\n/**\n * Parse a port from user input or a flag. Returns null when unusable.\n *\n * Only plain decimal digits are accepted. `Number()` alone would take \"4e3\"\n * for 4000 and \"0x10\" for 16 — for a port someone typed, those are typos, and\n * silently resolving them to a valid number is worse than refusing them.\n */\nexport function parsePort(raw: string | undefined): number | null {\n  if (raw === undefined) return null;\n  const trimmed = raw.trim();\n  if (!/^\\d+$/.test(trimmed)) return null;\n  const port = Number(trimmed);\n  if (port < 1 || port > 65_535) return null;\n  return port;\n}\n\n/**\n * Ask a port whether a Runeya answers there.\n *\n * `health.check` is public and returns the version, so a positive answer\n * identifies Runeya rather than merely proving the port is taken. That\n * distinction is the whole point: a Runeya already serving the port should be\n * opened, while anything else is a genuine conflict the user must see.\n */\nexport async function probeRuneya(port: number): Promise<{ version: string } | null> {\n  try {\n    const res = await fetch(`http://127.0.0.1:${port}/api/trpc/health.check`, {\n      signal: AbortSignal.timeout(1500),\n    });\n    if (!res.ok) return null;\n    const body = await res.json() as { result?: { data?: { status?: string; version?: string } } };\n    const data = body.result?.data;\n    if (data?.status !== 'ok') return null;\n    return { version: data.version ?? 'unknown' };\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAQA,SAAS,SAAS,oBAAiC;AACnD,SAAS,iBAAiB;AAQ1B,IAAM,WAAW;AACjB,IAAM,WAAW;AAGjB,SAAS,KAAK,MAAc,MAAwC;AAClE,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,SAAS,aAAa;AAC5B,WAAO,KAAK,SAAS,CAAC,QAA+B,QAAQ,IAAI,QAAQ,UAAU,CAAC;AACpF,WAAO,OAAO,MAAM,MAAM,MAAM,QAAQ,MAAM,CAAC;AAAA,EACjD,CAAC;AACH;AAEA,eAAe,QAAQ,MAAc,MAAsC;AACzE,QAAM,SAAS,MAAM,KAAK,MAAM,IAAI;AACpC,SAAO,OAAO,WAAW,WAAW,OAAO;AAC7C;AAQA,IAAM,YAAY,CAAC,aAAa,WAAW,IAAI;AAG/C,IAAM,kBAAkB,oBAAI,IAAI,CAAC,gBAAgB,eAAe,CAAC;AAEjE,SAAS,MAAM,QAA+B;AAC5C,SAAO,IAAI,QAAQ,CAAC,YAAY,OAAO,MAAM,MAAM,QAAQ,CAAC,CAAC;AAC/D;AAGA,SAAS,QAAQ,MAAc,MAAgC;AAC7D,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;AACrC,UAAM,OAAO,CAAC,UAAmB;AAAE,aAAO,QAAQ;AAAG,cAAQ,KAAK;AAAA,IAAG;AACrE,WAAO,WAAW,KAAK,MAAM,KAAK,KAAK,CAAC;AACxC,WAAO,KAAK,WAAW,MAAM,KAAK,IAAI,CAAC;AACvC,WAAO,KAAK,SAAS,MAAM,KAAK,KAAK,CAAC;AAAA,EACxC,CAAC;AACH;AAYA,eAAsB,WAAW,MAAc,MAAiC;AAC9E,aAAW,KAAK,OAAO,CAAC,IAAI,IAAI,WAAW;AACzC,UAAM,SAAS,MAAM,KAAK,MAAM,CAAC;AACjC,QAAI,OAAO,WAAW,UAAU;AAC9B,UAAI,CAAC,QAAQ,MAAM,QAAQ,gBAAgB,IAAI,MAAM,EAAG;AACxD,aAAO;AAAA,IACT;AACA,UAAM,MAAM,MAAM;AAAA,EACpB;AACA,MAAI,KAAM,QAAO;AACjB,QAAM,CAAC,IAAI,EAAE,IAAI,MAAM,QAAQ,IAAI,CAAC,QAAQ,MAAM,WAAW,GAAG,QAAQ,MAAM,KAAK,CAAC,CAAC;AACrF,SAAO,CAAC,MAAM,CAAC;AACjB;AAcA,eAAsB,iBACpB,EAAE,OAAO,aAAa,WAAW,IAAI,IAA0C,CAAC,GACxD;AACxB,WAAS,IAAI,GAAG,IAAI,UAAU,KAAK;AAEjC,UAAM,OAAO,UAAU,UAAU,WAAW,CAAC;AAE7C,UAAM,QAAQ,MAAM,QAAQ,MAAM,IAAI;AACtC,QAAI,CAAC,MAAO;AAEZ,UAAM,SAAS,MAAM,QAAQ,OAAO,GAAG,IAAI;AAC3C,QAAI,CAAC,QAAQ;AACX,YAAM,MAAM,KAAK;AACjB;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,CAAC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC;AAE/C,QAAI,CAAE,MAAM,WAAW,IAAI,KAAM,CAAE,MAAM,WAAW,OAAO,CAAC,EAAI;AAChE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AASO,SAAS,UAAU,KAAwC;AAChE,MAAI,QAAQ,OAAW,QAAO;AAC9B,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,QAAQ,KAAK,OAAO,EAAG,QAAO;AACnC,QAAM,OAAO,OAAO,OAAO;AAC3B,MAAI,OAAO,KAAK,OAAO,MAAQ,QAAO;AACtC,SAAO;AACT;AAUA,eAAsB,YAAY,MAAmD;AACnF,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,oBAAoB,IAAI,0BAA0B;AAAA,MACxE,QAAQ,YAAY,QAAQ,IAAI;AAAA,IAClC,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,OAAO,KAAK,QAAQ;AAC1B,QAAI,MAAM,WAAW,KAAM,QAAO;AAClC,WAAO,EAAE,SAAS,KAAK,WAAW,UAAU;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/{chunk-SYCUQDA4.js → chunk-GXE5TLLJ.js}

@@ -5,7 +5,7 @@ import {
   rememberFile,
   renameWithRetry,
   wasRead
-} from "./chunk-GOMF7NWS.js";
+} from "./chunk-7L6AQUBR.js";
 import {
   AGENT_FETCH_TIMEOUT,
   AGENT_HEALTH_POLL_INTERVAL,
@@ -29,7 +29,7 @@ import {
   projectVaultRoot,
   vaultFor,
   vaultIdOfRoot
-} from "./chunk-EV3TBM7E.js";
+} from "./chunk-IXO5KIO5.js";
 import {
   decryptValueWith,
   encryptValueWith
@@ -972,7 +972,13 @@ var EnvironmentStore = class {
         });
         continue;
       }
-      await atomicWriteSecure(filePath, JSON.stringify(environments, null, 2));
+      try {
+        await atomicWriteSecure(filePath, JSON.stringify(environments, null, 2));
+      } catch (err) {
+        if (err.code !== "ENOENT") throw err;
+        console.warn(`[environment-store] ${filePath} a disparu pendant l'\xE9criture (projet supprim\xE9 ?) \u2014 coffre ignor\xE9.`);
+        continue;
+      }
       await rememberFile(filePath);
     }
     this.fingerprint = await this.diskFingerprint();
@@ -3112,4 +3118,4 @@ export {
   traefikManager,
   agentManager
 };
-//# sourceMappingURL=chunk-SYCUQDA4.js.map
+//# sourceMappingURL=chunk-GXE5TLLJ.js.map