@serfab/cadre-host 0.7.1

package/dist/installer/index.js

@@ -0,0 +1,204 @@
+/**
+ * Public installer surface for cadre-host.
+ *
+ * Orchestrates the install / uninstall flow described in
+ * `tickets/implement/6.4.1-cadre-host-installer.md`.
+ *
+ * The class is purposefully thin — heavy lifting lives in the focused
+ * subsystem modules (wizard.ts, identity.ts, config.ts,
+ * service-host/{systemd,launchd,nssm}.ts, browser.ts).
+ */
+import { existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import debug from 'debug';
+import { NatStore } from '../nat/index.js';
+import { openBrowser } from './browser.js';
+import { writeHostConfig } from './config.js';
+import { generateIdentity } from './identity.js';
+import { configPath, defaultHostJs, defaultServiceDir, identityPath, logsDir, } from './paths.js';
+import { detectPlatform, } from './platform.js';
+import { createServiceHost } from './service-host/index.js';
+import { defaultsForPlatform, runWizard, runWizardWith, DEFAULT_UI_PORT, DEFAULT_LIBP2P_PORT, } from './wizard.js';
+const log = debug('cadre:host:installer');
+export class Installer {
+    constructor(opts = {}) {
+        this.platform = opts.platform ?? detectPlatform();
+        this.installerVersion = opts.installerVersion ?? readPackageVersion();
+    }
+    async install(opts) {
+        if (opts.system) {
+            throw new Error('cadre-host install --system is not yet supported. Run without --system ' +
+                'for a per-user install; see packages/cadre-host/service/README.md.');
+        }
+        // 1. Resolve answers — wizard for interactive, defaults+overrides otherwise.
+        const answers = await this.resolveAnswers(opts);
+        // 2. Make sure the data dir exists.
+        mkdirSync(answers.dataDir, { recursive: true });
+        mkdirSync(logsDir(answers.dataDir), { recursive: true });
+        // 3. Identity + config. Don't overwrite an existing key — re-running
+        //    install on a populated data dir must preserve the host's peer ID.
+        const idPath = identityPath(answers.dataDir);
+        if (existsSync(idPath)) {
+            log('identity already exists at %s — leaving it', idPath);
+        }
+        else {
+            await generateIdentity(idPath);
+        }
+        const cfg = {
+            version: 2,
+            installId: randomInstallId(),
+            uiPort: answers.uiPort,
+            libp2pPort: answers.libp2pPort,
+            dataDir: answers.dataDir,
+            identityPath: idPath,
+            upnpEnabled: answers.upnpEnabled,
+            installedAt: new Date().toISOString(),
+            installerVersion: this.installerVersion,
+            updates: { autoApply: false },
+        };
+        const cfgPath = configPath(answers.dataDir);
+        writeHostConfig(cfgPath, cfg);
+        // 4. Seed nat.json with the chosen libp2p port + UPnP flag so the
+        //    NatService picks them up on first start.
+        seedNatSettings(answers.dataDir, answers.libp2pPort, answers.upnpEnabled);
+        // 5. Service-host registration.
+        const serviceHost = opts.serviceHost ?? createServiceHost(this.platform);
+        const ctx = {
+            nodePath: opts.nodePath ?? process.execPath,
+            hostJs: defaultHostJs(),
+            dataDir: answers.dataDir,
+            serviceDir: defaultServiceDir(),
+        };
+        await serviceHost.install(ctx);
+        // 6. Browser open (best-effort).
+        const uiUrl = `http://127.0.0.1:${answers.uiPort}/`;
+        const shouldOpenBrowser = opts.openBrowser !== false && !opts.nonInteractive && process.stdout.isTTY;
+        if (shouldOpenBrowser) {
+            openBrowser(uiUrl);
+        }
+        // 7. Enrollment invite (best-effort — the listener may not be up yet).
+        let invite;
+        if (!opts.noInvite && !opts.nonInteractive) {
+            invite = await fetchEnrollmentInvite(answers.uiPort).catch((err) => {
+                log('enrollment-invite fetch failed: %s', err.message);
+                return undefined;
+            });
+        }
+        return {
+            dataDir: answers.dataDir,
+            uiUrl,
+            serviceName: serviceHost.name,
+            configPath: cfgPath,
+            ...(invite ? { enrollmentInvite: invite } : {}),
+        };
+    }
+    async uninstall(opts) {
+        const dataDir = opts.dataDir ?? defaultsForPlatform(this.platform).dataDir;
+        const serviceHost = opts.serviceHost ?? createServiceHost(this.platform);
+        const ctx = {
+            nodePath: process.execPath,
+            hostJs: defaultHostJs(),
+            dataDir,
+            serviceDir: defaultServiceDir(),
+        };
+        await serviceHost.uninstall(ctx);
+        if (opts.removeData) {
+            if (existsSync(dataDir)) {
+                rmSync(dataDir, { recursive: true, force: true });
+                log('removed data dir %s', dataDir);
+            }
+        }
+    }
+    async status(opts = {}) {
+        const serviceHost = opts.serviceHost ?? createServiceHost(this.platform);
+        const ctx = {
+            nodePath: process.execPath,
+            hostJs: defaultHostJs(),
+            dataDir: defaultsForPlatform(this.platform).dataDir,
+            serviceDir: defaultServiceDir(),
+        };
+        return await serviceHost.status(ctx);
+    }
+    /** Exposed for tests / unattended CI. Resolves the wizard answers without running prompts. */
+    resolveAnswersFromOptions(opts) {
+        const defaults = defaultsForPlatform(this.platform);
+        return {
+            dataDir: opts.dataDir ?? defaults.dataDir,
+            uiPort: opts.uiPort ?? defaults.uiPort,
+            libp2pPort: opts.libp2pPort ?? defaults.libp2pPort,
+            upnpEnabled: opts.noUpnp ? false : defaults.upnpEnabled,
+            configureDdns: false,
+        };
+    }
+    async resolveAnswers(opts) {
+        if (opts.nonInteractive) {
+            return this.resolveAnswersFromOptions(opts);
+        }
+        const defaults = defaultsForPlatform(this.platform);
+        const answers = await runWizard(defaults);
+        // CLI flags still take precedence over wizard input — useful when the
+        // user passes `--ui-port 9000` but accepts defaults at the prompts.
+        return {
+            dataDir: opts.dataDir ?? answers.dataDir,
+            uiPort: opts.uiPort ?? answers.uiPort,
+            libp2pPort: opts.libp2pPort ?? answers.libp2pPort,
+            upnpEnabled: opts.noUpnp ? false : answers.upnpEnabled,
+            configureDdns: answers.configureDdns,
+        };
+    }
+}
+export { runWizardWith, defaultsForPlatform, DEFAULT_UI_PORT, DEFAULT_LIBP2P_PORT };
+function seedNatSettings(dataDir, libp2pPort, upnpEnabled) {
+    const store = new NatStore(dataDir);
+    // `update()` merges + persists.
+    store.update({
+        externalPort: libp2pPort,
+        internalPort: libp2pPort,
+        upnpEnabled,
+    });
+}
+function randomInstallId() {
+    return randomBytes(16).toString('hex');
+}
+function readPackageVersion() {
+    // Best-effort: read the package.json next to dist/ at runtime.
+    try {
+        const here = new URL('../../package.json', import.meta.url);
+        const raw = readFileSync(here, 'utf8');
+        const parsed = JSON.parse(raw);
+        return parsed.version ?? '0.0.0-unknown';
+    }
+    catch {
+        return '0.0.0-unknown';
+    }
+}
+async function fetchEnrollmentInvite(uiPort) {
+    const url = `http://127.0.0.1:${uiPort}/auth/invites`;
+    // Node 18+'s fetch has no default timeout. Bound it so a slow / hung
+    // local-UI listener can't wedge `cadre-host install` indefinitely.
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 5000);
+    try {
+        const response = await fetch(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ label: 'Install — first device', ttlMs: 24 * 60 * 60 * 1000 }),
+            signal: controller.signal,
+        });
+        if (!response.ok)
+            return undefined;
+        const body = await response.json();
+        if (!body.encodedInvite)
+            return undefined;
+        return {
+            encodedInvite: body.encodedInvite,
+            ...(body.expiresAt ? { expiresAt: body.expiresAt } : {}),
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+// Exposed for tests that drive the wizard with a custom prompt fn.
+export { runWizard };
+//# sourceMappingURL=index.js.map

package/dist/installer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/installer/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAuB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EACL,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,OAAO,GACR,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,GAEf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAA6C,MAAM,yBAAyB,CAAC;AACvG,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,aAAa,EACb,eAAe,EACf,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AAMrB,MAAM,GAAG,GAAG,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAuD1C,MAAM,OAAO,SAAS;IAIpB,YAAY,OAAyB,EAAE;QACrC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;QAClD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,EAAE,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB;QAChC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,yEAAyE;gBACvE,oEAAoE,CACvE,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAEhD,oCAAoC;QACpC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,GAAG,GAAmB;YAC1B,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,eAAe,EAAE;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,YAAY,EAAE,MAAM;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;SAC9B,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE9B,kEAAkE;QAClE,8CAA8C;QAC9C,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAE1E,gCAAgC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,GAAG,GAAuB;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;YAC3C,MAAM,EAAE,aAAa,EAAE;YACvB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,iBAAiB,EAAE;SAChC,CAAC;QACF,MAAM,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE/B,iCAAiC;QACjC,MAAM,KAAK,GAAG,oBAAoB,OAAO,CAAC,MAAM,GAAG,CAAC;QACpD,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACrG,IAAI,iBAAiB,EAAE,CAAC;YACtB,WAAW,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,uEAAuE;QACvE,IAAI,MAAyC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACjE,GAAG,CAAC,oCAAoC,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;gBAClE,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK;YACL,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,UAAU,EAAE,OAAO;YACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAsB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,GAAG,GAAuB;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,aAAa,EAAE;YACvB,OAAO;YACP,UAAU,EAAE,iBAAiB,EAAE;SAChC,CAAC;QACF,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsC,EAAE;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,GAAG,GAAuB;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,aAAa,EAAE;YACvB,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO;YACnD,UAAU,EAAE,iBAAiB,EAAE;SAChC,CAAC;QACF,OAAO,MAAM,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,8FAA8F;IAC9F,yBAAyB,CAAC,IAAoB;QAC5C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;YACzC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;YACtC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;YAClD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW;YACvD,aAAa,EAAE,KAAK;SACrB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAoB;QAC/C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,sEAAsE;QACtE,oEAAoE;QACpE,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;YACxC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;YACjD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW;YACtD,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC;IACJ,CAAC;CACF;AAED,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC;AAEpF,SAAS,eAAe,CAAC,OAAe,EAAE,UAAkB,EAAE,WAAoB;IAChF,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,gCAAgC;IAChC,KAAK,CAAC,MAAM,CAAC;QACX,YAAY,EAAE,UAAU;QACxB,YAAY,EAAE,UAAU;QACxB,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB;IACzB,+DAA+D;IAC/D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,OAAO,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAc;IACjD,MAAM,GAAG,GAAG,oBAAoB,MAAM,eAAe,CAAC;IACtD,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACrF,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAoD,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/installer/paths.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Per-platform default paths for the installer.
+ *
+ * Linux:   XDG_DATA_HOME / ~/.local/share/cadre-host
+ * macOS:   ~/Library/Application Support/CadreHost
+ * Windows: %LocalAppData%\CadreHost
+ *
+ * The package root (where the installed `dist/bin/host.js` and `service/`
+ * directory live) is resolved at runtime relative to this module. The
+ * installer needs both: the data dir is per-user state, while the package
+ * root is what the service-host unit's `ExecStart` line points at.
+ */
+import type { SupportedPlatform } from './platform.js';
+export interface InstallerEnv {
+    HOME?: string;
+    XDG_DATA_HOME?: string;
+    XDG_CONFIG_HOME?: string;
+    LocalAppData?: string;
+}
+/** Default data dir for the given platform. Honors XDG_DATA_HOME / LocalAppData. */
+export declare function defaultDataDir(platform: SupportedPlatform, env?: InstallerEnv, home?: string): string;
+/** Path on disk for the installed cadre-host CLI entrypoint. */
+export declare function defaultHostJs(): string;
+/** Directory containing service templates (cadre-host.service.tmpl etc.). */
+export declare function defaultServiceDir(): string;
+/** Where the wizard writes the JSON config. */
+export declare function configPath(dataDir: string): string;
+/** Where the wizard writes the Ed25519 identity. */
+export declare function identityPath(dataDir: string): string;
+/** Logs directory (used by launchd / NSSM unit templates). */
+export declare function logsDir(dataDir: string): string;
+/** Per-platform install dir for the rendered service unit file. */
+export declare function serviceInstallPath(platform: SupportedPlatform, env?: InstallerEnv, home?: string): string;

package/dist/installer/paths.js

@@ -0,0 +1,84 @@
+/**
+ * Per-platform default paths for the installer.
+ *
+ * Linux:   XDG_DATA_HOME / ~/.local/share/cadre-host
+ * macOS:   ~/Library/Application Support/CadreHost
+ * Windows: %LocalAppData%\CadreHost
+ *
+ * The package root (where the installed `dist/bin/host.js` and `service/`
+ * directory live) is resolved at runtime relative to this module. The
+ * installer needs both: the data dir is per-user state, while the package
+ * root is what the service-host unit's `ExecStart` line points at.
+ */
+import { homedir } from 'node:os';
+import { posix, win32, join, resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+/** Use the path joiner the *target* platform would use, not the runtime's. */
+function joinFor(platform, ...parts) {
+    return platform === 'win32' ? win32.join(...parts) : posix.join(...parts);
+}
+/** Default data dir for the given platform. Honors XDG_DATA_HOME / LocalAppData. */
+export function defaultDataDir(platform, env = process.env, home = homedir()) {
+    switch (platform) {
+        case 'linux': {
+            const base = env.XDG_DATA_HOME?.trim() || joinFor(platform, env.HOME?.trim() || home, '.local', 'share');
+            return joinFor(platform, base, 'cadre-host');
+        }
+        case 'darwin': {
+            return joinFor(platform, env.HOME?.trim() || home, 'Library', 'Application Support', 'CadreHost');
+        }
+        case 'win32': {
+            // %LocalAppData% is the canonical per-user, non-roaming app data dir.
+            const base = env.LocalAppData?.trim();
+            if (!base) {
+                // Fallback: derive from HOME (works under cygwin/MSYS test envs too).
+                return joinFor(platform, home, 'AppData', 'Local', 'CadreHost');
+            }
+            return joinFor(platform, base, 'CadreHost');
+        }
+    }
+}
+/** Path on disk for the installed cadre-host CLI entrypoint. */
+export function defaultHostJs() {
+    // dist/installer/paths.js -> ../../dist/bin/host.js
+    // src/installer/paths.ts  -> ../bin/host.ts (only used by tests; build emits dist)
+    const here = dirname(fileURLToPath(import.meta.url));
+    return resolve(here, '..', 'bin', 'host.js');
+}
+/** Directory containing service templates (cadre-host.service.tmpl etc.). */
+export function defaultServiceDir() {
+    // dist/installer/paths.js -> ../../service/
+    const here = dirname(fileURLToPath(import.meta.url));
+    return resolve(here, '..', '..', 'service');
+}
+/** Where the wizard writes the JSON config. */
+export function configPath(dataDir) {
+    return join(dataDir, 'host.config.json');
+}
+/** Where the wizard writes the Ed25519 identity. */
+export function identityPath(dataDir) {
+    return join(dataDir, 'identity.key');
+}
+/** Logs directory (used by launchd / NSSM unit templates). */
+export function logsDir(dataDir) {
+    return join(dataDir, 'logs');
+}
+/** Per-platform install dir for the rendered service unit file. */
+export function serviceInstallPath(platform, env = process.env, home = homedir()) {
+    const hd = env.HOME?.trim() || home;
+    switch (platform) {
+        case 'linux': {
+            const base = env.XDG_CONFIG_HOME?.trim() || joinFor(platform, hd, '.config');
+            return joinFor(platform, base, 'systemd', 'user', 'cadre-host.service');
+        }
+        case 'darwin': {
+            return joinFor(platform, hd, 'Library', 'LaunchAgents', 'com.serfab.cadre-host.plist');
+        }
+        case 'win32': {
+            // NSSM stores service config in the registry; this path is unused
+            // on Windows but returned for symmetry / logging.
+            return 'HKLM\\SYSTEM\\CurrentControlSet\\Services\\CadreHost';
+        }
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/installer/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/installer/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,8EAA8E;AAC9E,SAAS,OAAO,CAAC,QAA2B,EAAE,GAAG,KAAe;IAC9D,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;AAC5E,CAAC;AASD,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAC5B,QAA2B,EAC3B,MAAoB,OAAO,CAAC,GAAmB,EAC/C,OAAe,OAAO,EAAE;IAExB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzG,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,WAAW,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,sEAAsE;YACtE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,sEAAsE;gBACtE,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,aAAa;IAC3B,oDAAoD;IACpD,mFAAmF;IACnF,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB;IAC/B,4CAA4C;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC3C,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AACvC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,MAAoB,OAAO,CAAC,GAAmB,EAC/C,OAAe,OAAO,EAAE;IAExB,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACpC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;YAC7E,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,6BAA6B,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,kEAAkE;YAClE,kDAAkD;YAClD,OAAO,sDAAsD,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/installer/platform.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Platform detection helpers for the installer.
+ *
+ * Kept narrow on purpose — `process.platform` everywhere else in the
+ * installer is funneled through here so tests can stub a single point.
+ */
+export type SupportedPlatform = 'linux' | 'darwin' | 'win32';
+export declare function detectPlatform(p?: NodeJS.Platform): SupportedPlatform;
+export declare function isPosix(p: SupportedPlatform): boolean;

package/dist/installer/platform.js

@@ -0,0 +1,21 @@
+/**
+ * Platform detection helpers for the installer.
+ *
+ * Kept narrow on purpose — `process.platform` everywhere else in the
+ * installer is funneled through here so tests can stub a single point.
+ */
+const SUPPORTED = new Set([
+    'linux',
+    'darwin',
+    'win32',
+]);
+export function detectPlatform(p = process.platform) {
+    if (!SUPPORTED.has(p)) {
+        throw new Error(`Unsupported platform: ${p}. cadre-host install supports linux, darwin, win32.`);
+    }
+    return p;
+}
+export function isPosix(p) {
+    return p === 'linux' || p === 'darwin';
+}
+//# sourceMappingURL=platform.js.map

package/dist/installer/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/installer/platform.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,SAAS,GAAiC,IAAI,GAAG,CAAkB;IACvE,OAAO;IACP,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,IAAqB,OAAO,CAAC,QAAQ;IAClE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,yBAAyB,CAAC,qDAAqD,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,CAAsB,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAoB;IAC1C,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,CAAC;AACzC,CAAC"}

package/dist/installer/service-host/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Pick the right service-host impl for the current platform.
+ */
+import { type SupportedPlatform } from '../platform.js';
+import { SystemdServiceHost } from './systemd.js';
+import { LaunchdServiceHost } from './launchd.js';
+import { NssmServiceHost } from './nssm.js';
+import type { ServiceHost } from './types.js';
+export type { ServiceHost, ServiceHostContext, ServiceHostStatus } from './types.js';
+export declare function createServiceHost(platform?: SupportedPlatform): ServiceHost;
+export { SystemdServiceHost, LaunchdServiceHost, NssmServiceHost };

package/dist/installer/service-host/index.js

@@ -0,0 +1,16 @@
+/**
+ * Pick the right service-host impl for the current platform.
+ */
+import { detectPlatform } from '../platform.js';
+import { SystemdServiceHost } from './systemd.js';
+import { LaunchdServiceHost } from './launchd.js';
+import { NssmServiceHost } from './nssm.js';
+export function createServiceHost(platform = detectPlatform()) {
+    switch (platform) {
+        case 'linux': return new SystemdServiceHost();
+        case 'darwin': return new LaunchdServiceHost();
+        case 'win32': return new NssmServiceHost();
+    }
+}
+export { SystemdServiceHost, LaunchdServiceHost, NssmServiceHost };
+//# sourceMappingURL=index.js.map

package/dist/installer/service-host/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/installer/service-host/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,cAAc,EAA0B,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAK5C,MAAM,UAAU,iBAAiB,CAAC,WAA8B,cAAc,EAAE;IAC9E,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO,CAAC,CAAE,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAC/C,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,kBAAkB,EAAE,CAAC;QAC/C,KAAK,OAAO,CAAC,CAAE,OAAO,IAAI,eAAe,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC"}

package/dist/installer/service-host/launchd.d.ts

@@ -0,0 +1,16 @@
+/**
+ * launchd LaunchAgent registration.
+ *
+ * Renders the .plist into `~/Library/LaunchAgents/com.serfab.cadre-host.plist`,
+ * `launchctl bootstrap`s it into the gui session, then `kickstart -k` to
+ * start (or restart) it. Uninstall uses `bootout` (the modern unload).
+ */
+import type { ServiceHost, ServiceHostContext, ServiceHostStatus } from './types.js';
+export declare class LaunchdServiceHost implements ServiceHost {
+    readonly name = "cadre-host";
+    renderUnit(ctx: ServiceHostContext): string;
+    install(ctx: ServiceHostContext): Promise<void>;
+    uninstall(ctx: ServiceHostContext): Promise<void>;
+    restart(ctx: ServiceHostContext): Promise<void>;
+    status(ctx: ServiceHostContext): Promise<ServiceHostStatus>;
+}

package/dist/installer/service-host/launchd.js

@@ -0,0 +1,79 @@
+/**
+ * launchd LaunchAgent registration.
+ *
+ * Renders the .plist into `~/Library/LaunchAgents/com.serfab.cadre-host.plist`,
+ * `launchctl bootstrap`s it into the gui session, then `kickstart -k` to
+ * start (or restart) it. Uninstall uses `bootout` (the modern unload).
+ */
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { execFileSync, spawnSync } from 'node:child_process';
+import debug from 'debug';
+import { renderTemplate } from './template.js';
+import { logsDir, serviceInstallPath } from '../paths.js';
+const log = debug('cadre:host:installer:launchd');
+const SERVICE_NAME = 'cadre-host';
+const LABEL = 'com.serfab.cadre-host';
+export class LaunchdServiceHost {
+    constructor() {
+        this.name = SERVICE_NAME;
+    }
+    renderUnit(ctx) {
+        const tmpl = readFileSync(`${ctx.serviceDir}/com.serfab.cadre-host.plist.tmpl`, 'utf8');
+        return renderTemplate(tmpl, {
+            NODE_PATH: ctx.nodePath,
+            HOST_JS: ctx.hostJs,
+            DATA_DIR: ctx.dataDir,
+        });
+    }
+    async install(ctx) {
+        const unitPath = serviceInstallPath('darwin');
+        const unit = this.renderUnit(ctx);
+        mkdirSync(logsDir(ctx.dataDir), { recursive: true });
+        mkdirSync(dirname(unitPath), { recursive: true });
+        writeFileSync(unitPath, unit, { mode: 0o644 });
+        log('wrote %s', unitPath);
+        const target = guiTarget();
+        // bootout first to make install idempotent. May fail if it wasn't
+        // loaded — that's fine.
+        spawnSync('launchctl', ['bootout', target, unitPath], { stdio: 'ignore' });
+        run('launchctl', ['bootstrap', target, unitPath]);
+        run('launchctl', ['kickstart', '-k', `${target}/${LABEL}`]);
+    }
+    async uninstall(ctx) {
+        const unitPath = serviceInstallPath('darwin');
+        if (existsSync(unitPath)) {
+            const target = guiTarget();
+            spawnSync('launchctl', ['bootout', target, unitPath], { stdio: 'inherit' });
+            rmSync(unitPath, { force: true });
+            log('removed %s', unitPath);
+        }
+        void ctx;
+    }
+    async restart(ctx) {
+        void ctx;
+        const target = guiTarget();
+        run('launchctl', ['kickstart', '-k', `${target}/${LABEL}`]);
+    }
+    async status(ctx) {
+        void ctx;
+        const unitPath = serviceInstallPath('darwin');
+        const installed = existsSync(unitPath);
+        const target = guiTarget();
+        const result = spawnSync('launchctl', ['print', `${target}/${LABEL}`], { encoding: 'utf8' });
+        const running = result.status === 0 && /state\s*=\s*running/i.test(result.stdout);
+        return { installed, running };
+    }
+}
+function guiTarget() {
+    return `gui/${process.getuid?.() ?? ''}`;
+}
+function run(cmd, args) {
+    try {
+        execFileSync(cmd, args, { stdio: 'inherit' });
+    }
+    catch (err) {
+        throw new Error(`${cmd} ${args.join(' ')} failed: ${err.message}`);
+    }
+}
+//# sourceMappingURL=launchd.js.map

package/dist/installer/service-host/launchd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launchd.js","sourceRoot":"","sources":["../../../src/installer/service-host/launchd.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAG1D,MAAM,GAAG,GAAG,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAElD,MAAM,YAAY,GAAG,YAAY,CAAC;AAClC,MAAM,KAAK,GAAG,uBAAuB,CAAC;AAEtC,MAAM,OAAO,kBAAkB;IAA/B;QACW,SAAI,GAAG,YAAY,CAAC;IAsD/B,CAAC;IApDC,UAAU,CAAC,GAAuB;QAChC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,UAAU,mCAAmC,EAAE,MAAM,CAAC,CAAC;QACxF,OAAO,cAAc,CAAC,IAAI,EAAE;YAC1B,SAAS,EAAE,GAAG,CAAC,QAAQ;YACvB,OAAO,EAAE,GAAG,CAAC,MAAM;YACnB,QAAQ,EAAE,GAAG,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAuB;QACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAElC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAE1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,kEAAkE;QAClE,wBAAwB;QACxB,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClD,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAuB;QACrC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5E,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,GAAG,CAAC;IACX,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAuB;QACnC,KAAK,GAAG,CAAC;QACT,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAuB;QAClC,KAAK,GAAG,CAAC;QACT,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClF,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC;CACF;AAED,SAAS,SAAS;IAChB,OAAO,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,IAAI,CAAC;QACH,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;AACH,CAAC"}

package/dist/installer/service-host/nssm.d.ts

@@ -0,0 +1,20 @@
+/**
+ * NSSM-backed Windows service.
+ *
+ * Delegates to the bundled PowerShell scripts (`install-service.ps1` /
+ * `uninstall-service.ps1`) which encapsulate the NSSM CLI dance and the
+ * stdout/stderr log redirection.
+ *
+ * Bundling NSSM itself with the npm package is out of scope for v1 — the
+ * standalone-binary distribution will ship it (see backlog).
+ */
+import type { ServiceHost, ServiceHostContext, ServiceHostStatus } from './types.js';
+export declare class NssmServiceHost implements ServiceHost {
+    readonly name = "CadreHost";
+    /** No template to render — NSSM stores its config in the registry. */
+    renderUnit(ctx: ServiceHostContext): string | null;
+    install(ctx: ServiceHostContext): Promise<void>;
+    uninstall(ctx: ServiceHostContext): Promise<void>;
+    restart(ctx: ServiceHostContext): Promise<void>;
+    status(ctx: ServiceHostContext): Promise<ServiceHostStatus>;
+}

package/dist/installer/service-host/nssm.js

@@ -0,0 +1,88 @@
+/**
+ * NSSM-backed Windows service.
+ *
+ * Delegates to the bundled PowerShell scripts (`install-service.ps1` /
+ * `uninstall-service.ps1`) which encapsulate the NSSM CLI dance and the
+ * stdout/stderr log redirection.
+ *
+ * Bundling NSSM itself with the npm package is out of scope for v1 — the
+ * standalone-binary distribution will ship it (see backlog).
+ */
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import debug from 'debug';
+const log = debug('cadre:host:installer:nssm');
+const SERVICE_NAME = 'CadreHost';
+export class NssmServiceHost {
+    constructor() {
+        this.name = SERVICE_NAME;
+    }
+    /** No template to render — NSSM stores its config in the registry. */
+    renderUnit(ctx) {
+        void ctx;
+        return null;
+    }
+    async install(ctx) {
+        requireNssmAvailable();
+        const script = join(ctx.serviceDir, 'install-service.ps1');
+        if (!existsSync(script)) {
+            throw new Error(`install-service.ps1 not found at ${script}`);
+        }
+        runPwsh([
+            '-ExecutionPolicy', 'Bypass',
+            '-NoProfile',
+            '-File', script,
+            '-NodePath', ctx.nodePath,
+            '-HostJs', ctx.hostJs,
+            '-DataDir', ctx.dataDir,
+        ]);
+        // Start the service after install — install-service.ps1 sets
+        // SERVICE_AUTO_START but doesn't run it immediately.
+        runPwsh(['-ExecutionPolicy', 'Bypass', '-NoProfile', '-Command', `nssm.exe start ${SERVICE_NAME}`]);
+    }
+    async uninstall(ctx) {
+        requireNssmAvailable();
+        const script = join(ctx.serviceDir, 'uninstall-service.ps1');
+        if (!existsSync(script)) {
+            // Fall back to a direct nssm remove if the script isn't there.
+            runPwsh(['-ExecutionPolicy', 'Bypass', '-NoProfile', '-Command', `nssm.exe stop ${SERVICE_NAME} confirm; nssm.exe remove ${SERVICE_NAME} confirm`]);
+            return;
+        }
+        runPwsh(['-ExecutionPolicy', 'Bypass', '-NoProfile', '-File', script]);
+    }
+    async restart(ctx) {
+        void ctx;
+        requireNssmAvailable();
+        runPwsh(['-ExecutionPolicy', 'Bypass', '-NoProfile', '-Command', `nssm.exe restart ${SERVICE_NAME}`]);
+    }
+    async status(ctx) {
+        void ctx;
+        const statusResult = spawnSync('nssm.exe', ['status', SERVICE_NAME], { encoding: 'utf8' });
+        if (statusResult.error || statusResult.status !== 0) {
+            return { installed: false, running: false };
+        }
+        const stateLine = statusResult.stdout.trim();
+        return { installed: true, running: /SERVICE_RUNNING/i.test(stateLine) };
+    }
+}
+function requireNssmAvailable() {
+    const probe = spawnSync('nssm.exe', ['--version'], { encoding: 'utf8' });
+    if (probe.error) {
+        throw new Error('nssm.exe not found on PATH. Install NSSM from https://nssm.cc/download ' +
+            'and add it to PATH, then re-run `cadre-host install`.');
+    }
+}
+function runPwsh(args) {
+    // powershell.exe is the in-box Windows PowerShell 5.1 — present on every
+    // supported Windows version. pwsh.exe (PowerShell 7) is an optional install.
+    const result = spawnSync('powershell.exe', args, { stdio: 'inherit' });
+    if (result.error) {
+        throw new Error(`powershell.exe failed: ${result.error.message}`);
+    }
+    if (result.status !== 0) {
+        log('powershell.exe exit %s for args %j', result.status, args);
+        throw new Error(`powershell.exe exited with status ${result.status}`);
+    }
+}
+//# sourceMappingURL=nssm.js.map

package/dist/installer/service-host/nssm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nssm.js","sourceRoot":"","sources":["../../../src/installer/service-host/nssm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,GAAG,GAAG,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAE/C,MAAM,YAAY,GAAG,WAAW,CAAC;AAEjC,MAAM,OAAO,eAAe;IAA5B;QACW,SAAI,GAAG,YAAY,CAAC;IAqD/B,CAAC;IAnDC,sEAAsE;IACtE,UAAU,CAAC,GAAuB;QAChC,KAAK,GAAG,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAuB;QACnC,oBAAoB,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,CAAC;YACN,kBAAkB,EAAE,QAAQ;YAC5B,YAAY;YACZ,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,GAAG,CAAC,QAAQ;YACzB,SAAS,EAAE,GAAG,CAAC,MAAM;YACrB,UAAU,EAAE,GAAG,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,6DAA6D;QAC7D,qDAAqD;QACrD,OAAO,CAAC,CAAC,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,kBAAkB,YAAY,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAuB;QACrC,oBAAoB,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,+DAA+D;YAC/D,OAAO,CAAC,CAAC,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,YAAY,6BAA6B,YAAY,UAAU,CAAC,CAAC,CAAC;YACpJ,OAAO;QACT,CAAC;QACD,OAAO,CAAC,CAAC,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAuB;QACnC,KAAK,GAAG,CAAC;QACT,oBAAoB,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC,kBAAkB,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,oBAAoB,YAAY,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAuB;QAClC,KAAK,GAAG,CAAC;QACT,MAAM,YAAY,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3F,IAAI,YAAY,CAAC,KAAK,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1E,CAAC;CACF;AAED,SAAS,oBAAoB;IAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,yEAAyE;YACvE,uDAAuD,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAc;IAC7B,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,MAAM,GAAG,SAAS,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,oCAAoC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC"}