@zixt/host 0.0.118 → 0.0.119

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.118",
+  version: "0.0.119",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -27860,7 +27860,13 @@ process.stdin.on('data', (chunk) => {
   const target = spawn(config.commandLine, {
     cwd: config.cwd,
     env: process.env,
-    stdio: 'inherit',
+    // Never share this guardian's stdin with npm. The guardian keeps an
+    // active read pending on that pipe (the config protocol above), and a
+    // Windows child whose inherited stdin pipe has a concurrent reader wedges
+    // inside Node startup until the reader dies - npm sat at zero CPU for the
+    // whole install timeout on a real Machine (live, 2026-08-18). An
+    // unattended install may never depend on stdin anyway.
+    stdio: ['ignore', 'inherit', 'inherit'],
     windowsHide: true,
     // cmd.exe has to resolve npm.cmd, so the shell stays - but the whole line
     // arrives pre-quoted as one string. Node's (command, args, shell) shape is
@@ -27924,7 +27930,10 @@ async function installRelease(version2, options = {}) {
       });
     }
     return spawn5(installerCommand, installerArgs, {
-      stdio: "inherit",
+      // stdin stays closed for the same reason as the Windows guardian
+      // above: this worker actively reads its own stdin (the supervisor's
+      // stop pipe), and an unattended npm must not share or depend on it.
+      stdio: ["ignore", "inherit", "inherit"],
       env: sanitizedInstallerEnv(process.env),
       detached: true
     });
@@ -28330,6 +28339,8 @@ async function runWorkerCompatibilityProxy(env = process.env, argv = process.arg
   delete workerEnv[WORKER_OWNERSHIP_FILE_ENV];
   delete workerEnv[LAUNCHER_OWNERSHIP_DIR_ENV];
   delete workerEnv[SUPERVISOR_OWNERSHIP_FILE_ENV];
+  delete workerEnv[WINDOWS_CONTAINMENT_GATE_ENV];
+  delete workerEnv[WINDOWS_POST_CONTAINMENT_CWD_ENV];
   const child = spawn5(process.execPath, [target, ...ownership.argv], {
     stdio: ["pipe", "inherit", "inherit"],
     env: workerEnv,
@@ -30134,7 +30145,10 @@ async function installChromium() {
     const child = spawn6(process.execPath, [cliPath, "install", "chromium"], {
       env: process.env,
       stdio: ["ignore", "inherit", "inherit"],
-      windowsHide: false
+      // A service-managed Host has no console; letting Windows allocate one
+      // here would flash a visible window on the signed-in desktop for the
+      // whole download. Progress still flows through the inherited pipes.
+      windowsHide: true
     });
     let settled = false;
     const finish = (error52) => {
@@ -42168,7 +42182,7 @@ async function installLinuxService(options) {
   const unitRoot = options.userUnitRoot ?? join19(xdgConfigHome, "systemd", "user");
   const environmentPath = join19(configRoot, "host.env");
   const unitPath = join19(unitRoot, SERVICE_NAME);
-  const installVersion = options.installVersion ?? installRelease;
+  const installVersion = options.installVersion ?? ((version2, onFailure) => installRelease(version2, onFailure ? { onFailure } : {}));
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : activateInstalledRelease);
   const resolveCommand = options.resolveCommand ?? defaultResolveCommand;
   const run3 = options.runCommand ?? defaultRunCommand;
@@ -42183,9 +42197,15 @@ async function installLinuxService(options) {
       "This Linux computer does not have the systemd tools Zixt needs to start itself."
     );
   }
-  const releaseEntry = await installVersion(options.hostVersion);
+  const attempt = { failure: null };
+  const releaseEntry = await installVersion(options.hostVersion, (failure2) => {
+    attempt.failure = failure2;
+  });
   if (!releaseEntry) {
-    throw new Error(`Zixt Host ${options.hostVersion} could not be installed for automatic start.`);
+    const failed = attempt.failure;
+    throw new Error(
+      `Zixt Host ${options.hostVersion} could not be installed for automatic start${failed ? ` (${failed.reason}: ${failed.detail})` : ""}.`
+    );
   }
   const currentEntry = await activateVersion(releaseEntry);
   const linger = async () => {
@@ -42209,6 +42229,9 @@ async function installLinuxService(options) {
     ...env.ZIXT_HOST_UPDATE ? [`ZIXT_HOST_UPDATE=${systemdEnvironmentValue(env.ZIXT_HOST_UPDATE)}`] : [],
     ...env.ZIXT_HOST_UPDATE_URL ? [`ZIXT_HOST_UPDATE_URL=${systemdEnvironmentValue(env.ZIXT_HOST_UPDATE_URL)}`] : [],
     ...env.ZIXT_HOST_VERSIONS_DIR ? [`ZIXT_HOST_VERSIONS_DIR=${systemdEnvironmentValue(env.ZIXT_HOST_VERSIONS_DIR)}`] : [],
+    // A Machine on a private registry mirror checks ZIXT_HOST_UPDATE_URL for
+    // releases; its unattended npm installs must follow the same mirror.
+    ...env.NPM_CONFIG_REGISTRY ? [`NPM_CONFIG_REGISTRY=${systemdEnvironmentValue(env.NPM_CONFIG_REGISTRY)}`] : [],
     ""
   ].join("\n");
   await replacePrivateFile(environmentPath, serviceEnvironment, 384, syncDirectory8);
@@ -42431,7 +42454,7 @@ async function installMacosService(options) {
   const plistPath = join20(launchAgentsRoot, `${LAUNCH_AGENT_LABEL}.plist`);
   const stdoutPath = join20(logRoot, "host.log");
   const stderrPath = join20(logRoot, "host-error.log");
-  const installVersion = options.installVersion ?? installRelease;
+  const installVersion = options.installVersion ?? ((version2, onFailure) => installRelease(version2, onFailure ? { onFailure } : {}));
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : (entry) => activateInstalledRelease(entry));
   const resolveCommand = options.resolveCommand ?? (async () => defaultResolveCommand2());
   const run3 = options.runCommand ?? ((command, args) => defaultRunCommand2(command, args, env));
@@ -42439,9 +42462,15 @@ async function installMacosService(options) {
   const delay4 = options.delay ?? ((ms) => new Promise((done) => setTimeout(done, ms)));
   const launchctl = await resolveCommand("launchctl");
   if (!launchctl) throw new Error("macOS launchctl could not be found.");
-  const releaseEntry = await installVersion(options.hostVersion);
+  const attempt = { failure: null };
+  const releaseEntry = await installVersion(options.hostVersion, (failure2) => {
+    attempt.failure = failure2;
+  });
   if (!releaseEntry) {
-    throw new Error(`Zixt Host ${options.hostVersion} could not be installed for automatic start.`);
+    const failed = attempt.failure;
+    throw new Error(
+      `Zixt Host ${options.hostVersion} could not be installed for automatic start${failed ? ` (${failed.reason}: ${failed.detail})` : ""}.`
+    );
   }
   const currentEntry = await activateVersion(releaseEntry);
   await ensureDirectory2(configRoot, sync);
@@ -42456,6 +42485,9 @@ async function installMacosService(options) {
     ...env.ZIXT_HOST_UPDATE ? [`ZIXT_HOST_UPDATE=${shellValue(env.ZIXT_HOST_UPDATE)}`] : [],
     ...env.ZIXT_HOST_UPDATE_URL ? [`ZIXT_HOST_UPDATE_URL=${shellValue(env.ZIXT_HOST_UPDATE_URL)}`] : [],
     ...env.ZIXT_HOST_VERSIONS_DIR ? [`ZIXT_HOST_VERSIONS_DIR=${shellValue(env.ZIXT_HOST_VERSIONS_DIR)}`] : [],
+    // A Machine on a private registry mirror checks ZIXT_HOST_UPDATE_URL for
+    // releases; its unattended npm installs must follow the same mirror.
+    ...env.NPM_CONFIG_REGISTRY ? [`NPM_CONFIG_REGISTRY=${shellValue(env.NPM_CONFIG_REGISTRY)}`] : [],
     ""
   ].join("\n");
   await replacePrivateFile2(configPath, serviceEnvironment, 384, sync);
@@ -42556,13 +42588,13 @@ async function ensureDirectory3(path, sync) {
     current = join21(current, part);
   }
 }
-async function replacePrivateFile3(path, contents, sync) {
+async function replacePrivateFile3(path, contents, sync, encoding = "utf8") {
   const parent = dirname12(path);
   await ensureDirectory3(parent, sync);
   const temporary = join21(parent, `.${basename6(path)}.${process.pid}.${crypto.randomUUID()}.tmp`);
   const handle = await open9(temporary, "wx", 384);
   try {
-    await handle.writeFile(contents, "utf8");
+    await handle.writeFile(encoding === "utf16le" ? `\uFEFF${contents}` : contents, encoding);
     await handle.sync();
     await handle.close();
     await rename8(temporary, path);
@@ -42666,6 +42698,7 @@ try {
   if ($config.update) { $env:ZIXT_HOST_UPDATE = $config.update }
   if ($config.updateUrl) { $env:ZIXT_HOST_UPDATE_URL = $config.updateUrl }
   if ($config.versionsRoot) { $env:ZIXT_HOST_VERSIONS_DIR = $config.versionsRoot }
+  if ($config.npmRegistry) { $env:NPM_CONFIG_REGISTRY = $config.npmRegistry }
   Set-Location -LiteralPath $config.cwd
 
   # Task Scheduler does not provide a durable stdin lifetime boundary. Give
@@ -42714,7 +42747,7 @@ async function defaultObserveStatus(path, generation) {
   }
 }
 function taskXml(input) {
-  return `<?xml version="1.0" encoding="UTF-8"?>
+  return `<?xml version="1.0" encoding="UTF-16"?>
 <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
   <Triggers><LogonTrigger><Enabled>true</Enabled><UserId>${xml2(input.sid)}</UserId></LogonTrigger></Triggers>
   <Principals><Principal id="ZixtUser"><UserId>${xml2(input.sid)}</UserId><LogonType>InteractiveToken</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>
@@ -42756,7 +42789,7 @@ async function installWindowsService(options) {
   const launcherPath = join21(configRoot, "host-launcher.ps1");
   const taskXmlPath = join21(configRoot, "host-task.xml");
   const statusPath = join21(configRoot, "host-status.json");
-  const installVersion = options.installVersion ?? installRelease;
+  const installVersion = options.installVersion ?? ((version2, onFailure) => installRelease(version2, onFailure ? { onFailure } : {}));
   const activateVersion = options.activateVersion ?? (options.installVersion ? async (entry) => entry : (entry) => activateInstalledRelease(entry));
   const resolveCommand = options.resolveCommand ?? ((name) => defaultResolveCommand3(name, env));
   const run3 = options.runCommand ?? ((command, args) => runChild(command, args, env));
@@ -42773,9 +42806,15 @@ async function installWindowsService(options) {
   }
   const sid = options.sid ?? await defaultCurrentSid(powershell, env);
   if (!sid || !SAFE_SID.test(sid)) throw new Error("Windows user identity could not be confirmed.");
-  const releaseEntry = await installVersion(options.hostVersion);
+  const attempt = { failure: null };
+  const releaseEntry = await installVersion(options.hostVersion, (failure2) => {
+    attempt.failure = failure2;
+  });
   if (!releaseEntry) {
-    throw new Error(`Zixt Host ${options.hostVersion} could not be installed for automatic start.`);
+    const failed = attempt.failure;
+    throw new Error(
+      `Zixt Host ${options.hostVersion} could not be installed for automatic start${failed ? ` (${failed.reason}: ${failed.detail})` : ""}.`
+    );
   }
   const currentEntry = await activateVersion(releaseEntry);
   const protectedToken = await (options.protectToken ?? ((value, shell) => defaultProtectToken(value, shell, env)))(token2, powershell);
@@ -42797,13 +42836,21 @@ async function installWindowsService(options) {
       path,
       ...env.ZIXT_HOST_UPDATE ? { update: env.ZIXT_HOST_UPDATE } : {},
       ...env.ZIXT_HOST_UPDATE_URL ? { updateUrl: env.ZIXT_HOST_UPDATE_URL } : {},
-      ...env.ZIXT_HOST_VERSIONS_DIR ? { versionsRoot: env.ZIXT_HOST_VERSIONS_DIR } : {}
+      ...env.ZIXT_HOST_VERSIONS_DIR ? { versionsRoot: env.ZIXT_HOST_VERSIONS_DIR } : {},
+      // A Machine on a private registry mirror checks updateUrl for releases;
+      // its unattended npm installs must follow the same mirror.
+      ...env.NPM_CONFIG_REGISTRY ? { npmRegistry: env.NPM_CONFIG_REGISTRY } : {}
     })}
 `,
     sync
   );
   await replacePrivateFile3(launcherPath, launcherSource2(configPath, statusPath), sync);
-  await replacePrivateFile3(taskXmlPath, taskXml({ sid, powershell, launcherPath, home }), sync);
+  await replacePrivateFile3(
+    taskXmlPath,
+    taskXml({ sid, powershell, launcherPath, home }),
+    sync,
+    "utf16le"
+  );
   await rm11(statusPath, { force: true });
   const acl = await run3(icacls, [
     configRoot,
@@ -43330,6 +43377,9 @@ function parseHostCliOptions(argv) {
   }
   return options;
 }
+function isServiceSetupInvocation(argv) {
+  return argv.includes("--install-service");
+}
 function forcedColor(mode) {
   if (mode === "always") return true;
   if (mode === "never") return false;
@@ -43412,7 +43462,9 @@ if (packagedBuild) {
   if (isWorkerProxyRole()) process.exit(managedExit(await runWorkerCompatibilityProxy()));
   if (needsLegacySupervisorHandoff()) process.exit(managedExit(await launchHostSupervisor()));
   if (isSupervisorRole()) process.exit(managedExit(await superviseHost()));
-  if (!isWorkerRole()) process.exit(managedExit(await launchHostSupervisor()));
+  if (!isWorkerRole() && !isServiceSetupInvocation(process.argv.slice(2))) {
+    process.exit(managedExit(await launchHostSupervisor()));
+  }
 }
 var workerWatchdog = startWorkerWatchdogHeartbeat();
 if (packagedBuild && isWorkerRole() && process.env[WORKER_WATCHDOG_NONCE_ENV] !== void 0 && !workerWatchdog.active) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.118",
+  "version": "0.0.119",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",