agentinbox-cli 0.0.0 → 0.1.0-nightly.10

package/dist/service-whbugeQp.js

@@ -0,0 +1,295 @@
+#!/usr/bin/env node
+import { d as NPX, i as saveProfile, n as loadProfile, s as ensurePrivateDir } from "./profile-CgGgJ4Dm.js";
+import { i as pidAlive, m as checkTransport, o as readStatus, r as acquireFileLock, t as EXIT, u as resolveListen } from "./listen-D8DkEhqM.js";
+import { a as listenAppDir, c as profileStateDir, f as validProfileName, o as logPath, r as dataDir, s as profilePath } from "./paths-TLp8hiMt.js";
+import { A as xmlEscape, C as swapIn, S as stagePackage, T as systemctl, _ as sdQuote, a as enableLinger, f as preflight, i as assertSupported, l as launchdTarget, m as removeOwnInstall, p as readText, s as installedEntry, w as systemOps } from "./service-D_ZEs3Zk.js";
+import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { delimiter, dirname, join } from "node:path";
+import pc from "picocolors";
+//#region server/listen/service.ts
+/**
+* `agentinbox listen service install|uninstall|status`: one systemd user unit / launchd agent per
+* profile, running from a stable install (not the npx cache). The unit only says which profile to
+* run; settings and the key stay in the 0600 profile file. Installation reuses the daemon's
+* machinery (server/service.ts): systemd pre-check, the user manager's unit directory, staging into
+* app.new and swapping in, rollback when the new listener doesn't start.
+*/
+const unitName = (profile) => `agentinbox-listen-${profile}`;
+const launchdLabel = (profile) => `com.unlaboredlabs.agentinbox.listen.${profile}`;
+/**
+* PATH for the service: this shell's PATH (so `claude`, `codex`… resolve as they do here) minus
+* transient entries npx, npm scripts and version-manager shells add, plus node's own directory.
+*/
+function servicePath(raw = process.env.PATH ?? "") {
+	const transient = /\/_npx\/|node_modules\/\.bin|node-gyp-bin|fnm_multishells|\/\.pnpm\//;
+	const dirs = [dirname(process.execPath), ...raw.split(delimiter)].filter((d) => d && d.startsWith("/") && !transient.test(d));
+	if (!dirs.includes("/usr/bin")) dirs.push("/usr/local/bin", "/usr/bin", "/bin");
+	return [...new Set(dirs)].join(delimiter);
+}
+/** Environment the service needs to behave like the shell `service install` ran in. Never contains the key. */
+function serviceEnvironment() {
+	const env = { AGENTINBOX_SERVICE: "1" };
+	env.PATH = servicePath();
+	for (const key of [
+		"XDG_CONFIG_HOME",
+		"XDG_STATE_HOME",
+		"XDG_DATA_HOME",
+		"CLAUDE_CONFIG_DIR",
+		"CODEX_HOME",
+		"HERMES_HOME",
+		"LANG",
+		"AGENTINBOX_DEBUG"
+	]) if (process.env[key]) env[key] = process.env[key];
+	return env;
+}
+function systemdListenUnit(profile, entry, cwd, system = false) {
+	const vars = Object.entries(serviceEnvironment()).map(([k, v]) => `Environment=${sdQuote(`${k}=${v}`)}`).join("\n");
+	return `[Unit]
+Description=agentinbox listener (profile ${profile})${system ? "\nAfter=network-online.target\nWants=network-online.target" : ""}
+StartLimitIntervalSec=0
+
+[Service]
+ExecStart=${sdQuote(process.execPath)} ${sdQuote(entry)} listen --profile ${profile}
+WorkingDirectory=${cwd.replace(/%/g, "%%")}
+${vars}
+Restart=on-failure
+RestartSec=10
+RestartSteps=6
+RestartMaxDelaySec=600
+# ${EXIT.revoked}: the key was revoked or the config is invalid. Restarting can't fix that.
+RestartPreventExitStatus=${EXIT.revoked}
+TimeoutStopSec=20
+
+[Install]
+WantedBy=${system ? "multi-user.target" : "default.target"}
+`;
+}
+function launchdListenPlist(profile, entry, cwd) {
+	const esc = xmlEscape;
+	const vars = Object.entries(serviceEnvironment()).map(([k, v]) => `    <key>${esc(k)}</key><string>${esc(v)}</string>`).join("\n");
+	const errLog = esc(join(profileStateDir(profile), "service-stderr.log"));
+	return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${esc(launchdLabel(profile))}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${esc(process.execPath)}</string>
+    <string>${esc(entry)}</string>
+    <string>listen</string>
+    <string>--profile</string>
+    <string>${esc(profile)}</string>
+  </array>
+  <key>WorkingDirectory</key><string>${esc(cwd)}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+${vars}
+  </dict>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>
+  <key>ThrottleInterval</key><integer>10</integer>
+  <key>StandardOutPath</key><string>/dev/null</string>
+  <key>StandardErrorPath</key><string>${errLog}</string>
+</dict>
+</plist>
+`;
+}
+const unitFile = (ops, profile) => join(ops.unitDir(), ops.platform === "darwin" ? `${launchdLabel(profile)}.plist` : `${unitName(profile)}.service`);
+/** Installed listener profiles (from the unit directory). */
+function installedProfiles(ops) {
+	const dir = ops.unitDir();
+	if (!existsSync(dir)) return [];
+	const re = ops.platform === "darwin" ? /^com\.unlaboredlabs\.agentinbox\.listen\.(.+)\.plist$/ : /^agentinbox-listen-(.+)\.service$/;
+	return readdirSync(dir).map((f) => re.exec(f)?.[1]).filter((p) => !!p);
+}
+function isServiceInstalled(profile, ops = systemOps()) {
+	if (ops.platform !== "linux" && ops.platform !== "darwin") return false;
+	try {
+		return existsSync(unitFile(ops, profile));
+	} catch {
+		return false;
+	}
+}
+function listenerHints(ops, profile) {
+	if (ops.platform === "darwin") return [`launchctl print ${launchdTarget(ops)}/${launchdLabel(profile)}`, `the log ${logPath(profile)}`];
+	const scope = ops.root ? "" : " --user";
+	return [
+		`systemctl${scope} status ${unitName(profile)}`,
+		`journalctl${scope} -u ${unitName(profile)} -e`,
+		`the log ${logPath(profile)}`
+	];
+}
+/** Resolves true once a listener started after `since` is running for the profile (it writes status.json on start). */
+async function waitListenerStarted(profile, since, timeoutMs = 2e4) {
+	const deadline = Date.now() + timeoutMs;
+	while (Date.now() < deadline) {
+		const st = readStatus(profile);
+		if (st && Date.parse(st.startedAt) >= since - 1e3) {
+			if (st.stoppedAt) return false;
+			if (pidAlive(st.pid)) return true;
+		}
+		await new Promise((r) => setTimeout(r, 250));
+	}
+	return false;
+}
+function startUnit(ops, profile, file) {
+	if (ops.platform === "linux") {
+		systemctl(ops, "daemon-reload");
+		systemctl(ops, "enable", unitName(profile));
+		systemctl(ops, "restart", unitName(profile));
+	} else {
+		try {
+			ops.exec("launchctl", ["bootout", `${launchdTarget(ops)}/${launchdLabel(profile)}`], { quiet: true });
+		} catch {}
+		ops.exec("launchctl", [
+			"bootstrap",
+			launchdTarget(ops),
+			file
+		]);
+	}
+}
+/** Stages the listeners' install (no web console needed). */
+const stageListenerApp = (staging) => stagePackage(staging, {
+	where: dirname(staging),
+	requireWeb: false
+});
+async function installListenService(flags, deps = {}) {
+	const ops = deps.ops ?? systemOps();
+	assertSupported(ops);
+	const profileName = validProfileName(flags.profile ?? "default");
+	const profile = loadProfile(profileName);
+	const { config, next } = resolveListen(profileName, profile, {
+		...flags,
+		save: true
+	});
+	if (!config.exec && !config.forward) throw new Error(`Nothing for the service to run. Pass --exec "<command>" and/or --forward <url> (they are saved to profile "${profileName}").`);
+	await checkTransport(next.url, { insecure: config.insecure });
+	preflight(ops);
+	const shared = dataDir();
+	if (existsSync(join(shared, "agentinbox.db"))) throw new Error(`${shared} holds an agentinbox daemon's data (agentinbox.db), so the listener can't install there. Run the daemon with another --data directory, or set XDG_DATA_HOME for the listener.`);
+	const p = profileName === "default" ? "" : ` --profile ${profileName}`;
+	const cwd = config.cwd;
+	mkdirSync(profileStateDir(profileName), {
+		recursive: true,
+		mode: 448
+	});
+	if (config.cwdIsDefault) ensurePrivateDir(cwd);
+	mkdirSync(shared, {
+		recursive: true,
+		mode: 448
+	});
+	const releaseInstallLock = acquireFileLock(join(shared, "install.lock"), (holder) => /* @__PURE__ */ new Error(`Another listener service install is running (pid ${holder.pid}, since ${holder.startedAt}). Try again when it has finished.`));
+	try {
+		await installLocked();
+	} finally {
+		releaseInstallLock();
+	}
+	async function installLocked() {
+		const staging = (deps.stage ?? stageListenerApp)(join(shared, "app.new"));
+		saveProfile(profileName, next);
+		const app = listenAppDir();
+		const entry = installedEntry(app);
+		const file = unitFile(ops, profileName);
+		const previousUnit = readText(file);
+		const since = Date.now();
+		let swap = null;
+		try {
+			swap = swapIn(staging, app);
+			mkdirSync(ops.unitDir(), { recursive: true });
+			if (ops.platform === "linux") writeFileSync(file, systemdListenUnit(profileName, entry, cwd, ops.root));
+			else writeFileSync(file, launchdListenPlist(profileName, entry, cwd), { mode: 384 });
+			for (let attempt = 1;; attempt++) try {
+				startUnit(ops, profileName, file);
+				break;
+			} catch (err) {
+				if (ops.platform !== "darwin" || attempt >= 5) throw err;
+				await new Promise((r) => setTimeout(r, 1e3));
+			}
+			if (!await (deps.waitStarted ?? waitListenerStarted)(profileName, since)) throw new Error("the listener did not start");
+		} catch (err) {
+			const quietly = (fn) => {
+				try {
+					fn();
+				} catch {}
+			};
+			if (swap) quietly(() => swap.restore());
+			quietly(() => saveProfile(profileName, profile));
+			quietly(() => rmSync(staging, {
+				recursive: true,
+				force: true
+			}));
+			if (previousUnit !== null) quietly(() => {
+				writeFileSync(file, previousUnit, { mode: ops.platform === "darwin" ? 384 : 420 });
+				startUnit(ops, profileName, file);
+			});
+			else quietly(() => uninstallListenService(profileName, true, { ops }));
+			const hints = listenerHints(ops, profileName).map((h) => `    ${h}`).join("\n");
+			throw new Error(`Starting the listener service failed (${(err instanceof Error ? err.message : String(err)).split("\n")[0]}). Rolled back to ${previousUnit ? "the previous install" : "no service"}.\n  To find out why:\n${hints}`);
+		}
+		swap.commit();
+		enableLinger(ops);
+		for (const other of installedProfiles(ops).filter((o) => o !== profileName)) try {
+			if (ops.platform === "linux") systemctl(ops, "try-restart", unitName(other));
+			else ops.exec("launchctl", [
+				"kickstart",
+				"-k",
+				`${launchdTarget(ops)}/${launchdLabel(other)}`
+			], { quiet: true });
+		} catch {}
+	}
+	const kind = ops.platform === "linux" ? ops.root ? "systemd system service" : "systemd user service" : "launchd agent";
+	console.log(`\n  ${pc.green("✔")} Installed the listener for profile "${profileName}" as a ${kind} (${ops.platform === "linux" ? unitName(profileName) : launchdLabel(profileName)}).`);
+	console.log(`    Runs:      ${config.exec ? `--exec ${config.exec}` : ""}${config.exec && config.forward ? "  and  " : ""}${config.forward ? `--forward ${config.forward.url}` : ""}`);
+	console.log(`    Directory: ${cwd}${config.cwdIsDefault ? " (private; pass --cwd to run in a project)" : ""}`);
+	console.log(`    Node.js:   ${process.execPath} (v${process.versions.node}); if you remove or replace it, run \`${NPX} listen service install${p}\` again.`);
+	console.log(`    Settings:  ${profilePath(profileName)} (change them with \`${NPX} listen${p} … --save\`, then reinstall)`);
+	console.log(`    Log:       ${logPath(profileName)}`);
+	console.log(`    Status:    ${NPX} listen status${p}`);
+	if (ops.platform === "linux") console.log(`    Follow:    journalctl ${ops.root ? "" : "--user "}-u ${unitName(profileName)} -f`);
+	console.log();
+}
+function uninstallListenService(profileName, quiet = false, deps = {}) {
+	const ops = deps.ops ?? systemOps();
+	assertSupported(ops);
+	const name = validProfileName(profileName);
+	const file = unitFile(ops, name);
+	if (!existsSync(file)) {
+		if (!quiet) console.log(`No listener service is installed for profile "${name}".`);
+		return;
+	}
+	if (ops.platform === "linux") {
+		try {
+			systemctl(ops, "disable", "--now", unitName(name));
+		} catch {}
+		rmSync(file);
+		systemctl(ops, "daemon-reload");
+	} else {
+		try {
+			ops.exec("launchctl", ["bootout", `${launchdTarget(ops)}/${launchdLabel(name)}`], { quiet: true });
+		} catch {}
+		rmSync(file);
+	}
+	if (!installedProfiles(ops).length) removeOwnInstall(dataDir());
+	if (!quiet) console.log(`Removed the listener service for profile "${name}". The profile (and its key) was kept: ${profilePath(name)}`);
+}
+function listenServiceStatus(profileName, deps = {}) {
+	const ops = deps.ops ?? systemOps();
+	assertSupported(ops);
+	const name = validProfileName(profileName);
+	if (!isServiceInstalled(name, ops)) {
+		console.log(`No listener service is installed for profile "${name}". Install one with \`${NPX} listen service install\`.`);
+		process.exitCode = 1;
+		return;
+	}
+	try {
+		if (ops.platform === "linux") systemctl(ops, "status", unitName(name), "--no-pager");
+		else ops.exec("launchctl", ["print", `${launchdTarget(ops)}/${launchdLabel(name)}`]);
+	} catch {
+		process.exitCode = 1;
+	}
+}
+//#endregion
+export { listenServiceStatus as a, stageListenerApp as c, unitName as d, waitListenerStarted as f, launchdListenPlist as i, systemdListenUnit as l, isServiceInstalled as n, serviceEnvironment as o, launchdLabel as r, servicePath as s, installListenService as t, uninstallListenService as u };
+
+//# sourceMappingURL=service-whbugeQp.js.map

package/dist/service-whbugeQp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-whbugeQp.js","names":[],"sources":["../server/listen/service.ts"],"sourcesContent":["import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from \"node:fs\";\nimport { delimiter, dirname, join } from \"node:path\";\nimport pc from \"picocolors\";\nimport {\n  assertSupported,\n  enableLinger,\n  installedEntry,\n  launchdTarget,\n  preflight,\n  readText,\n  removeOwnInstall,\n  sdQuote,\n  type ServiceOps,\n  stagePackage,\n  swapIn,\n  systemctl,\n  systemOps,\n  xmlEscape,\n} from \"../service.ts\";\nimport { ensurePrivateDir } from \"./fsutil.ts\";\nimport { EXIT } from \"./listen.ts\";\nimport { acquireFileLock } from \"./lock.ts\";\nimport { type ListenFlags, resolveListen } from \"./options.ts\";\nimport { DEFAULT_PROFILE, dataDir, listenAppDir, logPath, profilePath, profileStateDir, validProfileName } from \"./paths.ts\";\nimport { loadProfile, saveProfile } from \"./profile.ts\";\nimport { pidAlive, readStatus } from \"./state.ts\";\nimport { checkTransport } from \"./transport.ts\";\nimport { NPX } from \"./version.ts\";\n\n/**\n * `agentinbox listen service install|uninstall|status`: one systemd user unit / launchd agent per\n * profile, running from a stable install (not the npx cache). The unit only says which profile to\n * run; settings and the key stay in the 0600 profile file. Installation reuses the daemon's\n * machinery (server/service.ts): systemd pre-check, the user manager's unit directory, staging into\n * app.new and swapping in, rollback when the new listener doesn't start.\n */\n\nexport const unitName = (profile: string) => `agentinbox-listen-${profile}`;\nexport const launchdLabel = (profile: string) => `com.unlaboredlabs.agentinbox.listen.${profile}`;\n\n/**\n * PATH for the service: this shell's PATH (so `claude`, `codex`… resolve as they do here) minus\n * transient entries npx, npm scripts and version-manager shells add, plus node's own directory.\n */\nexport function servicePath(raw = process.env.PATH ?? \"\"): string {\n  const transient = /\\/_npx\\/|node_modules\\/\\.bin|node-gyp-bin|fnm_multishells|\\/\\.pnpm\\//;\n  const dirs = [dirname(process.execPath), ...raw.split(delimiter)].filter((d) => d && d.startsWith(\"/\") && !transient.test(d));\n  if (!dirs.includes(\"/usr/bin\")) dirs.push(\"/usr/local/bin\", \"/usr/bin\", \"/bin\");\n  return [...new Set(dirs)].join(delimiter);\n}\n\n/** Environment the service needs to behave like the shell `service install` ran in. Never contains the key. */\nexport function serviceEnvironment(): Record<string, string> {\n  const env: Record<string, string> = { AGENTINBOX_SERVICE: \"1\" };\n  // PATH matters most: `claude`, `codex`, `hermes`… usually live in ~/.local/bin, nvm or Homebrew dirs\n  // that a service manager's minimal PATH doesn't include.\n  env.PATH = servicePath();\n  for (const key of [\"XDG_CONFIG_HOME\", \"XDG_STATE_HOME\", \"XDG_DATA_HOME\", \"CLAUDE_CONFIG_DIR\", \"CODEX_HOME\", \"HERMES_HOME\", \"LANG\", \"AGENTINBOX_DEBUG\"]) {\n    if (process.env[key]) env[key] = process.env[key]!;\n  }\n  return env;\n}\n\nexport function systemdListenUnit(profile: string, entry: string, cwd: string, system = false): string {\n  const vars = Object.entries(serviceEnvironment())\n    .map(([k, v]) => `Environment=${sdQuote(`${k}=${v}`)}`)\n    .join(\"\\n\");\n  return `[Unit]\nDescription=agentinbox listener (profile ${profile})${system ? \"\\nAfter=network-online.target\\nWants=network-online.target\" : \"\"}\nStartLimitIntervalSec=0\n\n[Service]\nExecStart=${sdQuote(process.execPath)} ${sdQuote(entry)} listen --profile ${profile}\nWorkingDirectory=${cwd.replace(/%/g, \"%%\")}\n${vars}\nRestart=on-failure\nRestartSec=10\nRestartSteps=6\nRestartMaxDelaySec=600\n# ${EXIT.revoked}: the key was revoked or the config is invalid. Restarting can't fix that.\nRestartPreventExitStatus=${EXIT.revoked}\nTimeoutStopSec=20\n\n[Install]\nWantedBy=${system ? \"multi-user.target\" : \"default.target\"}\n`;\n}\n\nexport function launchdListenPlist(profile: string, entry: string, cwd: string): string {\n  const esc = xmlEscape;\n  const vars = Object.entries(serviceEnvironment())\n    .map(([k, v]) => `    <key>${esc(k)}</key><string>${esc(v)}</string>`)\n    .join(\"\\n\");\n  // The listener logs to the rotated listen.log and stays quiet on the console under launchd; only\n  // crashes reach stderr, so this file stays small.\n  const errLog = esc(join(profileStateDir(profile), \"service-stderr.log\"));\n  return `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n  <key>Label</key><string>${esc(launchdLabel(profile))}</string>\n  <key>ProgramArguments</key>\n  <array>\n    <string>${esc(process.execPath)}</string>\n    <string>${esc(entry)}</string>\n    <string>listen</string>\n    <string>--profile</string>\n    <string>${esc(profile)}</string>\n  </array>\n  <key>WorkingDirectory</key><string>${esc(cwd)}</string>\n  <key>EnvironmentVariables</key>\n  <dict>\n${vars}\n  </dict>\n  <key>RunAtLoad</key><true/>\n  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>\n  <key>ThrottleInterval</key><integer>10</integer>\n  <key>StandardOutPath</key><string>/dev/null</string>\n  <key>StandardErrorPath</key><string>${errLog}</string>\n</dict>\n</plist>\n`;\n}\n\nconst unitFile = (ops: ServiceOps, profile: string) =>\n  join(ops.unitDir(), ops.platform === \"darwin\" ? `${launchdLabel(profile)}.plist` : `${unitName(profile)}.service`);\n\n/** Installed listener profiles (from the unit directory). */\nfunction installedProfiles(ops: ServiceOps): string[] {\n  const dir = ops.unitDir();\n  if (!existsSync(dir)) return [];\n  const re = ops.platform === \"darwin\" ? /^com\\.unlaboredlabs\\.agentinbox\\.listen\\.(.+)\\.plist$/ : /^agentinbox-listen-(.+)\\.service$/;\n  return readdirSync(dir)\n    .map((f) => re.exec(f)?.[1])\n    .filter((p): p is string => !!p);\n}\n\nexport function isServiceInstalled(profile: string, ops: ServiceOps = systemOps()): boolean {\n  if (ops.platform !== \"linux\" && ops.platform !== \"darwin\") return false;\n  try {\n    return existsSync(unitFile(ops, profile));\n  } catch {\n    return false;\n  }\n}\n\nfunction listenerHints(ops: ServiceOps, profile: string): string[] {\n  if (ops.platform === \"darwin\") return [`launchctl print ${launchdTarget(ops)}/${launchdLabel(profile)}`, `the log ${logPath(profile)}`];\n  const scope = ops.root ? \"\" : \" --user\";\n  return [`systemctl${scope} status ${unitName(profile)}`, `journalctl${scope} -u ${unitName(profile)} -e`, `the log ${logPath(profile)}`];\n}\n\n/** Resolves true once a listener started after `since` is running for the profile (it writes status.json on start). */\nexport async function waitListenerStarted(profile: string, since: number, timeoutMs = 20_000): Promise<boolean> {\n  const deadline = Date.now() + timeoutMs;\n  while (Date.now() < deadline) {\n    const st = readStatus(profile);\n    if (st && Date.parse(st.startedAt) >= since - 1000) {\n      if (st.stoppedAt) return false;\n      if (pidAlive(st.pid)) return true;\n    }\n    await new Promise((r) => setTimeout(r, 250));\n  }\n  return false;\n}\n\nfunction startUnit(ops: ServiceOps, profile: string, file: string): void {\n  if (ops.platform === \"linux\") {\n    systemctl(ops, \"daemon-reload\");\n    systemctl(ops, \"enable\", unitName(profile));\n    // restart, not start: a re-install must pick up the new install and settings.\n    systemctl(ops, \"restart\", unitName(profile));\n  } else {\n    try {\n      ops.exec(\"launchctl\", [\"bootout\", `${launchdTarget(ops)}/${launchdLabel(profile)}`], { quiet: true });\n    } catch {\n      // Not loaded.\n    }\n    ops.exec(\"launchctl\", [\"bootstrap\", launchdTarget(ops), file]);\n  }\n}\n\n/** Stages the listeners' install (no web console needed). */\nexport const stageListenerApp = (staging: string): string => stagePackage(staging, { where: dirname(staging), requireWeb: false });\n\nexport interface ListenServiceDeps {\n  ops?: ServiceOps;\n  /** Installs the package into the given staging dir (tests). */\n  stage?: (staging: string) => string;\n  /** Readiness check after (re)starting the unit (tests). */\n  waitStarted?: (profile: string, since: number) => Promise<boolean>;\n}\n\nexport async function installListenService(flags: ListenFlags, deps: ListenServiceDeps = {}): Promise<void> {\n  const ops = deps.ops ?? systemOps();\n  assertSupported(ops);\n  const profileName = validProfileName(flags.profile ?? DEFAULT_PROFILE);\n  const profile = loadProfile(profileName);\n  // Service settings live in the profile: save whatever was passed with this command.\n  const { config, next } = resolveListen(profileName, profile, { ...flags, save: true });\n  if (!config.exec && !config.forward) {\n    throw new Error(`Nothing for the service to run. Pass --exec \"<command>\" and/or --forward <url> (they are saved to profile \"${profileName}\").`);\n  }\n  await checkTransport(next.url, { insecure: config.insecure });\n  preflight(ops);\n  const shared = dataDir();\n  // A daemon started with --data pointing here would share (and lose) its app/ install with us.\n  if (existsSync(join(shared, \"agentinbox.db\"))) {\n    throw new Error(`${shared} holds an agentinbox daemon's data (agentinbox.db), so the listener can't install there. Run the daemon with another --data directory, or set XDG_DATA_HOME for the listener.`);\n  }\n\n  const p = profileName === DEFAULT_PROFILE ? \"\" : ` --profile ${profileName}`;\n  // Commands run in config.cwd (a private dir unless --cwd was given); the unit uses it too.\n  const cwd = config.cwd;\n  mkdirSync(profileStateDir(profileName), { recursive: true, mode: 0o700 });\n  if (config.cwdIsDefault) ensurePrivateDir(cwd);\n\n  // The same install path as the daemon (stage into app.new, swap into app), under a lock: all\n  // profiles share this install, so two installs at once would trip over app.new / app.old.\n  mkdirSync(shared, { recursive: true, mode: 0o700 });\n  const releaseInstallLock = acquireFileLock(\n    join(shared, \"install.lock\"),\n    (holder) => new Error(`Another listener service install is running (pid ${holder.pid}, since ${holder.startedAt}). Try again when it has finished.`),\n  );\n  try {\n    await installLocked();\n  } finally {\n    releaseInstallLock();\n  }\n\n  async function installLocked(): Promise<void> {\n    const staging = (deps.stage ?? stageListenerApp)(join(shared, \"app.new\"));\n    // Saved only once the new version is staged: a failed npm install changes nothing.\n    saveProfile(profileName, next);\n    const app = listenAppDir();\n    const entry = installedEntry(app);\n    const file = unitFile(ops, profileName);\n    const previousUnit = readText(file);\n    const since = Date.now();\n    let swap: ReturnType<typeof swapIn> | null = null;\n    try {\n      swap = swapIn(staging, app);\n      mkdirSync(ops.unitDir(), { recursive: true });\n      if (ops.platform === \"linux\") writeFileSync(file, systemdListenUnit(profileName, entry, cwd, ops.root));\n      else writeFileSync(file, launchdListenPlist(profileName, entry, cwd), { mode: 0o600 });\n      // Right after a bootout, launchd can still be tearing the old job down: retry briefly.\n      for (let attempt = 1; ; attempt++) {\n        try {\n          startUnit(ops, profileName, file);\n          break;\n        } catch (err) {\n          if (ops.platform !== \"darwin\" || attempt >= 5) throw err;\n          await new Promise((r) => setTimeout(r, 1000));\n        }\n      }\n      if (!(await (deps.waitStarted ?? waitListenerStarted)(profileName, since))) throw new Error(\"the listener did not start\");\n    } catch (err) {\n      const quietly = (fn: () => void) => {\n        try {\n          fn();\n        } catch {\n          // Best effort: report the original failure.\n        }\n      };\n      if (swap) quietly(() => swap!.restore());\n      // The settings this install saved go back too, so the restored listener runs as before.\n      quietly(() => saveProfile(profileName, profile));\n      quietly(() => rmSync(staging, { recursive: true, force: true }));\n      if (previousUnit !== null) {\n        quietly(() => {\n          writeFileSync(file, previousUnit, { mode: ops.platform === \"darwin\" ? 0o600 : 0o644 });\n          startUnit(ops, profileName, file);\n        });\n      } else {\n        quietly(() => uninstallListenService(profileName, true, { ops }));\n      }\n      const hints = listenerHints(ops, profileName).map((h) => `    ${h}`).join(\"\\n\");\n      throw new Error(\n        `Starting the listener service failed (${(err instanceof Error ? err.message : String(err)).split(\"\\n\")[0]}). Rolled back to ${previousUnit ? \"the previous install\" : \"no service\"}.\\n  To find out why:\\n${hints}`,\n      );\n    }\n    swap.commit();\n    enableLinger(ops);\n    // The other profiles' listeners share the install: move them onto the new one.\n    for (const other of installedProfiles(ops).filter((o) => o !== profileName)) {\n      try {\n        if (ops.platform === \"linux\") systemctl(ops, \"try-restart\", unitName(other));\n        else ops.exec(\"launchctl\", [\"kickstart\", \"-k\", `${launchdTarget(ops)}/${launchdLabel(other)}`], { quiet: true });\n      } catch {\n        // Not running: nothing to restart.\n      }\n    }\n  }\n\n  const kind = ops.platform === \"linux\" ? (ops.root ? \"systemd system service\" : \"systemd user service\") : \"launchd agent\";\n  console.log(`\\n  ${pc.green(\"✔\")} Installed the listener for profile \"${profileName}\" as a ${kind} (${ops.platform === \"linux\" ? unitName(profileName) : launchdLabel(profileName)}).`);\n  console.log(`    Runs:      ${config.exec ? `--exec ${config.exec}` : \"\"}${config.exec && config.forward ? \"  and  \" : \"\"}${config.forward ? `--forward ${config.forward.url}` : \"\"}`);\n  console.log(`    Directory: ${cwd}${config.cwdIsDefault ? \" (private; pass --cwd to run in a project)\" : \"\"}`);\n  console.log(`    Node.js:   ${process.execPath} (v${process.versions.node}); if you remove or replace it, run \\`${NPX} listen service install${p}\\` again.`);\n  console.log(`    Settings:  ${profilePath(profileName)} (change them with \\`${NPX} listen${p} … --save\\`, then reinstall)`);\n  console.log(`    Log:       ${logPath(profileName)}`);\n  console.log(`    Status:    ${NPX} listen status${p}`);\n  if (ops.platform === \"linux\") console.log(`    Follow:    journalctl ${ops.root ? \"\" : \"--user \"}-u ${unitName(profileName)} -f`);\n  console.log();\n}\n\nexport function uninstallListenService(profileName: string, quiet = false, deps: ListenServiceDeps = {}): void {\n  const ops = deps.ops ?? systemOps();\n  assertSupported(ops);\n  const name = validProfileName(profileName);\n  const file = unitFile(ops, name);\n  if (!existsSync(file)) {\n    if (!quiet) console.log(`No listener service is installed for profile \"${name}\".`);\n    return;\n  }\n  if (ops.platform === \"linux\") {\n    try {\n      systemctl(ops, \"disable\", \"--now\", unitName(name));\n    } catch {\n      // Already stopped.\n    }\n    rmSync(file);\n    systemctl(ops, \"daemon-reload\");\n  } else {\n    try {\n      ops.exec(\"launchctl\", [\"bootout\", `${launchdTarget(ops)}/${launchdLabel(name)}`], { quiet: true });\n    } catch {\n      // Not loaded.\n    }\n    rmSync(file);\n  }\n  // The last listener gone: remove the shared install too (only if it really is ours).\n  if (!installedProfiles(ops).length) removeOwnInstall(dataDir());\n  if (!quiet) console.log(`Removed the listener service for profile \"${name}\". The profile (and its key) was kept: ${profilePath(name)}`);\n}\n\nexport function listenServiceStatus(profileName: string, deps: ListenServiceDeps = {}): void {\n  const ops = deps.ops ?? systemOps();\n  assertSupported(ops);\n  const name = validProfileName(profileName);\n  if (!isServiceInstalled(name, ops)) {\n    console.log(`No listener service is installed for profile \"${name}\". Install one with \\`${NPX} listen service install\\`.`);\n    process.exitCode = 1;\n    return;\n  }\n  try {\n    if (ops.platform === \"linux\") systemctl(ops, \"status\", unitName(name), \"--no-pager\");\n    else ops.exec(\"launchctl\", [\"print\", `${launchdTarget(ops)}/${launchdLabel(name)}`]);\n  } catch {\n    process.exitCode = 1;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAqCA,MAAa,YAAY,YAAoB,qBAAqB;AAClE,MAAa,gBAAgB,YAAoB,uCAAuC;;;;;AAMxF,SAAgB,YAAY,MAAM,QAAQ,IAAI,QAAQ,IAAY;CAChE,MAAM,YAAY;CAClB,MAAM,OAAO,CAAC,QAAQ,QAAQ,QAAQ,GAAG,GAAG,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC,QAAQ,MAAM,KAAK,EAAE,WAAW,GAAG,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC;CAC5H,IAAI,CAAC,KAAK,SAAS,UAAU,GAAG,KAAK,KAAK,kBAAkB,YAAY,MAAM;CAC9E,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;AAC1C;;AAGA,SAAgB,qBAA6C;CAC3D,MAAM,MAA8B,EAAE,oBAAoB,IAAI;CAG9D,IAAI,OAAO,YAAY;CACvB,KAAK,MAAM,OAAO;EAAC;EAAmB;EAAkB;EAAiB;EAAqB;EAAc;EAAe;EAAQ;CAAkB,GACnJ,IAAI,QAAQ,IAAI,MAAM,IAAI,OAAO,QAAQ,IAAI;CAE/C,OAAO;AACT;AAEA,SAAgB,kBAAkB,SAAiB,OAAe,KAAa,SAAS,OAAe;CACrG,MAAM,OAAO,OAAO,QAAQ,mBAAmB,CAAC,CAAC,CAC9C,KAAK,CAAC,GAAG,OAAO,eAAe,QAAQ,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CACtD,KAAK,IAAI;CACZ,OAAO;2CACkC,QAAQ,GAAG,SAAS,+DAA+D,GAAG;;;;YAIrH,QAAQ,QAAQ,QAAQ,EAAE,GAAG,QAAQ,KAAK,EAAE,oBAAoB,QAAQ;mBACjE,IAAI,QAAQ,MAAM,IAAI,EAAE;EACzC,KAAK;;;;;IAKH,KAAK,QAAQ;2BACU,KAAK,QAAQ;;;;WAI7B,SAAS,sBAAsB,iBAAiB;;AAE3D;AAEA,SAAgB,mBAAmB,SAAiB,OAAe,KAAqB;CACtF,MAAM,MAAM;CACZ,MAAM,OAAO,OAAO,QAAQ,mBAAmB,CAAC,CAAC,CAC9C,KAAK,CAAC,GAAG,OAAO,YAAY,IAAI,CAAC,EAAE,gBAAgB,IAAI,CAAC,EAAE,UAAU,CAAC,CACrE,KAAK,IAAI;CAGZ,MAAM,SAAS,IAAI,KAAK,gBAAgB,OAAO,GAAG,oBAAoB,CAAC;CACvE,OAAO;;;;4BAImB,IAAI,aAAa,OAAO,CAAC,EAAE;;;cAGzC,IAAI,QAAQ,QAAQ,EAAE;cACtB,IAAI,KAAK,EAAE;;;cAGX,IAAI,OAAO,EAAE;;uCAEY,IAAI,GAAG,EAAE;;;EAG9C,KAAK;;;;;;wCAMiC,OAAO;;;;AAI/C;AAEA,MAAM,YAAY,KAAiB,YACjC,KAAK,IAAI,QAAQ,GAAG,IAAI,aAAa,WAAW,GAAG,aAAa,OAAO,EAAE,UAAU,GAAG,SAAS,OAAO,EAAE,SAAS;;AAGnH,SAAS,kBAAkB,KAA2B;CACpD,MAAM,MAAM,IAAI,QAAQ;CACxB,IAAI,CAAC,WAAW,GAAG,GAAG,OAAO,CAAC;CAC9B,MAAM,KAAK,IAAI,aAAa,WAAW,0DAA0D;CACjG,OAAO,YAAY,GAAG,CAAC,CACpB,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAmB,CAAC,CAAC,CAAC;AACnC;AAEA,SAAgB,mBAAmB,SAAiB,MAAkB,UAAU,GAAY;CAC1F,IAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU,OAAO;CAClE,IAAI;EACF,OAAO,WAAW,SAAS,KAAK,OAAO,CAAC;CAC1C,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,cAAc,KAAiB,SAA2B;CACjE,IAAI,IAAI,aAAa,UAAU,OAAO,CAAC,mBAAmB,cAAc,GAAG,EAAE,GAAG,aAAa,OAAO,KAAK,WAAW,QAAQ,OAAO,GAAG;CACtI,MAAM,QAAQ,IAAI,OAAO,KAAK;CAC9B,OAAO;EAAC,YAAY,MAAM,UAAU,SAAS,OAAO;EAAK,aAAa,MAAM,MAAM,SAAS,OAAO,EAAE;EAAM,WAAW,QAAQ,OAAO;CAAG;AACzI;;AAGA,eAAsB,oBAAoB,SAAiB,OAAe,YAAY,KAA0B;CAC9G,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,OAAO,KAAK,IAAI,IAAI,UAAU;EAC5B,MAAM,KAAK,WAAW,OAAO;EAC7B,IAAI,MAAM,KAAK,MAAM,GAAG,SAAS,KAAK,QAAQ,KAAM;GAClD,IAAI,GAAG,WAAW,OAAO;GACzB,IAAI,SAAS,GAAG,GAAG,GAAG,OAAO;EAC/B;EACA,MAAM,IAAI,SAAS,MAAM,WAAW,GAAG,GAAG,CAAC;CAC7C;CACA,OAAO;AACT;AAEA,SAAS,UAAU,KAAiB,SAAiB,MAAoB;CACvE,IAAI,IAAI,aAAa,SAAS;EAC5B,UAAU,KAAK,eAAe;EAC9B,UAAU,KAAK,UAAU,SAAS,OAAO,CAAC;EAE1C,UAAU,KAAK,WAAW,SAAS,OAAO,CAAC;CAC7C,OAAO;EACL,IAAI;GACF,IAAI,KAAK,aAAa,CAAC,WAAW,GAAG,cAAc,GAAG,EAAE,GAAG,aAAa,OAAO,GAAG,GAAG,EAAE,OAAO,KAAK,CAAC;EACtG,QAAQ,CAER;EACA,IAAI,KAAK,aAAa;GAAC;GAAa,cAAc,GAAG;GAAG;EAAI,CAAC;CAC/D;AACF;;AAGA,MAAa,oBAAoB,YAA4B,aAAa,SAAS;CAAE,OAAO,QAAQ,OAAO;CAAG,YAAY;AAAM,CAAC;AAUjI,eAAsB,qBAAqB,OAAoB,OAA0B,CAAC,GAAkB;CAC1G,MAAM,MAAM,KAAK,OAAO,UAAU;CAClC,gBAAgB,GAAG;CACnB,MAAM,cAAc,iBAAiB,MAAM,WAAA,SAA0B;CACrE,MAAM,UAAU,YAAY,WAAW;CAEvC,MAAM,EAAE,QAAQ,SAAS,cAAc,aAAa,SAAS;EAAE,GAAG;EAAO,MAAM;CAAK,CAAC;CACrF,IAAI,CAAC,OAAO,QAAQ,CAAC,OAAO,SAC1B,MAAM,IAAI,MAAM,8GAA8G,YAAY,IAAI;CAEhJ,MAAM,eAAe,KAAK,KAAK,EAAE,UAAU,OAAO,SAAS,CAAC;CAC5D,UAAU,GAAG;CACb,MAAM,SAAS,QAAQ;CAEvB,IAAI,WAAW,KAAK,QAAQ,eAAe,CAAC,GAC1C,MAAM,IAAI,MAAM,GAAG,OAAO,8KAA8K;CAG1M,MAAM,IAAI,gBAAA,YAAkC,KAAK,cAAc;CAE/D,MAAM,MAAM,OAAO;CACnB,UAAU,gBAAgB,WAAW,GAAG;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACxE,IAAI,OAAO,cAAc,iBAAiB,GAAG;CAI7C,UAAU,QAAQ;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAClD,MAAM,qBAAqB,gBACzB,KAAK,QAAQ,cAAc,IAC1B,2BAAW,IAAI,MAAM,oDAAoD,OAAO,IAAI,UAAU,OAAO,UAAU,mCAAmC,CACrJ;CACA,IAAI;EACF,MAAM,cAAc;CACtB,UAAU;EACR,mBAAmB;CACrB;CAEA,eAAe,gBAA+B;EAC5C,MAAM,WAAW,KAAK,SAAS,iBAAA,CAAkB,KAAK,QAAQ,SAAS,CAAC;EAExE,YAAY,aAAa,IAAI;EAC7B,MAAM,MAAM,aAAa;EACzB,MAAM,QAAQ,eAAe,GAAG;EAChC,MAAM,OAAO,SAAS,KAAK,WAAW;EACtC,MAAM,eAAe,SAAS,IAAI;EAClC,MAAM,QAAQ,KAAK,IAAI;EACvB,IAAI,OAAyC;EAC7C,IAAI;GACF,OAAO,OAAO,SAAS,GAAG;GAC1B,UAAU,IAAI,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;GAC5C,IAAI,IAAI,aAAa,SAAS,cAAc,MAAM,kBAAkB,aAAa,OAAO,KAAK,IAAI,IAAI,CAAC;QACjG,cAAc,MAAM,mBAAmB,aAAa,OAAO,GAAG,GAAG,EAAE,MAAM,IAAM,CAAC;GAErF,KAAK,IAAI,UAAU,IAAK,WACtB,IAAI;IACF,UAAU,KAAK,aAAa,IAAI;IAChC;GACF,SAAS,KAAK;IACZ,IAAI,IAAI,aAAa,YAAY,WAAW,GAAG,MAAM;IACrD,MAAM,IAAI,SAAS,MAAM,WAAW,GAAG,GAAI,CAAC;GAC9C;GAEF,IAAI,CAAE,OAAO,KAAK,eAAe,oBAAA,CAAqB,aAAa,KAAK,GAAI,MAAM,IAAI,MAAM,4BAA4B;EAC1H,SAAS,KAAK;GACZ,MAAM,WAAW,OAAmB;IAClC,IAAI;KACF,GAAG;IACL,QAAQ,CAER;GACF;GACA,IAAI,MAAM,cAAc,KAAM,QAAQ,CAAC;GAEvC,cAAc,YAAY,aAAa,OAAO,CAAC;GAC/C,cAAc,OAAO,SAAS;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC,CAAC;GAC/D,IAAI,iBAAiB,MACnB,cAAc;IACZ,cAAc,MAAM,cAAc,EAAE,MAAM,IAAI,aAAa,WAAW,MAAQ,IAAM,CAAC;IACrF,UAAU,KAAK,aAAa,IAAI;GAClC,CAAC;QAED,cAAc,uBAAuB,aAAa,MAAM,EAAE,IAAI,CAAC,CAAC;GAElE,MAAM,QAAQ,cAAc,KAAK,WAAW,CAAC,CAAC,KAAK,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI;GAC9E,MAAM,IAAI,MACR,0CAA0C,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAA,CAAG,MAAM,IAAI,CAAC,CAAC,GAAG,oBAAoB,eAAe,yBAAyB,aAAa,yBAAyB,OAC/M;EACF;EACA,KAAK,OAAO;EACZ,aAAa,GAAG;EAEhB,KAAK,MAAM,SAAS,kBAAkB,GAAG,CAAC,CAAC,QAAQ,MAAM,MAAM,WAAW,GACxE,IAAI;GACF,IAAI,IAAI,aAAa,SAAS,UAAU,KAAK,eAAe,SAAS,KAAK,CAAC;QACtE,IAAI,KAAK,aAAa;IAAC;IAAa;IAAM,GAAG,cAAc,GAAG,EAAE,GAAG,aAAa,KAAK;GAAG,GAAG,EAAE,OAAO,KAAK,CAAC;EACjH,QAAQ,CAER;CAEJ;CAEA,MAAM,OAAO,IAAI,aAAa,UAAW,IAAI,OAAO,2BAA2B,yBAA0B;CACzG,QAAQ,IAAI,OAAO,GAAG,MAAM,GAAG,EAAE,uCAAuC,YAAY,SAAS,KAAK,IAAI,IAAI,aAAa,UAAU,SAAS,WAAW,IAAI,aAAa,WAAW,EAAE,GAAG;CACtL,QAAQ,IAAI,kBAAkB,OAAO,OAAO,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ,OAAO,UAAU,YAAY,KAAK,OAAO,UAAU,aAAa,OAAO,QAAQ,QAAQ,IAAI;CACrL,QAAQ,IAAI,kBAAkB,MAAM,OAAO,eAAe,+CAA+C,IAAI;CAC7G,QAAQ,IAAI,kBAAkB,QAAQ,SAAS,KAAK,QAAQ,SAAS,KAAK,wCAAwC,IAAI,yBAAyB,EAAE,UAAU;CAC3J,QAAQ,IAAI,kBAAkB,YAAY,WAAW,EAAE,uBAAuB,IAAI,SAAS,EAAE,6BAA6B;CAC1H,QAAQ,IAAI,kBAAkB,QAAQ,WAAW,GAAG;CACpD,QAAQ,IAAI,kBAAkB,IAAI,gBAAgB,GAAG;CACrD,IAAI,IAAI,aAAa,SAAS,QAAQ,IAAI,6BAA6B,IAAI,OAAO,KAAK,UAAU,KAAK,SAAS,WAAW,EAAE,IAAI;CAChI,QAAQ,IAAI;AACd;AAEA,SAAgB,uBAAuB,aAAqB,QAAQ,OAAO,OAA0B,CAAC,GAAS;CAC7G,MAAM,MAAM,KAAK,OAAO,UAAU;CAClC,gBAAgB,GAAG;CACnB,MAAM,OAAO,iBAAiB,WAAW;CACzC,MAAM,OAAO,SAAS,KAAK,IAAI;CAC/B,IAAI,CAAC,WAAW,IAAI,GAAG;EACrB,IAAI,CAAC,OAAO,QAAQ,IAAI,iDAAiD,KAAK,GAAG;EACjF;CACF;CACA,IAAI,IAAI,aAAa,SAAS;EAC5B,IAAI;GACF,UAAU,KAAK,WAAW,SAAS,SAAS,IAAI,CAAC;EACnD,QAAQ,CAER;EACA,OAAO,IAAI;EACX,UAAU,KAAK,eAAe;CAChC,OAAO;EACL,IAAI;GACF,IAAI,KAAK,aAAa,CAAC,WAAW,GAAG,cAAc,GAAG,EAAE,GAAG,aAAa,IAAI,GAAG,GAAG,EAAE,OAAO,KAAK,CAAC;EACnG,QAAQ,CAER;EACA,OAAO,IAAI;CACb;CAEA,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC,QAAQ,iBAAiB,QAAQ,CAAC;CAC9D,IAAI,CAAC,OAAO,QAAQ,IAAI,6CAA6C,KAAK,yCAAyC,YAAY,IAAI,GAAG;AACxI;AAEA,SAAgB,oBAAoB,aAAqB,OAA0B,CAAC,GAAS;CAC3F,MAAM,MAAM,KAAK,OAAO,UAAU;CAClC,gBAAgB,GAAG;CACnB,MAAM,OAAO,iBAAiB,WAAW;CACzC,IAAI,CAAC,mBAAmB,MAAM,GAAG,GAAG;EAClC,QAAQ,IAAI,iDAAiD,KAAK,wBAAwB,IAAI,2BAA2B;EACzH,QAAQ,WAAW;EACnB;CACF;CACA,IAAI;EACF,IAAI,IAAI,aAAa,SAAS,UAAU,KAAK,UAAU,SAAS,IAAI,GAAG,YAAY;OAC9E,IAAI,KAAK,aAAa,CAAC,SAAS,GAAG,cAAc,GAAG,EAAE,GAAG,aAAa,IAAI,GAAG,CAAC;CACrF,QAAQ;EACN,QAAQ,WAAW;CACrB;AACF"}

package/dist/settings-CeEsv4CE.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export { t as SettingsStore } from "./settings-DLUStIN7.js";

package/dist/settings-DLUStIN7.js

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+import { r as json } from "./db-D0gvshCc.js";
+import { r as badRequest } from "./errors-FbMS3QBo.js";
+//#region server/settings.ts
+const USER_KEY = "settings";
+var SettingsStore = class {
+	db;
+	bus;
+	config;
+	constructor(db, bus, config) {
+		this.db = db;
+		this.bus = bus;
+		this.config = config;
+	}
+	defaults() {
+		return {
+			publicUrl: defaultPublicUrl(this.config.host, this.config.port),
+			ingestMode: "poll",
+			pollIntervalSeconds: 30,
+			maxBodyChars: 2e4,
+			retentionDays: 30,
+			approvalTtlHours: 72,
+			webhookAllowlist: [
+				"localhost",
+				"127.0.0.0/8",
+				"::1"
+			],
+			pairingEnabled: true
+		};
+	}
+	get() {
+		const row = this.db.get("SELECT value FROM settings WHERE key = ?", USER_KEY);
+		return {
+			...this.defaults(),
+			...json.parse(row?.value, {})
+		};
+	}
+	/** Validates, persists and broadcasts. Throws HttpError(400) on invalid input. */
+	update(patch) {
+		const next = validate({
+			...this.get(),
+			...stripUndefined(patch)
+		});
+		this.write(USER_KEY, next);
+		this.bus.emit("settings", next);
+		return next;
+	}
+	/** The OAuth redirect URI and MCP snippets are derived from this. Never has a trailing slash. */
+	publicUrl() {
+		return this.get().publicUrl;
+	}
+	getState(key) {
+		const row = this.db.get("SELECT value FROM settings WHERE key = ?", key);
+		return row ? json.parse(row.value, null) : null;
+	}
+	setState(key, value) {
+		this.write(key, value);
+	}
+	deleteState(key) {
+		this.db.run("DELETE FROM settings WHERE key = ?", key);
+	}
+	write(key, value) {
+		this.db.run("INSERT INTO settings (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value", key, json.str(value));
+	}
+};
+const INGEST_MODES = ["pubsub", "poll"];
+function validate(s) {
+	let url;
+	try {
+		url = new URL(s.publicUrl);
+	} catch {
+		throw badRequest("Public URL must be a full URL", "For example https://mail.example.com or http://localhost:8425");
+	}
+	if (url.protocol !== "http:" && url.protocol !== "https:") throw badRequest("Public URL must use http or https");
+	if (url.search || url.hash) throw badRequest("Public URL must not contain a query or fragment");
+	const int = (v, name, min, max) => {
+		if (!Number.isInteger(v) || v < min || v > max) throw badRequest(`${name} must be a whole number from ${min} to ${max}`);
+		return v;
+	};
+	if (!INGEST_MODES.includes(s.ingestMode)) throw badRequest("Ingest mode must be pubsub or poll");
+	const allowlist = Array.isArray(s.webhookAllowlist) ? s.webhookAllowlist.map((h) => String(h).trim()).filter(Boolean) : null;
+	if (!allowlist || allowlist.length > 100 || allowlist.some((h) => h.length > 253 || /\s/.test(h))) throw badRequest("Webhook allowlist must be a list of hostnames, IPs or CIDRs");
+	return {
+		publicUrl: url.origin + url.pathname.replace(/\/+$/, ""),
+		ingestMode: s.ingestMode,
+		pollIntervalSeconds: int(s.pollIntervalSeconds, "Poll interval", 5, 3600),
+		maxBodyChars: int(s.maxBodyChars, "Max body characters", 0, 1e6),
+		retentionDays: int(s.retentionDays, "Retention", 1, 3650),
+		approvalTtlHours: int(s.approvalTtlHours, "Approval expiry", 1, 720),
+		webhookAllowlist: [...new Set(allowlist)],
+		pairingEnabled: s.pairingEnabled !== false
+	};
+}
+function stripUndefined(o) {
+	return Object.fromEntries(Object.entries(o).filter(([, v]) => v !== void 0));
+}
+/**
+* localhost when bound to all interfaces or to 127.0.0.1/::1 (Google accepts http://localhost redirects);
+* otherwise the specific address or name the operator chose with --host.
+*/
+function defaultPublicUrl(host, port) {
+	const h = host.trim().toLowerCase();
+	if (!h || h === "0.0.0.0" || h === "::" || h === "localhost" || h === "::1" || h === "127.0.0.1") return `http://localhost:${port}`;
+	return `http://${h.includes(":") ? `[${h}]` : h}:${port}`;
+}
+//#endregion
+export { defaultPublicUrl as n, SettingsStore as t };
+
+//# sourceMappingURL=settings-DLUStIN7.js.map

package/dist/settings-DLUStIN7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-DLUStIN7.js","names":[],"sources":["../server/settings.ts"],"sourcesContent":["import type { GoogleAppType, IngestMode, PubsubState, Settings } from \"../shared/types.ts\";\nimport type { Bus } from \"./bus.ts\";\nimport type { Config } from \"./config.ts\";\nimport { type Db, json } from \"./db/index.ts\";\nimport { badRequest } from \"./util/errors.ts\";\n\n/**\n * Internal key/value state kept in the `settings` table next to the user-facing Settings.\n * Owners: google.* and pubsub → server/google, admin.* → server/auth.\n */\nexport interface InternalState {\n  \"google.client\": {\n    clientId: string;\n    /** AES-GCM ciphertext (ctx.crypto). */\n    clientSecretEnc: string | null;\n    projectId: string;\n    appType: GoogleAppType;\n  };\n  /** Pub/Sub resources and health. `mode` is not stored here: it is Settings.ingestMode. */\n  pubsub: Omit<PubsubState, \"mode\"> & {\n    /** Account whose OAuth token provisions and pulls the subscription (it needs IAM on the project). */\n    principalAccountId: string | null;\n  };\n  \"admin.passwordHash\": string;\n}\n\nexport type InternalKey = keyof InternalState;\n\nconst USER_KEY = \"settings\";\n\nexport class SettingsStore {\n  constructor(\n    private readonly db: Db,\n    private readonly bus: Bus,\n    private readonly config: Config,\n  ) {}\n\n  defaults(): Settings {\n    return {\n      publicUrl: defaultPublicUrl(this.config.host, this.config.port),\n      ingestMode: \"poll\",\n      pollIntervalSeconds: 30,\n      maxBodyChars: 20_000,\n      retentionDays: 30,\n      approvalTtlHours: 72,\n      webhookAllowlist: [\"localhost\", \"127.0.0.0/8\", \"::1\"],\n      pairingEnabled: true,\n    };\n  }\n\n  get(): Settings {\n    const row = this.db.get<{ value: string }>(\"SELECT value FROM settings WHERE key = ?\", USER_KEY);\n    return { ...this.defaults(), ...json.parse<Partial<Settings>>(row?.value, {}) };\n  }\n\n  /** Validates, persists and broadcasts. Throws HttpError(400) on invalid input. */\n  update(patch: Partial<Settings>): Settings {\n    const next = validate({ ...this.get(), ...stripUndefined(patch) });\n    this.write(USER_KEY, next);\n    this.bus.emit(\"settings\", next);\n    return next;\n  }\n\n  /** The OAuth redirect URI and MCP snippets are derived from this. Never has a trailing slash. */\n  publicUrl(): string {\n    return this.get().publicUrl;\n  }\n\n  getState<K extends InternalKey>(key: K): InternalState[K] | null {\n    const row = this.db.get<{ value: string }>(\"SELECT value FROM settings WHERE key = ?\", key);\n    return row ? json.parse<InternalState[K] | null>(row.value, null) : null;\n  }\n\n  setState<K extends InternalKey>(key: K, value: InternalState[K]): void {\n    this.write(key, value);\n  }\n\n  deleteState(key: InternalKey): void {\n    this.db.run(\"DELETE FROM settings WHERE key = ?\", key);\n  }\n\n  private write(key: string, value: unknown): void {\n    this.db.run(\n      \"INSERT INTO settings (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value\",\n      key,\n      json.str(value),\n    );\n  }\n}\n\nconst INGEST_MODES: IngestMode[] = [\"pubsub\", \"poll\"];\n\nfunction validate(s: Settings): Settings {\n  let url: URL;\n  try {\n    url = new URL(s.publicUrl);\n  } catch {\n    throw badRequest(\"Public URL must be a full URL\", \"For example https://mail.example.com or http://localhost:8425\");\n  }\n  if (url.protocol !== \"http:\" && url.protocol !== \"https:\") throw badRequest(\"Public URL must use http or https\");\n  if (url.search || url.hash) throw badRequest(\"Public URL must not contain a query or fragment\");\n  const int = (v: number, name: string, min: number, max: number) => {\n    if (!Number.isInteger(v) || v < min || v > max) throw badRequest(`${name} must be a whole number from ${min} to ${max}`);\n    return v;\n  };\n  if (!INGEST_MODES.includes(s.ingestMode)) throw badRequest(\"Ingest mode must be pubsub or poll\");\n  const allowlist = Array.isArray(s.webhookAllowlist) ? s.webhookAllowlist.map((h) => String(h).trim()).filter(Boolean) : null;\n  if (!allowlist || allowlist.length > 100 || allowlist.some((h) => h.length > 253 || /\\s/.test(h))) {\n    throw badRequest(\"Webhook allowlist must be a list of hostnames, IPs or CIDRs\");\n  }\n  return {\n    publicUrl: url.origin + url.pathname.replace(/\\/+$/, \"\"),\n    ingestMode: s.ingestMode,\n    pollIntervalSeconds: int(s.pollIntervalSeconds, \"Poll interval\", 5, 3600),\n    maxBodyChars: int(s.maxBodyChars, \"Max body characters\", 0, 1_000_000),\n    retentionDays: int(s.retentionDays, \"Retention\", 1, 3650),\n    approvalTtlHours: int(s.approvalTtlHours, \"Approval expiry\", 1, 24 * 30),\n    webhookAllowlist: [...new Set(allowlist)],\n    pairingEnabled: s.pairingEnabled !== false,\n  };\n}\n\nfunction stripUndefined<T extends object>(o: T): Partial<T> {\n  return Object.fromEntries(Object.entries(o).filter(([, v]) => v !== undefined)) as Partial<T>;\n}\n\n/**\n * localhost when bound to all interfaces or to 127.0.0.1/::1 (Google accepts http://localhost redirects);\n * otherwise the specific address or name the operator chose with --host.\n */\nexport function defaultPublicUrl(host: string, port: number): string {\n  const h = host.trim().toLowerCase();\n  const local = !h || h === \"0.0.0.0\" || h === \"::\" || h === \"localhost\" || h === \"::1\" || h === \"127.0.0.1\";\n  if (local) return `http://localhost:${port}`;\n  return `http://${h.includes(\":\") ? `[${h}]` : h}:${port}`;\n}\n"],"mappings":";;;;AA4BA,MAAM,WAAW;AAEjB,IAAa,gBAAb,MAA2B;CAEN;CACA;CACA;CAHnB,YACE,IACA,KACA,QACA;EAHiB,KAAA,KAAA;EACA,KAAA,MAAA;EACA,KAAA,SAAA;CAChB;CAEH,WAAqB;EACnB,OAAO;GACL,WAAW,iBAAiB,KAAK,OAAO,MAAM,KAAK,OAAO,IAAI;GAC9D,YAAY;GACZ,qBAAqB;GACrB,cAAc;GACd,eAAe;GACf,kBAAkB;GAClB,kBAAkB;IAAC;IAAa;IAAe;GAAK;GACpD,gBAAgB;EAClB;CACF;CAEA,MAAgB;EACd,MAAM,MAAM,KAAK,GAAG,IAAuB,4CAA4C,QAAQ;EAC/F,OAAO;GAAE,GAAG,KAAK,SAAS;GAAG,GAAG,KAAK,MAAyB,KAAK,OAAO,CAAC,CAAC;EAAE;CAChF;;CAGA,OAAO,OAAoC;EACzC,MAAM,OAAO,SAAS;GAAE,GAAG,KAAK,IAAI;GAAG,GAAG,eAAe,KAAK;EAAE,CAAC;EACjE,KAAK,MAAM,UAAU,IAAI;EACzB,KAAK,IAAI,KAAK,YAAY,IAAI;EAC9B,OAAO;CACT;;CAGA,YAAoB;EAClB,OAAO,KAAK,IAAI,CAAC,CAAC;CACpB;CAEA,SAAgC,KAAiC;EAC/D,MAAM,MAAM,KAAK,GAAG,IAAuB,4CAA4C,GAAG;EAC1F,OAAO,MAAM,KAAK,MAA+B,IAAI,OAAO,IAAI,IAAI;CACtE;CAEA,SAAgC,KAAQ,OAA+B;EACrE,KAAK,MAAM,KAAK,KAAK;CACvB;CAEA,YAAY,KAAwB;EAClC,KAAK,GAAG,IAAI,sCAAsC,GAAG;CACvD;CAEA,MAAc,KAAa,OAAsB;EAC/C,KAAK,GAAG,IACN,yGACA,KACA,KAAK,IAAI,KAAK,CAChB;CACF;AACF;AAEA,MAAM,eAA6B,CAAC,UAAU,MAAM;AAEpD,SAAS,SAAS,GAAuB;CACvC,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,EAAE,SAAS;CAC3B,QAAQ;EACN,MAAM,WAAW,iCAAiC,+DAA+D;CACnH;CACA,IAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU,MAAM,WAAW,mCAAmC;CAC/G,IAAI,IAAI,UAAU,IAAI,MAAM,MAAM,WAAW,iDAAiD;CAC9F,MAAM,OAAO,GAAW,MAAc,KAAa,QAAgB;EACjE,IAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,OAAO,IAAI,KAAK,MAAM,WAAW,GAAG,KAAK,+BAA+B,IAAI,MAAM,KAAK;EACvH,OAAO;CACT;CACA,IAAI,CAAC,aAAa,SAAS,EAAE,UAAU,GAAG,MAAM,WAAW,oCAAoC;CAC/F,MAAM,YAAY,MAAM,QAAQ,EAAE,gBAAgB,IAAI,EAAE,iBAAiB,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,IAAI;CACxH,IAAI,CAAC,aAAa,UAAU,SAAS,OAAO,UAAU,MAAM,MAAM,EAAE,SAAS,OAAO,KAAK,KAAK,CAAC,CAAC,GAC9F,MAAM,WAAW,6DAA6D;CAEhF,OAAO;EACL,WAAW,IAAI,SAAS,IAAI,SAAS,QAAQ,QAAQ,EAAE;EACvD,YAAY,EAAE;EACd,qBAAqB,IAAI,EAAE,qBAAqB,iBAAiB,GAAG,IAAI;EACxE,cAAc,IAAI,EAAE,cAAc,uBAAuB,GAAG,GAAS;EACrE,eAAe,IAAI,EAAE,eAAe,aAAa,GAAG,IAAI;EACxD,kBAAkB,IAAI,EAAE,kBAAkB,mBAAmB,GAAG,GAAO;EACvE,kBAAkB,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC;EACxC,gBAAgB,EAAE,mBAAmB;CACvC;AACF;AAEA,SAAS,eAAiC,GAAkB;CAC1D,OAAO,OAAO,YAAY,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,OAAO,MAAM,KAAA,CAAS,CAAC;AAChF;;;;;AAMA,SAAgB,iBAAiB,MAAc,MAAsB;CACnE,MAAM,IAAI,KAAK,KAAK,CAAC,CAAC,YAAY;CAElC,IADc,CAAC,KAAK,MAAM,aAAa,MAAM,QAAQ,MAAM,eAAe,MAAM,SAAS,MAAM,aACpF,OAAO,oBAAoB;CACtC,OAAO,UAAU,EAAE,SAAS,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG;AACrD"}

package/dist/setup-token-BO89xnpb.js

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+import { readFileSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { randomBytes } from "node:crypto";
+//#region server/util/ids.ts
+const ALPHABET = "0123456789abcdefghjkmnpqrstvwxyz";
+/** Random base32 string. 20 chars ≈ 100 bits. */
+function randomToken(length = 20) {
+	const bytes = randomBytes(length);
+	let out = "";
+	for (let i = 0; i < length; i++) out += ALPHABET[bytes[i] & 31];
+	return out;
+}
+const newId = (prefix) => `${prefix}_${randomToken(20)}`;
+//#endregion
+//#region server/auth/setup-token.ts
+/**
+* One-time token required to claim a fresh install over the network. It is part of the setup link
+* printed on startup and is persisted (mode 0600) so the link survives restarts and
+* `service install` can show it. Deleted once the instance is claimed.
+*/
+const setupTokenPath = (dataDir) => join(dataDir, "setup-token");
+function readSetupToken(dataDir) {
+	try {
+		return readFileSync(setupTokenPath(dataDir), "utf8").trim() || null;
+	} catch {
+		return null;
+	}
+}
+function ensureSetupToken(dataDir) {
+	const existing = readSetupToken(dataDir);
+	if (existing) return existing;
+	const token = randomToken(24);
+	writeFileSync(setupTokenPath(dataDir), token + "\n", { mode: 384 });
+	return token;
+}
+/** Replaces any existing token (e.g. after `agentinbox reset-password`). */
+function regenerateSetupToken(dataDir) {
+	deleteSetupToken(dataDir);
+	return ensureSetupToken(dataDir);
+}
+function deleteSetupToken(dataDir) {
+	rmSync(setupTokenPath(dataDir), { force: true });
+}
+//#endregion
+export { setupTokenPath as a, regenerateSetupToken as i, ensureSetupToken as n, newId as o, readSetupToken as r, randomToken as s, deleteSetupToken as t };
+
+//# sourceMappingURL=setup-token-BO89xnpb.js.map

package/dist/setup-token-BO89xnpb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-token-BO89xnpb.js","names":[],"sources":["../server/util/ids.ts","../server/auth/setup-token.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\n\nconst ALPHABET = \"0123456789abcdefghjkmnpqrstvwxyz\"; // Crockford base32, lowercase\n\n/** Random base32 string. 20 chars ≈ 100 bits. */\nexport function randomToken(length = 20): string {\n  const bytes = randomBytes(length);\n  let out = \"\";\n  for (let i = 0; i < length; i++) out += ALPHABET[bytes[i]! & 31];\n  return out;\n}\n\nexport type IdPrefix = \"acc\" | \"agt\" | \"grt\" | \"evt\" | \"whk\" | \"dlv\" | \"apr\" | \"par\";\n\nexport const newId = (prefix: IdPrefix): string => `${prefix}_${randomToken(20)}`;\n","import { readFileSync, rmSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { randomToken } from \"../util/ids.ts\";\n\n/**\n * One-time token required to claim a fresh install over the network. It is part of the setup link\n * printed on startup and is persisted (mode 0600) so the link survives restarts and\n * `service install` can show it. Deleted once the instance is claimed.\n */\nexport const setupTokenPath = (dataDir: string) => join(dataDir, \"setup-token\");\n\nexport function readSetupToken(dataDir: string): string | null {\n  try {\n    return readFileSync(setupTokenPath(dataDir), \"utf8\").trim() || null;\n  } catch {\n    return null;\n  }\n}\n\nexport function ensureSetupToken(dataDir: string): string {\n  const existing = readSetupToken(dataDir);\n  if (existing) return existing;\n  const token = randomToken(24);\n  writeFileSync(setupTokenPath(dataDir), token + \"\\n\", { mode: 0o600 });\n  return token;\n}\n\n/** Replaces any existing token (e.g. after `agentinbox reset-password`). */\nexport function regenerateSetupToken(dataDir: string): string {\n  deleteSetupToken(dataDir);\n  return ensureSetupToken(dataDir);\n}\n\nexport function deleteSetupToken(dataDir: string): void {\n  rmSync(setupTokenPath(dataDir), { force: true });\n}\n"],"mappings":";;;;;AAEA,MAAM,WAAW;;AAGjB,SAAgB,YAAY,SAAS,IAAY;CAC/C,MAAM,QAAQ,YAAY,MAAM;CAChC,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,KAAK,OAAO,SAAS,MAAM,KAAM;CAC7D,OAAO;AACT;AAIA,MAAa,SAAS,WAA6B,GAAG,OAAO,GAAG,YAAY,EAAE;;;;;;;;ACL9E,MAAa,kBAAkB,YAAoB,KAAK,SAAS,aAAa;AAE9E,SAAgB,eAAe,SAAgC;CAC7D,IAAI;EACF,OAAO,aAAa,eAAe,OAAO,GAAG,MAAM,CAAC,CAAC,KAAK,KAAK;CACjE,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,iBAAiB,SAAyB;CACxD,MAAM,WAAW,eAAe,OAAO;CACvC,IAAI,UAAU,OAAO;CACrB,MAAM,QAAQ,YAAY,EAAE;CAC5B,cAAc,eAAe,OAAO,GAAG,QAAQ,MAAM,EAAE,MAAM,IAAM,CAAC;CACpE,OAAO;AACT;;AAGA,SAAgB,qBAAqB,SAAyB;CAC5D,iBAAiB,OAAO;CACxB,OAAO,iBAAiB,OAAO;AACjC;AAEA,SAAgB,iBAAiB,SAAuB;CACtD,OAAO,eAAe,OAAO,GAAG,EAAE,OAAO,KAAK,CAAC;AACjD"}