devlanes 0.3.0 → 0.4.0

package/bin/devlanes

@@ -4,19 +4,20 @@
 // Runs the native binary from the @devlanes/<platform>-<arch> package that npm
 // installed as an optional dependency. install.js replaces this file with that
 // binary, so it only runs when the postinstall script did not (--ignore-scripts,
-// Yarn) or could not swap it.
+// Yarn, Windows) or could not swap it.
 const { spawn } = require("node:child_process");
 const path = require("node:path");
 
+const windows = process.platform === "win32";
 const platform = `${process.platform}-${process.arch}`;
 let binary;
 try {
   const manifest = require.resolve(`@devlanes/${platform}/package.json`);
-  binary = path.join(path.dirname(manifest), "bin", "devlanes");
+  binary = path.join(path.dirname(manifest), "bin", windows ? "devlanes.exe" : "devlanes");
 } catch {
   console.error(
     `devlanes: no binary installed for ${platform}. Release builds exist for ` +
-      "darwin-arm64, darwin-x64, linux-arm64 and linux-x64 (glibc).\n" +
+      "darwin-arm64, darwin-x64, linux-arm64 and linux-x64 (glibc), win32-arm64 and win32-x64.\n" +
       "If npm ran with --omit=optional or --no-optional, reinstall without it.",
   );
   process.exit(1);
@@ -24,12 +25,20 @@ try {
 
 const child = spawn(binary, process.argv.slice(2), { stdio: "inherit" });
 
-// The terminal already delivers SIGINT and SIGQUIT to the whole process group,
-// so forwarding them would reach the binary twice. Signals sent only to this
-// wrapper are passed on.
-for (const signal of ["SIGINT", "SIGQUIT"]) process.on(signal, () => {});
-for (const signal of ["SIGTERM", "SIGHUP"]) {
-  process.on(signal, () => child.kill(signal));
+if (windows) {
+  // Ctrl-C, Ctrl-Break and closing the console reach every process attached to
+  // the console, the binary included, which handles them itself. The listeners
+  // only keep Node from exiting before it; child.kill() would end the binary
+  // without notice.
+  for (const signal of ["SIGINT", "SIGBREAK", "SIGHUP"]) process.on(signal, () => {});
+} else {
+  // The terminal already delivers SIGINT and SIGQUIT to the whole process group,
+  // so forwarding them would reach the binary twice. Signals sent only to this
+  // wrapper are passed on.
+  for (const signal of ["SIGINT", "SIGQUIT"]) process.on(signal, () => {});
+  for (const signal of ["SIGTERM", "SIGHUP"]) {
+    process.on(signal, () => child.kill(signal));
+  }
 }
 
 child.on("error", (error) => {
@@ -37,7 +46,9 @@ child.on("error", (error) => {
   process.exit(1);
 });
 child.on("exit", (code, signal) => {
-  if (signal) {
+  // Windows processes end with a code only, such as 0xC000013A after Ctrl-C,
+  // which process.exit passes on unchanged.
+  if (signal && !windows) {
     process.removeAllListeners(signal);
     process.kill(process.pid, signal);
     return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devlanes",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Development environments in Git worktree lanes",
   "license": "Apache-2.0",
   "homepage": "https://devlanes.run",
@@ -30,9 +30,11 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@devlanes/darwin-arm64": "0.3.0",
-    "@devlanes/darwin-x64": "0.3.0",
-    "@devlanes/linux-arm64": "0.3.0",
-    "@devlanes/linux-x64": "0.3.0"
+    "@devlanes/darwin-arm64": "0.4.0",
+    "@devlanes/darwin-x64": "0.4.0",
+    "@devlanes/linux-arm64": "0.4.0",
+    "@devlanes/linux-x64": "0.4.0",
+    "@devlanes/win32-arm64": "0.4.0",
+    "@devlanes/win32-x64": "0.4.0"
   }
 }

package/schema.json

@@ -202,38 +202,6 @@
       },
       "type": "object"
     },
-    "FnoxConfig": {
-      "additionalProperties": false,
-      "description": "Which fnox profile secrets come from.",
-      "examples": [
-        {
-          "profile": "dev"
-        }
-      ],
-      "markdownDescription": "Which fnox profile secrets come from.",
-      "properties": {
-        "profile": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/Templated_string",
-              "description": "",
-              "examples": [],
-              "markdownDescription": ""
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "description": "fnox profile whose secrets are loaded; fnox's default profile when omitted. Locked secrets are unlocked with `devlanes secrets unlock`.",
-          "examples": [
-            "dev",
-            "admin-api"
-          ],
-          "markdownDescription": "fnox profile whose secrets are loaded; fnox's default profile when omitted. Locked secrets are unlocked with `devlanes secrets unlock`."
-        }
-      },
-      "type": "object"
-    },
     "HostConfig": {
       "anyOf": [
         {
@@ -1946,36 +1914,16 @@
           "type": "object"
         },
         "extends": {
-          "description": "Template under `templates` whose settings this service inherits; its own settings apply on top. Mappings (`env`, `ready`, `stop`, `fnox`, preset options, `run_script`) merge by key, lists (`tags`, `hosts`, `sync`) and single values replace. Setting `run` or `run_script` drops the inherited other one, and one `ready` probe (`tcp`, `http`, `log`, `cmd`) drops the inherited probe. Templates may extend other templates and are resolved after devlanes.local.yaml is merged.",
+          "description": "Template under `templates` whose settings this service inherits; its own settings apply on top. Mappings (`env`, `ready`, `stop`, preset options, `run_script`) merge by key, lists (`tags`, `hosts`, `sync`) and single values replace. Setting `run` or `run_script` drops the inherited other one, and one `ready` probe (`tcp`, `http`, `log`, `cmd`) drops the inherited probe. Templates may extend other templates and are resolved after devlanes.local.yaml is merged.",
           "examples": [
             "fastify-api"
           ],
-          "markdownDescription": "Template under `templates` whose settings this service inherits; its own settings apply on top. Mappings (`env`, `ready`, `stop`, `fnox`, preset options, `run_script`) merge by key, lists (`tags`, `hosts`, `sync`) and single values replace. Setting `run` or `run_script` drops the inherited other one, and one `ready` probe (`tcp`, `http`, `log`, `cmd`) drops the inherited probe. Templates may extend other templates and are resolved after devlanes.local.yaml is merged.",
+          "markdownDescription": "Template under `templates` whose settings this service inherits; its own settings apply on top. Mappings (`env`, `ready`, `stop`, preset options, `run_script`) merge by key, lists (`tags`, `hosts`, `sync`) and single values replace. Setting `run` or `run_script` drops the inherited other one, and one `ready` probe (`tcp`, `http`, `log`, `cmd`) drops the inherited probe. Templates may extend other templates and are resolved after devlanes.local.yaml is merged.",
           "type": [
             "string",
             "null"
           ]
         },
-        "fnox": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/FnoxConfig",
-              "description": "",
-              "examples": [],
-              "markdownDescription": ""
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "description": "Secrets profile for this service, replacing the project's `fnox.profile`. fnox puts that profile's secrets into the service's environment and `${{ env.X }}`; use it when one service needs different credentials.",
-          "examples": [
-            {
-              "profile": "dev"
-            }
-          ],
-          "markdownDescription": "Secrets profile for this service, replacing the project's `fnox.profile`. fnox puts that profile's secrets into the service's environment and `${{ env.X }}`; use it when one service needs different credentials."
-        },
         "hidden": {
           "anyOf": [
             {
@@ -2007,7 +1955,7 @@
               "type": "null"
             }
           ],
-          "description": "Hostnames the devlanes HTTPS proxy routes to this service, so `https://<host>` reaches it. One entry or a list; an entry is a hostname or a mapping with `host` and optional `port` (a named port), `fallback` and `host_header`. A `*.` wildcard matches subdomains, and an exact host wins over it. The first non-wildcard host becomes `public_url` and `DEVLANES_PUBLIC_URL`, non-wildcard hosts join the lane's `DEVLANES_ORIGINS`, and having hosts makes the default `ready` a TCP check. Keep them under `${{ lane.domain }}` so lanes do not collide.",
+          "description": "Hostnames the devlanes HTTPS proxy routes to this service, so `https://<host>` reaches it. One entry or a list; an entry is a hostname or a mapping with `host` and optional `port` (a named port), `fallback` and `host_header`. A `*.` wildcard matches subdomains, and an exact host wins over it. The first non-wildcard host becomes `public_url`, non-wildcard hosts join the lane's `DEVLANES_ORIGINS`, and having hosts makes the default `ready` a TCP check. Keep them under `${{ lane.domain }}` so lanes do not collide.",
           "examples": [
             "api.${{ lane.domain }}",
             [
@@ -2020,7 +1968,7 @@
               }
             ]
           ],
-          "markdownDescription": "Hostnames the devlanes HTTPS proxy routes to this service, so `https://<host>` reaches it. One entry or a list; an entry is a hostname or a mapping with `host` and optional `port` (a named port), `fallback` and `host_header`. A `*.` wildcard matches subdomains, and an exact host wins over it. The first non-wildcard host becomes `public_url` and `DEVLANES_PUBLIC_URL`, non-wildcard hosts join the lane's `DEVLANES_ORIGINS`, and having hosts makes the default `ready` a TCP check. Keep them under `${{ lane.domain }}` so lanes do not collide."
+          "markdownDescription": "Hostnames the devlanes HTTPS proxy routes to this service, so `https://<host>` reaches it. One entry or a list; an entry is a hostname or a mapping with `host` and optional `port` (a named port), `fallback` and `host_header`. A `*.` wildcard matches subdomains, and an exact host wins over it. The first non-wildcard host becomes `public_url`, non-wildcard hosts join the lane's `DEVLANES_ORIGINS`, and having hosts makes the default `ready` a TCP check. Keep them under `${{ lane.domain }}` so lanes do not collide."
         },
         "name": {
           "description": "Label shown in the TUI and human output instead of the service key; any text, spaces allowed, with ` #N` added per replica. Commands, profiles and `${{ services.<key> }}` keep using the key.",
@@ -2673,26 +2621,6 @@
           "markdownDescription": "Variables for this task only, above `global_env`.",
           "type": "object"
         },
-        "fnox": {
-          "anyOf": [
-            {
-              "$ref": "#/$defs/FnoxConfig",
-              "description": "",
-              "examples": [],
-              "markdownDescription": ""
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "description": "fnox profile for this task's secrets, instead of the project's `fnox.profile`.",
-          "examples": [
-            {
-              "profile": "dev"
-            }
-          ],
-          "markdownDescription": "fnox profile for this task's secrets, instead of the project's `fnox.profile`."
-        },
         "interactive": {
           "anyOf": [
             {
@@ -3029,7 +2957,7 @@
   "$id": "https://devlanes.run/v1/schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "devlanes v0.3.0 project config. Run a dev environment per git worktree, side by side. https://devlanes.run",
+  "description": "devlanes v0.4.0 project config. Run a dev environment per git worktree, side by side. https://devlanes.run",
   "examples": [
     {
       "project": "acme",
@@ -3043,28 +2971,8 @@
       }
     }
   ],
-  "markdownDescription": "devlanes v0.3.0 project config. Run a dev environment per git worktree, side by side. https://devlanes.run",
+  "markdownDescription": "devlanes v0.4.0 project config. Run a dev environment per git worktree, side by side. https://devlanes.run",
   "properties": {
-    "fnox": {
-      "anyOf": [
-        {
-          "$ref": "#/$defs/FnoxConfig",
-          "description": "",
-          "examples": [],
-          "markdownDescription": ""
-        },
-        {
-          "type": "null"
-        }
-      ],
-      "description": "fnox profile that the secrets of every task and service come from. A task or service can name its own profile with its `fnox` key.",
-      "examples": [
-        {
-          "profile": "dev"
-        }
-      ],
-      "markdownDescription": "fnox profile that the secrets of every task and service come from. A task or service can name its own profile with its `fnox` key."
-    },
     "global_env": {
       "additionalProperties": {
         "$ref": "#/$defs/Templated_Scalar",
@@ -3291,7 +3199,7 @@
         "markdownDescription": "A long-running process started with the lane, such as a dev server or a worker. Each service gets its own port from the lane's block (`PORT`, `${{ self.port }}`); devlanes stops it with the lane and never restarts it when it exits. A service needs `run` or `run_script`, directly or through `extends`."
       },
       "default": {},
-      "description": "Named service settings that services reuse with `extends: <template>`. The service inherits every setting of the template and its own settings win: mappings (`env`, `ready`, `stop`, `fnox`, preset options, `run_script`) merge by key, lists (`tags`, `hosts`, `sync`) and single values replace. Setting `run` or `run_script` drops the inherited other one, and one `ready` probe (`tcp`, `http`, `log`, `cmd`) drops the inherited probe. Templates may extend other templates, are never started themselves, and are applied after `devlanes.local.yaml` is merged.",
+      "description": "Named service settings that services reuse with `extends: <template>`. The service inherits every setting of the template and its own settings win: mappings (`env`, `ready`, `stop`, preset options, `run_script`) merge by key, lists (`tags`, `hosts`, `sync`) and single values replace. Setting `run` or `run_script` drops the inherited other one, and one `ready` probe (`tcp`, `http`, `log`, `cmd`) drops the inherited probe. Templates may extend other templates, are never started themselves, and are applied after `devlanes.local.yaml` is merged.",
       "examples": [
         {
           "fastify-api": {
@@ -3307,7 +3215,7 @@
           }
         }
       ],
-      "markdownDescription": "Named service settings that services reuse with `extends: <template>`. The service inherits every setting of the template and its own settings win: mappings (`env`, `ready`, `stop`, `fnox`, preset options, `run_script`) merge by key, lists (`tags`, `hosts`, `sync`) and single values replace. Setting `run` or `run_script` drops the inherited other one, and one `ready` probe (`tcp`, `http`, `log`, `cmd`) drops the inherited probe. Templates may extend other templates, are never started themselves, and are applied after `devlanes.local.yaml` is merged.",
+      "markdownDescription": "Named service settings that services reuse with `extends: <template>`. The service inherits every setting of the template and its own settings win: mappings (`env`, `ready`, `stop`, preset options, `run_script`) merge by key, lists (`tags`, `hosts`, `sync`) and single values replace. Setting `run` or `run_script` drops the inherited other one, and one `ready` probe (`tcp`, `http`, `log`, `cmd`) drops the inherited probe. Templates may extend other templates, are never started themselves, and are applied after `devlanes.local.yaml` is merged.",
       "type": "object"
     }
   },

package/user-schema.json

@@ -65,6 +65,29 @@
       "pattern": "^[0-9]+(ms|s|m|h|d)$",
       "type": "string"
     },
+    "DaemonConfig": {
+      "additionalProperties": false,
+      "description": "The daemon's own lifetime.",
+      "examples": [
+        {
+          "exit_when_idle": false
+        }
+      ],
+      "markdownDescription": "The daemon's own lifetime.",
+      "properties": {
+        "exit_when_idle": {
+          "default": true,
+          "description": "Stop the daemon about 30 seconds after the last TUI closes when no service, task or start is running; the next devlanes command starts it again. Containers keep running either way. Defaults to true. Only a daemon a command started on demand exits; one installed with `devlanes daemon install` keeps running.",
+          "examples": [
+            true,
+            false
+          ],
+          "markdownDescription": "Stop the daemon about 30 seconds after the last TUI closes when no service, task or start is running; the next devlanes command starts it again. Containers keep running either way. Defaults to true. Only a daemon a command started on demand exits; one installed with `devlanes daemon install` keeps running.",
+          "type": "boolean"
+        }
+      },
+      "type": "object"
+    },
     "DnsProvider": {
       "additionalProperties": false,
       "description": "Reserved DNS-01 provider settings for the planned `public` resolver; not supported yet.",
@@ -790,7 +813,7 @@
         },
         "trust": {
           "default": [],
-          "description": "Stores `devlanes certs trust` installs the CA into and `certs untrust` removes it from; an empty list means `[system]`. On Linux, browsers do not read the system store, so add `chrome` and `firefox` there; `devlanes doctor` shows each store's state.",
+          "description": "Stores `devlanes certs trust` installs the CA into and `certs untrust` removes it from; an empty list means `[system]`. On Linux, browsers do not read the system store, so add `chrome` and `firefox` there; inside WSL add `windows` for browsers on Windows. `devlanes doctor` shows each store's state.",
           "examples": [
             [
               "system",
@@ -798,6 +821,10 @@
             ],
             [
               "chrome"
+            ],
+            [
+              "system",
+              "windows"
             ]
           ],
           "items": {
@@ -807,12 +834,13 @@
               "system",
               "firefox",
               "chrome",
+              "windows",
               "ios-simulator",
               "android-emulator"
             ],
             "markdownDescription": "Certificate store that `devlanes certs trust` installs the CA into."
           },
-          "markdownDescription": "Stores `devlanes certs trust` installs the CA into and `certs untrust` removes it from; an empty list means `[system]`. On Linux, browsers do not read the system store, so add `chrome` and `firefox` there; `devlanes doctor` shows each store's state.",
+          "markdownDescription": "Stores `devlanes certs trust` installs the CA into and `certs untrust` removes it from; an empty list means `[system]`. On Linux, browsers do not read the system store, so add `chrome` and `firefox` there; inside WSL add `windows` for browsers on Windows. `devlanes doctor` shows each store's state.",
           "type": "array"
         }
       },
@@ -824,6 +852,7 @@
         "system",
         "firefox",
         "chrome",
+        "windows",
         "ios-simulator",
         "android-emulator"
       ],
@@ -831,6 +860,7 @@
         "The OS store: the login keychain on macOS, read by Safari, Chrome, Edge and `/usr/bin/curl`; on Linux, the distribution's CA anchors, updated through sudo.",
         "Every Firefox profile's certificate database, through `certutil` from the NSS tools (`brew install nss`, or `libnss3-tools` / `nss-tools` on Linux).",
         "The store Chrome and Chromium read: `~/.pki/nssdb` through `certutil` on Linux, the same login keychain as `system` on macOS.",
+        "The Windows user root store, read by Edge, Chrome and Firefox on Windows. For devlanes inside WSL, whose browser usually runs on Windows: it runs Windows' `certutil.exe` through interop, and Windows asks you to confirm each change. On Windows it is the same store as `system`; on macOS and Linux outside WSL `certs trust` reports it as unavailable.",
         "Reserved for the iOS simulator; not supported yet, so it is dropped with a warning.",
         "Reserved for the Android emulator; not supported yet, so it is dropped with a warning."
       ],
@@ -838,6 +868,7 @@
         "system",
         "firefox",
         "chrome",
+        "windows",
         "ios-simulator",
         "android-emulator"
       ],
@@ -846,6 +877,7 @@
         "The OS store: the login keychain on macOS, read by Safari, Chrome, Edge and `/usr/bin/curl`; on Linux, the distribution's CA anchors, updated through sudo.",
         "Every Firefox profile's certificate database, through `certutil` from the NSS tools (`brew install nss`, or `libnss3-tools` / `nss-tools` on Linux).",
         "The store Chrome and Chromium read: `~/.pki/nssdb` through `certutil` on Linux, the same login keychain as `system` on macOS.",
+        "The Windows user root store, read by Edge, Chrome and Firefox on Windows. For devlanes inside WSL, whose browser usually runs on Windows: it runs Windows' `certutil.exe` through interop, and Windows asks you to confirm each change. On Windows it is the same store as `system`; on macOS and Linux outside WSL `certs trust` reports it as unavailable.",
         "Reserved for the iOS simulator; not supported yet, so it is dropped with a warning.",
         "Reserved for the Android emulator; not supported yet, so it is dropped with a warning."
       ],
@@ -1047,7 +1079,7 @@
   "$id": "https://devlanes.run/v1/user-schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "additionalProperties": false,
-  "description": "devlanes v0.3.0 user config: per-user settings in ~/.devlanes/config.yaml. Run a dev environment per git worktree, side by side. https://devlanes.run",
+  "description": "devlanes v0.4.0 user config: per-user settings in ~/.devlanes/config.yaml. Run a dev environment per git worktree, side by side. https://devlanes.run",
   "examples": [
     {
       "hostnames": {
@@ -1061,8 +1093,21 @@
       }
     }
   ],
-  "markdownDescription": "devlanes v0.3.0 user config: per-user settings in ~/.devlanes/config.yaml. Run a dev environment per git worktree, side by side. https://devlanes.run",
+  "markdownDescription": "devlanes v0.4.0 user config: per-user settings in ~/.devlanes/config.yaml. Run a dev environment per git worktree, side by side. https://devlanes.run",
   "properties": {
+    "daemon": {
+      "$ref": "#/$defs/DaemonConfig",
+      "default": {
+        "exit_when_idle": true
+      },
+      "description": "The daemon's lifetime: whether it stops on its own once the last TUI closes and nothing runs.",
+      "examples": [
+        {
+          "exit_when_idle": false
+        }
+      ],
+      "markdownDescription": "The daemon's lifetime: whether it stops on its own once the last TUI closes and nothing runs."
+    },
     "history": {
       "$ref": "#/$defs/HistoryConfig",
       "default": {