grix-connector 4.3.9 → 4.4.0-beta.1

package/dist/assets/dsh-bridge/manifest.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 1,
-  "bridgeVersion": "4.3.9",
-  "tarball": "grix-dsh-bridge-4.3.9.tgz",
-  "size": 22664,
-  "unpackedSize": 90315,
-  "shasum": "81358a4a055a2789d5675a4f8006c9c60395275c",
-  "integrity": "sha512-i0rpPmzkFH0ntCfJLoCd5S67I7Nzk/RcuS4ZUKWChyiRH/5HCsV57NOjnGaCmFrL6hXYShvRSchslc/bp0s5fQ=="
+  "bridgeVersion": "4.4.0-beta.1",
+  "tarball": "grix-dsh-bridge-4.4.0-beta.1.tgz",
+  "size": 22634,
+  "unpackedSize": 90343,
+  "shasum": "4436fc5f0e73b185b63248b1226b0ef93c6c5131",
+  "integrity": "sha512-dQQhcuruV5IO+Qy3SfzeTxQD0zGmAfD4CLJdpJWFYDc9O7zx60JejYU8E1488iwiMLxUXP6HVsLf+pD7fOa1tw=="
 }

package/dist/core/upgrade/npm-upgrader.js

@@ -1,2 +1,2 @@
-import{execFile as _t,execFileSync as b}from"node:child_process";import{randomUUID as X}from"node:crypto";import{promisify as mt}from"node:util";import{uptime as ht}from"node:os";import{closeSync as wt,copyFileSync as St,cpSync as yt,existsSync as d,linkSync as kt,mkdirSync as S,mkdtempSync as Et,openSync as Pt,readFileSync as P,renameSync as h,rmSync as g,statfsSync as It,symlinkSync as vt,unlinkSync as C,writeFileSync as x}from"node:fs";import{basename as I,dirname as m,join as l,relative as q,resolve as s,sep as N}from"node:path";import{GRIX_PATHS as $}from"../log/index.js";import{appendRotatingFileSync as xt}from"../log/rotation.js";import{getMachineName as $t}from"../util/host-info.js";import{resolveInstallId as Dt}from"../util/install-id.js";import{NPM_REGISTRIES as Nt,npmInstallWithMirror as Rt,probeRegistries as At,resolveNpmInvocation as F}from"../installer/npm-registry.js";import{resolveWindowsServiceRuntimeDir as Z}from"../../service/service-paths.js";const Q=mt(_t);class f extends Error{code;constructor(r,e){super(e),this.name="UpgradeError",this.code=r}}const bt=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;function G(t){const r=String(t??"").trim().replace(/^v(?=\d)/,"");if(!bt.test(r))throw new f("INVALID_VERSION",`Invalid connector upgrade version: ${String(t)}`);return r}const W=".grix-upgrade-backup",Ft=".grix-upgrade-failed",tt=".grix-upgrade-backup",rt=".grix-upgrade-next",Ut="upgrade-wrapper.pause.json",Lt="upgrade-rollback.intent.json",Tt=".grix-connector-upgrade.lock",et=[250,750],U=[100,250,750,1500];function nt(){return l($.log,"upgrade.log")}function y(){return l($.data,"upgrade-pending.json")}function dr(){let t=null;try{t=p()}catch{return{in_progress:!1}}if(!t)return{in_progress:!1};const r=t.phase??"staged";return{in_progress:!(r==="failed"||r==="rolled_back"),phase:r,from:t.from_version,target:t.target_version}}function lr(){return d(y())}function pr(t,r="failed"){const e=new Date().toISOString().replace(/[:.]/g,""),n=l($.data,`upgrade-pending.${r}-${e}.json`);try{return x(n,JSON.stringify(t,null,2),"utf-8"),n}catch{return null}}function p(){const t=y();if(!d(t))return null;try{return JSON.parse(P(t,"utf-8"))}catch{return null}}function gr(t,r,e){const n={from_version:t,target_version:r,upgraded_at:new Date().toISOString(),crash_count:0,transaction_id:X(),...e?{phase:e}:{}},i=y();S(m(i),{recursive:!0});let a;try{a=Pt(i,"wx",384)}catch(o){throw o?.code==="EEXIST"?new f("UPGRADE_IN_PROGRESS","Another connector upgrade transaction is already active"):o}try{x(a,JSON.stringify(n),"utf-8")}catch(o){try{C(i)}catch{}throw o}finally{wt(a)}return n}function _r(t){const r=t.package_dir;if(!r)return null;const e=s(r);if(!e.includes(`${N}node_modules${N}`))return null;try{const n=JSON.parse(P(l(e,"package.json"),"utf-8"));return n.name!=="grix-connector"||typeof n.version!="string"?null:n.version.trim().replace(/^v/,"")||null}catch{return null}}function Mt(t,r){S(m(t),{recursive:!0});const e=`${t}.tmp-${process.pid}`;x(e,JSON.stringify(r),"utf-8"),h(e,t)}function D(t,r){const e=p();if(!e)throw new f("PENDING_MISSING","Upgrade transaction is missing");if(r&&e.transaction_id!==r)throw new f("UPGRADE_TRANSACTION_CHANGED","Upgrade transaction ownership changed");const n={...e,...t};return Mt(y(),n),n}function V(){return l($.data,Ut)}function Ot(){return l($.data,Lt)}function mr(t,r){const e=p();if(!e?.transaction_id||e.phase!=="staged"||r&&e.transaction_id!==r)throw new f("INVALID_UPGRADE_STATE","Windows upgrade is not staged for activation");const n=V();S(m(n),{recursive:!0});const i=`${n}.tmp-${process.pid}`;return x(i,JSON.stringify({transaction_id:e.transaction_id}),"utf-8"),h(i,n),D({phase:"handoff_ready",old_pid:t,old_command_line:Ct(t)??void 0,old_boot_time:Date.now()-ht()*1e3,activation_started_at:new Date().toISOString(),wrapper_pause_file:n},e.transaction_id)}function Ct(t){if(process.platform!=="win32"||!Number.isInteger(t)||t<=0)return null;try{const r=`${process.env.SystemRoot||"C:\\Windows"}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;return b(r,["-NoProfile","-NonInteractive","-WindowStyle","Hidden","-Command",`(Get-CimInstance Win32_Process -Filter 'ProcessId=${t}').CommandLine`],{encoding:"utf-8",timeout:3e3,windowsHide:!0}).trim()||null}catch{return null}}function hr(t,r){const e=p();if(!e?.transaction_id||e.transaction_id!==t||e.phase!=="verifying")throw new f("INVALID_UPGRADE_STATE","Windows upgrade is not awaiting verification");const n=Ot();S(m(n),{recursive:!0});const i=`${n}.tmp-${process.pid}`;x(i,JSON.stringify({transaction_id:t,message:r}),"utf-8"),h(i,n);const a=V();S(m(a),{recursive:!0});const o=`${a}.tmp-${process.pid}`;return x(o,JSON.stringify({transaction_id:t}),"utf-8"),h(o,a),D({phase:"rolling_back",guardian_pid:void 0,error_code:"STARTUP_CRASH",error_msg:r,wrapper_pause_file:a},t)}function wr(){try{g(V(),{force:!0})}catch{}}function Gt(t=p()){if(j(t)){try{g(s(t.staging_prefix),{recursive:!0,force:!0})}catch{}if(it(t))try{g(s(t.runtime_next_dir),{recursive:!0,force:!0})}catch{}}}function it(t){if(!t?.runtime_dir||!t.runtime_backup_dir||!t.runtime_next_dir)return!1;const r=s(t.runtime_dir),e=Z($.base),n=l(m(m(e)),"runtime"),i=r===s(n),a=r===s(e)&&/^GrixConnectorDaemon-[0-9a-f]{12}$/.test(I(r))&&I(m(r))==="runtimes"&&I(m(m(r)))==="grix-connector";return(i||a)&&s(t.runtime_backup_dir)===`${r}${tt}`&&s(t.runtime_next_dir)===`${r}${rt}`}function B(t){return l(s(t),Tt)}function Y(t){try{const r=d(t)&&!d(l(t,"owner.json"))?t:l(t,"owner.json"),e=JSON.parse(P(r,"utf-8"));return typeof e.transaction_id=="string"&&typeof e.pending_file=="string"?e:null}catch{return null}}function ot(t){if(!t||!d(t.pending_file))return!1;try{return JSON.parse(P(t.pending_file,"utf-8")).transaction_id===t.transaction_id}catch{return!0}}function Wt(t){const r=p();if(!r?.transaction_id)throw new f("PENDING_MISSING","Upgrade transaction disappeared before npm staging");const e=B(t),n={transaction_id:r.transaction_id,pending_file:y()};D({npm_prefix:s(t),npm_lock_file:e},r.transaction_id);const i=`${e}.candidate-${r.transaction_id}-${X()}`;try{x(i,JSON.stringify(n),{encoding:"utf-8",flag:"wx"}),kt(i,e),g(i,{force:!0})}catch(a){try{g(i,{force:!0})}catch{}if(!d(e))throw a;const o=Y(e);if(o?.transaction_id===r.transaction_id&&s(o.pending_file)===s(y()))return;throw new f(ot(o)?"UPGRADE_IN_PROGRESS":"UPGRADE_LOCK_RECOVERY_REQUIRED",ot(o)?`Another Windows service root is upgrading the shared npm prefix ${s(t)}`:`A stale or incomplete Windows upgrade lock requires recovery at ${e}`)}}function Vt(t=p(),r={}){if(!t?.transaction_id||!t.npm_prefix||!t.npm_lock_file)return!0;const e=B(t.npm_prefix);if(s(t.npm_lock_file)!==e)return!1;if(!d(e))return!0;const n=Y(e);if(!n)return!1;if(n.transaction_id!==t.transaction_id||s(n.pending_file)!==s(y()))return!0;const i=r.remove??g,a=r.sleep??(o=>{Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,o)});for(let o=0;;o+=1)try{return i(e,{recursive:!0,force:!0}),!d(e)}catch(c){const u=c?.code;if((u==="EBUSY"||u==="EPERM"||u==="EACCES")&&o<U.length){a(U[o]);continue}return _(`shared npm-prefix lock release failed at ${e}: ${c instanceof Error?c.message:String(c)}`),!1}}function L(t,r){const e=s(t);return s(r)===`${e}${W}`&&e.includes(`${N}node_modules${N}`)&&I(e)==="grix-connector"}function Bt(t,r){const e=q(s(t),s(r));return e!==""&&e!==".."&&!e.startsWith(`..${N}`)}function j(t){if(!t?.npm_prefix||!t.staging_prefix||!t.staged_package_dir)return!1;const r=s(t.npm_prefix),e=s(t.staging_prefix),n=s(t.staged_package_dir);return m(e)===r&&I(e).startsWith(".grix-upgrade-stage-")&&Bt(e,n)&&I(m(n))==="node_modules"&&I(n)==="grix-connector"}function Yt(t,r){const e=p();!e||!L(t,r)||D({package_dir:s(t),backup_dir:s(r)},e.transaction_id)}function jt(t){if(!L(t.packageDir,t.backupDir))throw new f("UNSAFE_UPGRADE_PATH","Refusing to record an unsafe global package path");if(!j({npm_prefix:t.npmPrefix,staging_prefix:t.stagingPrefix,staged_package_dir:t.stagedPackageDir}))throw new f("UNSAFE_UPGRADE_PATH","Refusing to record an unsafe npm staging path");const r=p();if(!r)throw new f("PENDING_MISSING","Upgrade transaction disappeared during staging");let e;try{const n=JSON.parse(P(l(t.packageDir,"package.json"),"utf-8"));if(n.name!=="grix-connector"||typeof n.version!="string")throw new Error("invalid metadata");e=G(n.version)}catch(n){throw new f("VERSION_VERIFY_FAILED",`Unable to identify the active global package before staging: ${n instanceof Error?n.message:String(n)}`)}D({phase:"staged",activation_strategy:t.activationStrategy,package_from_version:e,npm_prefix:s(t.npmPrefix),package_dir:s(t.packageDir),backup_dir:s(t.backupDir),staged_package_dir:s(t.stagedPackageDir),staging_prefix:s(t.stagingPrefix)},r.transaction_id)}function Ht(t,r,e={}){const n=p();if(!n?.transaction_id)throw new f("PENDING_MISSING","Upgrade transaction disappeared before runtime staging");const i=Z($.base),a=`${i}${tt}`,o=`${i}${rt}`;D({runtime_dir:i,runtime_backup_dir:a,runtime_next_dir:o},n.transaction_id);const c=e.copyTree??yt,u=e.copyFile??St,k=e.sleep??(v=>{Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,v)});for(let v=0;;v+=1)try{S(m(i),{recursive:!0}),g(o,{recursive:!0,force:!0}),S(o,{recursive:!0}),c(l(t.stagedPackageDir,"dist"),l(o,"dist"),{recursive:!0,force:!0}),u(l(t.stagedPackageDir,"package.json"),l(o,"package.json"));const w=l(t.stagedPackageDir,"node_modules");d(w)&&c(w,l(o,"node_modules"),{recursive:!0,force:!0});const E=M(o,"grix-connector",r);O(o,E);return}catch(w){try{g(o,{recursive:!0,force:!0})}catch{}const E=w?.code;if(E==="ENOSPC")throw new f("DISK_FULL",`Insufficient space for the isolated Windows runtime: ${w.message}`);if((E==="EBUSY"||E==="EPERM"||E==="EACCES"||E==="ENOTEMPTY")&&v<et.length){k(et[v]);continue}throw new f("RUNTIME_STAGE_FAILED",`Could not prepare the isolated Windows runtime before shutdown: ${w instanceof Error?w.message:String(w)}`)}}function T(t,r){if(!d(t))return!0;const e=r.remove??g,n=r.sleep??(i=>{Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,i)});for(let i=0;;i+=1)try{if(e(t,{recursive:!0,force:!0}),!d(t))return!0;throw Object.assign(new Error(`path still exists after removal: ${t}`),{code:"EBUSY"})}catch(a){const o=a?.code;if((o==="EBUSY"||o==="EPERM"||o==="EACCES"||o==="ENOTEMPTY")&&i<U.length){n(U[i]);continue}return _(`upgrade artifact cleanup failed at ${t}: ${a instanceof Error?a.message:String(a)}`),!1}}function Sr(t=p(),r={}){if(t?.transaction_id&&p()?.transaction_id!==t.transaction_id)return!1;let e=!0,n=process.platform!=="win32";if(t?.npm_lock_file||t?.npm_prefix){if(!t.transaction_id||!t.npm_lock_file||!t.npm_prefix)return!1;const o=B(t.npm_prefix);if(s(t.npm_lock_file)!==o)return!1;if(d(o)){const c=Y(o);if(c?.transaction_id!==t.transaction_id||s(c.pending_file)!==s(y()))return!1;n=!0}else{if(t.backup_dir&&d(t.backup_dir))return!1;n=!1}}const i=t?.package_dir,a=t?.backup_dir;return n&&i&&a&&L(i,a)&&(e=T(a,r)&&e),j(t)&&(e=T(s(t.staging_prefix),r)&&e),it(t)&&(e=T(s(t.runtime_backup_dir),r)&&e,e=T(s(t.runtime_next_dir),r)&&e),e}function yr(t=p()){const r=t?.package_dir,e=t?.backup_dir;if(!r||!e||!L(r,e)||!d(e))return!1;const n=`${r}${Ft}`;try{return g(n,{recursive:!0,force:!0}),d(r)&&h(r,n),h(e,r),g(n,{recursive:!0,force:!0}),_(`atomic rollback restored ${r}`),!0}catch(i){try{!d(r)&&d(n)&&h(n,r)}catch{}return _(`atomic rollback failed: ${i instanceof Error?i.message:String(i)}`),!1}}function at(t,r={}){const e=y();if(t){const n=p();if(!n)return!0;if(n.transaction_id!==t)return!1}if(d(e))try{(r.unlink??C)(e)}catch{return!1}return!d(e)}function kr(t=p(),r={}){if(!t?.transaction_id)return at(void 0,{unlink:r.unlinkPending});const e=p();if(e?.transaction_id!==t.transaction_id)return!1;const n=e.phase==="finalizing"?e:D({phase:"finalizing"},t.transaction_id);return Vt(n,{remove:r.removeLock,sleep:r.sleep})?at(t.transaction_id,{unlink:r.unlinkPending}):!1}function _(t){const r=`[${new Date().toISOString()}] ${t}
-`;try{xt(nt(),r)}catch{}}function Er(t=4096){const r=nt();if(!d(r))return"";try{const e=P(r,"utf-8");return e.length<=t?e:e.slice(-t)}catch{return""}}function ct(){try{const t=F(["--version"]);return b(t.command,t.args,{encoding:"utf-8",timeout:1e4,windowsHide:!0}).trim()}catch{throw new f("NPM_NOT_FOUND","npm is not available or timed out")}}const R=1e6;function st(){let t;try{t=H(["prefix","-g"])}catch{return R}try{const r=It(t),e=Math.floor(Number(r.bavail)*Number(r.bsize)/(1024*1024));return!Number.isFinite(e)||e<0?R:Math.min(e,R)}catch{return R}}function Pr(){let t;try{t=ct()}catch(e){return{ok:!1,errorCode:"NPM_NOT_FOUND",errorMsg:e instanceof Error?e.message:"npm not available"}}const r=st();return r<100?{ok:!1,errorCode:"DISK_FULL",errorMsg:`Only ${r}MB free disk space (need >= 100MB)`,npmVersion:t,diskFreeMb:r}:{ok:!0,npmVersion:t,diskFreeMb:r}}function Ir(){let t="";try{t=ct()}catch{}let r=R;try{r=st()}catch{}return{npm_version:t,node_version:process.version,disk_free_mb:r,platform:process.platform,arch:process.arch,host_name:$t(),install_id:Dt()}}function M(t,r,e){const n=l(t,"package.json");let i;try{i=JSON.parse(P(n,"utf-8"))}catch{throw new f("VERSION_VERIFY_FAILED",`Unable to read staged package metadata: ${n}`)}if(i.name!==r||i.version?.replace(/^v(?=\d)/,"")!==e)throw new f("VERSION_MISMATCH",`Staged package ${String(i.name)}@${String(i.version)} does not match ${r}@${e}`);return i}function Jt(t){return typeof t.bin=="string"?[[I(t.name),t.bin]]:!t.bin||typeof t.bin!="object"?[]:Object.entries(t.bin).filter(r=>typeof r[1]=="string")}function O(t,r){const e=Jt(r);if(e.length===0)throw new f("VERSION_VERIFY_FAILED",`Staged package ${r.name} has no executable bin`);for(const[,n]of e){const i=l(t,n);if(!d(i))throw new f("VERSION_VERIFY_FAILED",`Staged package entrypoint is missing: ${i}`)}return e}function zt(t,r,e){if(process.platform==="win32")return;const n=l(t,"bin");S(n,{recursive:!0});for(const[i,a]of e){const o=l(n,i);if(d(o))continue;const c=`${o}.grix-upgrade-${process.pid}`;try{C(c)}catch{}vt(q(n,l(r,a)),c),h(c,o)}}function Kt(t){const r=s(t.activePackageDir),e=s(t.stagedPackageDir),n=`${r}${W}`,i=M(e,t.packageName,t.version),a=O(e,i);d(n)&&(d(r)?g(n,{recursive:!0,force:!0}):h(n,r)),Yt(r,n);let o=!1;try{d(r)&&(h(r,n),o=!0),h(e,r);const c=M(r,t.packageName,t.version),u=O(r,c);return zt(t.npmPrefix,r,u),{packageDir:r,backupDir:n}}catch(c){try{d(r)&&g(r,{recursive:!0,force:!0}),o&&d(n)&&h(n,r)}catch{}throw c}}function H(t,r=1e4){try{const e=F(t);return b(e.command,e.args,{encoding:"utf-8",timeout:r,windowsHide:!0}).trim()}catch{throw new f("NPM_NOT_FOUND",`Unable to resolve npm ${t.join(" ")}`)}}function J(t){return H(t)}const ut=Nt.find(t=>t.id==="official")?.url??"https://registry.npmjs.org";async function Xt(t,r,e){const n=["view",`${t}@${r}`,"dist.integrity","--registry",e,"--no-audit","--no-fund"],i=F(n),{stdout:a}=await Q(i.command,i.args,{timeout:1e4,windowsHide:!0});return a.trim()}async function qt(t,r,e,n={}){if(!e)return;let i;try{i=new URL(e).origin}catch{return}if(i===new URL(ut).origin)return;const a=n.fetchIntegrity??Xt;let o;try{o=await a(t,r,ut)}catch(u){_(`integrity cross-check skipped: official registry unreachable (${u instanceof Error?u.message:String(u)})`);return}if(!o){_("integrity cross-check skipped: official registry returned no dist.integrity");return}let c;try{c=await a(t,r,e)}catch(u){_(`integrity cross-check skipped: mirror metadata unreadable (${u instanceof Error?u.message:String(u)})`);return}if(!c){_("integrity cross-check skipped: mirror returned no dist.integrity");return}if(c!==o)throw new f("INTEGRITY_MISMATCH",`Mirror ${e} reports dist.integrity ${c} but official npm reports ${o} for ${t}@${r}`);_(`integrity cross-check passed for ${t}@${r} via ${e}`)}async function ft(t,r,e,n={},i=process.platform==="win32"?"staged":"atomic"){const a=`${t}@${r}`,o=J(["prefix","-g"]),c=J(["root","-g"]);S(o,{recursive:!0}),i==="staged"&&Wt(o);const u=Et(l(o,".grix-upgrade-stage-"));try{_(`staging npm install ${a} under ${u}`);const k=n.installWithMirror??Rt,{registry:v,registryUrl:w}=await k(a,e,10*1024*1024,{prefix:u,...i==="staged"?{env:{...process.env,GRIX_UPGRADE_STAGING:"1"}}:{}});await(n.verifyIntegrityConsensus??qt)(t,r,w);const dt=J(["root","-g","--prefix",u]),A=l(dt,t),lt=M(A,t,r),pt=O(A,lt),gt=l(A,pt[0][1]),z=b(process.execPath,[gt,"--version"],{encoding:"utf-8",timeout:15e3,maxBuffer:2*1024*1024,windowsHide:!0}).trim().replace(/^v(?=\d)/,"");if(z!==r)throw new f("VERSION_MISMATCH",`Staged CLI reported ${z||"<empty>"}, expected ${r}`);const K=l(c,t);return{npmPrefix:o,packageDir:K,backupDir:`${s(K)}${W}`,stagedPackageDir:A,stagingPrefix:u,registry:v}}catch(k){try{g(u,{recursive:!0,force:!0})}catch{}throw k}}async function Zt(t,r,e,n){const i=await ft(t,r,e,n,"atomic");try{const a=Kt({packageName:t,version:r,npmPrefix:i.npmPrefix,activePackageDir:i.packageDir,stagedPackageDir:i.stagedPackageDir});_(`atomic package switch succeeded via ${i.registry}; backup=${a.backupDir}`)}finally{try{g(i.stagingPrefix,{recursive:!0,force:!0})}catch{}}}async function vr(t,r,e=12e4,n={}){r=G(r);const i=p()?.transaction_id,a=`${t}@${r}`,o=n.activationMode??(process.platform==="win32"?"staged":"atomic");_(`npm install -g ${a} starting (${o} staging with mirror fallback)`);try{if(o==="staged"){const c=await ft(t,r,e,n,o);try{jt({...c,activationStrategy:process.platform==="win32"?"wrapper-runtime":"service-start"}),process.platform==="win32"&&Ht(c,r)}catch(u){try{g(c.stagingPrefix,{recursive:!0,force:!0})}catch{}throw u}return _(`staged package verified via ${c.registry}; waiting for guardian activation`),{activationRequired:!0,packageDir:c.packageDir,backupDir:c.backupDir,stagedPackageDir:c.stagedPackageDir,stagingPrefix:c.stagingPrefix}}else return await Zt(t,r,e,n),{activationRequired:!1}}catch(c){if(o==="staged"){const k=p();i&&k?.transaction_id===i&&Gt(k)}if(c instanceof f)throw c;const u=c instanceof Error?c.message:String(c);throw _(`npm install failed: ${u}`),/timed out|ETIMEDOUT/i.test(u)?new f("NPM_TIMEOUT",`npm install timed out after ${e/1e3}s (tried all mirrors): ${u}`):u.includes("EACCES")||u.includes("permission denied")?new f("NPM_INSTALL_FAILED",`Permission denied: ${u}`):u.includes("ENOSPC")||u.includes("no space left")?new f("DISK_FULL",`Disk full: ${u}`):u.includes("404")||u.includes("not found")?new f("NPM_INSTALL_FAILED",`Package not found: ${u}`):new f("NPM_INSTALL_FAILED",u)}}function xr(t){let r;try{r=H(["root","-g"])}catch{throw new f("VERSION_VERIFY_FAILED","Unable to resolve the global npm package directory")}let e;try{const n=l(r,"grix-connector","package.json"),i=JSON.parse(P(n,"utf-8"));if(i.name!=="grix-connector"||typeof i.version!="string"||!i.version.trim())throw new Error("invalid package metadata");e=i.version.trim().replace(/^v(?=\d)/,"")}catch{throw new f("VERSION_VERIFY_FAILED","Unable to read the installed grix-connector version")}if(e!==t)throw new f("VERSION_MISMATCH",`Installed version ${e} does not match expected ${t}`);return e}async function $r(t,r){r=G(r);let e=!1;for(const n of await At())try{const i=["view",`${t}@${r}`,"version","--registry",n.url,"--no-audit","--no-fund"],a=F(i),{stdout:o}=await Q(a.command,a.args,{timeout:8e3,windowsHide:!0});if(o.trim())return!0}catch(i){const a=i,o=a.stderr||a.message||String(i);/ETARGET|No matching version|notarget|E404/i.test(o)&&(e=!0)}return!e}export{f as UpgradeError,Wt as acquireNpmPrefixUpgradeLock,pr as archivePendingJournal,mr as armWindowsUpgradeHandoff,hr as armWindowsUpgradeRollback,st as checkDiskSpace,ct as checkNpmAvailable,Sr as cleanupPendingBackup,Ir as collectEnvInfo,Kt as commitStagedGlobalPackage,Gt as discardPendingStaging,kr as finalizePendingTransaction,Er as getUpgradeLogTail,$r as isVersionAvailable,G as normalizeUpgradeVersion,vr as npmInstall,lr as pendingExists,Pr as preflightCheck,Ht as prepareStagedWindowsRuntime,p as readPending,_r as readPendingPackageVersion,Vt as releasePendingUpgradeLock,at as removePending,wr as removeWindowsHandoffFiles,yr as rollbackPendingInstall,D as updatePending,_ as upgradeLog,dr as upgradeStatusSnapshot,xr as verifyInstalledVersion,qt as verifyMirrorIntegrityConsensus,Ot as windowsRollbackIntentPath,V as windowsWrapperPausePath,gr as writePending,Mt as writePendingData};
+import{execFile as wt,execFileSync as R}from"node:child_process";import{randomUUID as Q}from"node:crypto";import{promisify as yt}from"node:util";import{uptime as St}from"node:os";import{closeSync as Et,copyFileSync as kt,cpSync as It,existsSync as d,linkSync as Pt,mkdirSync as E,mkdtempSync as tt,openSync as vt,readFileSync as P,renameSync as h,rmSync as p,statfsSync as xt,symlinkSync as $t,unlinkSync as H,writeFileSync as x}from"node:fs";import{basename as v,dirname as w,join as l,relative as et,resolve as u,sep as b}from"node:path";import{GRIX_PATHS as $}from"../log/index.js";import{appendRotatingFileSync as Dt}from"../log/rotation.js";import{getMachineName as Nt}from"../util/host-info.js";import{resolveInstallId as At}from"../util/install-id.js";import{NPM_REGISTRIES as Rt,npmInstallWithMirror as rt,probeRegistries as bt,resolveNpmInvocation as M}from"../installer/npm-registry.js";import{resolveWindowsServiceRuntimeDir as nt}from"../../service/service-paths.js";const it=yt(wt);class f extends Error{code;constructor(e,r){super(r),this.name="UpgradeError",this.code=e}}const Ut=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;function O(t){const e=String(t??"").trim().replace(/^v(?=\d)/,"");if(!Ut.test(e))throw new f("INVALID_VERSION",`Invalid connector upgrade version: ${String(t)}`);return e}const Y=".grix-upgrade-backup",Ft=".grix-upgrade-failed",ot=".grix-upgrade-backup",at=".grix-upgrade-next",Lt="upgrade-wrapper.pause.json",Tt="upgrade-rollback.intent.json",Mt=".grix-connector-upgrade.lock",ct=[250,750],C=[100,250,750,1500];function st(){return l($.log,"upgrade.log")}function I(){return l($.data,"upgrade-pending.json")}function le(){let t=null;try{t=_()}catch{return{in_progress:!1}}if(!t)return{in_progress:!1};const e=t.phase??"staged";return{in_progress:!(e==="failed"||e==="rolled_back"),phase:e,from:t.from_version,target:t.target_version}}function de(){return d(I())}function ge(t,e="failed"){const r=new Date().toISOString().replace(/[:.]/g,""),n=l($.data,`upgrade-pending.${e}-${r}.json`);try{return x(n,JSON.stringify(t,null,2),"utf-8"),n}catch{return null}}function _(){const t=I();if(!d(t))return null;try{return JSON.parse(P(t,"utf-8"))}catch{return null}}function pe(t,e,r){const n={from_version:t,target_version:e,upgraded_at:new Date().toISOString(),crash_count:0,transaction_id:Q(),...r?{phase:r}:{}},i=I();E(w(i),{recursive:!0});let a;try{a=vt(i,"wx",384)}catch(o){throw o?.code==="EEXIST"?new f("UPGRADE_IN_PROGRESS","Another connector upgrade transaction is already active"):o}try{x(a,JSON.stringify(n),"utf-8")}catch(o){try{H(i)}catch{}throw o}finally{Et(a)}return n}function _e(t){const e=t.package_dir;if(!e)return null;const r=u(e);if(!r.includes(`${b}node_modules${b}`))return null;try{const n=JSON.parse(P(l(r,"package.json"),"utf-8"));return n.name!=="grix-connector"||typeof n.version!="string"?null:n.version.trim().replace(/^v/,"")||null}catch{return null}}function Ot(t,e){E(w(t),{recursive:!0});const r=`${t}.tmp-${process.pid}`;x(r,JSON.stringify(e),"utf-8"),h(r,t)}function D(t,e){const r=_();if(!r)throw new f("PENDING_MISSING","Upgrade transaction is missing");if(e&&r.transaction_id!==e)throw new f("UPGRADE_TRANSACTION_CHANGED","Upgrade transaction ownership changed");const n={...r,...t};return Ot(I(),n),n}function j(){return l($.data,Lt)}function Ct(){return l($.data,Tt)}function me(t,e){const r=_();if(!r?.transaction_id||r.phase!=="staged"||e&&r.transaction_id!==e)throw new f("INVALID_UPGRADE_STATE","Windows upgrade is not staged for activation");const n=j();E(w(n),{recursive:!0});const i=`${n}.tmp-${process.pid}`;return x(i,JSON.stringify({transaction_id:r.transaction_id}),"utf-8"),h(i,n),D({phase:"handoff_ready",old_pid:t,old_command_line:Gt(t)??void 0,old_boot_time:Date.now()-St()*1e3,activation_started_at:new Date().toISOString(),wrapper_pause_file:n},r.transaction_id)}function Gt(t){if(process.platform!=="win32"||!Number.isInteger(t)||t<=0)return null;try{const e=`${process.env.SystemRoot||"C:\\Windows"}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`;return R(e,["-NoProfile","-NonInteractive","-WindowStyle","Hidden","-Command",`(Get-CimInstance Win32_Process -Filter 'ProcessId=${t}').CommandLine`],{encoding:"utf-8",timeout:3e3,windowsHide:!0}).trim()||null}catch{return null}}function he(t,e){const r=_();if(!r?.transaction_id||r.transaction_id!==t||r.phase!=="verifying")throw new f("INVALID_UPGRADE_STATE","Windows upgrade is not awaiting verification");const n=Ct();E(w(n),{recursive:!0});const i=`${n}.tmp-${process.pid}`;x(i,JSON.stringify({transaction_id:t,message:e}),"utf-8"),h(i,n);const a=j();E(w(a),{recursive:!0});const o=`${a}.tmp-${process.pid}`;return x(o,JSON.stringify({transaction_id:t}),"utf-8"),h(o,a),D({phase:"rolling_back",guardian_pid:void 0,error_code:"STARTUP_CRASH",error_msg:e,wrapper_pause_file:a},t)}function we(){try{p(j(),{force:!0})}catch{}}function Vt(t=_()){if(z(t)){try{p(u(t.staging_prefix),{recursive:!0,force:!0})}catch{}if(ut(t))try{p(u(t.runtime_next_dir),{recursive:!0,force:!0})}catch{}}}function ut(t){if(!t?.runtime_dir||!t.runtime_backup_dir||!t.runtime_next_dir)return!1;const e=u(t.runtime_dir),r=nt($.base),n=l(w(w(r)),"runtime"),i=e===u(n),a=e===u(r)&&/^GrixConnectorDaemon-[0-9a-f]{12}$/.test(v(e))&&v(w(e))==="runtimes"&&v(w(w(e)))==="grix-connector";return(i||a)&&u(t.runtime_backup_dir)===`${e}${ot}`&&u(t.runtime_next_dir)===`${e}${at}`}function J(t){return l(u(t),Mt)}function K(t){try{const e=d(t)&&!d(l(t,"owner.json"))?t:l(t,"owner.json"),r=JSON.parse(P(e,"utf-8"));return typeof r.transaction_id=="string"&&typeof r.pending_file=="string"?r:null}catch{return null}}function ft(t){if(!t||!d(t.pending_file))return!1;try{return JSON.parse(P(t.pending_file,"utf-8")).transaction_id===t.transaction_id}catch{return!0}}function Wt(t){const e=_();if(!e?.transaction_id)throw new f("PENDING_MISSING","Upgrade transaction disappeared before npm staging");const r=J(t),n={transaction_id:e.transaction_id,pending_file:I()};D({npm_prefix:u(t),npm_lock_file:r},e.transaction_id);const i=`${r}.candidate-${e.transaction_id}-${Q()}`;try{x(i,JSON.stringify(n),{encoding:"utf-8",flag:"wx"}),Pt(i,r),p(i,{force:!0})}catch(a){try{p(i,{force:!0})}catch{}if(!d(r))throw a;const o=K(r);if(o?.transaction_id===e.transaction_id&&u(o.pending_file)===u(I()))return;throw new f(ft(o)?"UPGRADE_IN_PROGRESS":"UPGRADE_LOCK_RECOVERY_REQUIRED",ft(o)?`Another Windows service root is upgrading the shared npm prefix ${u(t)}`:`A stale or incomplete Windows upgrade lock requires recovery at ${r}`)}}function Bt(t=_(),e={}){if(!t?.transaction_id||!t.npm_prefix||!t.npm_lock_file)return!0;const r=J(t.npm_prefix);if(u(t.npm_lock_file)!==r)return!1;if(!d(r))return!0;const n=K(r);if(!n)return!1;if(n.transaction_id!==t.transaction_id||u(n.pending_file)!==u(I()))return!0;const i=e.remove??p,a=e.sleep??(o=>{Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,o)});for(let o=0;;o+=1)try{return i(r,{recursive:!0,force:!0}),!d(r)}catch(c){const s=c?.code;if((s==="EBUSY"||s==="EPERM"||s==="EACCES")&&o<C.length){a(C[o]);continue}return m(`shared npm-prefix lock release failed at ${r}: ${c instanceof Error?c.message:String(c)}`),!1}}function G(t,e){const r=u(t);return u(e)===`${r}${Y}`&&r.includes(`${b}node_modules${b}`)&&v(r)==="grix-connector"}function Ht(t,e){const r=et(u(t),u(e));return r!==""&&r!==".."&&!r.startsWith(`..${b}`)}function z(t){if(!t?.npm_prefix||!t.staging_prefix||!t.staged_package_dir)return!1;const e=u(t.npm_prefix),r=u(t.staging_prefix),n=u(t.staged_package_dir);return w(r)===e&&v(r).startsWith(".grix-upgrade-stage-")&&Ht(r,n)&&v(w(n))==="node_modules"&&v(n)==="grix-connector"}function Yt(t,e){const r=_();!r||!G(t,e)||D({package_dir:u(t),backup_dir:u(e)},r.transaction_id)}function jt(t){if(!G(t.packageDir,t.backupDir))throw new f("UNSAFE_UPGRADE_PATH","Refusing to record an unsafe global package path");if(!z({npm_prefix:t.npmPrefix,staging_prefix:t.stagingPrefix,staged_package_dir:t.stagedPackageDir}))throw new f("UNSAFE_UPGRADE_PATH","Refusing to record an unsafe npm staging path");const e=_();if(!e)throw new f("PENDING_MISSING","Upgrade transaction disappeared during staging");let r;try{const n=JSON.parse(P(l(t.packageDir,"package.json"),"utf-8"));if(n.name!=="grix-connector"||typeof n.version!="string")throw new Error("invalid metadata");r=O(n.version)}catch(n){throw new f("VERSION_VERIFY_FAILED",`Unable to identify the active global package before staging: ${n instanceof Error?n.message:String(n)}`)}D({phase:"staged",activation_strategy:t.activationStrategy,package_from_version:r,npm_prefix:u(t.npmPrefix),package_dir:u(t.packageDir),backup_dir:u(t.backupDir),staged_package_dir:u(t.stagedPackageDir),staging_prefix:u(t.stagingPrefix)},e.transaction_id)}function Jt(t,e,r={}){const n=_();if(!n?.transaction_id)throw new f("PENDING_MISSING","Upgrade transaction disappeared before runtime staging");const i=nt($.base),a=`${i}${ot}`,o=`${i}${at}`;D({runtime_dir:i,runtime_backup_dir:a,runtime_next_dir:o},n.transaction_id);const c=r.copyTree??It,s=r.copyFile??kt,g=r.sleep??(k=>{Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,k)});for(let k=0;;k+=1)try{E(w(i),{recursive:!0}),p(o,{recursive:!0,force:!0}),E(o,{recursive:!0}),c(l(t.stagedPackageDir,"dist"),l(o,"dist"),{recursive:!0,force:!0}),s(l(t.stagedPackageDir,"package.json"),l(o,"package.json"));const y=l(t.stagedPackageDir,"node_modules");d(y)&&c(y,l(o,"node_modules"),{recursive:!0,force:!0});const S=F(o,"grix-connector",e);L(o,S);return}catch(y){try{p(o,{recursive:!0,force:!0})}catch{}const S=y?.code;if(S==="ENOSPC")throw new f("DISK_FULL",`Insufficient space for the isolated Windows runtime: ${y.message}`);if((S==="EBUSY"||S==="EPERM"||S==="EACCES"||S==="ENOTEMPTY")&&k<ct.length){g(ct[k]);continue}throw new f("RUNTIME_STAGE_FAILED",`Could not prepare the isolated Windows runtime before shutdown: ${y instanceof Error?y.message:String(y)}`)}}function V(t,e){if(!d(t))return!0;const r=e.remove??p,n=e.sleep??(i=>{Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,i)});for(let i=0;;i+=1)try{if(r(t,{recursive:!0,force:!0}),!d(t))return!0;throw Object.assign(new Error(`path still exists after removal: ${t}`),{code:"EBUSY"})}catch(a){const o=a?.code;if((o==="EBUSY"||o==="EPERM"||o==="EACCES"||o==="ENOTEMPTY")&&i<C.length){n(C[i]);continue}return m(`upgrade artifact cleanup failed at ${t}: ${a instanceof Error?a.message:String(a)}`),!1}}function ye(t=_(),e={}){if(t?.transaction_id&&_()?.transaction_id!==t.transaction_id)return!1;let r=!0,n=process.platform!=="win32";if(t?.npm_lock_file||t?.npm_prefix){if(!t.transaction_id||!t.npm_lock_file||!t.npm_prefix)return!1;const o=J(t.npm_prefix);if(u(t.npm_lock_file)!==o)return!1;if(d(o)){const c=K(o);if(c?.transaction_id!==t.transaction_id||u(c.pending_file)!==u(I()))return!1;n=!0}else{if(t.backup_dir&&d(t.backup_dir))return!1;n=!1}}const i=t?.package_dir,a=t?.backup_dir;return n&&i&&a&&G(i,a)&&(r=V(a,e)&&r),z(t)&&(r=V(u(t.staging_prefix),e)&&r),ut(t)&&(r=V(u(t.runtime_backup_dir),e)&&r,r=V(u(t.runtime_next_dir),e)&&r),r}function Se(t=_()){const e=t?.package_dir,r=t?.backup_dir;if(!e||!r||!G(e,r)||!d(r))return!1;const n=`${e}${Ft}`;try{return p(n,{recursive:!0,force:!0}),d(e)&&h(e,n),h(r,e),p(n,{recursive:!0,force:!0}),m(`atomic rollback restored ${e}`),!0}catch(i){try{!d(e)&&d(n)&&h(n,e)}catch{}return m(`atomic rollback failed: ${i instanceof Error?i.message:String(i)}`),!1}}function lt(t,e={}){const r=I();if(t){const n=_();if(!n)return!0;if(n.transaction_id!==t)return!1}if(d(r))try{(e.unlink??H)(r)}catch{return!1}return!d(r)}function Ee(t=_(),e={}){if(!t?.transaction_id)return lt(void 0,{unlink:e.unlinkPending});const r=_();if(r?.transaction_id!==t.transaction_id)return!1;const n=r.phase==="finalizing"?r:D({phase:"finalizing"},t.transaction_id);return Bt(n,{remove:e.removeLock,sleep:e.sleep})?lt(t.transaction_id,{unlink:e.unlinkPending}):!1}function m(t){const e=`[${new Date().toISOString()}] ${t}
+`;try{Dt(st(),e)}catch{}}function ke(t=4096){const e=st();if(!d(e))return"";try{const r=P(e,"utf-8");return r.length<=t?r:r.slice(-t)}catch{return""}}function dt(){try{const t=M(["--version"]);return R(t.command,t.args,{encoding:"utf-8",timeout:1e4,windowsHide:!0}).trim()}catch{throw new f("NPM_NOT_FOUND","npm is not available or timed out")}}const U=1e6;function gt(){let t;try{t=X(["prefix","-g"])}catch{return U}try{const e=xt(t),r=Math.floor(Number(e.bavail)*Number(e.bsize)/(1024*1024));return!Number.isFinite(r)||r<0?U:Math.min(r,U)}catch{return U}}function Ie(){let t;try{t=dt()}catch(r){return{ok:!1,errorCode:"NPM_NOT_FOUND",errorMsg:r instanceof Error?r.message:"npm not available"}}const e=gt();return e<100?{ok:!1,errorCode:"DISK_FULL",errorMsg:`Only ${e}MB free disk space (need >= 100MB)`,npmVersion:t,diskFreeMb:e}:{ok:!0,npmVersion:t,diskFreeMb:e}}function Pe(){let t="";try{t=dt()}catch{}let e=U;try{e=gt()}catch{}return{npm_version:t,node_version:process.version,disk_free_mb:e,platform:process.platform,arch:process.arch,host_name:Nt(),install_id:At()}}function F(t,e,r){const n=l(t,"package.json");let i;try{i=JSON.parse(P(n,"utf-8"))}catch{throw new f("VERSION_VERIFY_FAILED",`Unable to read staged package metadata: ${n}`)}if(i.name!==e||i.version?.replace(/^v(?=\d)/,"")!==r)throw new f("VERSION_MISMATCH",`Staged package ${String(i.name)}@${String(i.version)} does not match ${e}@${r}`);return i}function Kt(t){return typeof t.bin=="string"?[[v(t.name),t.bin]]:!t.bin||typeof t.bin!="object"?[]:Object.entries(t.bin).filter(e=>typeof e[1]=="string")}function L(t,e){const r=Kt(e);if(r.length===0)throw new f("VERSION_VERIFY_FAILED",`Staged package ${e.name} has no executable bin`);for(const[,n]of r){const i=l(t,n);if(!d(i))throw new f("VERSION_VERIFY_FAILED",`Staged package entrypoint is missing: ${i}`)}return r}function zt(t,e,r){if(process.platform==="win32")return;const n=l(t,"bin");E(n,{recursive:!0});for(const[i,a]of r){const o=l(n,i);if(d(o))continue;const c=`${o}.grix-upgrade-${process.pid}`;try{H(c)}catch{}$t(et(n,l(e,a)),c),h(c,o)}}function Xt(t){const e=u(t.activePackageDir),r=u(t.stagedPackageDir),n=`${e}${Y}`,i=F(r,t.packageName,t.version),a=L(r,i);d(n)&&(d(e)?p(n,{recursive:!0,force:!0}):h(n,e)),Yt(e,n);let o=!1;try{d(e)&&(h(e,n),o=!0),h(r,e);const c=F(e,t.packageName,t.version),s=L(e,c);return zt(t.npmPrefix,e,s),{packageDir:e,backupDir:n}}catch(c){try{d(e)&&p(e,{recursive:!0,force:!0}),o&&d(n)&&h(n,e)}catch{}throw c}}function X(t,e=1e4){try{const r=M(t);return R(r.command,r.args,{encoding:"utf-8",timeout:e,windowsHide:!0}).trim()}catch{throw new f("NPM_NOT_FOUND",`Unable to resolve npm ${t.join(" ")}`)}}function W(t){return X(t)}const pt=Rt.find(t=>t.id==="official")?.url??"https://registry.npmjs.org";async function qt(t,e,r){const n=["view",`${t}@${e}`,"dist.integrity","--registry",r,"--no-audit","--no-fund"],i=M(n),{stdout:a}=await it(i.command,i.args,{timeout:1e4,windowsHide:!0});return a.trim()}async function _t(t,e,r,n={}){if(!r)return;let i;try{i=new URL(r).origin}catch{return}if(i===new URL(pt).origin)return;const a=n.fetchIntegrity??qt;let o;try{o=await a(t,e,pt)}catch(s){m(`integrity cross-check skipped: official registry unreachable (${s instanceof Error?s.message:String(s)})`);return}if(!o){m("integrity cross-check skipped: official registry returned no dist.integrity");return}let c;try{c=await a(t,e,r)}catch(s){m(`integrity cross-check skipped: mirror metadata unreadable (${s instanceof Error?s.message:String(s)})`);return}if(!c){m("integrity cross-check skipped: mirror returned no dist.integrity");return}if(c!==o)throw new f("INTEGRITY_MISMATCH",`Mirror ${r} reports dist.integrity ${c} but official npm reports ${o} for ${t}@${e}`);m(`integrity cross-check passed for ${t}@${e} via ${r}`)}async function mt(t,e,r,n={},i=process.platform==="win32"?"staged":"atomic"){const a=`${t}@${e}`,o=W(["prefix","-g"]),c=W(["root","-g"]);E(o,{recursive:!0}),i==="staged"&&Wt(o);const s=tt(l(o,".grix-upgrade-stage-"));try{m(`staging npm install ${a} under ${s}`);const g=n.installWithMirror??rt,{registry:k,registryUrl:y}=await g(a,r,10*1024*1024,{prefix:s,...i==="staged"?{env:{...process.env,GRIX_UPGRADE_STAGING:"1"}}:{}});await(n.verifyIntegrityConsensus??_t)(t,e,y);const N=W(["root","-g","--prefix",s]),A=l(N,t),B=F(A,t,e),T=L(A,B),ht=l(A,T[0][1]),q=R(process.execPath,[ht,"--version"],{encoding:"utf-8",timeout:15e3,maxBuffer:2*1024*1024,windowsHide:!0}).trim().replace(/^v(?=\d)/,"");if(q!==e)throw new f("VERSION_MISMATCH",`Staged CLI reported ${q||"<empty>"}, expected ${e}`);const Z=l(c,t);return{npmPrefix:o,packageDir:Z,backupDir:`${u(Z)}${Y}`,stagedPackageDir:A,stagingPrefix:s,registry:k}}catch(g){try{p(s,{recursive:!0,force:!0})}catch{}throw g}}async function Zt(t,e,r,n){const i=await mt(t,e,r,n,"atomic");try{const a=Xt({packageName:t,version:e,npmPrefix:i.npmPrefix,activePackageDir:i.packageDir,stagedPackageDir:i.stagedPackageDir});m(`atomic package switch succeeded via ${i.registry}; backup=${a.backupDir}`)}finally{try{p(i.stagingPrefix,{recursive:!0,force:!0})}catch{}}}async function ve(t,e,r=12e4,n={}){e=O(e);const i=_()?.transaction_id,a=`${t}@${e}`,o=n.activationMode??(process.platform==="win32"?"staged":"atomic");m(`npm install -g ${a} starting (${o} staging with mirror fallback)`);try{if(o==="staged"){const c=await mt(t,e,r,n,o);try{jt({...c,activationStrategy:process.platform==="win32"?"wrapper-runtime":"service-start"}),process.platform==="win32"&&Jt(c,e)}catch(s){try{p(c.stagingPrefix,{recursive:!0,force:!0})}catch{}throw s}return m(`staged package verified via ${c.registry}; waiting for guardian activation`),{activationRequired:!0,packageDir:c.packageDir,backupDir:c.backupDir,stagedPackageDir:c.stagedPackageDir,stagingPrefix:c.stagingPrefix}}else return await Zt(t,e,r,n),{activationRequired:!1}}catch(c){if(o==="staged"){const g=_();i&&g?.transaction_id===i&&Vt(g)}if(c instanceof f)throw c;const s=c instanceof Error?c.message:String(c);throw m(`npm install failed: ${s}`),/timed out|ETIMEDOUT/i.test(s)?new f("NPM_TIMEOUT",`npm install timed out after ${r/1e3}s (tried all mirrors): ${s}`):s.includes("EACCES")||s.includes("permission denied")?new f("NPM_INSTALL_FAILED",`Permission denied: ${s}`):s.includes("ENOSPC")||s.includes("no space left")?new f("DISK_FULL",`Disk full: ${s}`):s.includes("404")||s.includes("not found")?new f("NPM_INSTALL_FAILED",`Package not found: ${s}`):new f("NPM_INSTALL_FAILED",s)}}function xe(t){let e;try{e=X(["root","-g"])}catch{throw new f("VERSION_VERIFY_FAILED","Unable to resolve the global npm package directory")}let r;try{const n=l(e,"grix-connector","package.json"),i=JSON.parse(P(n,"utf-8"));if(i.name!=="grix-connector"||typeof i.version!="string"||!i.version.trim())throw new Error("invalid package metadata");r=i.version.trim().replace(/^v(?=\d)/,"")}catch{throw new f("VERSION_VERIFY_FAILED","Unable to read the installed grix-connector version")}if(r!==t)throw new f("VERSION_MISMATCH",`Installed version ${r} does not match expected ${t}`);return r}async function $e(t,e){e=O(e);let r=!1;for(const n of await bt())try{const i=["view",`${t}@${e}`,"version","--registry",n.url,"--no-audit","--no-fund"],a=M(i),{stdout:o}=await it(a.command,a.args,{timeout:8e3,windowsHide:!0});if(o.trim())return!0}catch(i){const a=i,o=a.stderr||a.message||String(i);/ETARGET|No matching version|notarget|E404/i.test(o)&&(r=!0)}return!r}async function De(t,e,r,n=12e4,i={}){r=O(r);const a=`${e}@${r}`,o=l(t,"versions",r);E(l(t,"versions"),{recursive:!0});const c=tt(l(t,"versions",`.stage-${r}-`));m(`installing ${a} into version store under ${c}`);try{const s=i.installWithMirror??rt,{registry:g,registryUrl:k}=await s(a,n,10*1024*1024,{prefix:c,env:{...process.env,GRIX_UPGRADE_STAGING:"1"}});await(i.verifyIntegrityConsensus??_t)(e,r,k);const S=W(["root","-g","--prefix",c]),N=l(S,e),A=F(N,e,r),B=L(N,A),T=R(process.execPath,[l(N,B[0][1]),"--version"],{encoding:"utf-8",timeout:15e3,maxBuffer:2*1024*1024,windowsHide:!0}).trim().replace(/^v(?=\d)/,"");if(T!==r)throw new f("VERSION_MISMATCH",`Installed CLI reported ${T||"<empty>"}, expected ${r}`);return p(o,{recursive:!0,force:!0}),h(N,o),m(`${a} verified via ${g}; placed at ${o}`),{registry:g,versionDir:o}}catch(s){if(s instanceof f)throw s;const g=s instanceof Error?s.message:String(s);throw m(`version store install failed: ${g}`),/timed out|ETIMEDOUT/i.test(g)?new f("NPM_TIMEOUT",`npm install timed out after ${n/1e3}s (tried all mirrors): ${g}`):g.includes("ENOSPC")||g.includes("no space left")?new f("DISK_FULL",`Disk full: ${g}`):new f("NPM_INSTALL_FAILED",g)}finally{try{p(c,{recursive:!0,force:!0})}catch{}}}export{f as UpgradeError,Wt as acquireNpmPrefixUpgradeLock,ge as archivePendingJournal,me as armWindowsUpgradeHandoff,he as armWindowsUpgradeRollback,gt as checkDiskSpace,dt as checkNpmAvailable,ye as cleanupPendingBackup,Pe as collectEnvInfo,Xt as commitStagedGlobalPackage,Vt as discardPendingStaging,Ee as finalizePendingTransaction,ke as getUpgradeLogTail,De as installVersionIntoStore,$e as isVersionAvailable,O as normalizeUpgradeVersion,ve as npmInstall,de as pendingExists,Ie as preflightCheck,Jt as prepareStagedWindowsRuntime,_ as readPending,_e as readPendingPackageVersion,Bt as releasePendingUpgradeLock,lt as removePending,we as removeWindowsHandoffFiles,Se as rollbackPendingInstall,D as updatePending,m as upgradeLog,le as upgradeStatusSnapshot,xe as verifyInstalledVersion,_t as verifyMirrorIntegrityConsensus,Ct as windowsRollbackIntentPath,j as windowsWrapperPausePath,pe as writePending,Ot as writePendingData};

package/dist/core/upgrade/upgrade-checker.js

@@ -1 +1 @@
-import{closeSync as U,existsSync as y,mkdirSync as N,openSync as ee,readFileSync as A,realpathSync as te,renameSync as ae,writeFileSync as re}from"node:fs";import{join as g,dirname as ie}from"node:path";import{spawn as G}from"node:child_process";import{log as f}from"../log/index.js";import{GRIX_PATHS as w}from"../log/index.js";import{resolveClientVersion as T}from"../util/client-version.js";import{UpgradeError as P,armWindowsUpgradeHandoff as O,archivePendingJournal as ne,armWindowsUpgradeRollback as se,cleanupPendingBackup as M,collectEnvInfo as oe,discardPendingStaging as R,finalizePendingTransaction as k,getUpgradeLogTail as de,isVersionAvailable as ce,npmInstall as le,normalizeUpgradeVersion as ue,pendingExists as W,preflightCheck as pe,readPending as E,readPendingPackageVersion as L,removeWindowsHandoffFiles as C,rollbackPendingInstall as he,updatePending as I,upgradeLog as n,verifyInstalledVersion as ge,writePending as fe}from"./npm-upgrader.js";import{isRetriableRegistryError as me,isTransientInstallError as _e}from"../installer/npm-registry.js";const we=360*60*1e3,ve=300*1e3,V=1800*1e3,ye=2,be=3,Se=10,x="grix-connector",q=1e4,F=15,Ae=2e3,Te=8e3,Pe=1e3,ke=2e3,Re=120*1e3,H=1e4,Ee=6e4,Ie=3,$e=600*1e3,De=new Set(["preparing","staged","handoff_ready","activating","verifying","healthy","rolling_back","rolled_back","finalizing","failed"]),B=600*1e3,$=1800*1e3;function D(s,e=B){const t=Date.parse(s.activation_started_at??s.upgraded_at??"");return Number.isNaN(t)?!0:Date.now()-t>e}function j(s){const e=Date.parse(s.verification_started_at??s.activation_started_at??"");return Number.isNaN(e)||Date.now()-e>Re}function Ue(s){if((s.guardian_handback_count??0)>=Ie)return!1;const e=Date.parse(s.guardian_handback_at??"");return Number.isNaN(e)?!0:Date.now()-e>=$e}function Ne(s){if(!Number.isInteger(s)||(s??0)<=0)return!1;try{return process.kill(s,0),!0}catch{return!1}}function z(s){try{return te(s)}catch{return s}}function K(){try{N(g(w.base,"log"),{recursive:!0});const s=ee(g(w.base,"log","upgrade.log"),"a");return{stdio:["ignore",s,s],logFd:s}}catch{return{stdio:"ignore"}}}function S(){const s=g(w.base,"bin"),e=g(s,"upgrade-guardian.mjs");if(y(e))return z(e);const t=g(s,"upgrade-guardian.fallback.mjs");return y(t)?z(t):null}function X(s){if(!Ne(s.guardian_pid))return!1;try{const t=JSON.parse(A(g(w.data,"upgrade-monitor-heartbeat.json"),"utf-8"));if(t.transaction_id===s.transaction_id&&t.pid===s.guardian_pid&&typeof t.updated_at=="number"&&Date.now()-t.updated_at<=H)return!0}catch{}const e=Date.parse(s.guardian_started_at??"");return Number.isFinite(e)&&Date.now()-e<=H}function J(s){return new URL(s.replace(/^wss:/,"https:").replace(/^ws:/,"http:")).origin}function Y(){return g(w.data,"upgrade-state.json")}function Z(){const s=Y();if(!y(s))return{daily_attempts:{},version_attempts:{}};try{return JSON.parse(A(s,"utf-8"))}catch{return{daily_attempts:{},version_attempts:{}}}}function Ge(s){const e=Y();N(ie(e),{recursive:!0});const t=e+".tmp";re(t,JSON.stringify(s),"utf-8"),ae(t,e)}function Q(){return new Date().toISOString().slice(0,10)}class Be{agentConfigs;isBusy;closeAdmission;options;timer=null;initialTimer=null;pendingTimer=null;guardianWaitLoggedAt=0;guardianWaitLoggedPhase="";recordedRollbackFailures=new Set;posixGuardianResumeAttempted=new Set;running=!1;stopped=!1;constructor(e,t,r,a={}){this.agentConfigs=e,this.isBusy=t,this.closeAdmission=r,this.options=a}async start(){await this.handlePendingOnStartup(),this.initialTimer=setTimeout(()=>{this.stopped||(this.runCheck(),!this.stopped&&(this.timer=setInterval(()=>this.runCheck(),we)))},ve)}stop(){this.stopped=!0,this.initialTimer&&(clearTimeout(this.initialTimer),this.initialTimer=null),this.timer&&(clearInterval(this.timer),this.timer=null),this.pendingTimer&&(clearTimeout(this.pendingTimer),this.pendingTimer=null)}triggerCheck(){this.stopped||this.runCheck()}async checkForUpdate(){return this.agentConfigs.length===0?{available:!1}:(await Promise.all(this.agentConfigs.map(r=>this.queryUpgrade(r)))).find(r=>r.available&&r.release)??{available:!1}}async handlePendingOnStartup(){if(!W())return;let e=E();if(!e){n("daemon startup: pending journal is unreadable; preserving it and blocking automatic upgrade for manual recovery");return}if(e.phase&&!De.has(e.phase)&&(e=I({phase:"failed",error_code:"INVALID_UPGRADE_STATE",error_msg:`Unknown upgrade transaction phase: ${String(e.phase)}`},e.transaction_id)),e.phase==="finalizing"){k(e)||(n(`terminal transaction ${e.transaction_id??"legacy"} is waiting for its shared lock to be released`),this.schedulePendingReconcile());return}if(e.phase==="preparing"||e.phase==="staged"){const o=!!(e.wrapper_pause_file&&y(e.wrapper_pause_file));if(e.phase==="staged"&&o){this.schedulePendingReconcile();return}R(e),e=I({phase:"rolled_back",error_code:"UPGRADE_INTERRUPTED",error_msg:"Upgrade stopped before Windows activation started"})}if(e.phase==="verifying"){if(X(e)&&!j(e)){this.schedulePendingReconcile();return}if(j(e)&&e.transaction_id&&["win32","darwin"].includes(this.options.platform??process.platform)&&this.options.requestGracefulShutdown){const o=`Target ${e.target_version} did not become healthy before the Windows verification deadline`;se(e.transaction_id,o),n(`${o}; requesting graceful shutdown for offline rollback`),await this.options.requestGracefulShutdown("upgrade");return}await this.resumeWindowsGuardian(),this.schedulePendingReconcile();return}const t=new Set(["handoff_ready","activating","rolling_back"]);if(e.phase&&t.has(e.phase)){if(X(e)){this.logGuardianWait(e),this.schedulePendingReconcile();return}if(D(e)&&e.transaction_id&&(this.options.platform??process.platform)==="win32"&&this.options.requestGracefulShutdown&&Ue(e)){const o=`Guardian did not settle ${e.phase} for ${e.target_version} before the Windows activation deadline`;I({guardian_handback_count:(e.guardian_handback_count??0)+1,guardian_handback_at:new Date().toISOString()},e.transaction_id),n(`${o}; requesting graceful shutdown so the wrapper re-runs the guardian`),await this.options.requestGracefulShutdown("upgrade");return}if(D(e))n(`daemon startup: guardian did not settle ${e.phase} for ${e.target_version} and cannot be resumed; collapsing the transaction by version verdict`),C(),R(e);else{await this.resumeWindowsGuardian(),this.logGuardianWait(e),this.schedulePendingReconcile();return}}if(e.phase==="failed"){const o=L(e),m=T();if(!o||o!==m){n(`daemon startup: upgrade transaction requires manual recovery: ${e.error_msg??e.error_code??"unknown error"} (runtime=${m}, active package=${o??"unknown"})`);return}const _=ne(e);n(`daemon startup: failed transaction ${e.transaction_id??"legacy"} (${e.error_code??"unknown error"}) is converging on the runnable ${m}${_?`; diagnostics kept at ${_}`:""}`)}const r=L(e),a=T(),i=e.phase==="healthy",d=e.phase==="rolled_back",h=!r||r===e.target_version,c=i?a===e.target_version&&r===e.target_version:!d&&a===e.target_version&&h;if(!c&&h&&!d){if(!D(e)){if((this.options.platform??process.platform)!=="win32"&&r===e.target_version){const o=e.transaction_id??`${e.target_version}@${e.upgraded_at}`;this.posixGuardianResumeAttempted.has(o)||(this.posixGuardianResumeAttempted.add(o),n(`resuming POSIX guardian for stalled activation of ${e.target_version}`),this.startGuardian())}this.logThrottled("posix-activation-wait",`daemon startup: runtime ${a} is waiting for guardian activation of ${e.target_version} (active package=${r??"unknown"})`),this.schedulePendingReconcile();return}n(`daemon startup: activation wait for ${e.target_version} expired (> ${B/6e4}min); no guardian will finish the switch, reporting by version verdict`)}const u=c?{from_version:e.from_version,to_version:e.target_version,status:"success"}:{from_version:e.from_version,to_version:e.target_version,status:"rolled_back",error_code:e.error_code??"STARTUP_CRASH",error_msg:e.error_msg,crash_count:e.crash_count};if(n(c?`daemon startup: version matches target ${e.target_version}, upgrade succeeded`:`daemon startup: runtime=${a}, active package=${r??"unknown"}, target=${e.target_version}; rolled back`),!c){const o=e.transaction_id??`${e.target_version}@${e.upgraded_at}`;this.recordedRollbackFailures.has(o)||(this.recordedRollbackFailures.add(o),this.recordFailure(e.target_version))}if(c){const o=await this.confirmHealthz(Te,i?e.target_version:void 0,i?e.old_pid:void 0,i?e.activation_started_at:void 0);if(i&&!o){n("guardian marked healthy but target-version healthz is not yet observable; retrying reconciliation"),this.schedulePendingReconcile();return}n(o?"healthz confirmed healthy, reporting success":"healthz not confirmed within window; reporting success on version-match (guardian still guards crashes)")}if(!M(e)){n(`terminal transaction ${e.transaction_id??"legacy"} is waiting for antivirus-held artifact cleanup`),this.schedulePendingReconcile();return}if(await this.reportUpgrade(u)){k(e)||(n(`terminal transaction ${e.transaction_id??"legacy"} could not release its shared lock; retrying reconciliation`),this.schedulePendingReconcile());return}this.retryStartupReport(u,e,!1)}schedulePendingReconcile(){this.stopped||this.pendingTimer||(this.pendingTimer=setTimeout(()=>{this.pendingTimer=null,!this.stopped&&this.handlePendingOnStartup().catch(e=>{f.warn("upgrade",`Pending reconciliation failed: ${e instanceof Error?e.message:e}`),this.schedulePendingReconcile()})},ke))}logThrottled(e,t){const r=Date.now();e===this.guardianWaitLoggedPhase&&r-this.guardianWaitLoggedAt<Ee||(this.guardianWaitLoggedPhase=e,this.guardianWaitLoggedAt=r,n(t))}logGuardianWait(e){const t=String(e.phase??"");this.logThrottled(`guardian:${t}`,`transaction ${e.transaction_id??"legacy"} is ${t}; waiting for guardian verdict`)}async resumeWindowsGuardian(){if(this.options.resumeWindowsGuardian){await this.options.resumeWindowsGuardian();return}const e=S();if(!e)return;const{stdio:t,logFd:r}=K();try{G(process.execPath,[e,"activate","--root",w.base],{detached:!0,stdio:t,windowsHide:!0}).unref()}finally{if(r!==void 0)try{U(r)}catch{}}}async retryStartupReport(e,t,r){const a=t?.transaction_id,i=()=>{const d=E();if(!(a&&d?.transaction_id!==a)){if(r&&!M(t)){n(`terminal backup cleanup is still blocked for ${a??"legacy transaction"}`),this.schedulePendingReconcile();return}k(t)||(n(`terminal shared lock release is still blocked for ${a??"legacy transaction"}`),this.schedulePendingReconcile())}};for(let d=2;d<=F;d++){if(this.stopped)return;const h=Ae*(d-1)+Math.floor(Math.random()*1e3);if(await new Promise(c=>setTimeout(c,h)),this.stopped)return;if(await this.reportUpgrade(e)){i();return}}n(`startup report (${e.status}) not delivered after ${F} attempts; clearing pending to unblock future checks`),i()}async confirmHealthz(e,t,r,a){let i="19579";try{const c=g(w.data,"health-port");y(c)&&(i=A(c,"utf-8").trim()||i)}catch{}const d=`http://127.0.0.1:${i}/healthz`,h=Date.now()+e;for(;Date.now()<h&&!this.stopped;){try{const c=await fetch(d,{signal:AbortSignal.timeout(2e3)});if(c.ok){if(!t)return!0;const u=await c.json();if(u.status==="ok"&&u.version===t&&typeof u.pid=="number"&&u.pid>0&&u.pid!==r)try{const o=JSON.parse(A(g(w.base,"daemon-status.json"),"utf-8")),m=Date.parse(a??"");return!!(o.state==="running"&&o.pid===u.pid&&typeof o.updated_at=="number"&&Number.isFinite(m)&&o.updated_at>=m)}catch{return!1}}}catch{}await new Promise(c=>setTimeout(c,Pe))}return!1}async runCheck(){if(!this.running){this.running=!0;try{await this.check()}catch(e){f.error("upgrade",`Check failed: ${e instanceof Error?e.message:e}`)}finally{this.running=!1}}}async check(){if(W()){await this.handlePendingOnStartup();return}if(this.agentConfigs.length===0)return;const r=(await Promise.all(this.agentConfigs.map(l=>this.queryUpgrade(l)))).find(l=>l.available&&l.release)?.release;if(!r)return;const a=T();let i;try{i=ue(r.version)}catch(l){const p=l;await this.reportUpgrade({from_version:a,to_version:String(r.version),status:"failed",error_code:p.code??"INVALID_VERSION",error_msg:p.message});return}const d=r.force,h=this.options.platform??process.platform,c=this.options.env??process.env;if(h==="win32"){const l=S(),p=c.GRIX_WRAPPER_SUPERVISED==="1";if(!p||!l||!this.options.requestGracefulShutdown){const v=`Windows automatic upgrade requires a refreshed service installation (${[...p?[]:["managed wrapper"],...l?[]:["external guardian"],...this.options.requestGracefulShutdown?[]:["graceful shutdown hook"]].join(", ")})`;n(v),await this.reportUpgrade({from_version:a,to_version:i,status:"failed",error_code:"WINDOWS_UPGRADE_UNSUPPORTED",error_msg:v});return}}const u=h==="darwin"&&!!S()&&!!this.options.requestGracefulShutdown;if(h==="darwin"&&!u&&n("macOS transactional upgrade prerequisites missing; falling back to the legacy guardian flow"),!d&&!this.checkRateLimit(i))return;const o=pe();if(!o.ok){await this.reportUpgrade({from_version:a,to_version:i,status:"failed",error_code:o.errorCode,error_msg:o.errorMsg});return}if(!await ce(x,i)){n(`target ${i} not resolvable on any registry yet; skipping this cycle (no failure recorded)`);return}n(`upgrade start: ${a} -> ${i}`);const m=Date.now();let _;try{_=fe(a,i,h==="win32"||u?"preparing":void 0).transaction_id,(await le(x,i,void 0,u?{activationMode:"staged"}:{}))?.activationRequired||ge(i),n("npm install verified, reporting installed"),await this.reportUpgrade({from_version:a,to_version:i,status:"installed",duration_ms:Date.now()-m}),n("shutting down for restart");const p=await this.waitUntilIdle();if(p!=="idle")throw n(`upgrade aborted before lifecycle handoff: ${p}`),this.options.reopenLifecycleAdmission?.(),new P("UPGRADE_ABORTED",`Upgrade was aborted before lifecycle handoff (${p})`);if(h==="win32"){if(!S())throw new P("WINDOWS_UPGRADE_UNSUPPORTED","Windows external guardian disappeared before lifecycle handoff");O(process.pid,_),n("Windows handoff armed; requesting graceful daemon shutdown"),await this.options.requestGracefulShutdown("upgrade")}else if(u){if(!S())throw new P("MACOS_UPGRADE_UNSUPPORTED","macOS guardian helper disappeared before lifecycle handoff");O(process.pid,_),n("macOS handoff armed; spawning guardian before graceful daemon shutdown"),await this.resumeWindowsGuardian(),await this.options.requestGracefulShutdown("upgrade")}else this.startGuardian(),process.kill(process.pid,"SIGTERM")}catch(l){const p=l instanceof P?l.code:"NPM_INSTALL_FAILED",b=l instanceof Error?l.message:String(l);n(`upgrade failed: ${p} ${b}`);const v=E();if(_&&v?.transaction_id===_&&(h==="win32"||u?(C(),R(v)):he(v)&&n("upgrade failed before restart; previous package restored atomically"),k(v)||(n(`failed transaction ${_} is waiting for shared lock release`),this.schedulePendingReconcile()),this.options.reopenLifecycleAdmission?.()),p==="UPGRADE_IN_PROGRESS")return;me(b)||_e(b)||p==="NPM_TIMEOUT"?n(`failure is retriable (${p}); skipping cooldown, will retry next cycle`):this.recordFailure(i),await this.reportUpgrade({from_version:a,to_version:i,status:"failed",error_code:p,error_msg:b,duration_ms:Date.now()-m,upgrade_log:de()})}}async waitUntilIdle(){if(this.isBusy?.()){n(`active tasks detected, waiting up to ${Math.round($/6e4)}min until idle before restart (admission stays open while waiting)`);const e=Date.now()+$,t=5e3,r=600*1e3;let a=Date.now();for(;this.isBusy()&&!this.stopped;){if(Date.now()>=e)return f.warn("upgrade",`Idle wait exceeded ${Math.round($/6e4)}min; abandoning this upgrade attempt. Admission was never closed, so agents kept serving. A busy state that never clears usually means an adapter leaked its busy flag \u2014 check for a turn that never completed.`),n("idle wait timed out; upgrade attempt abandoned without ever closing admission"),"timeout";await new Promise(i=>setTimeout(i,t)),Date.now()-a>=r&&(a=Date.now(),n("still waiting for active tasks to finish before restart"))}}return this.stopped?"stopped":(this.closeAdmission?.(),this.isBusy?.()?(n("work arrived while closing admission; reopening and abandoning this upgrade attempt"),this.options.reopenLifecycleAdmission?.(),"busy-again"):(n("all tasks completed, proceeding with restart"),"idle"))}checkRateLimit(e){const t=Z();if(t.last_failure_at){const d=Date.now()-new Date(t.last_failure_at).getTime();if(d<V)return f.info("upgrade",`In cooldown, ${(V-d)/6e4}m remaining`),!1}const r=t.version_attempts[e]??0;if(r>=be)return f.info("upgrade",`Version ${e} already tried ${r} times, skipping`),!1;const a=Q(),i=t.daily_attempts[a]??0;return i>=ye?(f.info("upgrade",`Already ${i} attempts today, skipping`),!1):!0}recordFailure(e){const t=Z(),r=Q();t.last_failure_at=new Date().toISOString(),t.last_failure_version=e,t.daily_attempts[r]=(t.daily_attempts[r]??0)+1,t.version_attempts[e]=(t.version_attempts[e]??0)+1;for(const i of Object.keys(t.daily_attempts))i<r&&delete t.daily_attempts[i];const a=Object.keys(t.version_attempts);for(const i of a.slice(0,Math.max(0,a.length-Se)))i!==e&&delete t.version_attempts[i];Ge(t)}async queryUpgrade(e){const r=`${J(e.wsUrl)}/v1/agent-api/upgrade/check?`+new URLSearchParams({client_type:"grix-connector",client_version:T(),channel:e.channel??"stable",platform:process.platform,arch:process.arch}).toString();try{const a=await fetch(r,{headers:{Authorization:`Bearer ${e.apiKey}`},signal:AbortSignal.timeout(q)});if(!a.ok)return f.warn("upgrade",`Check API returned ${a.status}`),{available:!1};const i=await a.json();return i.code!==0?{available:!1}:i.data}catch(a){return f.warn("upgrade",`Check API error: ${a instanceof Error?a.message:a}`),{available:!1}}}async reportUpgrade(e){if(this.agentConfigs.length===0)return!1;const t={client_type:"grix-connector",...e.npm_version?e:{...e,...oe()}};return(await Promise.all(this.agentConfigs.map(async a=>{const d=`${J(a.wsUrl)}/v1/agent-api/upgrade/report`;try{return(await fetch(d,{method:"POST",headers:{Authorization:`Bearer ${a.apiKey}`,"Content-Type":"application/json"},body:JSON.stringify(t),signal:AbortSignal.timeout(q)})).ok}catch{return!1}}))).some(a=>a)}startGuardian(){const e=g(w.base,"bin","upgrade-guardian.sh");if(process.platform==="win32"||!y(e)){f.info("upgrade","Guardian not available on this platform, skipping");return}const{stdio:t,logFd:r}=K();try{const a=G(e,[],{detached:!0,stdio:t});a.unref(),n(`guardian started (pid ${a.pid})`)}catch(a){f.warn("upgrade",`Failed to start guardian: ${a instanceof Error?a.message:a}`)}finally{if(r!==void 0)try{U(r)}catch{}}}}export{Be as UpgradeChecker};
+import{closeSync as L,existsSync as y,mkdirSync as W,openSync as he,readFileSync as k,realpathSync as pe,renameSync as fe,writeFileSync as ge}from"node:fs";import{join as g,dirname as me}from"node:path";import{spawn as C}from"node:child_process";import{log as m}from"../log/index.js";import{GRIX_PATHS as _}from"../log/index.js";import{resolveClientVersion as A}from"../util/client-version.js";import{UpgradeError as b,armWindowsUpgradeHandoff as H,archivePendingJournal as _e,armWindowsUpgradeRollback as we,cleanupPendingBackup as x,collectEnvInfo as ve,discardPendingStaging as E,finalizePendingTransaction as R,getUpgradeLogTail as I,isVersionAvailable as F,npmInstall as ye,normalizeUpgradeVersion as be,pendingExists as q,preflightCheck as B,readPending as U,readPendingPackageVersion as j,removeWindowsHandoffFiles as z,rollbackPendingInstall as Se,updatePending as D,upgradeLog as n,verifyInstalledVersion as Te,writePending as Ae}from"./npm-upgrader.js";import{isRetriableRegistryError as K,isTransientInstallError as V}from"../installer/npm-registry.js";import{installVersionIntoStore as Pe}from"./npm-upgrader.js";import{ensureLauncher as ke,markHealthy as Re,pruneVersions as $e,readPointer as X,readRollbackRecord as Ee,readSwitchRecord as Ie,resolveLauncherStore as J,rollbackRecordPath as Ue,switchCurrent as De,switchRecordPath as Ne,versionDir as Y,writeSwitchRecord as Me}from"./version-store.js";import{rmSync as N}from"node:fs";import{randomUUID as Ge}from"node:crypto";const Oe=360*60*1e3,Le=300*1e3,Z=1800*1e3,We=2,Ce=3,He=10,$="grix-connector",Q=1e4,M=15,ee=2e3,te=8e3,xe=1e3,Fe=2e3,qe=120*1e3,re=1e4,Be=6e4,je=3,ze=600*1e3,Ke=9e4,Ve=new Set(["preparing","staged","handoff_ready","activating","verifying","healthy","rolling_back","rolled_back","finalizing","failed"]),ae=600*1e3,G=1800*1e3;function O(o,e=ae){const t=Date.parse(o.activation_started_at??o.upgraded_at??"");return Number.isNaN(t)?!0:Date.now()-t>e}function ie(o){const e=Date.parse(o.verification_started_at??o.activation_started_at??"");return Number.isNaN(e)||Date.now()-e>qe}function Xe(o){if((o.guardian_handback_count??0)>=je)return!1;const e=Date.parse(o.guardian_handback_at??"");return Number.isNaN(e)?!0:Date.now()-e>=ze}function Je(o){if(!Number.isInteger(o)||(o??0)<=0)return!1;try{return process.kill(o,0),!0}catch{return!1}}function ne(o){try{return pe(o)}catch{return o}}function se(){try{W(g(_.base,"log"),{recursive:!0});const o=he(g(_.base,"log","upgrade.log"),"a");return{stdio:["ignore",o,o],logFd:o}}catch{return{stdio:"ignore"}}}function P(){const o=g(_.base,"bin"),e=g(o,"upgrade-guardian.mjs");if(y(e))return ne(e);const t=g(o,"upgrade-guardian.fallback.mjs");return y(t)?ne(t):null}function oe(o){if(!Je(o.guardian_pid))return!1;try{const t=JSON.parse(k(g(_.data,"upgrade-monitor-heartbeat.json"),"utf-8"));if(t.transaction_id===o.transaction_id&&t.pid===o.guardian_pid&&typeof t.updated_at=="number"&&Date.now()-t.updated_at<=re)return!0}catch{}const e=Date.parse(o.guardian_started_at??"");return Number.isFinite(e)&&Date.now()-e<=re}function ce(o){return new URL(o.replace(/^wss:/,"https:").replace(/^ws:/,"http:")).origin}function de(){return g(_.data,"upgrade-state.json")}function le(){const o=de();if(!y(o))return{daily_attempts:{},version_attempts:{}};try{return JSON.parse(k(o,"utf-8"))}catch{return{daily_attempts:{},version_attempts:{}}}}function Ye(o){const e=de();W(me(e),{recursive:!0});const t=e+".tmp";ge(t,JSON.stringify(o),"utf-8"),fe(t,e)}function ue(){return new Date().toISOString().slice(0,10)}class ht{agentConfigs;isBusy;closeAdmission;options;timer=null;initialTimer=null;pendingTimer=null;healthyTimer=null;guardianWaitLoggedAt=0;guardianWaitLoggedPhase="";recordedRollbackFailures=new Set;posixGuardianResumeAttempted=new Set;running=!1;stopped=!1;constructor(e,t,r,a={}){this.agentConfigs=e,this.isBusy=t,this.closeAdmission=r,this.options=a}async start(){await this.handleLauncherStartup(),await this.handlePendingOnStartup(),this.initialTimer=setTimeout(()=>{this.stopped||(this.runCheck(),!this.stopped&&(this.timer=setInterval(()=>this.runCheck(),Oe)))},Le)}stop(){this.stopped=!0,this.initialTimer&&(clearTimeout(this.initialTimer),this.initialTimer=null),this.timer&&(clearInterval(this.timer),this.timer=null),this.pendingTimer&&(clearTimeout(this.pendingTimer),this.pendingTimer=null),this.healthyTimer&&(clearTimeout(this.healthyTimer),this.healthyTimer=null)}triggerCheck(){this.stopped||this.runCheck()}async checkForUpdate(){return this.agentConfigs.length===0?{available:!1}:(await Promise.all(this.agentConfigs.map(r=>this.queryUpgrade(r)))).find(r=>r.available&&r.release)??{available:!1}}async handlePendingOnStartup(){if(!q())return;let e=U();if(!e){n("daemon startup: pending journal is unreadable; preserving it and blocking automatic upgrade for manual recovery");return}if(e.phase&&!Ve.has(e.phase)&&(e=D({phase:"failed",error_code:"INVALID_UPGRADE_STATE",error_msg:`Unknown upgrade transaction phase: ${String(e.phase)}`},e.transaction_id)),e.phase==="finalizing"){R(e)||(n(`terminal transaction ${e.transaction_id??"legacy"} is waiting for its shared lock to be released`),this.schedulePendingReconcile());return}if(e.phase==="preparing"||e.phase==="staged"){const c=!!(e.wrapper_pause_file&&y(e.wrapper_pause_file));if(e.phase==="staged"&&c){this.schedulePendingReconcile();return}E(e),e=D({phase:"rolled_back",error_code:"UPGRADE_INTERRUPTED",error_msg:"Upgrade stopped before Windows activation started"})}if(e.phase==="verifying"){if(oe(e)&&!ie(e)){this.schedulePendingReconcile();return}if(ie(e)&&e.transaction_id&&["win32","darwin"].includes(this.options.platform??process.platform)&&this.options.requestGracefulShutdown){const c=`Target ${e.target_version} did not become healthy before the Windows verification deadline`;we(e.transaction_id,c),n(`${c}; requesting graceful shutdown for offline rollback`),await this.options.requestGracefulShutdown("upgrade");return}await this.resumeWindowsGuardian(),this.schedulePendingReconcile();return}const t=new Set(["handoff_ready","activating","rolling_back"]);if(e.phase&&t.has(e.phase)){if(oe(e)){this.logGuardianWait(e),this.schedulePendingReconcile();return}if(O(e)&&e.transaction_id&&(this.options.platform??process.platform)==="win32"&&this.options.requestGracefulShutdown&&Xe(e)){const c=`Guardian did not settle ${e.phase} for ${e.target_version} before the Windows activation deadline`;D({guardian_handback_count:(e.guardian_handback_count??0)+1,guardian_handback_at:new Date().toISOString()},e.transaction_id),n(`${c}; requesting graceful shutdown so the wrapper re-runs the guardian`),await this.options.requestGracefulShutdown("upgrade");return}if(O(e))n(`daemon startup: guardian did not settle ${e.phase} for ${e.target_version} and cannot be resumed; collapsing the transaction by version verdict`),z(),E(e);else{await this.resumeWindowsGuardian(),this.logGuardianWait(e),this.schedulePendingReconcile();return}}if(e.phase==="failed"){const c=j(e),f=A();if(!c||c!==f){n(`daemon startup: upgrade transaction requires manual recovery: ${e.error_msg??e.error_code??"unknown error"} (runtime=${f}, active package=${c??"unknown"})`);return}const S=_e(e);n(`daemon startup: failed transaction ${e.transaction_id??"legacy"} (${e.error_code??"unknown error"}) is converging on the runnable ${f}${S?`; diagnostics kept at ${S}`:""}`)}const r=j(e),a=A(),i=e.phase==="healthy",l=e.phase==="rolled_back",d=!r||r===e.target_version,s=i?a===e.target_version&&r===e.target_version:!l&&a===e.target_version&&d;if(!s&&d&&!l){if(!O(e)){if((this.options.platform??process.platform)!=="win32"&&r===e.target_version){const c=e.transaction_id??`${e.target_version}@${e.upgraded_at}`;this.posixGuardianResumeAttempted.has(c)||(this.posixGuardianResumeAttempted.add(c),n(`resuming POSIX guardian for stalled activation of ${e.target_version}`),this.startGuardian())}this.logThrottled("posix-activation-wait",`daemon startup: runtime ${a} is waiting for guardian activation of ${e.target_version} (active package=${r??"unknown"})`),this.schedulePendingReconcile();return}n(`daemon startup: activation wait for ${e.target_version} expired (> ${ae/6e4}min); no guardian will finish the switch, reporting by version verdict`)}const u=s?{from_version:e.from_version,to_version:e.target_version,status:"success"}:{from_version:e.from_version,to_version:e.target_version,status:"rolled_back",error_code:e.error_code??"STARTUP_CRASH",error_msg:e.error_msg,crash_count:e.crash_count};if(n(s?`daemon startup: version matches target ${e.target_version}, upgrade succeeded`:`daemon startup: runtime=${a}, active package=${r??"unknown"}, target=${e.target_version}; rolled back`),!s){const c=e.transaction_id??`${e.target_version}@${e.upgraded_at}`;this.recordedRollbackFailures.has(c)||(this.recordedRollbackFailures.add(c),this.recordFailure(e.target_version))}if(s){const c=await this.confirmHealthz(te,i?e.target_version:void 0,i?e.old_pid:void 0,i?e.activation_started_at:void 0);if(i&&!c){n("guardian marked healthy but target-version healthz is not yet observable; retrying reconciliation"),this.schedulePendingReconcile();return}n(c?"healthz confirmed healthy, reporting success":"healthz not confirmed within window; reporting success on version-match (guardian still guards crashes)")}if(!x(e)){n(`terminal transaction ${e.transaction_id??"legacy"} is waiting for antivirus-held artifact cleanup`),this.schedulePendingReconcile();return}if(await this.reportUpgrade(u)){R(e)||(n(`terminal transaction ${e.transaction_id??"legacy"} could not release its shared lock; retrying reconciliation`),this.schedulePendingReconcile());return}this.retryStartupReport(u,e,!1)}schedulePendingReconcile(){this.stopped||this.pendingTimer||(this.pendingTimer=setTimeout(()=>{this.pendingTimer=null,!this.stopped&&this.handlePendingOnStartup().catch(e=>{m.warn("upgrade",`Pending reconciliation failed: ${e instanceof Error?e.message:e}`),this.schedulePendingReconcile()})},Fe))}logThrottled(e,t){const r=Date.now();e===this.guardianWaitLoggedPhase&&r-this.guardianWaitLoggedAt<Be||(this.guardianWaitLoggedPhase=e,this.guardianWaitLoggedAt=r,n(t))}logGuardianWait(e){const t=String(e.phase??"");this.logThrottled(`guardian:${t}`,`transaction ${e.transaction_id??"legacy"} is ${t}; waiting for guardian verdict`)}async resumeWindowsGuardian(){if(this.options.resumeWindowsGuardian){await this.options.resumeWindowsGuardian();return}const e=P();if(!e)return;const{stdio:t,logFd:r}=se();try{C(process.execPath,[e,"activate","--root",_.base],{detached:!0,stdio:t,windowsHide:!0}).unref()}finally{if(r!==void 0)try{L(r)}catch{}}}async retryStartupReport(e,t,r){const a=t?.transaction_id,i=()=>{const l=U();if(!(a&&l?.transaction_id!==a)){if(r&&!x(t)){n(`terminal backup cleanup is still blocked for ${a??"legacy transaction"}`),this.schedulePendingReconcile();return}R(t)||(n(`terminal shared lock release is still blocked for ${a??"legacy transaction"}`),this.schedulePendingReconcile())}};for(let l=2;l<=M;l++){if(this.stopped)return;const d=ee*(l-1)+Math.floor(Math.random()*1e3);if(await new Promise(s=>setTimeout(s,d)),this.stopped)return;if(await this.reportUpgrade(e)){i();return}}n(`startup report (${e.status}) not delivered after ${M} attempts; clearing pending to unblock future checks`),i()}async confirmHealthz(e,t,r,a){let i="19579";try{const s=g(_.data,"health-port");y(s)&&(i=k(s,"utf-8").trim()||i)}catch{}const l=`http://127.0.0.1:${i}/healthz`,d=Date.now()+e;for(;Date.now()<d&&!this.stopped;){try{const s=await fetch(l,{signal:AbortSignal.timeout(2e3)});if(s.ok){if(!t)return!0;const u=await s.json();if(u.status==="ok"&&u.version===t&&typeof u.pid=="number"&&u.pid>0&&u.pid!==r)try{const c=JSON.parse(k(g(_.base,"daemon-status.json"),"utf-8")),f=Date.parse(a??"");return!!(c.state==="running"&&c.pid===u.pid&&typeof c.updated_at=="number"&&Number.isFinite(f)&&c.updated_at>=f)}catch{return!1}}}catch{}await new Promise(s=>setTimeout(s,xe))}return!1}async runCheck(){if(!this.running){this.running=!0;try{await this.check()}catch(e){m.error("upgrade",`Check failed: ${e instanceof Error?e.message:e}`)}finally{this.running=!1}}}async check(){if(q()){await this.handlePendingOnStartup();return}if(this.agentConfigs.length===0)return;const r=(await Promise.all(this.agentConfigs.map(h=>this.queryUpgrade(h)))).find(h=>h.available&&h.release)?.release;if(!r)return;const a=A();let i;try{i=be(r.version)}catch(h){const p=h;await this.reportUpgrade({from_version:a,to_version:String(r.version),status:"failed",error_code:p.code??"INVALID_VERSION",error_msg:p.message});return}const l=r.force,d=this.options.platform??process.platform,s=this.options.env??process.env,u=J(s);if(u&&this.options.requestGracefulShutdown){await this.runLauncherUpgrade(u,a,i,!!l);return}if(d==="win32"){const h=P(),p=s.GRIX_WRAPPER_SUPERVISED==="1";if(!p||!h||!this.options.requestGracefulShutdown){const w=`Windows automatic upgrade requires a refreshed service installation (${[...p?[]:["managed wrapper"],...h?[]:["external guardian"],...this.options.requestGracefulShutdown?[]:["graceful shutdown hook"]].join(", ")})`;n(w),await this.reportUpgrade({from_version:a,to_version:i,status:"failed",error_code:"WINDOWS_UPGRADE_UNSUPPORTED",error_msg:w});return}}const c=d==="darwin"&&!!P()&&!!this.options.requestGracefulShutdown;if(d==="darwin"&&!c&&n("macOS transactional upgrade prerequisites missing; falling back to the legacy guardian flow"),!l&&!this.checkRateLimit(i))return;const f=B();if(!f.ok){await this.reportUpgrade({from_version:a,to_version:i,status:"failed",error_code:f.errorCode,error_msg:f.errorMsg});return}if(!await F($,i)){n(`target ${i} not resolvable on any registry yet; skipping this cycle (no failure recorded)`);return}n(`upgrade start: ${a} -> ${i}`);const S=Date.now();let v;try{v=Ae(a,i,d==="win32"||c?"preparing":void 0).transaction_id,(await ye($,i,void 0,c?{activationMode:"staged"}:{}))?.activationRequired||Te(i),n("npm install verified, reporting installed"),await this.reportUpgrade({from_version:a,to_version:i,status:"installed",duration_ms:Date.now()-S}),n("shutting down for restart");const p=await this.waitUntilIdle();if(p!=="idle")throw n(`upgrade aborted before lifecycle handoff: ${p}`),this.options.reopenLifecycleAdmission?.(),new b("UPGRADE_ABORTED",`Upgrade was aborted before lifecycle handoff (${p})`);if(d==="win32"){if(!P())throw new b("WINDOWS_UPGRADE_UNSUPPORTED","Windows external guardian disappeared before lifecycle handoff");H(process.pid,v),n("Windows handoff armed; requesting graceful daemon shutdown"),await this.options.requestGracefulShutdown("upgrade")}else if(c){if(!P())throw new b("MACOS_UPGRADE_UNSUPPORTED","macOS guardian helper disappeared before lifecycle handoff");H(process.pid,v),n("macOS handoff armed; spawning guardian before graceful daemon shutdown"),await this.resumeWindowsGuardian(),await this.options.requestGracefulShutdown("upgrade")}else this.startGuardian(),process.kill(process.pid,"SIGTERM")}catch(h){const p=h instanceof b?h.code:"NPM_INSTALL_FAILED",T=h instanceof Error?h.message:String(h);n(`upgrade failed: ${p} ${T}`);const w=U();if(v&&w?.transaction_id===v&&(d==="win32"||c?(z(),E(w)):Se(w)&&n("upgrade failed before restart; previous package restored atomically"),R(w)||(n(`failed transaction ${v} is waiting for shared lock release`),this.schedulePendingReconcile()),this.options.reopenLifecycleAdmission?.()),p==="UPGRADE_IN_PROGRESS")return;K(T)||V(T)||p==="NPM_TIMEOUT"?n(`failure is retriable (${p}); skipping cooldown, will retry next cycle`):this.recordFailure(i),await this.reportUpgrade({from_version:a,to_version:i,status:"failed",error_code:p,error_msg:T,duration_ms:Date.now()-S,upgrade_log:I()})}}async runLauncherUpgrade(e,t,r,a){if(!a&&!this.checkRateLimit(r))return;const i=B();if(!i.ok){await this.reportUpgrade({from_version:t,to_version:r,status:"failed",error_code:i.errorCode,error_msg:i.errorMsg});return}if(!await F($,r)){n(`target ${r} not resolvable on any registry yet; skipping this cycle (no failure recorded)`);return}n(`launcher upgrade start: ${t} -> ${r} (store=${e})`);const l=Date.now();try{await Pe(e,$,r),await this.reportUpgrade({from_version:t,to_version:r,status:"installed",duration_ms:Date.now()-l});const d=await this.waitUntilIdle();if(d!=="idle")throw this.options.reopenLifecycleAdmission?.(),new b("UPGRADE_ABORTED",`Upgrade was aborted before lifecycle handoff (${d})`);De(e,r),Me(e,{transaction_id:Ge(),from_version:t,to_version:r,started_at:new Date().toISOString()}),n(`current pointer switched to ${r}; requesting restart via launcher`),await this.options.requestGracefulShutdown("upgrade-switch")}catch(d){const s=d instanceof b?d.code:"NPM_INSTALL_FAILED",u=d instanceof Error?d.message:String(d);if(n(`launcher upgrade failed: ${s} ${u}`),X(e,"current")!==r)try{N(Y(e,r),{recursive:!0,force:!0})}catch{}K(u)||V(u)||s==="NPM_TIMEOUT"?n(`failure is retriable (${s}); skipping cooldown, will retry next cycle`):this.recordFailure(r),await this.reportUpgrade({from_version:t,to_version:r,status:"failed",error_code:s,error_msg:u,duration_ms:Date.now()-l,upgrade_log:I()})}}async handleLauncherStartup(){const e=this.options.env??process.env,t=J(e);if(!t)return;const r=A();try{ke(t,Y(t,r))}catch(s){n(`failed to refresh launcher: ${s instanceof Error?s.message:String(s)}`)}this.healthyTimer=setTimeout(()=>{this.healthyTimer=null;try{Re(t,r)}catch(s){n(`failed to write health marker: ${s instanceof Error?s.message:String(s)}`)}},Ke),this.healthyTimer.unref?.();const a=Ee(t),i=Ie(t);if(!a&&!i)return;const l=()=>{try{N(Ue(t),{force:!0})}catch{}try{N(Ne(t),{force:!0})}catch{}const s=$e(t);s.length>0&&n(`pruned version directories: ${s.join(", ")}`)};let d;if(a&&a.from_version===r){const s=`exit_code=${a.exit_code??"n/a"} crashes=${a.crash_count??"n/a"} uptime_ms=${a.uptime_ms??"n/a"}`;n(`daemon startup: launcher rolled back ${a.to_version} -> ${r} (${s})`),this.recordFailure(a.to_version),d={from_version:a.from_version,to_version:a.to_version,status:"rolled_back",error_code:"STARTUP_CRASH",error_msg:`Target ${a.to_version} crashed before becoming healthy (${s}); launcher restored ${r}`,crash_count:a.crash_count,upgrade_log:I()}}else if(i&&i.to_version===r&&X(t,"current")===r){n(`daemon startup: running switched target ${r}, upgrade succeeded`);const s=await this.confirmHealthz(te);n(s?"healthz confirmed healthy, reporting success":"healthz not confirmed within window; reporting success on version-match"),d={from_version:i.from_version,to_version:i.to_version,status:"success"}}else if(i&&i.from_version===r)n(`daemon startup: expected ${i.to_version} but ${r} is running; reporting rolled_back`),this.recordFailure(i.to_version),d={from_version:i.from_version,to_version:i.to_version,status:"rolled_back",error_code:"STARTUP_CRASH",error_msg:`Launcher is running ${r} instead of switched target ${i.to_version}`};else{n(`daemon startup: stale launcher records (self=${r}); discarding`),l();return}if(await this.reportUpgrade(d)){l();return}(async()=>{for(let s=2;s<=M;s++){if(this.stopped||(await new Promise(u=>setTimeout(u,ee*(s-1)+Math.floor(Math.random()*1e3))),this.stopped))return;if(await this.reportUpgrade(d))break}l()})()}async waitUntilIdle(){if(this.isBusy?.()){n(`active tasks detected, waiting up to ${Math.round(G/6e4)}min until idle before restart (admission stays open while waiting)`);const e=Date.now()+G,t=5e3,r=600*1e3;let a=Date.now();for(;this.isBusy()&&!this.stopped;){if(Date.now()>=e)return m.warn("upgrade",`Idle wait exceeded ${Math.round(G/6e4)}min; abandoning this upgrade attempt. Admission was never closed, so agents kept serving. A busy state that never clears usually means an adapter leaked its busy flag \u2014 check for a turn that never completed.`),n("idle wait timed out; upgrade attempt abandoned without ever closing admission"),"timeout";await new Promise(i=>setTimeout(i,t)),Date.now()-a>=r&&(a=Date.now(),n("still waiting for active tasks to finish before restart"))}}return this.stopped?"stopped":(this.closeAdmission?.(),this.isBusy?.()?(n("work arrived while closing admission; reopening and abandoning this upgrade attempt"),this.options.reopenLifecycleAdmission?.(),"busy-again"):(n("all tasks completed, proceeding with restart"),"idle"))}checkRateLimit(e){const t=le();if(t.last_failure_at){const l=Date.now()-new Date(t.last_failure_at).getTime();if(l<Z)return m.info("upgrade",`In cooldown, ${(Z-l)/6e4}m remaining`),!1}const r=t.version_attempts[e]??0;if(r>=Ce)return m.info("upgrade",`Version ${e} already tried ${r} times, skipping`),!1;const a=ue(),i=t.daily_attempts[a]??0;return i>=We?(m.info("upgrade",`Already ${i} attempts today, skipping`),!1):!0}recordFailure(e){const t=le(),r=ue();t.last_failure_at=new Date().toISOString(),t.last_failure_version=e,t.daily_attempts[r]=(t.daily_attempts[r]??0)+1,t.version_attempts[e]=(t.version_attempts[e]??0)+1;for(const i of Object.keys(t.daily_attempts))i<r&&delete t.daily_attempts[i];const a=Object.keys(t.version_attempts);for(const i of a.slice(0,Math.max(0,a.length-He)))i!==e&&delete t.version_attempts[i];Ye(t)}async queryUpgrade(e){const r=`${ce(e.wsUrl)}/v1/agent-api/upgrade/check?`+new URLSearchParams({client_type:"grix-connector",client_version:A(),channel:e.channel??"stable",platform:process.platform,arch:process.arch}).toString();try{const a=await fetch(r,{headers:{Authorization:`Bearer ${e.apiKey}`},signal:AbortSignal.timeout(Q)});if(!a.ok)return m.warn("upgrade",`Check API returned ${a.status}`),{available:!1};const i=await a.json();return i.code!==0?{available:!1}:i.data}catch(a){return m.warn("upgrade",`Check API error: ${a instanceof Error?a.message:a}`),{available:!1}}}async reportUpgrade(e){if(this.agentConfigs.length===0)return!1;const t={client_type:"grix-connector",...e.npm_version?e:{...e,...ve()}};return(await Promise.all(this.agentConfigs.map(async a=>{const l=`${ce(a.wsUrl)}/v1/agent-api/upgrade/report`;try{return(await fetch(l,{method:"POST",headers:{Authorization:`Bearer ${a.apiKey}`,"Content-Type":"application/json"},body:JSON.stringify(t),signal:AbortSignal.timeout(Q)})).ok}catch{return!1}}))).some(a=>a)}startGuardian(){const e=g(_.base,"bin","upgrade-guardian.sh");if(process.platform==="win32"||!y(e)){m.info("upgrade","Guardian not available on this platform, skipping");return}const{stdio:t,logFd:r}=se();try{const a=C(e,[],{detached:!0,stdio:t});a.unref(),n(`guardian started (pid ${a.pid})`)}catch(a){m.warn("upgrade",`Failed to start guardian: ${a instanceof Error?a.message:a}`)}finally{if(r!==void 0)try{L(r)}catch{}}}}export{ht as UpgradeChecker};

package/dist/core/upgrade/version-store.js

@@ -0,0 +1,2 @@
+import{cpSync as A,existsSync as p,mkdirSync as f,readdirSync as x,readFileSync as i,renameSync as v,rmSync as a,writeFileSync as _}from"node:fs";import{join as o}from"node:path";const m="launcher.mjs",b=75,L=/LAUNCHER_TEMPLATE_VERSION\s*=\s*(\d+)/;function S(r){return o(r,m)}function y(r,e){return o(r,"versions",e)}function P(r,e){return o(y(r,e),"dist","grix.js")}function w(r,e){return o(r,"health",`${e}.ok`)}function R(r){return o(r,"upgrade.json")}function T(r){return o(r,"rollback.json")}function d(r,e){try{return i(o(r,e),"utf8").trim()||null}catch{return null}}function l(r,e){const t=`${r}.tmp-${process.pid}`;_(t,e,"utf8"),v(t,r)}function g(r,e,t){f(r,{recursive:!0}),l(o(r,e),`${t}
+`)}function E(r){try{const e=i(r,"utf8").match(L);return e?Number(e[1]):0}catch{return-1}}function I(r){for(const e of[o(r,"scripts",m),o(r,"dist",m)])if(p(e))return e;return null}function j(r,e){const t=I(e);if(!t)return!1;const n=S(r),c=E(t);return E(n)>=c||(f(r,{recursive:!0}),l(n,i(t,"utf8"))),!0}function C(r,e,t){const n=y(r,t);if(p(P(r,t)))return n;const c=`${n}.staging-${process.pid}`;a(c,{recursive:!0,force:!0}),f(c,{recursive:!0});try{for(const s of["package.json","dist","node_modules","scripts"]){const u=o(e,s);p(u)&&A(u,o(c,s),{recursive:!0,force:!0})}a(n,{recursive:!0,force:!0}),v(c,n)}finally{a(c,{recursive:!0,force:!0})}return n}function $(r,e){const t=d(r,"current");return t&&t!==e&&g(r,"previous",t),g(r,"current",e),t}function H(r,e){l(R(r),JSON.stringify(e))}function U(r){return k(R(r))}function F(r){return k(T(r))}function k(r){try{return JSON.parse(i(r,"utf8"))}catch{return null}}function J(r,e){f(o(r,"health"),{recursive:!0}),l(w(r,e),new Date().toISOString())}function M(r){const e=new Set([d(r,"current"),d(r,"previous")].filter(Boolean)),t=o(r,"versions"),n=[];let c=[];try{c=x(t)}catch{return n}for(const u of c)if(!e.has(u))try{a(o(t,u),{recursive:!0,force:!0}),n.push(u)}catch{}const s=o(r,"health");try{for(const u of x(s)){const h=u.replace(/\.ok$/,"");e.has(h)||a(o(s,u),{force:!0})}}catch{}return n}function G(r=process.env){if(r.GRIX_LAUNCHER_MANAGED!=="1")return null;const e=String(r.GRIX_LAUNCHER_STORE??"").trim();return e&&p(S(e))?e:null}function X(r,e){const t=s=>{const[u,h]=s.replace(/^v(?=\d)/,"").split("-",2);return{nums:u.split(".").map(N=>Number.parseInt(N,10)||0),pre:h??""}},n=t(r),c=t(e);for(let s=0;s<Math.max(n.nums.length,c.nums.length);s+=1){const u=(n.nums[s]??0)-(c.nums[s]??0);if(u!==0)return u<0?-1:1}return n.pre===c.pre?0:n.pre?c.pre?n.pre<c.pre?-1:1:-1:1}function B(r){try{const e=JSON.parse(i(o(r,"package.json"),"utf8"));return typeof e.version=="string"?e.version.replace(/^v(?=\d)/,""):null}catch{return null}}export{m as LAUNCHER_FILE,b as RESTART_EXIT_CODE,C as bootstrapVersionFromPackage,X as compareVersions,j as ensureLauncher,w as healthMarkerPath,S as launcherPath,J as markHealthy,I as packagedLauncherPath,M as pruneVersions,E as readLauncherTemplateVersion,B as readPackageVersionAt,d as readPointer,F as readRollbackRecord,U as readSwitchRecord,G as resolveLauncherStore,T as rollbackRecordPath,$ as switchCurrent,R as switchRecordPath,y as versionDir,P as versionEntry,g as writePointer,H as writeSwitchRecord};

package/dist/grix.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import P from"node:path";import{writeFileSync as te}from"node:fs";import{Manager as xe}from"./manager.js";import{ensureGrixDirs as Ee,initLogger as De,log as s,installProcessLogRotation as be,setConsoleOutput as re}from"./core/log/index.js";import{HealthServer as ve,bindPortOrFail as ne}from"./core/runtime/index.js";import{writePidFile as Pe,removePidFile as O,readDaemonPid as Ie}from"./core/runtime/index.js";import{resolveRuntimePaths as j}from"./core/config/index.js";import{supportsNonMitmRelayConfig as ke}from"./core/config/provider-env.js";import{ServiceManager as Ce}from"./service/service-manager.js";import{migrateWindowsWrapper as Te}from"./service/windows-wrapper-migration.js";import{killProcessesByCommandLine as Ue,isWindowsElevated as $e,shouldSweepWindowsWrappers as _e}from"./service/process-control.js";import{buildServiceID as Fe}from"./service/service-paths.js";import{acquireDaemonLock as Le,isLockHolderSameProcess as Oe,readDaemonLock as K,releaseDaemonLock as H}from"./runtime/daemon-lock.js";import{writeDaemonStatus as N,removeDaemonStatus as He}from"./runtime/service-state.js";import{AdminServer as Me,generateToken as Be,writeTokenFile as Ne}from"./core/admin/index.js";import{initSentry as Ge,closeSentry as W,reportFatal as V}from"./core/observability/sentry.js";import{initProxyManager as je,getProxyManager as u,relayHostsForClientType as oe,RelayStateStore as Ke,SecretStore as We}from"./core/proxy/index.js";import{stopProxyIfNobodyNeedsIt as ae,switchAgentRelayMode as X,reconcileRelayStates as se}from"./core/proxy/relay-orchestration.js";import{setAgentRelayCredential as ie,RelayCredentialError as le}from"./core/proxy/relay-credential.js";import{RelayFetchError as ce,RelayToggleCoordinator as Ve}from"./core/proxy/relay-credential-fetch.js";import{applyHermesProfileRelay as Xe,clearHermesProfileRelay as qe,discoverHermesProfiles as Je}from"./core/proxy/hermes-profile-relay.js";import{disableRelayCredential as Ye,enableRelayCredential as ze,RelayRouteError as de}from"./core/proxy/relay-credential-router.js";import{upgradeStatusSnapshot as Qe}from"./core/upgrade/npm-upgrader.js";import{resolveClientVersion as Ze}from"./core/util/client-version.js";import{parseCliArgs as et}from"./core/util/cli-args.js";const{command:D,flags:S,unknownFlags:q}=et(process.argv.slice(2));if(q.length>0&&(console.error(`Unknown option${q.length>1?"s":""}: ${q.map(o=>`--${o}`).join(", ")}
-Run \`grix-connector --help\` to see the supported commands and options.`),process.exit(1)),S.version&&(console.log(Ze()),process.exit(0)),S.help&&(console.log(`grix-connector \u2014 Unified AI Agent Bridge
+import x from"node:path";import{writeFileSync as te}from"node:fs";import{Manager as xe}from"./manager.js";import{ensureGrixDirs as De,initLogger as be,log as s,installProcessLogRotation as Pe,setConsoleOutput as re}from"./core/log/index.js";import{HealthServer as Ie,bindPortOrFail as ne}from"./core/runtime/index.js";import{writePidFile as ke,removePidFile as O,readDaemonPid as Ce}from"./core/runtime/index.js";import{resolveRuntimePaths as j}from"./core/config/index.js";import{supportsNonMitmRelayConfig as Te}from"./core/config/provider-env.js";import{ServiceManager as oe}from"./service/service-manager.js";import{RESTART_EXIT_CODE as ae}from"./core/upgrade/version-store.js";import{migrateWindowsWrapper as Ue}from"./service/windows-wrapper-migration.js";import{killProcessesByCommandLine as _e,isWindowsElevated as $e,shouldSweepWindowsWrappers as Le}from"./service/process-control.js";import{buildServiceID as Fe}from"./service/service-paths.js";import{acquireDaemonLock as Oe,isLockHolderSameProcess as He,readDaemonLock as K,releaseDaemonLock as H}from"./runtime/daemon-lock.js";import{writeDaemonStatus as N,removeDaemonStatus as Me}from"./runtime/service-state.js";import{AdminServer as Be,generateToken as Ne,writeTokenFile as Ge}from"./core/admin/index.js";import{initSentry as je,closeSentry as W,reportFatal as X}from"./core/observability/sentry.js";import{initProxyManager as Ke,getProxyManager as f,relayHostsForClientType as se,RelayStateStore as We,SecretStore as Xe}from"./core/proxy/index.js";import{stopProxyIfNobodyNeedsIt as ie,switchAgentRelayMode as V,reconcileRelayStates as le}from"./core/proxy/relay-orchestration.js";import{setAgentRelayCredential as ce,RelayCredentialError as de}from"./core/proxy/relay-credential.js";import{RelayFetchError as pe,RelayToggleCoordinator as Ve}from"./core/proxy/relay-credential-fetch.js";import{applyHermesProfileRelay as qe,clearHermesProfileRelay as Je,discoverHermesProfiles as Ye}from"./core/proxy/hermes-profile-relay.js";import{disableRelayCredential as ze,enableRelayCredential as Qe,RelayRouteError as ge}from"./core/proxy/relay-credential-router.js";import{upgradeStatusSnapshot as Ze}from"./core/upgrade/npm-upgrader.js";import{resolveClientVersion as et}from"./core/util/client-version.js";import{parseCliArgs as tt}from"./core/util/cli-args.js";const{command:D,flags:R,unknownFlags:q}=tt(process.argv.slice(2));if(q.length>0&&(console.error(`Unknown option${q.length>1?"s":""}: ${q.map(r=>`--${r}`).join(", ")}
+Run \`grix-connector --help\` to see the supported commands and options.`),process.exit(1)),R.version&&(console.log(et()),process.exit(0)),R.help&&(console.log(`grix-connector \u2014 Unified AI Agent Bridge
 
 Usage: grix-connector <command> [options]
 
@@ -34,9 +34,9 @@ Examples:
   grix-connector start                    # Start as system service
   grix-connector status                   # Check service status
   grix-connector restart                  # Restart the service
-`),process.exit(0)),D==="reload"){const o=Ie();o||(console.error("reload failed: daemon is not running (no pid file)"),process.exit(1));try{process.kill(o,0)}catch{console.error(`reload failed: daemon process ${o} is not running (stale pid file)`),process.exit(1)}{const p=K(j().daemonLockFile);p&&p.pid===o&&!Oe(p)&&(console.error(`reload failed: pid ${o} has been reused by another process (stale pid file)`),process.exit(1))}try{process.kill(o,"SIGHUP"),console.log(JSON.stringify({ok:!0,signaled:o},null,2)),process.exit(0)}catch(p){console.error(`reload failed: ${p instanceof Error?p.message:p}`),process.exit(1)}}const pe=["start","stop","restart","status"];if(D&&pe.includes(D)){process.platform==="win32"&&["start","stop","restart"].includes(D)&&!$e()&&console.warn(`Warning: Not running as administrator. Task Scheduler registration is skipped;
+`),process.exit(0)),D==="reload"){const r=Ce();r||(console.error("reload failed: daemon is not running (no pid file)"),process.exit(1));try{process.kill(r,0)}catch{console.error(`reload failed: daemon process ${r} is not running (stale pid file)`),process.exit(1)}{const d=K(j().daemonLockFile);d&&d.pid===r&&!He(d)&&(console.error(`reload failed: pid ${r} has been reused by another process (stale pid file)`),process.exit(1))}try{process.kill(r,"SIGHUP"),console.log(JSON.stringify({ok:!0,signaled:r},null,2)),process.exit(0)}catch(d){console.error(`reload failed: ${d instanceof Error?d.message:d}`),process.exit(1)}}const ue=["start","stop","restart","status"];if(D&&ue.includes(D)){process.platform==="win32"&&["start","stop","restart"].includes(D)&&!$e()&&console.warn(`Warning: Not running as administrator. Task Scheduler registration is skipped;
 using Startup folder auto-start instead. For full Task Scheduler integration,
-right-click the terminal and select "Run as administrator".`);const o=j(),p=S["config-dir"]??(S.profile?P.join(o.configDir,S.profile):void 0),R=P.resolve(process.argv[1]||`${o.rootDir}/dist/grix.js`),y=new Ce({cliPath:R,nodePath:process.execPath});try{let d;switch(D){case"start":(await y.status({rootDir:o.rootDir})).installed?d=await y.start({rootDir:o.rootDir}):d=await y.install({rootDir:o.rootDir,configDir:p});break;case"stop":d=await y.stop({rootDir:o.rootDir});break;case"restart":(await y.status({rootDir:o.rootDir})).installed?d=await y.restart({rootDir:o.rootDir}):d=await y.install({rootDir:o.rootDir,configDir:p});break;case"status":d=await y.status({rootDir:o.rootDir});break}console.log(JSON.stringify(d,null,2)),process.exit(0)}catch(d){console.error(`${D} failed: ${d instanceof Error?d.message:d}`),process.exit(1)}}else D&&(console.error(`Unknown command: ${D}
-Valid commands: ${pe.join(", ")}`),process.exit(1));const l=j(),tt=S["config-dir"]??(S.profile?`${l.configDir}/${S.profile}`:void 0),r=new xe({requestGracefulShutdown:()=>{C("upgrade")}}),M=new ve,ge=Be(),b=new Me(ge);let J=!1,k;async function ue(o){process.stderr.write(o.message+`
-`),s.error("main",o.message.replace(/\n/g," \u2014 "));const p=K(l.daemonLockFile);p?.pid===process.pid&&p.instance_id===k&&await N(l.daemonStatusFile,{state:"failed",pid:process.pid,instance_id:k,updated_at:Date.now(),reason:`port_bind_${o.kind}:${o.label}:${o.port}`}).catch(()=>{}),await W(),H(l.daemonLockFile).catch(()=>{}),O(),process.exit(1)}async function C(o){if(J)return;J=!0,s.info("main",`Received ${o}, shutting down...`),M.markShuttingDown();const p=setTimeout(()=>{s.error("main","Shutdown timed out, forcing exit"),H(l.daemonLockFile).catch(()=>{}),O(),process.exit(2)},1e4);try{await r.stop(),await u()?.stop().catch(()=>{}),await b.stop(),await M.stop(),await W(),await H(l.daemonLockFile),await He(l.daemonStatusFile).catch(()=>{}),clearTimeout(p),O(),s.info("main","Shutdown complete"),process.exit(0)}catch(R){s.error("main",`Shutdown error: ${R}`),H(l.daemonLockFile).catch(()=>{}),O(),process.exit(2)}}async function rt(){if(Ee(),De(),be(l.stdoutLogFile,l.stderrLogFile),re(!1),_e()){const e=Fe(l.rootDir,"win32");await Ue(e,{platform:"win32"})}try{k=(await Le(l.daemonLockFile,l.rootDir)).instance_id}catch(e){console.error(e instanceof Error?e.message:e),process.exit(1)}if(await Ge(),Pe(),s.info("main",`grix-connector starting (PID ${process.pid})`),await N(l.daemonStatusFile,{state:"starting",pid:process.pid,instance_id:k,updated_at:Date.now()}),(await Te({rootDir:l.rootDir,requestGracefulShutdown:()=>{C("wrapper-migration")}}).catch(e=>(s.warn("main",`Windows wrapper migration failed: ${e instanceof Error?e.message:e}`),null)))?.handoffStarted)return;const p=parseInt(S["health-port"]??process.env.GRIX_HEALTH_PORT??"19579",10);{const e=await ne({label:"health",port:p,envVar:"GRIX_HEALTH_PORT",cliFlag:"health-port",start:a=>M.start(a)});e&&await ue(e)}const R=P.join(l.dataDir,"health-port");te(R,String(p),"utf-8"),process.on("SIGINT",()=>C("SIGINT")),process.on("SIGTERM",()=>C("SIGTERM")),process.on("SIGHUP",()=>{J||(s.info("main","Received SIGHUP, reloading config..."),r.reload().then(e=>s.info("main",`reload done: ${JSON.stringify(e)}`)).catch(e=>s.error("main",`reload failed: ${e instanceof Error?e.message:e}`)))});let y="",d=0,T;process.on("uncaughtException",e=>{const a=e instanceof Error?e.stack??e.message:String(e);a===y?(d++,(d<=3||d%100===0)&&s.error("main",`Uncaught exception (x${d}): ${a}`)):(d>3&&s.error("main",`Previous exception repeated ${d} times total`),y=a,d=1,s.error("main",`Uncaught exception: ${e instanceof Error?e.stack:e}`),T||(T=setTimeout(()=>{d>3&&s.error("main",`Previous exception repeated ${d} times total`),y="",d=0,T=void 0},1e4).unref())),!fe(e)&&(V(e,"uncaughtException"),C("uncaughtException"))}),process.on("unhandledRejection",e=>{s.error("main",`Unhandled rejection: ${e}`),!fe(e)&&(V(e,"unhandledRejection"),C("unhandledRejection"))});const U=je(l.dataDir);await U.clearRuntimeState();const v=new Ke(P.join(l.dataDir,"proxy","relay-state.json"),{warn:e=>s.warn("main",e)}),B=new We(P.join(l.dataDir,"secrets"));r.setRelaySecretResolver(e=>B.get(e));const $={hasDirectConfig:e=>r.hasDirectRelayConfig(e),clearDirectConfig:(e,a)=>r.setAgentProvider(e,void 0,{deferRestart:a?.deferRestart===!0})},G=()=>({pm:u(),agents:r,direct:$,store:v,secrets:B}),_=U.getRelayAgents();if(_.length>0)try{await U.startIfAnyRelayAgent(),s.info("main",`mitm proxy started for relay agents: ${_.join(", ")} (per-agent; others stay direct)`)}catch(e){s.error("main",`mitm proxy FAILED to start (relay agents: ${_.join(", ")}): ${e}. These agents will REFUSE to start (they must not silently fall back to your own account). Fix the proxy or turn relay off for them. Other agents are unaffected.`)}else s.info("main",'mitm proxy idle (no agent has Grix relay enabled; enable: PUT /api/proxy/agents/<name>/enabled {"enabled":true})');let F=null;if(u()){const e=async()=>{const t=u();t&&await ae(t,r)&&s.info("main","no agent uses Grix relay anymore; mitm proxy stopped")};r.setRelayEnvSettledHandler(()=>{const t=u();t&&se(t,$,v),e().catch(n=>{s.warn("main",`failed to stop idle mitm proxy: ${n}`)})});const a=()=>{const t=u(),n=t.getRelayAgents(),i=t.getDegradedRelayAgents();return{enabled:n.length>0,relayAgents:n,staleRelayAgents:r.getAgentsWithStaleRelayEnv(),degradedRelayAgents:i,relayState:v.list(),runtime:t.getRuntimeInfo(),config:t.getConfigSnapshot()}},c=new Ve,A={status:()=>a(),setAgentRelay:async(t,n,i)=>{const g=u(),w={info:m=>s.info("main",m),warn:m=>s.warn("main",m)},h=m=>r.getAgentsStatus().find(x=>x.name===m),f=h(t);if(!n){c.cancel(t);const m=await c.runExclusive(t,async()=>{const x=await X(G(),w,{agentName:t,target:"off"});return{...a(),restarted:x.restarted,busy:x.busy,...x.pending?{pending:x.pending}:{}}});return r.reportRelayStateLocalChange(t),m}if(!f)throw Object.assign(new Error(`Agent "${t}" not found`),{code:"NOT_FOUND"});if(!ke(f.clientType)&&oe(f.clientType).length===0)throw Object.assign(new Error(`client type "${f.clientType??""}" does not support Grix relay`),{code:"UNSUPPORTED_CLIENT_TYPE"});const L=await c.runExclusive(t,async()=>{const m=c.epoch(t),x=h(t);if(!x)throw Object.assign(new Error(`Agent "${t}" not found`),{code:"NOT_FOUND"});const Q=String(x.agentId??"").trim();if(!Q)throw new le(`local agent "${t}" has no agent_id registered`,"MISSING_AGENT_ID");const Z=c.waitCancelled(t,m);let I;try{I=await Promise.race([r.fetchRelayCredential(t,{model:i}),Z.promise.then(()=>{throw new ce("relay enable cancelled by a later disable","CANCELLED")})])}finally{Z.dispose()}c.assertCurrent(t,m);const{restarted:he,busy:we,pending:ee}=await ie(g,r,h,w,{localName:t,agentId:Q,virtualKey:I.apiKey,anthropicBaseUrl:I.anthropicBaseUrl,openaiBaseUrl:I.openaiBaseUrl,model:i,...I.directRelay!==void 0?{directRelay:I.directRelay}:{}},(Se,Re,Ae)=>r.setAgentProvider(Se,Re,{deferRestart:Ae?.deferRestart===!0}),{store:v,secrets:B,direct:$});if(c.epoch(t)!==m)throw await X(G(),w,{agentName:t,target:"off"}),new ce("relay enable cancelled by a later disable","CANCELLED");return{...a(),restarted:he,busy:we,...ee?{pending:ee}:{}}});return r.reportRelayStateLocalChange(t),L},setAgentRelayCredential:async(t,n)=>{const i=u(),g=r.getAgentsStatus(),{restarted:w,busy:h,pending:f}=await ie(i,r,E=>g.find(L=>L.name===E),{info:E=>s.info("main",E),warn:E=>s.warn("main",E)},{localName:t,agentId:n.agentId,virtualKey:n.virtualKey,anthropicBaseUrl:n.anthropicBaseUrl,openaiBaseUrl:n.openaiBaseUrl,model:n.model,...n.directRelay!==void 0?{directRelay:n.directRelay}:{}},(E,L,m)=>r.setAgentProvider(E,L,{deferRestart:m?.deferRestart===!0}),{store:v,secrets:B,direct:$});return r.reportRelayStateLocalChange(t),{...a(),restarted:w,busy:h,...f?{pending:f}:{}}},disableAll:async()=>{const t=u(),n={info:g=>s.info("main",g),warn:g=>s.warn("main",g)},i=new Set([...t.getRelayAgents(),...r.getDirectRelayConfigAgentNames(),...Object.keys(v.list())]);for(const g of i)c.cancel(g);for(const g of i)await c.runExclusive(g,()=>X(G(),n,{agentName:g,target:"off"})),r.reportRelayStateLocalChange(g);return await ae(t,r),a()},setRoute:async(t,n)=>{const i=n,g=u();return g.setRoute({routeKey:t,targetBaseUrl:i.targetBaseUrl,...i.headers?{headers:i.headers}:{},...i.model?{model:i.model}:{},...i.modelMap?{modelMap:i.modelMap}:{},...i.passthrough?{passthrough:!0}:{},...i.relayOnly?{relayOnly:!0}:{},...i.codexResponsesToChat?{codexResponsesToChat:!0}:{}}),await g.persistConfig(),a()},deleteRoute:async t=>{const n=u();n.deleteRoute(t),await n.persistConfig()},setDefaultRoute:async t=>{const n=u();return n.setDefaultRouteKey(t),await n.persistConfig(),a()},setInterceptHosts:async t=>{const n=u();return n.setInterceptHosts(t),await n.persistConfig(),a()}};F=A,b.setProxyHandler(A),r.setRelayStateApplier({getLocalState:t=>{const n=u();if(n.getRelayAgents().includes(t)){const g=r.getAgentsStatus().find(f=>f.name===t),w=`grix-gateway-${String(g?.clientType??"").trim().toLowerCase()}`;return{enabled:!0,model:n.getConfigSnapshot().routes?.find(f=>f.routeKey===w)?.model?.trim()||void 0}}const i=r.getAgentProvider(t);return i?.api_key?.trim()?{enabled:!0,model:i.model?.trim()||void 0}:{enabled:!1}},applyEnable:async(t,n,i)=>{const g=r.getAgentsStatus().find(f=>f.name===t),w=String(g?.agentId??"").trim();if(!w)throw new le(`local agent "${t}" has no agent_id registered`,"MISSING_AGENT_ID");const h=await A.setAgentRelayCredential(t,{agentId:w,virtualKey:n.apiKey,anthropicBaseUrl:n.anthropicBaseUrl,openaiBaseUrl:n.openaiBaseUrl,model:i??n.model,...n.directRelay!==void 0?{directRelay:n.directRelay}:{}});return{restarted:h.restarted===!0,busy:h.busy===!0,...h.pending?{pending:h.pending}:{}}},applyDisable:async t=>{const n=await A.setAgentRelay(t,!1);return{restarted:n.restarted===!0,busy:n.busy===!0,...n.pending?{pending:n.pending}:{}}}})}if(M.setStatusProvider(()=>r.getAgentsStatus()),M.setMetaProvider(()=>{const e=r.getAgentsStatus();return{ws:{connected:e.filter(a=>a.wsConnected===!0).length,total:e.length},upgrade:Qe()}}),await r.start(tt),_.length>0){const e=r.getAgentsStatus();for(const a of _){const c=e.find(t=>t.name===a);if(!c)continue;const A=oe(c.clientType);A.length!==0&&await U.setAgentRelayEnabled(a,!0,{relayHosts:A}).catch(t=>{s.warn("main",`failed to reconcile relay hosts for "${a}": ${t}`)})}}se(U,$,v);const Y=parseInt(S["admin-port"]??process.env.GRIX_ADMIN_PORT??"19580",10);b.setAgentHandler({list:()=>r.getAgentsStatus(),add:e=>r.addAgent(e),remove:e=>r.removeAgent(e),restart:e=>r.restartAgent(e),reload:()=>r.reload()}),b.setUpgradeHandler({check:()=>r.checkUpgrade(),trigger:()=>r.triggerUpgrade()}),b.setProbeHandler({probeAll:e=>r.probeAll(e),probeOne:(e,a)=>r.probeOne(e,a)}),b.setInstallHandler({listInstallable:()=>r.listInstallable(),installAgent:e=>r.installAgent(e),getInstallProgress:e=>r.getInstallProgress(e)});const z={listAgents:()=>r.getAgentsStatus(),enableManaged:(e,a,c)=>{if(!F)throw new de(`agent "${e}" needs the MITM proxy for relay, but it is not running`,"PROXY_UNAVAILABLE");return F.setAgentRelayCredential(e,{agentId:a,virtualKey:c.virtualKey,anthropicBaseUrl:c.anthropicBaseUrl,openaiBaseUrl:c.openaiBaseUrl,model:c.model,...c.directRelay!==void 0?{directRelay:c.directRelay}:{}})},disableManaged:e=>{if(!F)throw new de(`agent "${e}" needs the MITM proxy for relay, but it is not running`,"PROXY_UNAVAILABLE");return F.setAgentRelay(e,!1)},enableHermesProfile:(e,a)=>Xe({agentId:e,baseUrl:a.openaiBaseUrl??"",virtualKey:a.virtualKey,model:a.model??""}),disableHermesProfile:e=>qe(e)};b.setRelayCredentialHandler({listHermesProfiles:()=>Je(),enable:async(e,a)=>{const{target:c,result:A}=await ze(z,e,a);return{target:c,...A}},disable:async e=>{const{target:a,result:c}=await Ye(z,e);return{target:a,...c}}});{const e=await ne({label:"admin",port:Y,envVar:"GRIX_ADMIN_PORT",cliFlag:"admin-port",start:a=>b.start(a)});e&&await ue(e)}const me=P.join(l.dataDir,"admin-token"),ye=P.join(l.dataDir,"admin-port");Ne(me,ge),te(ye,String(Y),"utf-8"),await N(l.daemonStatusFile,{state:"running",pid:process.pid,instance_id:k,updated_at:Date.now()}),process.send&&process.send("ready"),s.info("main","grix-connector ready")}rt().catch(async o=>{const p=`Fatal: ${o instanceof Error?o.stack??o.message:String(o)}`;try{process.stderr.write(`${p}
-`)}catch{}re(!1),s.error("main",p),V(o,"startup");const R=K(l.daemonLockFile);R?.pid===process.pid&&R.instance_id===k&&await N(l.daemonStatusFile,{state:"failed",pid:process.pid,instance_id:R.instance_id,updated_at:Date.now(),reason:"startup_error"}).catch(()=>{}),await W(),H(l.daemonLockFile).catch(()=>{}),O(),process.exit(1)});const nt=new Set(["ECONNRESET","ECONNREFUSED","ETIMEDOUT","EPIPE","EAI_AGAIN","ENOTFOUND","EHOSTUNREACH","ENETUNREACH","EIO"]);function fe(o){return o instanceof Error&&"code"in o?nt.has(o.code):!1}
+right-click the terminal and select "Run as administrator".`);const r=j(),d=R["config-dir"]??(R.profile?x.join(r.configDir,R.profile):void 0),S=x.resolve(process.argv[1]||`${r.rootDir}/dist/grix.js`),u=new oe({cliPath:S,nodePath:process.execPath});try{let p;switch(D){case"start":(await u.status({rootDir:r.rootDir})).installed?p=await u.start({rootDir:r.rootDir}):p=await u.install({rootDir:r.rootDir,configDir:d});break;case"stop":p=await u.stop({rootDir:r.rootDir});break;case"restart":(await u.status({rootDir:r.rootDir})).installed?p=await u.restart({rootDir:r.rootDir}):p=await u.install({rootDir:r.rootDir,configDir:d});break;case"status":p=await u.status({rootDir:r.rootDir});break}console.log(JSON.stringify(p,null,2)),process.exit(0)}catch(p){console.error(`${D} failed: ${p instanceof Error?p.message:p}`),process.exit(1)}}else D&&(console.error(`Unknown command: ${D}
+Valid commands: ${ue.join(", ")}`),process.exit(1));const i=j(),rt=R["config-dir"]??(R.profile?`${i.configDir}/${R.profile}`:void 0),n=new xe({requestGracefulShutdown:r=>{C(r)}}),M=new Ie,fe=Ne(),b=new Be(fe);let J=!1,k;async function me(r){process.stderr.write(r.message+`
+`),s.error("main",r.message.replace(/\n/g," \u2014 "));const d=K(i.daemonLockFile);d?.pid===process.pid&&d.instance_id===k&&await N(i.daemonStatusFile,{state:"failed",pid:process.pid,instance_id:k,updated_at:Date.now(),reason:`port_bind_${r.kind}:${r.label}:${r.port}`}).catch(()=>{}),await W(),H(i.daemonLockFile).catch(()=>{}),O(),process.exit(1)}async function C(r){if(J)return;J=!0,s.info("main",`Received ${r}, shutting down...`),M.markShuttingDown();const d=r==="upgrade-switch"?ae:2,S=setTimeout(()=>{s.error("main","Shutdown timed out, forcing exit"),H(i.daemonLockFile).catch(()=>{}),O(),process.exit(d)},1e4);try{await n.stop(),await f()?.stop().catch(()=>{}),await b.stop(),await M.stop(),await W(),await H(i.daemonLockFile),await Me(i.daemonStatusFile).catch(()=>{}),clearTimeout(S),O(),s.info("main","Shutdown complete"),process.exit(r==="upgrade-switch"?ae:0)}catch(u){s.error("main",`Shutdown error: ${u}`),H(i.daemonLockFile).catch(()=>{}),O(),process.exit(d)}}async function nt(){if(De(),be(),Pe(i.stdoutLogFile,i.stderrLogFile),re(!1),Le()){const e=Fe(i.rootDir,"win32");await _e(e,{platform:"win32"})}try{k=(await Oe(i.daemonLockFile,i.rootDir)).instance_id}catch(e){console.error(e instanceof Error?e.message:e),process.exit(1)}if(await je(),ke(),s.info("main",`grix-connector starting (PID ${process.pid})`),await N(i.daemonStatusFile,{state:"starting",pid:process.pid,instance_id:k,updated_at:Date.now()}),process.env.GRIX_LAUNCHER_MANAGED!=="1"&&await new oe({cliPath:x.resolve(process.argv[1]??""),nodePath:process.execPath}).adoptLauncher(i.rootDir).then(e=>{e&&s.info("main","Service definition now points at the version-store launcher")}).catch(e=>{s.warn("main",`Launcher adoption failed: ${e instanceof Error?e.message:e}`)}),(await Ue({rootDir:i.rootDir,requestGracefulShutdown:()=>{C("wrapper-migration")}}).catch(e=>(s.warn("main",`Windows wrapper migration failed: ${e instanceof Error?e.message:e}`),null)))?.handoffStarted)return;const d=parseInt(R["health-port"]??process.env.GRIX_HEALTH_PORT??"19579",10);{const e=await ne({label:"health",port:d,envVar:"GRIX_HEALTH_PORT",cliFlag:"health-port",start:a=>M.start(a)});e&&await me(e)}const S=x.join(i.dataDir,"health-port");te(S,String(d),"utf-8"),process.on("SIGINT",()=>C("SIGINT")),process.on("SIGTERM",()=>C("SIGTERM")),process.on("SIGHUP",()=>{J||(s.info("main","Received SIGHUP, reloading config..."),n.reload().then(e=>s.info("main",`reload done: ${JSON.stringify(e)}`)).catch(e=>s.error("main",`reload failed: ${e instanceof Error?e.message:e}`)))});let u="",p=0,T;process.on("uncaughtException",e=>{const a=e instanceof Error?e.stack??e.message:String(e);a===u?(p++,(p<=3||p%100===0)&&s.error("main",`Uncaught exception (x${p}): ${a}`)):(p>3&&s.error("main",`Previous exception repeated ${p} times total`),u=a,p=1,s.error("main",`Uncaught exception: ${e instanceof Error?e.stack:e}`),T||(T=setTimeout(()=>{p>3&&s.error("main",`Previous exception repeated ${p} times total`),u="",p=0,T=void 0},1e4).unref())),!ye(e)&&(X(e,"uncaughtException"),C("uncaughtException"))}),process.on("unhandledRejection",e=>{s.error("main",`Unhandled rejection: ${e}`),!ye(e)&&(X(e,"unhandledRejection"),C("unhandledRejection"))});const U=Ke(i.dataDir);await U.clearRuntimeState();const P=new We(x.join(i.dataDir,"proxy","relay-state.json"),{warn:e=>s.warn("main",e)}),B=new Xe(x.join(i.dataDir,"secrets"));n.setRelaySecretResolver(e=>B.get(e));const _={hasDirectConfig:e=>n.hasDirectRelayConfig(e),clearDirectConfig:(e,a)=>n.setAgentProvider(e,void 0,{deferRestart:a?.deferRestart===!0})},G=()=>({pm:f(),agents:n,direct:_,store:P,secrets:B}),$=U.getRelayAgents();if($.length>0)try{await U.startIfAnyRelayAgent(),s.info("main",`mitm proxy started for relay agents: ${$.join(", ")} (per-agent; others stay direct)`)}catch(e){s.error("main",`mitm proxy FAILED to start (relay agents: ${$.join(", ")}): ${e}. These agents will REFUSE to start (they must not silently fall back to your own account). Fix the proxy or turn relay off for them. Other agents are unaffected.`)}else s.info("main",'mitm proxy idle (no agent has Grix relay enabled; enable: PUT /api/proxy/agents/<name>/enabled {"enabled":true})');let L=null;if(f()){const e=async()=>{const t=f();t&&await ie(t,n)&&s.info("main","no agent uses Grix relay anymore; mitm proxy stopped")};n.setRelayEnvSettledHandler(()=>{const t=f();t&&le(t,_,P),e().catch(o=>{s.warn("main",`failed to stop idle mitm proxy: ${o}`)})});const a=()=>{const t=f(),o=t.getRelayAgents(),l=t.getDegradedRelayAgents();return{enabled:o.length>0,relayAgents:o,staleRelayAgents:n.getAgentsWithStaleRelayEnv(),degradedRelayAgents:l,relayState:P.list(),runtime:t.getRuntimeInfo(),config:t.getConfigSnapshot()}},c=new Ve,A={status:()=>a(),setAgentRelay:async(t,o,l)=>{const g=f(),w={info:y=>s.info("main",y),warn:y=>s.warn("main",y)},h=y=>n.getAgentsStatus().find(E=>E.name===y),m=h(t);if(!o){c.cancel(t);const y=await c.runExclusive(t,async()=>{const E=await V(G(),w,{agentName:t,target:"off"});return{...a(),restarted:E.restarted,busy:E.busy,...E.pending?{pending:E.pending}:{}}});return n.reportRelayStateLocalChange(t),y}if(!m)throw Object.assign(new Error(`Agent "${t}" not found`),{code:"NOT_FOUND"});if(!Te(m.clientType)&&se(m.clientType).length===0)throw Object.assign(new Error(`client type "${m.clientType??""}" does not support Grix relay`),{code:"UNSUPPORTED_CLIENT_TYPE"});const F=await c.runExclusive(t,async()=>{const y=c.epoch(t),E=h(t);if(!E)throw Object.assign(new Error(`Agent "${t}" not found`),{code:"NOT_FOUND"});const Q=String(E.agentId??"").trim();if(!Q)throw new de(`local agent "${t}" has no agent_id registered`,"MISSING_AGENT_ID");const Z=c.waitCancelled(t,y);let I;try{I=await Promise.race([n.fetchRelayCredential(t,{model:l}),Z.promise.then(()=>{throw new pe("relay enable cancelled by a later disable","CANCELLED")})])}finally{Z.dispose()}c.assertCurrent(t,y);const{restarted:Re,busy:Se,pending:ee}=await ce(g,n,h,w,{localName:t,agentId:Q,virtualKey:I.apiKey,anthropicBaseUrl:I.anthropicBaseUrl,openaiBaseUrl:I.openaiBaseUrl,model:l,...I.directRelay!==void 0?{directRelay:I.directRelay}:{}},(Ae,Ee,ve)=>n.setAgentProvider(Ae,Ee,{deferRestart:ve?.deferRestart===!0}),{store:P,secrets:B,direct:_});if(c.epoch(t)!==y)throw await V(G(),w,{agentName:t,target:"off"}),new pe("relay enable cancelled by a later disable","CANCELLED");return{...a(),restarted:Re,busy:Se,...ee?{pending:ee}:{}}});return n.reportRelayStateLocalChange(t),F},setAgentRelayCredential:async(t,o)=>{const l=f(),g=n.getAgentsStatus(),{restarted:w,busy:h,pending:m}=await ce(l,n,v=>g.find(F=>F.name===v),{info:v=>s.info("main",v),warn:v=>s.warn("main",v)},{localName:t,agentId:o.agentId,virtualKey:o.virtualKey,anthropicBaseUrl:o.anthropicBaseUrl,openaiBaseUrl:o.openaiBaseUrl,model:o.model,...o.directRelay!==void 0?{directRelay:o.directRelay}:{}},(v,F,y)=>n.setAgentProvider(v,F,{deferRestart:y?.deferRestart===!0}),{store:P,secrets:B,direct:_});return n.reportRelayStateLocalChange(t),{...a(),restarted:w,busy:h,...m?{pending:m}:{}}},disableAll:async()=>{const t=f(),o={info:g=>s.info("main",g),warn:g=>s.warn("main",g)},l=new Set([...t.getRelayAgents(),...n.getDirectRelayConfigAgentNames(),...Object.keys(P.list())]);for(const g of l)c.cancel(g);for(const g of l)await c.runExclusive(g,()=>V(G(),o,{agentName:g,target:"off"})),n.reportRelayStateLocalChange(g);return await ie(t,n),a()},setRoute:async(t,o)=>{const l=o,g=f();return g.setRoute({routeKey:t,targetBaseUrl:l.targetBaseUrl,...l.headers?{headers:l.headers}:{},...l.model?{model:l.model}:{},...l.modelMap?{modelMap:l.modelMap}:{},...l.passthrough?{passthrough:!0}:{},...l.relayOnly?{relayOnly:!0}:{},...l.codexResponsesToChat?{codexResponsesToChat:!0}:{}}),await g.persistConfig(),a()},deleteRoute:async t=>{const o=f();o.deleteRoute(t),await o.persistConfig()},setDefaultRoute:async t=>{const o=f();return o.setDefaultRouteKey(t),await o.persistConfig(),a()},setInterceptHosts:async t=>{const o=f();return o.setInterceptHosts(t),await o.persistConfig(),a()}};L=A,b.setProxyHandler(A),n.setRelayStateApplier({getLocalState:t=>{const o=f();if(o.getRelayAgents().includes(t)){const g=n.getAgentsStatus().find(m=>m.name===t),w=`grix-gateway-${String(g?.clientType??"").trim().toLowerCase()}`;return{enabled:!0,model:o.getConfigSnapshot().routes?.find(m=>m.routeKey===w)?.model?.trim()||void 0}}const l=n.getAgentProvider(t);return l?.api_key?.trim()?{enabled:!0,model:l.model?.trim()||void 0}:{enabled:!1}},applyEnable:async(t,o,l)=>{const g=n.getAgentsStatus().find(m=>m.name===t),w=String(g?.agentId??"").trim();if(!w)throw new de(`local agent "${t}" has no agent_id registered`,"MISSING_AGENT_ID");const h=await A.setAgentRelayCredential(t,{agentId:w,virtualKey:o.apiKey,anthropicBaseUrl:o.anthropicBaseUrl,openaiBaseUrl:o.openaiBaseUrl,model:l??o.model,...o.directRelay!==void 0?{directRelay:o.directRelay}:{}});return{restarted:h.restarted===!0,busy:h.busy===!0,...h.pending?{pending:h.pending}:{}}},applyDisable:async t=>{const o=await A.setAgentRelay(t,!1);return{restarted:o.restarted===!0,busy:o.busy===!0,...o.pending?{pending:o.pending}:{}}}})}if(M.setStatusProvider(()=>n.getAgentsStatus()),M.setMetaProvider(()=>{const e=n.getAgentsStatus();return{ws:{connected:e.filter(a=>a.wsConnected===!0).length,total:e.length},upgrade:Ze()}}),await n.start(rt),$.length>0){const e=n.getAgentsStatus();for(const a of $){const c=e.find(t=>t.name===a);if(!c)continue;const A=se(c.clientType);A.length!==0&&await U.setAgentRelayEnabled(a,!0,{relayHosts:A}).catch(t=>{s.warn("main",`failed to reconcile relay hosts for "${a}": ${t}`)})}}le(U,_,P);const Y=parseInt(R["admin-port"]??process.env.GRIX_ADMIN_PORT??"19580",10);b.setAgentHandler({list:()=>n.getAgentsStatus(),add:e=>n.addAgent(e),remove:e=>n.removeAgent(e),restart:e=>n.restartAgent(e),reload:()=>n.reload()}),b.setUpgradeHandler({check:()=>n.checkUpgrade(),trigger:()=>n.triggerUpgrade()}),b.setProbeHandler({probeAll:e=>n.probeAll(e),probeOne:(e,a)=>n.probeOne(e,a)}),b.setInstallHandler({listInstallable:()=>n.listInstallable(),installAgent:e=>n.installAgent(e),getInstallProgress:e=>n.getInstallProgress(e)});const z={listAgents:()=>n.getAgentsStatus(),enableManaged:(e,a,c)=>{if(!L)throw new ge(`agent "${e}" needs the MITM proxy for relay, but it is not running`,"PROXY_UNAVAILABLE");return L.setAgentRelayCredential(e,{agentId:a,virtualKey:c.virtualKey,anthropicBaseUrl:c.anthropicBaseUrl,openaiBaseUrl:c.openaiBaseUrl,model:c.model,...c.directRelay!==void 0?{directRelay:c.directRelay}:{}})},disableManaged:e=>{if(!L)throw new ge(`agent "${e}" needs the MITM proxy for relay, but it is not running`,"PROXY_UNAVAILABLE");return L.setAgentRelay(e,!1)},enableHermesProfile:(e,a)=>qe({agentId:e,baseUrl:a.openaiBaseUrl??"",virtualKey:a.virtualKey,model:a.model??""}),disableHermesProfile:e=>Je(e)};b.setRelayCredentialHandler({listHermesProfiles:()=>Ye(),enable:async(e,a)=>{const{target:c,result:A}=await Qe(z,e,a);return{target:c,...A}},disable:async e=>{const{target:a,result:c}=await ze(z,e);return{target:a,...c}}});{const e=await ne({label:"admin",port:Y,envVar:"GRIX_ADMIN_PORT",cliFlag:"admin-port",start:a=>b.start(a)});e&&await me(e)}const he=x.join(i.dataDir,"admin-token"),we=x.join(i.dataDir,"admin-port");Ge(he,fe),te(we,String(Y),"utf-8"),await N(i.daemonStatusFile,{state:"running",pid:process.pid,instance_id:k,updated_at:Date.now()}),process.send&&process.send("ready"),s.info("main","grix-connector ready")}nt().catch(async r=>{const d=`Fatal: ${r instanceof Error?r.stack??r.message:String(r)}`;try{process.stderr.write(`${d}
+`)}catch{}re(!1),s.error("main",d),X(r,"startup");const S=K(i.daemonLockFile);S?.pid===process.pid&&S.instance_id===k&&await N(i.daemonStatusFile,{state:"failed",pid:process.pid,instance_id:S.instance_id,updated_at:Date.now(),reason:"startup_error"}).catch(()=>{}),await W(),H(i.daemonLockFile).catch(()=>{}),O(),process.exit(1)});const ot=new Set(["ECONNRESET","ECONNREFUSED","ETIMEDOUT","EPIPE","EAI_AGAIN","ENOTFOUND","EHOSTUNREACH","ENETUNREACH","EIO"]);function ye(r){return r instanceof Error&&"code"in r?ot.has(r.code):!1}

package/dist/launcher.mjs

@@ -0,0 +1,188 @@
+#!/usr/bin/env node
+// grix-launcher — 稳定的守护进程启动器（并排版本 + 指针切换）。
+//
+// 服务注册（launchd / Task Scheduler wrapper）固定指向本文件，它本身不属于任何
+// connector 版本。启动时读 `<store>/current`，拉起 `<store>/versions/<ver>/dist/grix.js`，
+// 并把自身收到的参数原样转交。daemon 退出后：
+//   - 退出码 75（RESTART_EXIT_CODE）：升级切换 / 重载请求，立即重新读指针拉起；
+//   - 退出码 0 或被信号终止：daemon 是被要求停下的，launcher 随之退出，保活与否交给
+//     上层 supervisor（launchd KeepAlive / Windows wrapper），语义与 launcher 出现前一致；
+//     否则 `grix-connector stop` 的兜底强杀会被 launcher 复活。
+//   - 其他非零退出：按退避重启；若该版本从未写过 `<store>/health/<ver>.ok` 且 5 分钟内快崩
+//     3 次，则把 `current` 切回 `previous`，写 `<store>/rollback.json` 供旧版本上报。
+// 收到 SIGTERM/SIGINT/SIGHUP 时转发给子进程并随其退出（服务停止语义）。
+//
+// 本文件由 daemon 在启动时按 LAUNCHER_TEMPLATE_VERSION 比对并原子重写，改动行为时必须 +1。
+export const LAUNCHER_TEMPLATE_VERSION = 1;
+
+import { spawn } from 'node:child_process';
+import { existsSync, mkdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync, appendFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const RESTART_EXIT_CODE = 75;
+const RAPID_CRASH_WINDOW_MS = 5 * 60 * 1000;
+const RAPID_CRASH_LIMIT = 3;
+const MAX_BACKOFF_MS = 30_000;
+
+function resolveStoreDir() {
+  const self = fileURLToPath(import.meta.url);
+  let real = self;
+  try { real = realpathSync(self); } catch { /* keep symlink path */ }
+  return dirname(real);
+}
+
+function readPointer(store, name) {
+  try {
+    const value = readFileSync(join(store, name), 'utf8').trim();
+    return value || null;
+  } catch {
+    return null;
+  }
+}
+
+function writePointer(store, name, value) {
+  const file = join(store, name);
+  const tmp = `${file}.tmp-${process.pid}`;
+  writeFileSync(tmp, `${value}\n`, 'utf8');
+  renameSync(tmp, file);
+}
+
+function entryFor(store, version) {
+  return join(store, 'versions', version, 'dist', 'grix.js');
+}
+
+function log(store, message) {
+  const line = `[${new Date().toISOString()}] launcher pid=${process.pid} ${message}\n`;
+  try { appendFileSync(join(store, 'launcher.log'), line); } catch { /* best effort */ }
+  try { process.stderr.write(line); } catch { /* best effort */ }
+}
+
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+function runChild(store, version, args) {
+  return new Promise((resolve) => {
+    const child = spawn(process.execPath, [entryFor(store, version), ...args], {
+      stdio: 'inherit',
+      windowsHide: true,
+      env: {
+        ...process.env,
+        GRIX_LAUNCHER_MANAGED: '1',
+        GRIX_LAUNCHER_STORE: store,
+        GRIX_LAUNCHER_VERSION: version,
+      },
+    });
+    let stopping = false;
+    const forward = (signal) => {
+      stopping = true;
+      try { child.kill(signal); } catch { /* already gone */ }
+    };
+    const handlers = ['SIGTERM', 'SIGINT', 'SIGHUP'].map((signal) => {
+      const handler = () => forward(signal);
+      process.on(signal, handler);
+      return [signal, handler];
+    });
+    let settled = false;
+    const settle = (result) => {
+      if (settled) return;
+      settled = true;
+      for (const [sig, handler] of handlers) process.off(sig, handler);
+      resolve(result);
+    };
+    child.on('error', (error) => {
+      // spawn 本身失败（EMFILE/EAGAIN/入口不可执行）时 Node 不保证再发 'exit'，
+      // 必须在这里收口，否则主循环永久挂起，既不重启也不回滚。
+      log(store, `spawn failed for ${version}: ${error.message}`);
+      settle({ code: 1, signal: null, stopping });
+    });
+    child.on('exit', (code, signal) => {
+      settle({ code: code ?? (signal ? 128 : 1), signal, stopping });
+    });
+  });
+}
+
+async function main() {
+  const store = resolveStoreDir();
+  const args = process.argv.slice(2);
+  mkdirSync(join(store, 'health'), { recursive: true });
+  let crashes = [];
+  let backoffMs = 1000;
+  log(store, `started node=${process.version} store=${store} template=${LAUNCHER_TEMPLATE_VERSION}`);
+
+  for (;;) {
+    let version = readPointer(store, 'current');
+    if (!version || !existsSync(entryFor(store, version))) {
+      const previous = readPointer(store, 'previous');
+      if (previous && existsSync(entryFor(store, previous))) {
+        log(store, `current ${version ?? '<none>'} is unusable; falling back to previous ${previous}`);
+        writePointer(store, 'current', previous);
+        version = previous;
+      } else {
+        log(store, `no runnable version (current=${version ?? '<none>'}); exiting`);
+        process.exit(1);
+      }
+    }
+
+    const startedAt = Date.now();
+    log(store, `starting ${version}`);
+    const { code, signal, stopping } = await runChild(store, version, args);
+    log(store, `daemon ${version} exited code=${code} signal=${signal ?? '-'}`);
+    if (stopping || signal || code === 0) process.exit(typeof code === 'number' ? code : 0);
+    if (code === RESTART_EXIT_CODE) {
+      crashes = [];
+      backoffMs = 1000;
+      continue;
+    }
+
+    const healthy = existsSync(join(store, 'health', `${version}.ok`));
+    if (!healthy) {
+      const now = Date.now();
+      crashes = crashes.filter((at) => now - at < RAPID_CRASH_WINDOW_MS);
+      crashes.push(now);
+      if (crashes.length >= RAPID_CRASH_LIMIT) {
+        const previous = readPointer(store, 'previous');
+        if (previous && previous !== version && existsSync(entryFor(store, previous))) {
+          log(store, `${version} crashed ${crashes.length}x without becoming healthy; rolling back to ${previous}`);
+          const record = {
+            from_version: previous,
+            to_version: version,
+            exit_code: code,
+            crash_count: crashes.length,
+            uptime_ms: now - startedAt,
+            rolled_back_at: new Date().toISOString(),
+          };
+          const rollbackFile = join(store, 'rollback.json');
+          writeFileSync(`${rollbackFile}.tmp-${process.pid}`, JSON.stringify(record), 'utf8');
+          renameSync(`${rollbackFile}.tmp-${process.pid}`, rollbackFile);
+          writePointer(store, 'current', previous);
+          rmSync(join(store, 'previous'), { force: true });
+          crashes = [];
+          backoffMs = 1000;
+          continue;
+        }
+        log(store, `${version} keeps crashing and there is no previous version to roll back to`);
+      }
+    } else {
+      crashes = [];
+    }
+
+    await sleep(backoffMs);
+    backoffMs = Math.min(MAX_BACKOFF_MS, backoffMs * 2);
+  }
+}
+
+const isDirectRun = (() => {
+  try {
+    return realpathSync(process.argv[1] ?? '') === realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+})();
+if (isDirectRun) {
+  main().catch((error) => {
+    process.stderr.write(`launcher fatal: ${error instanceof Error ? error.stack ?? error.message : String(error)}\n`);
+    process.exit(1);
+  });
+}