herdr-remote 0.2.20 → 0.2.22

package/README.md

@@ -13,6 +13,11 @@ herdr-remote
 
 Running `herdr-remote` without arguments launches the setup wizard and configuration TUI.
 
+Native Windows 10/11 is supported with Node.js 22+; install Herdr from PowerShell with
+`powershell -ExecutionPolicy Bypass -c "irm https://herdr.dev/install.ps1 | iex"`.
+Herdr's Windows plugin support is in preview; on the first LAN launch, allow `node.exe`
+through Windows Defender Firewall on private networks.
+
 ## Connection Modes
 
 - **This machine only** *(default)*: Local workstation browser (127.0.0.1).
@@ -43,15 +48,20 @@ herdr-remote plugin link
 ## Configuration
 
 - Settings: `~/.config/herdr-remote/config.json`
+- Windows settings: `%APPDATA%\herdr-remote\config.json`
 - Runtime state: `~/.local/state/herdr-remote/runtime.json` (mode `0600`)
+- Windows runtime state: `%LOCALAPPDATA%\herdr-remote\runtime.json`
 
 ## Locating Herdr
 
 The `herdr` binary is looked up in `HERDR_BIN_PATH`, then `PATH`, then the usual
 install directories (`~/.local/bin`, `~/.cargo/bin`, `~/bin`, `/opt/homebrew/bin`,
 `/usr/local/bin`, …). `herdr-remote keepalive install` writes the binary it found
-and the current `PATH` into the systemd unit or launchd agent, because a service
-manager does not inherit your shell's environment.
+and the current `PATH` into the systemd unit, launchd agent, or Windows service
+(`windows-service`), because a service manager does not inherit your shell's environment.
+
+On Windows, only `herdr.exe` is searched for, including `%LOCALAPPDATA%\Programs\Herdr\bin`,
+`~\.cargo\bin`, and `~\scoop\shims`.
 
 `herdr-remote status --json` reports `host.herdrCommand` and `host.herdrCommandFound`.
 If it was not found, set `HERDR_BIN_PATH` to the full path and reinstall the

package/README.zh-CN.md

@@ -13,6 +13,11 @@ herdr-remote
 
 直接运行 `herdr-remote` 即可启动向导并进入配置 TUI。
 
+已支持 Windows 10/11 原生运行（需 Node.js 22+），请在 PowerShell 中执行
+`powershell -ExecutionPolicy Bypass -c "irm https://herdr.dev/install.ps1 | iex"` 安装 Herdr。
+Herdr 的 Windows 插件功能仍处于 preview 阶段；首次以局域网模式启动时，请在 Windows
+Defender 防火墙提示中允许 `node.exe` 通过专用网络通信。
+
 ## 访问模式
 
 - **仅本机** *(默认)*：仅本机浏览器可访问 (127.0.0.1)。
@@ -43,14 +48,19 @@ herdr-remote plugin link
 ## 配置路径
 
 - 配置文件：`~/.config/herdr-remote/config.json`
+- Windows 配置文件：`%APPDATA%\herdr-remote\config.json`
 - 运行状态：`~/.local/state/herdr-remote/runtime.json` (权限 `0600`)
+- Windows 运行状态：`%LOCALAPPDATA%\herdr-remote\runtime.json`
 
 ## herdr 命令的查找方式
 
 依次查找 `HERDR_BIN_PATH`、`PATH`，以及常见安装目录（`~/.local/bin`、`~/.cargo/bin`、
 `~/bin`、`/opt/homebrew/bin`、`/usr/local/bin` 等）。服务管理器不会继承 shell 环境，
 因此 `herdr-remote keepalive install` 会把找到的可执行文件路径和当前 `PATH` 写入
-systemd unit 或 launchd plist。
+systemd unit、launchd plist 或 Windows 服务（`windows-service`）。
+
+Windows 上只查找 `herdr.exe`，还会搜索 `%LOCALAPPDATA%\Programs\Herdr\bin`、
+`~\.cargo\bin` 和 `~\scoop\shims`。
 
 `herdr-remote status --json` 会输出 `host.herdrCommand` 与 `host.herdrCommandFound`。
 若显示未找到，请将 `HERDR_BIN_PATH` 设为完整路径后重新安装保活服务。

package/dist/cli.js

@@ -4,6 +4,7 @@
 // the subcommands exist for scripting and for the actions declared in
 // herdr-plugin.toml, which Herdr runs without a terminal attached.
 import fs from 'node:fs';
+import os from 'node:os';
 import path from 'node:path';
 import { LANGUAGES, loadConfig, migrateLegacyConfig } from './config.js';
 import { PACKAGE_ROOT, configPath, stateDir } from './paths.js';
@@ -49,6 +50,10 @@ function parseArgs(argv) {
             flags.daemon = true;
             continue;
         }
+        if (arg === '--elevated') {
+            flags.elevated = true;
+            continue;
+        }
         if (arg === '--help' || arg === '-h') {
             flags.help = true;
             continue;
@@ -108,6 +113,16 @@ async function runTui(options) {
 }
 async function main(argv = process.argv.slice(2)) {
     const { positional, flags } = parseArgs(argv);
+    if (process.platform === 'win32') {
+        const relative = path.relative(PACKAGE_ROOT, process.cwd());
+        const insidePackage = relative === '' ||
+            (relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative));
+        if (insidePackage) {
+            // Herdr starts plugin panels in PACKAGE_ROOT; Windows locks the cwd,
+            // preventing npm from replacing that directory.
+            process.chdir(os.homedir());
+        }
+    }
     const command = positional[0] || null;
     // Answered before anything reads the config or queries the terminal.
     if (flags.help) {
@@ -128,7 +143,7 @@ async function main(argv = process.argv.slice(2)) {
     // TUI takes the screen a few lines below, and the services this command
     // starts usually run detached with nothing to ask. Everything downstream
     // inherits the answer through the environment.
-    (await import('./terminal-palette.js')).captureTerminalPalette();
+    await (await import('./terminal-palette.js')).captureTerminalPalette();
     // The font, likewise, is read while this process still knows which terminal
     // it runs in: its variables and its parent process are gone once a service
     // manager or Herdr's detached server starts the connector.
@@ -210,10 +225,14 @@ async function main(argv = process.argv.slice(2)) {
         case 'keepalive': {
             const keepalive = await import('./keepalive/index.js');
             const action = positional[1] || 'status';
-            if (action === 'install')
-                printJson(keepalive.install(config));
+            if (action === 'install' && flags.elevated) {
+                const { completeServiceInstall } = await import('./keepalive/windows-service-setup.js');
+                process.exitCode = await completeServiceInstall(t);
+            }
+            else if (action === 'install')
+                printJson(await keepalive.install(config));
             else if (action === 'uninstall')
-                printJson(keepalive.uninstall(config));
+                printJson(await keepalive.uninstall(config));
             else if (action === 'restart')
                 printJson(keepalive.restart(config));
             else if (action === 'status')

package/dist/config.js

@@ -20,7 +20,14 @@ const ACCESS_MODES = ['local', 'lan', 'remote'];
 // workstation stays reachable only through its own host token.
 const OFFICIAL_RELAY_URL = 'wss://herdr-remote.564616.xyz';
 const LANGUAGES = ['auto', 'zh', 'en'];
-const KEEPALIVE_MANAGERS = ['auto', 'systemd', 'launchd', 'supervisor', 'none'];
+const KEEPALIVE_MANAGERS = [
+    'auto',
+    'systemd',
+    'launchd',
+    'supervisor',
+    'windows-service',
+    'none',
+];
 function isOneOf(list, value) {
     return list.includes(value);
 }

package/dist/herdr-api.js

@@ -7,7 +7,8 @@
  * phone can answer "does anything need me?" without navigating a TUI through a
  * 40-column viewport.
  *
- * The wire format is newline-delimited JSON over the Unix socket:
+ * The wire format is newline-delimited JSON over the Unix socket or, on
+ * Windows, the named pipe it names:
  *
  *   request   {"id":"…","method":"session.snapshot","params":{}}
  *   response  {"id":"…","result":{…}}  or  {"id":"…","error":{"code","message"}}
@@ -28,6 +29,7 @@
  * the PTYs keep streaming while this quietly fails and is asked again later.
  */
 import net from 'node:net';
+import { herdrEndpoint } from './socket-discovery.js';
 /** How long one question waits, connection included. */
 const REQUEST_TIMEOUT_MS = 10_000;
 /** An answer this long is not an answer. Guards a socket that never newlines. */
@@ -69,7 +71,7 @@ function requestHerdr(socketPath, method, params = {}, options = {}) {
         if (typeof timer.unref === 'function')
             timer.unref();
         try {
-            socket = connect(socketPath);
+            socket = connect(herdrEndpoint(socketPath));
         }
         catch (error) {
             finish(error);
@@ -145,7 +147,7 @@ function subscribeHerdr(socketPath, subscriptions, onEvent, options = {}) {
             return;
         let current;
         try {
-            current = connect(socketPath);
+            current = connect(herdrEndpoint(socketPath));
         }
         catch {
             scheduleReconnect();

package/dist/herdr-command.js

@@ -48,11 +48,11 @@ function expandHome(directory, home) {
         return path.join(home, directory.slice(2));
     return directory;
 }
-/** Windows keeps the executable bit in the extension instead of the mode. */
-function candidateNames(base = COMMAND_NAME) {
-    return process.platform === 'win32'
-        ? [base, `${base}.exe`, `${base}.cmd`, `${base}.bat`]
-        : [base];
+/** Windows only publishes Herdr as an executable; shell scripts need a shell. */
+function candidateNames(base = COMMAND_NAME, platform = process.platform) {
+    if (platform !== 'win32')
+        return [base];
+    return [/\.exe$/i.test(base) ? base : `${base}.exe`];
 }
 function isExecutableFile(candidate) {
     try {
@@ -83,7 +83,14 @@ function findOnSearchPath(searchPath, names = candidateNames()) {
     }
     return null;
 }
-function fallbackDirectories(home = os.homedir()) {
+function fallbackDirectories(home = os.homedir(), platform = process.platform, env = process.env) {
+    if (platform === 'win32') {
+        return [
+            path.join(env.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'Programs', 'Herdr', 'bin'),
+            path.join(home, '.cargo', 'bin'),
+            path.join(home, 'scoop', 'shims'),
+        ];
+    }
     return FALLBACK_DIRECTORIES.map((directory) => expandHome(directory, home));
 }
 function looksLikePath(value) {
@@ -98,7 +105,7 @@ function looksLikePath(value) {
  * treated as absent rather than fatal: a stale override left behind by a
  * moved install is precisely the case we are trying to survive.
  */
-function resolveOverride(value, searchPath) {
+function resolveOverride(value, searchPath, platform) {
     const trimmed = String(value || '').trim();
     if (!trimmed)
         return null;
@@ -106,9 +113,14 @@ function resolveOverride(value, searchPath) {
         const absolute = path.resolve(trimmed);
         if (isExecutableFile(absolute))
             return absolute;
-        return findInDirectory(absolute);
+        if (platform === 'win32' && path.extname(absolute) === '') {
+            const executable = `${absolute}.exe`;
+            if (isExecutableFile(executable))
+                return executable;
+        }
+        return findInDirectory(absolute, candidateNames(COMMAND_NAME, platform));
     }
-    return findOnSearchPath(searchPath, candidateNames(trimmed));
+    return findOnSearchPath(searchPath, candidateNames(trimmed, platform));
 }
 /**
  * Everything known about where Herdr is, so callers can report it and not only
@@ -120,15 +132,16 @@ function resolveOverride(value, searchPath) {
  * bare name: `PATH` may be right in a way we cannot see from here, and letting
  * the spawn proceed keeps the old behaviour for anyone relying on it.
  */
-function findHerdrCommand({ env = process.env, home = os.homedir(), directories = fallbackDirectories(home), } = {}) {
-    const override = resolveOverride(env.HERDR_BIN_PATH, env.PATH);
+function findHerdrCommand({ env = process.env, home = os.homedir(), platform = process.platform, directories = fallbackDirectories(home, platform, env), } = {}) {
+    const names = candidateNames(COMMAND_NAME, platform);
+    const override = resolveOverride(env.HERDR_BIN_PATH, env.PATH, platform);
     if (override)
         return { command: override, source: 'env', found: true };
-    const onPath = findOnSearchPath(env.PATH);
+    const onPath = findOnSearchPath(env.PATH, names);
     if (onPath)
         return { command: onPath, source: 'path', found: true };
     for (const directory of directories) {
-        const found = findInDirectory(directory);
+        const found = findInDirectory(directory, names);
         if (found)
             return { command: found, source: 'fallback', found: true };
     }
@@ -185,7 +198,11 @@ function herdrVersion({ command, timeout = 10_000, ...lookup } = {}) {
     };
     let result;
     try {
-        result = spawnSync(resolved, ['--version'], { encoding: 'utf8', timeout });
+        result = spawnSync(resolved, ['--version'], {
+            encoding: 'utf8',
+            timeout,
+            windowsHide: true,
+        });
     }
     catch {
         return unknown;
@@ -211,7 +228,7 @@ function herdrOutdatedMessage(version) {
         'misbehave in browser windows before that release.');
 }
 /** The one message a user needs to fix a missing install themselves. */
-function herdrNotFoundMessage({ env = process.env, home = os.homedir(), directories = fallbackDirectories(home), } = {}) {
+function herdrNotFoundMessage({ env = process.env, home = os.homedir(), platform = process.platform, directories = fallbackDirectories(home, platform, env), } = {}) {
     const override = String(env.HERDR_BIN_PATH || '').trim();
     const parts = [`Herdr executable "${COMMAND_NAME}" was not found.`];
     if (override)

package/dist/herdr-plugin.js

@@ -17,7 +17,11 @@ function manifestPath() {
 // manager, neither of which is guaranteed the PATH the user installed with, so
 // the command is resolved rather than named.
 function runHerdr(args, { timeout = 15_000 } = {}) {
-    const result = spawnSync(resolveHerdrCommand(), args, { encoding: 'utf8', timeout });
+    const result = spawnSync(resolveHerdrCommand(), args, {
+        encoding: 'utf8',
+        timeout,
+        windowsHide: true,
+    });
     if (result.error?.code === 'ENOENT') {
         throw Object.assign(new Error('herdr command not found'), { code: 'HERDR_NOT_FOUND' });
     }

package/dist/herdr-server.js

@@ -21,7 +21,7 @@ import fs from 'node:fs';
 import net from 'node:net';
 import path from 'node:path';
 import { spawn } from 'node:child_process';
-import { inspectSocket } from './socket-discovery.js';
+import { herdrEndpoint, inspectSocket } from './socket-discovery.js';
 import { ensureDir } from 'herdr-remote-relay/state';
 /** A Unix socket either accepts at once or is dead; this only guards a hang. */
 const PROBE_TIMEOUT_MS = 1_000;
@@ -58,7 +58,7 @@ function probeHerdrServer(socketPath, { connect = net.connect, timeout = PROBE_T
         const timer = setTimeout(() => finish({ state: 'running' }), timeout);
         if (typeof timer.unref === 'function')
             timer.unref();
-        socket = connect(socketPath);
+        socket = connect(herdrEndpoint(socketPath));
         socket.once('connect', () => finish({ state: 'running' }));
         socket.once('error', (error) => finish(error.code === 'ECONNREFUSED' || error.code === 'ENOENT'
             ? { state: 'stopped', stale: true }
@@ -130,6 +130,7 @@ function launchHerdrServer({ command, args = [], socketPath, cwd, logPath, spawn
             cwd,
             env: serverEnv(socketPath),
             detached: true,
+            windowsHide: true,
             stdio: ['ignore', out, out],
         });
     }

package/dist/i18n/en.js

@@ -131,6 +131,14 @@ const en = {
     'keepalive.enableLinger': 'Enable start at boot',
     'keepalive.lingerDone': 'Start at boot enabled for {username}.',
     'keepalive.fallbackNote': 'No system service manager found; background process will not survive reboot.',
+    'keepalive.serviceNote': 'Runs as a Windows service under your account and starts at boot, before anyone signs in. Installing or removing it asks for administrator rights.',
+    'keepalive.serviceWindowHint': 'Finish the installation in the administrator window that opens.',
+    'keepalive.elevationCancelled': 'Administrator rights were not granted; nothing was installed.',
+    'keepalive.passwordPrompt': 'Windows password for {account} (the service signs in as you):',
+    'keepalive.passwordRejected': 'Windows did not accept that password. Try again.',
+    'keepalive.serviceInstalled': 'Service {id} is installed and running.',
+    'keepalive.wrongAccount': 'Run this as the account that will use herdr-remote, not another administrator account.',
+    'keepalive.pressEnter': 'Press Enter to close this window.',
     'herdr.title': 'Herdr integration',
     'herdr.socketPath': 'Socket path',
     'herdr.args': 'Extra arguments',
@@ -219,5 +227,17 @@ const en = {
     'update.mirrorBehind': '{registries} still has an older version; installing from {source}',
     'update.cannot.source': 'Source checkout — update with git',
     'update.cannot.linked': 'Linked package — managed by npm link',
+    'relayUpdate.check': 'Relay {version}: check for updates',
+    'relayUpdate.checking': 'Relay: checking npm…',
+    'relayUpdate.upToDate': 'Relay up to date ({version})',
+    'relayUpdate.available': 'Relay {latest} available, installed {installed} (press Enter to install)',
+    'relayUpdate.needsCli': 'Relay {latest} needs a newer herdr-remote: update herdr-remote first',
+    'relayUpdate.updating': 'Installing relay {version}…',
+    'relayUpdate.updatingRetry': 'Installing relay {version}… (npm has not caught up yet, attempt {attempt})',
+    'relayUpdate.restart': 'Relay {version} installed, {running} still running (press Enter to restart)',
+    'relayUpdate.restarting': 'Restarting herdr-remote…',
+    'relayUpdate.restarted': 'herdr-remote restarted; the relay now runs {version}.',
+    'relayUpdate.errorNotApplied': 'npm finished, but relay {installed} is still installed',
+    'relayUpdate.banner': 'Relay {latest} is out (installed {current}). Press 7 and Enter on the relay row to install.',
 };
 export default en;

package/dist/i18n/zh.js

@@ -130,6 +130,14 @@ const zh = {
     'keepalive.enableLinger': '开启开机自启',
     'keepalive.lingerDone': '已为 {username} 开启开机自启。',
     'keepalive.fallbackNote': '无系统服务管理器，使用后台守护进程，重启后不自动恢复。',
+    'keepalive.serviceNote': '以你的账户作为 Windows 服务运行，开机后、登录前自动启动。安装或移除需要管理员权限。',
+    'keepalive.serviceWindowHint': '请在随后打开的管理员窗口中完成安装。',
+    'keepalive.elevationCancelled': '未授予管理员权限，未安装服务。',
+    'keepalive.passwordPrompt': '请输入 {account} 的 Windows 密码（服务将以你的账户登录）：',
+    'keepalive.passwordRejected': 'Windows 不接受这个密码，请重试。',
+    'keepalive.serviceInstalled': '服务 {id} 已安装并正在运行。',
+    'keepalive.wrongAccount': '请使用将运行 herdr-remote 的账户执行此操作，不要换用其他管理员账户。',
+    'keepalive.pressEnter': '按 Enter 关闭此窗口。',
     'herdr.title': 'Herdr 集成',
     'herdr.socketPath': '套接字路径',
     'herdr.args': '附加参数',
@@ -218,5 +226,17 @@ const zh = {
     'update.mirrorBehind': '{registries} 仍是旧版本，将从 {source} 安装',
     'update.cannot.source': '源码目录运行，请使用 git 更新',
     'update.cannot.linked': 'npm link 工作副本，由 npm link 管理',
+    'relayUpdate.check': 'Relay {version}：检查更新',
+    'relayUpdate.checking': 'Relay：查询 npm 中…',
+    'relayUpdate.upToDate': 'Relay 已是最新（{version}）',
+    'relayUpdate.available': 'Relay 新版本 {latest} 可用，当前 {installed}（按 Enter 安装）',
+    'relayUpdate.needsCli': 'Relay {latest} 需要更新 herdr-remote，请先更新上一行',
+    'relayUpdate.updating': '安装 relay {version} 中…',
+    'relayUpdate.updatingRetry': '安装 relay {version} 中…（npm 尚未同步，第 {attempt} 次尝试）',
+    'relayUpdate.restart': 'Relay {version} 已安装，运行中的仍是 {running}（按 Enter 重启生效）',
+    'relayUpdate.restarting': '正在重启 herdr-remote…',
+    'relayUpdate.restarted': 'herdr-remote 已重启，relay 现在运行 {version}。',
+    'relayUpdate.errorNotApplied': 'npm 已完成，但安装的仍是 relay {installed}',
+    'relayUpdate.banner': 'Relay {latest} 已发布（当前 {current}），按 7 进入「语言与关于」，在 Relay 一行按 Enter 安装。',
 };
 export default zh;

package/dist/keepalive/detached.js

@@ -25,6 +25,7 @@ function start() {
             cwd: PACKAGE_ROOT,
             env: { ...process.env, HERDR_REMOTE_SERVICE: '1', ...serviceEnvironment() },
             detached: true,
+            windowsHide: true,
             stdio: ['ignore', logFd, logFd],
         });
         child.unref();
@@ -48,6 +49,11 @@ function stopAndForget() {
     fs.rmSync(fallbackPidPath(), { force: true });
     return { ok: true, stoppedPid: pid };
 }
+export function detachedLogsHint(platform = process.platform, logFile = logPath('supervisor')) {
+    if (platform === 'win32')
+        return `Get-Content -Wait -Tail 40 "${logFile}"`;
+    return `tail -f ${logFile}`;
+}
 export const detached = {
     name: 'supervisor',
     status() {
@@ -63,8 +69,12 @@ export const detached = {
             state: alive ? 'running' : 'stopped',
         };
     },
-    install: start,
-    uninstall: stopAndForget,
+    async install() {
+        return start();
+    },
+    async uninstall() {
+        return stopAndForget();
+    },
     restart() {
         stopAndForget();
         return start();
@@ -73,6 +83,6 @@ export const detached = {
         stopAndForget();
     },
     logsHint() {
-        return `tail -f ${logPath('supervisor')}`;
+        return detachedLogsHint();
     },
 };

package/dist/keepalive/index.js

@@ -13,6 +13,7 @@ import { loadConfig } from '../config.js';
 import { detached } from './detached.js';
 import { launchd } from './launchd.js';
 import { systemd } from './systemd.js';
+import { windowsService } from './windows-service.js';
 export { serviceEnvironment, servicePath } from './environment.js';
 export { escapeXml, renderLaunchdPlist } from './launchd.js';
 export { renderSystemdUnit, systemdEnvironmentLine } from './systemd.js';
@@ -36,10 +37,12 @@ function commandExists(command) {
     });
 }
 /** Which manager to use given the platform, the user's preference and reality. */
-export function detectManager(preference = 'auto') {
+export function detectManager(preference = 'auto', platform = process.platform) {
     if (preference && preference !== 'auto')
         return preference;
-    if (process.platform === 'linux') {
+    if (platform === 'win32')
+        return 'windows-service';
+    if (platform === 'linux') {
         // `systemctl --user` needs a user bus; containers and bare TTY logins often
         // have systemd installed but no session bus, where it would fail at runtime.
         if (commandExists('systemctl') &&
@@ -48,7 +51,7 @@ export function detectManager(preference = 'auto') {
         }
         return 'supervisor';
     }
-    if (process.platform === 'darwin') {
+    if (platform === 'darwin') {
         return commandExists('launchctl') ? 'launchd' : 'supervisor';
     }
     return 'supervisor';
@@ -63,6 +66,8 @@ function backendOf(config) {
         return systemd;
     if (manager === 'launchd')
         return launchd;
+    if (manager === 'windows-service')
+        return windowsService;
     return detached;
 }
 export function status(config = loadConfig()) {
@@ -70,15 +75,15 @@ export function status(config = loadConfig()) {
         return { manager: 'none', installed: false, active: false, enabled: false };
     return backendOf(config).status();
 }
-export function install(config = loadConfig()) {
+export async function install(config = loadConfig()) {
     if (managerOf(config) === 'none')
         throw new Error('keep-alive is disabled in the configuration');
     const backend = backendOf(config);
-    return { manager: backend.name, ...backend.install() };
+    return { manager: backend.name, ...(await backend.install()) };
 }
-export function uninstall(config = loadConfig()) {
+export async function uninstall(config = loadConfig()) {
     const backend = backendOf(config);
-    return { manager: backend.name, ...backend.uninstall() };
+    return { manager: backend.name, ...(await backend.uninstall()) };
 }
 /** Restart whatever manages the services, so config edits take effect. */
 export function restart(config = loadConfig()) {
@@ -99,7 +104,10 @@ export function stopManaged(config = loadConfig()) {
 }
 export function enableLinger() {
     const username = os.userInfo().username;
-    const result = spawnSync('loginctl', ['enable-linger', username], { encoding: 'utf8' });
+    const result = spawnSync('loginctl', ['enable-linger', username], {
+        encoding: 'utf8',
+        windowsHide: true,
+    });
     if (result.status !== 0) {
         throw new Error(String(result.stderr || '').trim() || 'loginctl enable-linger failed');
     }

package/dist/keepalive/launchd.js

@@ -58,11 +58,11 @@ function serviceTarget() {
     return `${domainTarget()}/${LAUNCHD_LABEL}`;
 }
 function launchctl(args) {
-    return spawnSync('launchctl', args, { encoding: 'utf8' });
+    return spawnSync('launchctl', args, { encoding: 'utf8', windowsHide: true });
 }
 /** A launchctl call whose outcome does not matter (bootout of nothing, say). */
 function launchctlQuietly(args) {
-    spawnSync('launchctl', args, { stdio: 'ignore' });
+    spawnSync('launchctl', args, { stdio: 'ignore', windowsHide: true });
 }
 export const launchd = {
     name: 'launchd',
@@ -81,7 +81,7 @@ export const launchd = {
             state: result.status === 0 ? 'loaded' : 'not loaded',
         };
     },
-    install() {
+    async install() {
         const plistPath = launchdPlistPath();
         ensureDir(path.dirname(plistPath));
         ensureDir(stateDir());
@@ -97,7 +97,7 @@ export const launchd = {
         launchctlQuietly(['enable', serviceTarget()]);
         return { ok: true, unitPath: plistPath };
     },
-    uninstall() {
+    async uninstall() {
         const plistPath = launchdPlistPath();
         launchctlQuietly(['bootout', serviceTarget()]);
         fs.rmSync(plistPath, { force: true });

package/dist/keepalive/systemd.js

@@ -46,7 +46,11 @@ WantedBy=default.target
 `;
 }
 function systemctl(args) {
-    return spawnSync('systemctl', ['--user', ...args], { encoding: 'utf8', stdio: 'pipe' });
+    return spawnSync('systemctl', ['--user', ...args], {
+        encoding: 'utf8',
+        stdio: 'pipe',
+        windowsHide: true,
+    });
 }
 /** Run a systemctl command that must succeed, throwing its stderr when it does not. */
 function systemctlOrThrow(args, failure) {
@@ -63,7 +67,7 @@ export const systemd = {
             return { manager: 'systemd', installed: false, active: false, enabled: false };
         const active = systemctl(['is-active', SYSTEMD_UNIT_NAME]);
         const enabled = systemctl(['is-enabled', SYSTEMD_UNIT_NAME]);
-        const lingering = spawnSync('loginctl', ['show-user', os.userInfo().username, '--property=Linger'], { encoding: 'utf8' });
+        const lingering = spawnSync('loginctl', ['show-user', os.userInfo().username, '--property=Linger'], { encoding: 'utf8', windowsHide: true });
         return {
             manager: 'systemd',
             installed: true,
@@ -76,7 +80,7 @@ export const systemd = {
             state: String(active.stdout || active.stderr || '').trim(),
         };
     },
-    install() {
+    async install() {
         const unitPath = systemdUnitPath();
         ensureDir(path.dirname(unitPath));
         fs.writeFileSync(unitPath, renderSystemdUnit({ environment: serviceEnvironment() }), {
@@ -86,7 +90,7 @@ export const systemd = {
         systemctlOrThrow(['enable', '--now', SYSTEMD_UNIT_NAME], 'systemctl --user enable --now failed');
         return { ok: true, unitPath, hint: `loginctl enable-linger ${os.userInfo().username}` };
     },
-    uninstall() {
+    async uninstall() {
         const unitPath = systemdUnitPath();
         systemctl(['disable', '--now', SYSTEMD_UNIT_NAME]);
         fs.rmSync(unitPath, { force: true });