herdr-remote 0.2.38 → 0.3.31

package/dist/cli.js

@@ -1,19 +1,6 @@
-// herdr-remote command line: argument parsing and the subcommands.
-//
-// With no arguments (and a real terminal) this opens the configuration TUI;
-// the subcommands exist for scripting and for the actions declared in
-// herdr-plugin.toml, which Herdr runs without a terminal attached.
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { LANGUAGES, loadConfig, migrateLegacyConfig } from './config.js';
-import { PACKAGE_ROOT, configPath, stateDir } from './paths.js';
-import { extractPairingCode } from './relay-client.js';
-import { resolvePublicUrl } from './relay-urls.js';
-import { createTranslator, detectLocale } from './i18n/index.js';
-import { preferredLanAddress } from './net-interfaces.js';
-const VERSION = JSON.parse(fs.readFileSync(path.join(PACKAGE_ROOT, 'package.json'), 'utf8')).version;
-const USAGE = `herdr-remote ${VERSION} — browser access to Herdr workspaces
+import { createRequire as __herdrCreateRequire } from 'node:module';
+const require = __herdrCreateRequire(import.meta.url);
+import{a as y,b as A}from"./chunks/XN6D5S55.js";import{f as S,h as w}from"./chunks/DGUZCGQN.js";import"./chunks/U6QAYG3E.js";import{f as m,l as v,n as $,o as k}from"./chunks/M52LJEES.js";import"./chunks/KRVF37OW.js";import"./chunks/QRGNEKME.js";import"./chunks/PBMBFWLQ.js";import{a as d,c as h,d as g}from"./chunks/TNLCNVA2.js";import"./chunks/I6NRCYLI.js";import U from"node:fs";import P from"node:os";import u from"node:path";var j=JSON.parse(U.readFileSync(u.join(d,"package.json"),"utf8")).version,f=`herdr-remote ${j} \u2014 browser access to Herdr workspaces
 
 Usage: herdr-remote [command] [options]
 
@@ -39,281 +26,21 @@ Options:
   -v, --version        Show version
 
 Self-hosting: docs/self-hosted-relay.md
-`;
-function parseArgs(argv) {
-    const positional = [];
-    const flags = {};
-    for (let index = 0; index < argv.length; index += 1) {
-        const arg = argv[index];
-        if (arg === '--json') {
-            flags.json = true;
-            continue;
-        }
-        if (arg === '--daemon') {
-            flags.daemon = true;
-            continue;
-        }
-        if (arg === '--elevated') {
-            flags.elevated = true;
-            continue;
-        }
-        if (arg === '--help' || arg === '-h') {
-            flags.help = true;
-            continue;
-        }
-        if (arg === '--version' || arg === '-v') {
-            flags.version = true;
-            continue;
-        }
-        if (arg === '--lang') {
-            flags.lang = argv[index + 1];
-            index += 1;
-            continue;
-        }
-        if (arg.startsWith('--lang=')) {
-            flags.lang = arg.slice('--lang='.length);
-            continue;
-        }
-        if (arg.startsWith('-')) {
-            flags.unknown = arg;
-            continue;
-        }
-        positional.push(arg);
-    }
-    return { positional, flags };
-}
-function printJson(value) {
-    process.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
-}
-function describeStatus(status, t) {
-    const lines = [];
-    lines.push(`${t('overview.mode')}: ${t(`mode.${status.mode}`)}`);
-    if (status.relay.local) {
-        lines.push(`${t('overview.relay')}: ${status.relay.alive ? t('common.running') : t('common.stopped')} (${status.relay.bind}:${status.relay.port})`);
-    }
-    else {
-        lines.push(`${t('overview.relay')}: ${status.relay.remoteUrl}`);
-    }
-    lines.push(`${t('overview.host')}: ${status.host.alive ? t('common.running') : t('common.stopped')}`);
-    lines.push(`${t('overview.socket')}: ${status.host.socketPath}${status.host.socketExists ? '' : ` (${t('overview.socketMissing')})`}`);
-    lines.push(`${t('overview.webUrl')}: ${status.publicUrl}`);
-    if (status.keepalive) {
-        const state = status.keepalive.active
-            ? t('common.running')
-            : status.keepalive.installed
-                ? t('common.installed')
-                : t('common.notInstalled');
-        lines.push(`${t('overview.keepalive')}: ${status.keepalive.manager} — ${state}`);
-    }
-    if (status.relay.health && status.relay.health.ok === false) {
-        lines.push(`${t('overview.relay')}: ${t('overview.unreachable', { message: status.relay.health.message ?? '' })}`);
-    }
-    return lines.join('\n');
-}
-async function runTui(options) {
-    const { startTui } = await import('./tui/index.js');
-    await startTui(options);
-}
-async function main(argv = process.argv.slice(2)) {
-    const { positional, flags } = parseArgs(argv);
-    if (process.platform === 'win32') {
-        const relative = path.relative(PACKAGE_ROOT, process.cwd());
-        const insidePackage = relative === '' ||
-            (relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative));
-        if (insidePackage) {
-            // Herdr starts plugin panels in PACKAGE_ROOT; Windows locks the cwd,
-            // preventing npm from replacing that directory.
-            process.chdir(os.homedir());
-        }
-    }
-    const command = positional[0] || null;
-    // Answered before anything reads the config or queries the terminal.
-    if (flags.help) {
-        process.stdout.write(USAGE);
-        return;
-    }
-    if (flags.version) {
-        process.stdout.write(`${VERSION}\n`);
-        return;
-    }
-    if (flags.unknown) {
-        process.stderr.write(`herdr-remote: unknown option "${flags.unknown}"\n\n${USAGE}`);
-        process.exitCode = 2;
-        return;
-    }
-    migrateLegacyConfig();
-    // Ask the terminal for its colors while it is still a plain terminal: the
-    // TUI takes the screen a few lines below, and the services this command
-    // starts usually run detached with nothing to ask. Everything downstream
-    // inherits the answer through the environment.
-    await (await import('./terminal-palette.js')).captureTerminalPalette();
-    // The font, likewise, is read while this process still knows which terminal
-    // it runs in: its variables and its parent process are gone once a service
-    // manager or Herdr's detached server starts the connector.
-    (await import('./terminal-font/index.js')).captureTerminalFont();
-    const config = loadConfig();
-    const preference = flags.lang && LANGUAGES.includes(flags.lang)
-        ? flags.lang
-        : config.ui.language;
-    const t = createTranslator(detectLocale({ preference }));
-    // Loaded lazily so that the TUI does not pay for loading the
-    // service layer (which pulls in the relay package and node-pty).
-    const lifecycle = await import('./lifecycle.js');
-    const service = await import('./service.js');
-    switch (command) {
-        case null: {
-            if (process.stdin.isTTY && process.stdout.isTTY) {
-                await runTui({ language: flags.lang || null });
-                return;
-            }
-            // Herdr runs plugin panes and actions without a TTY; emit status instead
-            // of trying to paint an interface into a pipe.
-            printJson(await lifecycle.fullStatus(config));
-            return;
-        }
-        case 'start': {
-            const result = lifecycle.startAll(config);
-            if (flags.json)
-                printJson(result);
-            else
-                process.stdout.write(`${t('services.started')}\n${describeStatus(await lifecycle.fullStatus(config), t)}\n`);
-            return;
-        }
-        case 'stop': {
-            const result = lifecycle.stopAll(config);
-            if (flags.json)
-                printJson(result);
-            else
-                process.stdout.write(`${t('services.stopped')}\n`);
-            return;
-        }
-        case 'restart': {
-            const result = lifecycle.restartAll(config);
-            if (flags.json)
-                printJson(result);
-            else
-                process.stdout.write(`${t('services.restarted')}\n`);
-            return;
-        }
-        case 'status': {
-            const status = await lifecycle.fullStatus(config);
-            if (flags.json)
-                printJson(status);
-            else
-                process.stdout.write(`${describeStatus(status, t)}\n`);
-            return;
-        }
-        case 'pair': {
-            const pairing = await service.pair();
-            if (flags.json) {
-                printJson(pairing);
-                return;
-            }
-            const code = extractPairingCode(pairing);
-            const url = pairing.pairUrl ||
-                `${resolvePublicUrl(config, preferredLanAddress())}/?pairCode=${encodeURIComponent(code)}`;
-            const minutes = `${Math.round((config.auth.pairingTtlMs || 600000) / 60000)}m`;
-            process.stdout.write(`${t('pair.code')}: ${code}\n${t('pair.url')}: ${url}\n${t('pair.expires', { minutes, time: new Date(pairing.expiresAt).toLocaleTimeString() })}\n`);
-            return;
-        }
-        case 'url': {
-            process.stdout.write(`${resolvePublicUrl(config, preferredLanAddress())}\n`);
-            return;
-        }
-        case 'update': {
-            const { runUpdate } = await import('./update-command.js');
-            const outcome = await runUpdate(t, {
-                config,
-                ...(flags.json ? { report: () => { } } : {}),
-            });
-            if (flags.json)
-                printJson(outcome);
-            if (!outcome.ok)
-                process.exitCode = 1;
-            return;
-        }
-        case 'run': {
-            const { runForeground } = await import('./supervisor.js');
-            await runForeground({ logToFiles: Boolean(flags.daemon) });
-            return;
-        }
-        case 'admin-broker': {
-            const broker = await import('./connector/admin-broker.js');
-            const action = positional[1] || 'status';
-            if (action === 'install') {
-                broker.installAdminBroker(t);
-                printJson({ installed: true, available: await broker.waitForAdminBroker() });
-            }
-            else if (action === 'uninstall') {
-                broker.uninstallAdminBroker(t);
-                printJson({ installed: false });
-            }
-            else if (action === 'restart') {
-                if ((await broker.stopAdminBroker()) === 'busy')
-                    throw new Error(t('adminBroker.busy'));
-                broker.startAdminBrokerTask(t);
-                printJson({ available: await broker.waitForAdminBroker() });
-            }
-            else if (action === 'status') {
-                printJson({ available: await broker.adminBrokerStatus() });
-            }
-            else {
-                throw new Error(`unknown administrator broker action: ${action}`);
-            }
-            return;
-        }
-        case 'admin-shell': {
-            const { runAdminShell } = await import('./connector/admin-shell.js');
-            process.exitCode = await runAdminShell(t);
-            return;
-        }
-        case 'keepalive': {
-            const keepalive = await import('./keepalive/index.js');
-            const action = positional[1] || 'status';
-            if (action === 'install' && flags.elevated) {
-                const { completeServiceInstall } = await import('./keepalive/windows-service-setup.js');
-                process.exitCode = await completeServiceInstall(t);
-            }
-            else if (action === 'install')
-                printJson(await keepalive.install(config));
-            else if (action === 'uninstall')
-                printJson(await keepalive.uninstall(config));
-            else if (action === 'restart')
-                printJson(keepalive.restart(config));
-            else if (action === 'status')
-                printJson(keepalive.status(config));
-            else
-                throw new Error(`unknown keepalive action: ${action}`);
-            return;
-        }
-        case 'plugin': {
-            const plugin = await import('./herdr-plugin.js');
-            const action = positional[1] || 'status';
-            if (action === 'link')
-                printJson(plugin.register());
-            else if (action === 'unlink')
-                printJson(plugin.unregister());
-            else if (action === 'status')
-                printJson(plugin.registrationStatus());
-            else
-                throw new Error(`unknown plugin action: ${action}`);
-            return;
-        }
-        case 'config': {
-            // Handy when reporting a problem: where does this install read from?
-            printJson({ configPath: configPath(), stateDir: stateDir(), config });
-            return;
-        }
-        default:
-            process.stderr.write(`herdr-remote: unknown command "${command}"\n\n${USAGE}`);
-            process.exitCode = 2;
-    }
-}
-/** Runs the command line and reports a failure as the exit code. */
-function run() {
-    main().catch((error) => {
-        process.stderr.write(`herdr-remote: ${error.message}\n`);
-        process.exitCode = 1;
-    });
-}
-export { run, parseArgs, describeStatus };
+`;function E(n){let s=[],t={};for(let l=0;l<n.length;l+=1){let r=n[l];if(r==="--json"){t.json=!0;continue}if(r==="--daemon"){t.daemon=!0;continue}if(r==="--elevated"){t.elevated=!0;continue}if(r==="--help"||r==="-h"){t.help=!0;continue}if(r==="--version"||r==="-v"){t.version=!0;continue}if(r==="--lang"){t.lang=n[l+1],l+=1;continue}if(r.startsWith("--lang=")){t.lang=r.slice(7);continue}if(r.startsWith("-")){t.unknown=r;continue}s.push(r)}return{positional:s,flags:t}}function i(n){process.stdout.write(`${JSON.stringify(n,null,2)}
+`)}function b(n,s){let t=[];if(t.push(`${s("overview.mode")}: ${s(`mode.${n.mode}`)}`),n.relay.local?t.push(`${s("overview.relay")}: ${n.relay.alive?s("common.running"):s("common.stopped")} (${n.relay.bind}:${n.relay.port})`):t.push(`${s("overview.relay")}: ${n.relay.remoteUrl}`),t.push(`${s("overview.host")}: ${n.host.alive?s("common.running"):s("common.stopped")}`),t.push(`${s("overview.socket")}: ${n.host.socketPath}${n.host.socketExists?"":` (${s("overview.socketMissing")})`}`),t.push(`${s("overview.webUrl")}: ${n.publicUrl}`),n.keepalive){let l=n.keepalive.active?s("common.running"):n.keepalive.installed?s("common.installed"):s("common.notInstalled");t.push(`${s("overview.keepalive")}: ${n.keepalive.manager} \u2014 ${l}`)}return n.relay.health&&n.relay.health.ok===!1&&t.push(`${s("overview.relay")}: ${s("overview.unreachable",{message:n.relay.health.message??""})}`),t.join(`
+`)}async function B(n){let{startTui:s}=await import("./chunks/M3NRPJK2.js");await s(n)}async function O(n=process.argv.slice(2)){let{positional:s,flags:t}=E(n);if(process.platform==="win32"){let e=u.relative(d,process.cwd());(e===""||e!==".."&&!e.startsWith(`..${u.sep}`)&&!u.isAbsolute(e))&&process.chdir(P.homedir())}let l=s[0]||null;if(t.help){process.stdout.write(f);return}if(t.version){process.stdout.write(`${j}
+`);return}if(t.unknown){process.stderr.write(`herdr-remote: unknown option "${t.unknown}"
+
+${f}`),process.exitCode=2;return}$(),await(await import("./chunks/O2LNVFUT.js")).captureTerminalPalette(),(await import("./chunks/WY7WHEJ4.js")).captureTerminalFont();let r=k(),T=t.lang&&v.includes(t.lang)?t.lang:r.ui.language,a=A(y({preference:T})),c=await import("./chunks/353DMT35.js"),C=await import("./chunks/OJPBI7KB.js");switch(l){case null:{if(process.stdin.isTTY&&process.stdout.isTTY){await B({language:t.lang||null});return}i(await c.fullStatus(r));return}case"start":{let e=c.startAll(r);t.json?i(e):process.stdout.write(`${a("services.started")}
+${b(await c.fullStatus(r),a)}
+`);return}case"stop":{let e=c.stopAll(r);t.json?i(e):process.stdout.write(`${a("services.stopped")}
+`);return}case"restart":{let e=c.restartAll(r);t.json?i(e):process.stdout.write(`${a("services.restarted")}
+`);return}case"status":{let e=await c.fullStatus(r);t.json?i(e):process.stdout.write(`${b(e,a)}
+`);return}case"pair":{let e=await C.pair();if(t.json){i(e);return}let o=S(e),p=e.pairUrl||`${m(r,w())}/?pairCode=${encodeURIComponent(o)}`,x=`${Math.round((r.auth.pairingTtlMs||6e5)/6e4)}m`;process.stdout.write(`${a("pair.code")}: ${o}
+${a("pair.url")}: ${p}
+${a("pair.expires",{minutes:x,time:new Date(e.expiresAt).toLocaleTimeString()})}
+`);return}case"url":{process.stdout.write(`${m(r,w())}
+`);return}case"update":{let{runUpdate:e}=await import("./chunks/WSACSE45.js"),o=await e(a,{config:r,...t.json?{report:()=>{}}:{}});t.json&&i(o),o.ok||(process.exitCode=1);return}case"run":{let{runForeground:e}=await import("./chunks/YD3MIP7B.js");await e({logToFiles:!!t.daemon});return}case"admin-broker":{let e=await import("./connector/admin-broker.js"),o=s[1]||"status";if(o==="install")e.installAdminBroker(a),i({installed:!0,available:await e.waitForAdminBroker()});else if(o==="uninstall")e.uninstallAdminBroker(a),i({installed:!1});else if(o==="restart"){if(await e.stopAdminBroker()==="busy")throw new Error(a("adminBroker.busy"));e.startAdminBrokerTask(a),i({available:await e.waitForAdminBroker()})}else if(o==="status")i({available:await e.adminBrokerStatus()});else throw new Error(`unknown administrator broker action: ${o}`);return}case"admin-shell":{let{runAdminShell:e}=await import("./chunks/YXDQ62BB.js");process.exitCode=await e(a);return}case"keepalive":{let e=await import("./chunks/OMN6C7J6.js"),o=s[1]||"status";if(o==="install"&&t.elevated){let{completeServiceInstall:p}=await import("./chunks/AM3OEMFK.js");process.exitCode=await p(a)}else if(o==="install")i(await e.install(r));else if(o==="uninstall")i(await e.uninstall(r));else if(o==="restart")i(e.restart(r));else if(o==="status")i(e.status(r));else throw new Error(`unknown keepalive action: ${o}`);return}case"plugin":{let e=await import("./chunks/XJKWLK43.js"),o=s[1]||"status";if(o==="link")i(e.register());else if(o==="unlink")i(e.unregister());else if(o==="status")i(e.registrationStatus());else throw new Error(`unknown plugin action: ${o}`);return}case"config":{i({configPath:g(),stateDir:h(),config:r});return}default:process.stderr.write(`herdr-remote: unknown command "${l}"
+
+${f}`),process.exitCode=2}}function M(){O().catch(n=>{process.stderr.write(`herdr-remote: ${n.message}
+`),process.exitCode=1})}export{b as describeStatus,E as parseArgs,M as run};

package/dist/connector/admin-broker.js

@@ -1,302 +1,3 @@
-import { execFileSync } from 'node:child_process';
-import fs from 'node:fs';
-import net from 'node:net';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { PtySession } from '../pty-session.js';
-import { stateDir } from '../paths.js';
-import { ADMIN_BROKER_MAX_MESSAGE_BYTES, adminBrokerTaskName, adminBrokerTokenMatches, connectAdminBroker, listenAdminBroker, publishAdminBrokerEndpoint, sendAdminBrokerMessage, } from './adminBrokerEndpoint.js';
-const BROKER_PING_TIMEOUT_MS = 1_000;
-const BROKER_START_TIMEOUT_MS = 5_000;
-const BROKER_START_POLL_MS = 250;
-const BROKER_TASK_END_TIMEOUT_MS = 10_000;
-/** Time for a stopping broker's goodbye to reach the caller before the process ends. */
-const BROKER_EXIT_GRACE_MS = 1_000;
-function powershellQuote(value) {
-    return `'${value.replaceAll("'", "''")}'`;
-}
-function runPowerShell(script, t) {
-    try {
-        execFileSync('powershell.exe', [
-            '-NoProfile',
-            '-NonInteractive',
-            '-EncodedCommand',
-            Buffer.from(script, 'utf16le').toString('base64'),
-        ], {
-            stdio: 'pipe',
-            windowsHide: true,
-            timeout: 15_000,
-        });
-    }
-    catch {
-        throw new Error(t('adminBroker.needsElevation'));
-    }
-}
-/** Registers and starts the broker's logon task; run elevated. */
-export function adminBrokerTaskScript() {
-    const brokerPath = fileURLToPath(import.meta.url);
-    // Pinned so the broker publishes its endpoint where this install's callers look.
-    const brokerCommand = `$env:HERDR_REMOTE_STATE_DIR = ${powershellQuote(stateDir())}; & ${powershellQuote(process.execPath)} ${powershellQuote(brokerPath)}`;
-    const encodedBrokerCommand = Buffer.from(brokerCommand, 'utf16le').toString('base64');
-    const powershell = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
-    // Not PACKAGE_ROOT: npm updates the package by renaming its directory, and
-    // Windows refuses while it is the working directory of this long-lived task.
-    return `
-$ErrorActionPreference = 'Stop'
-$taskName = ${powershellQuote(adminBrokerTaskName())}
-$user = [Security.Principal.WindowsIdentity]::GetCurrent().Name
-$action = New-ScheduledTaskAction -Execute ${powershellQuote(powershell)} -Argument ${powershellQuote(`-NoProfile -NonInteractive -WindowStyle Hidden -EncodedCommand ${encodedBrokerCommand}`)} -WorkingDirectory ${powershellQuote(stateDir())}
-$trigger = New-ScheduledTaskTrigger -AtLogOn -User $user
-$principal = New-ScheduledTaskPrincipal -UserId $user -LogonType Interactive -RunLevel Highest
-$settings = New-ScheduledTaskSettingsSet -MultipleInstances IgnoreNew -StartWhenAvailable -ExecutionTimeLimit (New-TimeSpan -Seconds 0)
-Stop-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue
-Register-ScheduledTask -TaskName $taskName -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Force | Out-Null
-Start-ScheduledTask -TaskName $taskName
-`;
-}
-export function installAdminBroker(t) {
-    if (process.platform !== 'win32')
-        throw new Error(t('adminBroker.windowsOnly'));
-    // The task cannot start in a working directory that does not exist yet.
-    fs.mkdirSync(stateDir(), { recursive: true });
-    runPowerShell(adminBrokerTaskScript(), t);
-}
-export function uninstallAdminBroker(t) {
-    if (process.platform !== 'win32')
-        throw new Error(t('adminBroker.windowsOnly'));
-    runPowerShell(`
-$ErrorActionPreference = 'Stop'
-$taskName = ${powershellQuote(adminBrokerTaskName())}
-Stop-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue
-Unregister-ScheduledTask -TaskName $taskName -Confirm:$false -ErrorAction SilentlyContinue
-`, t);
-}
-/** Send the broker one request and read the type of its one reply, or null without one. */
-function requestAdminBroker(type) {
-    let broker;
-    try {
-        broker = connectAdminBroker();
-    }
-    catch {
-        return Promise.resolve(null);
-    }
-    const { socket, token } = broker;
-    return new Promise((resolve) => {
-        let settled = false;
-        let response = '';
-        const finish = (reply) => {
-            if (settled)
-                return;
-            settled = true;
-            socket.destroy();
-            resolve(reply);
-        };
-        socket.setTimeout(BROKER_PING_TIMEOUT_MS, () => finish(null));
-        socket.setEncoding('utf8');
-        socket.on('connect', () => sendAdminBrokerMessage(socket, { type, token }));
-        socket.on('data', (chunk) => {
-            response += chunk;
-            const newline = response.indexOf('\n');
-            if (newline < 0)
-                return;
-            try {
-                finish(String(JSON.parse(response.slice(0, newline)).type));
-            }
-            catch {
-                finish(null);
-            }
-        });
-        socket.on('error', () => finish(null));
-    });
-}
-export async function adminBrokerStatus() {
-    return (await requestAdminBroker('ping')) === 'pong';
-}
-/**
- * Ask the broker to exit so its task can start it on a new release. It stays
- * while an administrator terminal is open: that terminal may be the one asking.
- * A broker from before this request answers neither way.
- */
-export async function stopAdminBroker() {
-    const reply = await requestAdminBroker('shutdown');
-    return reply === 'bye' ? 'stopped' : reply === 'busy' ? 'busy' : 'unavailable';
-}
-/** Start the broker's task now, which the account that registered it may do unelevated. */
-export function startAdminBrokerTask(t) {
-    if (process.platform !== 'win32')
-        throw new Error(t('adminBroker.windowsOnly'));
-    runPowerShell(`
-$ErrorActionPreference = 'Stop'
-$taskName = ${powershellQuote(adminBrokerTaskName())}
-# A broker that was just stopped may still be ending, and IgnoreNew drops a start until it has.
-$deadline = [DateTime]::UtcNow.AddMilliseconds(${BROKER_TASK_END_TIMEOUT_MS})
-while ((Get-ScheduledTask -TaskName $taskName).State -eq 'Running' -and [DateTime]::UtcNow -lt $deadline) { Start-Sleep -Milliseconds ${BROKER_START_POLL_MS} }
-Start-ScheduledTask -TaskName $taskName
-`, t);
-}
-/** The task starts the broker a moment after it is registered; wait for it to answer. */
-export async function waitForAdminBroker() {
-    const deadline = Date.now() + BROKER_START_TIMEOUT_MS;
-    while (!(await adminBrokerStatus())) {
-        if (Date.now() >= deadline)
-            return false;
-        await new Promise((resolve) => setTimeout(resolve, BROKER_START_POLL_MS));
-    }
-    return true;
-}
-function writeError(socket, error) {
-    const message = error instanceof Error ? error.message : String(error);
-    sendAdminBrokerMessage(socket, { type: 'error', message });
-    socket.end();
-}
-function startBrokerPty(socket, message, spawn) {
-    if (typeof message.command !== 'string' || !message.command || message.command.length > 4096)
-        throw new Error('Invalid administrator terminal command.');
-    if (path.basename(message.command).toLowerCase() !== 'powershell.exe')
-        throw new Error('The administrator broker only starts PowerShell.');
-    if (!Array.isArray(message.args) ||
-        message.args.length > 128 ||
-        !message.args.every((arg) => typeof arg === 'string'))
-        throw new Error('Invalid administrator terminal arguments.');
-    if (message.args.length !== 2 ||
-        message.args[0] !== '-NoLogo' ||
-        message.args[1] !== '-NoProfile')
-        throw new Error('The administrator broker only starts an interactive PowerShell prompt.');
-    if (typeof message.cwd !== 'string' || message.cwd.length > 4096)
-        throw new Error('Invalid administrator terminal working directory.');
-    if (message.socketPath !== null && message.socketPath !== undefined)
-        throw new Error('An administrator PowerShell session does not use a Herdr socket.');
-    const pty = new PtySession({
-        command: message.command,
-        args: message.args,
-        cwd: message.cwd,
-        socketPath: message.socketPath,
-        platform: 'win32',
-        // A plain PowerShell prompt does not need the Herdr UI's Kitty or mouse modes.
-        fastWindowsPty: true,
-        spawn,
-    });
-    pty.start({
-        cols: PtySession.clampDimension(message.cols, PtySession.DEFAULT_COLS),
-        rows: PtySession.clampDimension(message.rows, PtySession.DEFAULT_ROWS),
-        onData: (data) => {
-            if (socket.writable)
-                sendAdminBrokerMessage(socket, {
-                    type: 'data',
-                    dataBase64: Buffer.from(data).toString('base64'),
-                });
-        },
-        onExit: ({ exitCode, signal }) => {
-            if (socket.writable)
-                sendAdminBrokerMessage(socket, { type: 'exit', exitCode, signal });
-            socket.end();
-        },
-    });
-    sendAdminBrokerMessage(socket, { type: 'started', pid: pty.terminal?.pid ?? 0 });
-    return pty;
-}
-/** Listen on loopback and publish the endpoint; every request must carry its token. */
-export function serveAdminBroker({ spawn, onShutdown = () => { }, } = {}) {
-    let token = '';
-    const sessions = new Set();
-    const server = net.createServer((socket) => {
-        socket.setEncoding('utf8');
-        let pending = '';
-        let pty = null;
-        let firstMessage = true;
-        socket.on('data', (chunk) => {
-            pending += chunk;
-            if (Buffer.byteLength(pending, 'utf8') > ADMIN_BROKER_MAX_MESSAGE_BYTES) {
-                socket.destroy(new Error('Administrator terminal message exceeded the limit.'));
-                return;
-            }
-            while (true) {
-                const newline = pending.indexOf('\n');
-                if (newline < 0)
-                    return;
-                const line = pending.slice(0, newline);
-                pending = pending.slice(newline + 1);
-                let message;
-                try {
-                    message = JSON.parse(line);
-                }
-                catch {
-                    writeError(socket, new Error('Invalid administrator terminal message.'));
-                    return;
-                }
-                if (firstMessage) {
-                    firstMessage = false;
-                    if (!adminBrokerTokenMatches(token, message.token)) {
-                        writeError(socket, new Error('Administrator terminal request was not authorized.'));
-                        return;
-                    }
-                    if (message.type === 'ping') {
-                        sendAdminBrokerMessage(socket, { type: 'pong' });
-                        socket.end();
-                        return;
-                    }
-                    if (message.type === 'shutdown') {
-                        const busy = sessions.size > 0;
-                        sendAdminBrokerMessage(socket, { type: busy ? 'busy' : 'bye' });
-                        socket.end();
-                        if (!busy) {
-                            server.close();
-                            onShutdown();
-                        }
-                        return;
-                    }
-                    if (message.type !== 'start') {
-                        writeError(socket, new Error('Expected an administrator terminal start request.'));
-                        return;
-                    }
-                    try {
-                        pty = startBrokerPty(socket, message, spawn);
-                        sessions.add(pty);
-                    }
-                    catch (error) {
-                        writeError(socket, error);
-                        return;
-                    }
-                    continue;
-                }
-                if (!pty)
-                    return;
-                if (message.type === 'input' && typeof message.dataBase64 === 'string') {
-                    if (message.dataBase64.length <= ADMIN_BROKER_MAX_MESSAGE_BYTES)
-                        pty.write(Buffer.from(message.dataBase64, 'base64'));
-                }
-                else if (message.type === 'resize') {
-                    pty.resize(message.cols, message.rows);
-                }
-                else if (message.type === 'kill') {
-                    pty.kill();
-                    socket.end();
-                    return;
-                }
-            }
-        });
-        const release = () => {
-            if (!pty)
-                return;
-            pty.kill();
-            sessions.delete(pty);
-        };
-        socket.on('close', release);
-        socket.on('error', release);
-    });
-    listenAdminBroker(server, (port) => {
-        token = publishAdminBrokerEndpoint(port);
-    });
-    return server;
-}
-function runAdminBroker() {
-    if (process.platform !== 'win32')
-        throw new Error('Administrator PTYs are only supported on Windows.');
-    serveAdminBroker({
-        onShutdown: () => setTimeout(() => process.exit(0), BROKER_EXIT_GRACE_MS).unref(),
-    }).on('error', (error) => {
-        process.stderr.write(`herdr-remote administrator broker: ${error.message}\n`);
-    });
-}
-if (path.basename(process.argv[1] || '') === 'admin-broker.js')
-    runAdminBroker();
+import { createRequire as __herdrCreateRequire } from 'node:module';
+const require = __herdrCreateRequire(import.meta.url);
+import{e as a,f as b,g as c,h as d,i as e,j as f,k as g,l as h}from"../chunks/42KARAL4.js";import"../chunks/TNLCNVA2.js";import"../chunks/I6NRCYLI.js";export{d as adminBrokerStatus,a as adminBrokerTaskScript,b as installAdminBroker,h as serveAdminBroker,f as startAdminBrokerTask,e as stopAdminBroker,c as uninstallAdminBroker,g as waitForAdminBroker};