herdr-remote 0.2.39 → 0.3.32

package/dist/i18n/zh.js

@@ -1,256 +0,0 @@
-// 简体中文文案。键名必须与 en.ts 完全一致，由类型和 tests/i18n.test.js 校验。
-const zh = {
-    'app.name': 'Herdr Remote',
-    'app.tagline': '在浏览器中使用 Herdr 工作区',
-    'common.yes': '是',
-    'common.no': '否',
-    'common.on': '开',
-    'common.off': '关',
-    'common.none': '无',
-    'common.auto': '自动',
-    'common.unknown': '未知',
-    'common.running': '运行中',
-    'common.stopped': '已停止',
-    'common.connected': '已连接',
-    'common.disconnected': '未连接',
-    'common.installed': '已安装',
-    'common.notInstalled': '未安装',
-    'common.enabled': '已启用',
-    'common.disabled': '已停用',
-    'common.loading': '处理中…',
-    'common.save': '保存设置',
-    'common.saved': '配置已保存至 {path}',
-    'common.back': '返回',
-    'common.cancel': '取消',
-    'common.confirm': '确认',
-    'common.pid': 'PID {pid}',
-    'common.notApplicable': '不适用',
-    'nav.overview': '概览',
-    'nav.pair': '配对设备',
-    'nav.services': '服务',
-    'nav.relay': 'Relay',
-    'nav.keepalive': '保活',
-    'nav.herdr': 'Herdr',
-    'nav.about': '语言与关于',
-    'mode.local': '仅本机',
-    'mode.lan': '局域网 / Tailscale',
-    'mode.official': '官方 Relay',
-    'mode.remote': '自建 Relay',
-    'mode.local.description': '监听 127.0.0.1，仅本机可访问。',
-    'mode.lan.description': '监听 0.0.0.0，局域网与 Tailscale 设备可访问。',
-    'mode.official.description': '使用官方 Relay 跨网访问，无需自建服务器。',
-    'mode.remote.description': '连接自建 Relay 跨网访问。',
-    'overview.title': '状态',
-    'overview.mode': '访问方式',
-    'overview.relay': 'Relay',
-    'overview.host': '主机连接器',
-    'overview.socket': 'Herdr 套接字',
-    'overview.webUrl': 'Web 界面',
-    'overview.keepalive': '保活服务',
-    'overview.devices': '浏览器',
-    'overview.hosts': '工作站',
-    'overview.uptime': 'Relay 运行时间',
-    'overview.relayLocal': '本地，{bind}:{port}',
-    'overview.relayRemote': '远程，{url}',
-    'overview.socketMissing': '未找到，请确认 Herdr 是否运行',
-    'overview.unreachable': '无法访问：{message}',
-    'overview.notStarted': '服务未运行，可前往「服务」启动。',
-    'pair.title': '配对设备',
-    'pair.generate': '生成配对码',
-    'pair.regenerate': '重新生成',
-    'pair.working': '生成配对码中…',
-    'pair.code': '配对码',
-    'pair.url': '访问地址',
-    'pair.expires': '剩余 {minutes}（至 {time}）',
-    'pair.expired': '配对码已过期，需重新生成。',
-    'pair.instructions': '打开链接并输入配对码。',
-    'pair.qrHint': '扫描二维码打开链接。',
-    'pair.qrUnavailable': '终端宽度不足，无法显示二维码。',
-    'pair.failed': '生成配对码失败：{message}',
-    'pair.hostOffline': 'Relay 未连接工作站，需先启动服务。',
-    'services.title': '服务',
-    'services.start': '启动服务',
-    'services.stop': '停止服务',
-    'services.restart': '重启服务',
-    'services.started': '服务已启动。',
-    'services.stopped': '服务已停止。',
-    'services.restarted': '服务已重启。',
-    'services.startFailed': '启动服务失败：{message}',
-    'services.stopFailed': '停止服务失败：{message}',
-    'services.unsavedBlocked': '配置未保存，请先保存再重启。',
-    'services.managedNotice': '由 {manager} 托管，已通过保活服务执行。',
-    'services.logs': '最近日志',
-    'services.logEmpty': '暂无日志。',
-    'services.logRelay': 'Relay',
-    'services.logHost': '主机连接器',
-    'adminBroker.windowsOnly': '管理员终端 broker 只支持 Windows。',
-    'adminBroker.needsElevation': '请打开 Windows TUI 并选择“设置管理员终端”，使用运行 Herdr Remote 的同一账户批准一次 Windows 提权提示。',
-    'adminBroker.busy': '有管理员终端开着，请先关闭再重启 broker。',
-    'adminBroker.title': '管理员终端 broker',
-    'adminBroker.checking': '正在检查…',
-    'adminBroker.ready': '已就绪',
-    'adminBroker.notReady': '尚未设置或未运行',
-    'adminBroker.install': '设置管理员终端',
-    'adminBroker.uninstall': '移除管理员终端设置',
-    'adminBroker.installDone': '管理员终端 broker 任务已注册。',
-    'adminBroker.uninstallDone': '管理员终端 broker 任务已移除。',
-    'adminBroker.elevationCancelled': '未批准管理员权限，未进行更改。',
-    'adminBroker.setupFailed': '管理员终端 broker 设置失败。',
-    'adminBroker.tuiHint': '只需设置一次。Windows 会请求管理员授权；之后 WebUI 新建管理员终端不再弹出 UAC。',
-    'adminShell.needsTerminal': 'admin-shell 必须在终端中运行。',
-    'adminShell.brokerUnavailable': '管理员终端 broker 尚未运行。请打开 herdr-remote TUI，进入「保活」并选择「设置管理员终端」。',
-    'adminShell.tabLabel': '管理员',
-    'relay.title': 'Relay 设置',
-    'relay.settings': '设置',
-    'relay.locked': '固定',
-    'relay.officialFixed': '官方 relay 地址固定，不可修改。',
-    'relay.officialHint': '官方 relay：地址固定，无需密码。',
-    'relay.password': 'Relay 密码',
-    'relay.passwordHint': '须与 Relay 端的 RELAY_PASSWORD 一致。留空为公用 Relay。',
-    'relay.passwordSet': '已设置',
-    'relay.passwordEmpty': '未设置（公用）',
-    'relay.passwordSaved': 'Relay 密码已保存，重启服务生效。',
-    'relay.showPassword': '显示密码',
-    'relay.hidePassword': '隐藏密码',
-    'relay.identity': '工作站标识',
-    'relay.regenerate': '重新生成标识',
-    'relay.regenerated': '已生成新标识，重启后重新注册。',
-    'relay.envSnippet': 'Relay 启动命令',
-    'relay.envHint': '在 Relay 主机执行此命令。',
-    'relay.test': '测试 Relay 连接',
-    'relay.testOk': 'Relay 可访问：版本 {version}，已连接 {hosts} 台工作站。',
-    'relay.testFailed': 'Relay 无法访问：{message}',
-    'relay.selectAddress': '选择公布地址',
-    'relay.listenAddress': '监听地址',
-    'relay.listenAddressHint': '服务器绑定地址；浏览器访问下方公布地址。',
-    'relay.addressTailscale': 'Tailscale',
-    'relay.addressLan': '局域网',
-    'relay.addressVirtual': '虚拟网卡',
-    'relay.addressLoopback': '回环',
-    'relay.noAddresses': '未找到非回环地址。',
-    'relay.docsHint': '自建指南：docs/self-hosted-relay.zh-CN.md',
-    'keepalive.title': '后台保活服务',
-    'keepalive.manager': '管理方式',
-    'keepalive.state': '状态',
-    'keepalive.install': '安装并启动',
-    'keepalive.uninstall': '停止并移除',
-    'keepalive.restart': '重启保活服务',
-    'keepalive.installed': '已通过 {manager} 安装保活服务。',
-    'keepalive.uninstalled': '保活服务已移除。',
-    'keepalive.restarted': '保活服务已重启。',
-    'keepalive.failed': '保活操作失败：{message}',
-    'keepalive.unitPath': '单元文件',
-    'keepalive.logsHint': '查看日志：{command}',
-    'keepalive.linger': '开机自启',
-    'keepalive.lingerEnabled': '已开启开机自启。',
-    'keepalive.lingerDisabled': '未开启开机自启（仅登录期间运行）。',
-    'keepalive.enableLinger': '开启开机自启',
-    'keepalive.lingerDone': '已为 {username} 开启开机自启。',
-    'keepalive.fallbackNote': '无系统服务管理器，使用后台守护进程，重启后不自动恢复。',
-    'keepalive.windowsTaskNote': '在你的账户登录后启动，无需密码或管理员权限；登录前不会运行。',
-    'keepalive.serviceNote': '以你的账户作为 Windows 服务运行，在登录前启动。安装或移除需要管理员权限，Windows 也可能要求账户密码。',
-    'keepalive.serviceWindowHint': '请在随后打开的管理员窗口中完成安装。',
-    'keepalive.elevationCancelled': '未授予管理员权限，未安装服务。',
-    'keepalive.passwordPrompt': '请输入 {account} 的 Windows 账户密码（不是 PIN；账户无密码时直接按 Enter）：',
-    'keepalive.passwordRejected': 'Windows 未能使用这些凭据启动服务。请检查账户密码和“作为服务登录”策略。',
-    'keepalive.serviceInstalled': '服务 {id} 已安装并正在运行。',
-    'keepalive.wrongAccount': '请使用将运行 herdr-remote 的账户执行此操作，不要换用其他管理员账户。',
-    'keepalive.pressEnter': '按 Enter 关闭此窗口。',
-    'herdr.title': 'Herdr 集成',
-    'herdr.socketPath': '套接字路径',
-    'herdr.args': '附加参数',
-    'herdr.autoStartHint': '关：Herdr 只在你手动运行，或在浏览器里确认后才启动。开：herdr-remote 每次启动（包括开机）时一并启动 Herdr。下次 herdr-remote 启动时生效。',
-    'herdr.cliMissing': '未找到 herdr 命令，可将 HERDR_BIN_PATH 设为其完整路径。',
-    'herdr.version': 'Herdr 版本',
-    'herdr.versionOutdated': 'Herdr {version} 低于 {minimum}，请运行 “herdr update”：在该版本之前，浏览器窗口的标题、大段粘贴、点按窗格与 Alt 快捷键都会出问题。',
-    'about.title': '语言与关于',
-    'about.language': '界面语言',
-    'about.languageAuto': '跟随系统（{detected}）',
-    'about.languageZh': '中文',
-    'about.languageEn': 'English',
-    'about.version': '版本',
-    'about.configPath': '配置文件',
-    'about.statePath': '状态目录',
-    'about.relayPackage': 'Relay 包',
-    'about.docs': '自建指南：docs/self-hosted-relay.zh-CN.md',
-    'wizard.title': '首次设置',
-    'wizard.step': '第 {current} / {total} 步',
-    'wizard.languageTitle': '选择语言',
-    'wizard.accessTitle': '选择访问方式',
-    'wizard.accessHint': '后续可在 Relay 页面修改。',
-    'wizard.addressTitle': '选择访问地址',
-    'wizard.relayTitle': 'Relay 服务器',
-    'wizard.relayUrlLabel': 'Relay 地址（wss://…）',
-    'wizard.relayHint': 'Relay 需先运行。搭建指南见 docs/self-hosted-relay.zh-CN.md。',
-    'wizard.passwordTitle': 'Relay 密码',
-    'wizard.passwordHint': 'Relay 的 RELAY_PASSWORD。未设留空。',
-    'wizard.finishTitle': '完成',
-    'wizard.finishHint': '配置将保存至 {path}。',
-    'wizard.startNow': '立即启动服务',
-    'wizard.installKeepalive': '后台保活',
-    'wizard.finish': '保存并完成',
-    'field.mode': '访问方式',
-    'field.port': 'Relay 端口',
-    'field.lanHost': '浏览器地址',
-    'field.remoteUrl': 'Relay 地址',
-    'field.publicUrl': '浏览器地址（覆盖）',
-    'field.socketPath': 'Herdr 套接字路径',
-    'field.herdrArgs': 'Herdr 参数',
-    'field.herdrAutoStart': '随服务启动 Herdr',
-    'field.language': '语言',
-    'field.keepalive': '保活管理方式',
-    'placeholder.autoDiscovered': '自动探测',
-    'placeholder.none': '无',
-    'error.invalidMode': '未知的访问方式。',
-    'error.invalidPort': '端口须为 1 到 65535 之间的数字。',
-    'error.invalidLanHost': '浏览器地址须为可访问局域网或 Tailscale 地址，不能为回环或 0.0.0.0。',
-    'error.invalidRelayUrl': 'Relay 地址须以 wss://、ws://、https:// 或 http:// 开头。',
-    'error.invalidPublicUrl': '浏览器地址须以 https:// 或 http:// 开头，不能为 0.0.0.0 或 ::。',
-    'error.invalidLanguage': '未知的语言。',
-    'error.invalidKeepalive': '未知的保活管理方式。',
-    'error.unknownField': '未知的设置项。',
-    'error.remoteUrlRequired': '自建 Relay 模式须填写 Relay 地址。',
-    'error.removedHerdrArg': 'Herdr 0.9.0 已移除 --no-session，请从附加参数中移除。',
-    'error.saveFailed': '保存配置失败：{message}',
-    'hint.navigate': '↑↓ 移动',
-    'hint.select': '↵ 选择',
-    'hint.edit': '↵ 编辑',
-    'hint.tabs': '← → 切换页面',
-    'hint.back': 'esc 返回',
-    'hint.quit': 'q 退出',
-    'hint.mouseOn': 'm 关闭鼠标',
-    'hint.mouseOff': 'm 开启鼠标',
-    'hint.mouseUnsupported': '不支持鼠标',
-    'hint.restartRequired': '重启服务生效。',
-    'hint.unsavedChanges': '有未保存修改（按 s 保存）。',
-    'hint.save': 's 保存',
-    'hint.editing': '↵ 确认 · esc 取消',
-    'update.title': '更新',
-    'update.banner': 'herdr-remote {latest} 已发布（当前 {current}），按 7 进入「语言与关于」，在更新一行按 Enter 安装。',
-    'update.check': '检查更新',
-    'update.checking': '查询 GitHub Releases 与 npm 中…',
-    'update.upToDate': '已是最新（{version}）',
-    'update.available': '新版本 {version} 可用（按 Enter 安装）',
-    'update.updating': '安装 {version} 中…',
-    'update.updatingRetry': '安装 {version} 中…（npm 尚未同步，第 {attempt} 次尝试）',
-    'update.done': '已更新至 {version}',
-    'update.restartHint': '更新已安装，重启 herdr-remote 生效。',
-    'update.errorNetwork': 'GitHub Releases 与所有 npm registry 均无法连接',
-    'update.errorNetworkDetail': '均无应答：{message}',
-    'update.errorFailed': '更新失败，可手动执行：npm install -g {url}',
-    'update.errorFailedDetail': 'npm：{message}',
-    'update.errorNotYetPublished': 'npm 还没同步到 {version}（刚发布的几分钟内常见），稍后按 Enter 重试。',
-    'update.errorNotApplied': 'npm 报告成功，但安装的仍是 {installed}',
-    'update.mirrorBehind': '{registries} 仍是旧版本，将从 {source} 安装',
-    'update.cannot.source': '源码目录运行，请使用 git 更新',
-    'update.cannot.linked': 'npm link 工作副本，由 npm link 管理',
-    'update.stoppingServices': '替换文件期间先停止服务…',
-    'update.restarting': '正在用新版本重启服务…',
-    'update.notRunning': '服务之前没有运行，保持停止。需要时执行：herdr-remote start',
-    'update.restartFailed': '已安装，但服务没能重启：{message}',
-    'update.brokerRestarted': '管理员终端 broker 已重启。',
-    'update.brokerRestartFailed': '管理员终端 broker 没有重新启动。重新登录 Windows，或运行 herdr-remote admin-broker restart。',
-    'update.brokerBusy': '有管理员终端开着，broker 继续运行旧版本。关闭所有管理员终端后运行 herdr-remote admin-broker restart。',
-    'update.errorBusy': "仍有进程占用 herdr-remote 的安装目录，旧版本设置的管理员终端 broker 会这样。先在管理员 PowerShell 中执行：Get-ScheduledTask -TaskName 'HerdrRemoteAdminBroker-*' | Stop-ScheduledTask，再回到这里重新运行 herdr-remote update，最后以管理员身份运行 herdr-remote admin-broker install。",
-};
-export default zh;

package/dist/keepalive/detached.js

@@ -1,97 +0,0 @@
-// The fallback where no service manager is usable: a detached copy of our own
-// supervisor, tracked by a pid file. It does not survive a reboot.
-import { spawn } from 'node:child_process';
-import fs from 'node:fs';
-import path from 'node:path';
-import { ensureDir, readJson, writeJsonAtomic } from 'herdr-remote-relay/state';
-import { processStart, stillRunning } from '../lib/process.js';
-import { logPath, stateDir } from '../paths.js';
-import { cliEntryPoint, serviceEnvironment } from './environment.js';
-function fallbackPidPath() {
-    return path.join(stateDir(), 'supervisor.pid');
-}
-/**
- * The supervisor the pid file names, if it is still that process. The file
- * outlives a reboot; its pid alone would then name something unrelated.
- */
-function runningPid() {
-    const record = readJson(fallbackPidPath(), {});
-    return stillRunning([record]).length > 0 ? record.pid : null;
-}
-function start() {
-    const running = runningPid();
-    if (running !== null)
-        return { ok: true, alreadyRunning: true, pid: running };
-    ensureDir(stateDir());
-    const logFd = fs.openSync(logPath('supervisor'), 'a');
-    try {
-        const child = spawn(process.execPath, [cliEntryPoint(), 'run', '--daemon'], {
-            // Not PACKAGE_ROOT: npm renames it to update, which Windows refuses for a working directory.
-            cwd: stateDir(),
-            env: { ...process.env, HERDR_REMOTE_SERVICE: '1', ...serviceEnvironment() },
-            detached: true,
-            windowsHide: true,
-            stdio: ['ignore', logFd, logFd],
-        });
-        child.unref();
-        writeJsonAtomic(fallbackPidPath(), {
-            pid: child.pid,
-            processStart: child.pid ? processStart(child.pid) : null,
-            startedAt: new Date().toISOString(),
-        });
-        return { ok: true, pid: child.pid, note: 'this fallback does not survive a reboot' };
-    }
-    finally {
-        fs.closeSync(logFd);
-    }
-}
-function stopAndForget() {
-    const pid = runningPid();
-    if (pid !== null) {
-        try {
-            process.kill(pid, 'SIGTERM');
-        }
-        catch {
-            // Exited between the check and the signal.
-        }
-    }
-    fs.rmSync(fallbackPidPath(), { force: true });
-    return { ok: true, stoppedPid: pid };
-}
-export function detachedLogsHint(platform = process.platform, logFile = logPath('supervisor')) {
-    if (platform === 'win32')
-        return `Get-Content -Wait -Tail 40 "${logFile}"`;
-    return `tail -f ${logFile}`;
-}
-export const detached = {
-    name: 'supervisor',
-    status() {
-        const pid = runningPid();
-        const alive = pid !== null;
-        return {
-            manager: 'supervisor',
-            installed: alive,
-            active: alive,
-            enabled: false,
-            pid: alive ? pid : null,
-            unitPath: fallbackPidPath(),
-            state: alive ? 'running' : 'stopped',
-        };
-    },
-    async install() {
-        return start();
-    },
-    async uninstall() {
-        return stopAndForget();
-    },
-    restart() {
-        stopAndForget();
-        return start();
-    },
-    stop() {
-        stopAndForget();
-    },
-    logsHint() {
-        return detachedLogsHint();
-    },
-};

package/dist/keepalive/environment.js

@@ -1,44 +0,0 @@
-// What a supervised copy needs from the shell that installed it.
-import os from 'node:os';
-import path from 'node:path';
-import { findHerdrCommand } from '../herdr-command.js';
-import { PACKAGE_ROOT } from '../paths.js';
-export function cliEntryPoint() {
-    return path.join(PACKAGE_ROOT, 'bin', 'herdr-remote.js');
-}
-/**
- * `PATH` for the unit: the one that is resolving commands right now, plus the
- * directory Herdr was found in.
- *
- * A service manager does not inherit the shell's environment. `systemd --user`
- * hands a unit something close to `/usr/local/bin:/usr/bin:/bin` and `launchd`
- * is no more generous, so a copy that works from a terminal loses `~/.local/bin`
- * — and with it `herdr` — the moment it is installed as a service. Freezing the
- * installing shell's `PATH` into the unit keeps the supervised copy able to find
- * Herdr, and Herdr able to find the tools it spawns in turn.
- */
-export function servicePath({ env = process.env, herdrCommand = null, } = {}) {
-    const entries = String(env.PATH || '')
-        .split(path.delimiter)
-        .map((entry) => entry.trim())
-        .filter(Boolean);
-    // The override already pins the exact binary; this is only so the session
-    // itself can still reach it by name.
-    if (herdrCommand)
-        entries.push(path.dirname(herdrCommand));
-    return [...new Set(entries)].join(path.delimiter);
-}
-/**
- * What has to be written into the unit file for a supervised start to behave
- * like the one the user just ran by hand.
- */
-export function serviceEnvironment({ env = process.env, home = os.homedir(), directories, } = {}) {
-    const environment = {};
-    const herdr = findHerdrCommand({ env, home, ...(directories ? { directories } : {}) });
-    if (herdr.found)
-        environment.HERDR_BIN_PATH = herdr.command;
-    const searchPath = servicePath({ env, herdrCommand: herdr.found ? herdr.command : null });
-    if (searchPath)
-        environment.PATH = searchPath;
-    return environment;
-}

package/dist/keepalive/index.js

@@ -1,129 +0,0 @@
-// Keep-alive integration.
-//
-// "Start the services" and "keep the services running" are different problems:
-// a detached spawn dies with the first crash and never comes back. This module
-// hands supervision to the platform's manager where one exists (systemd --user,
-// launchd, or Task Scheduler) and falls back to a detached supervisor elsewhere.
-import { spawnSync } from 'node:child_process';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { loadConfig } from '../config.js';
-import { detached } from './detached.js';
-import { launchd } from './launchd.js';
-import { systemd } from './systemd.js';
-import { windowsService } from './windows-service.js';
-import { windowsTask } from './windows-task.js';
-export { serviceEnvironment, servicePath } from './environment.js';
-export { escapeXml, renderLaunchdPlist } from './launchd.js';
-export { renderSystemdUnit, systemdEnvironmentLine } from './systemd.js';
-/**
- * Look for an executable on PATH without going through a shell: `spawnSync`
- * with `shell: true` concatenates rather than escapes its arguments, and Node
- * now warns about it on every call.
- */
-function commandExists(command) {
-    return (process.env.PATH || '')
-        .split(path.delimiter)
-        .filter(Boolean)
-        .some((directory) => {
-        try {
-            fs.accessSync(path.join(directory, command), fs.constants.X_OK);
-            return true;
-        }
-        catch {
-            return false;
-        }
-    });
-}
-/** Which manager to use given the platform, the user's preference and reality. */
-export function detectManager(preference = 'auto', platform = process.platform) {
-    if (preference && preference !== 'auto')
-        return preference;
-    if (platform === 'win32')
-        return 'windows-task';
-    if (platform === 'linux') {
-        // `systemctl --user` needs a user bus; containers and bare TTY logins often
-        // have systemd installed but no session bus, where it would fail at runtime.
-        if (commandExists('systemctl') &&
-            (process.env.DBUS_SESSION_BUS_ADDRESS || process.env.XDG_RUNTIME_DIR)) {
-            return 'systemd';
-        }
-        return 'supervisor';
-    }
-    if (platform === 'darwin') {
-        return commandExists('launchctl') ? 'launchd' : 'supervisor';
-    }
-    return 'supervisor';
-}
-function managerOf(config) {
-    return detectManager(config.keepalive?.manager || 'auto');
-}
-/** The backend for `config`. With keep-alive off, uninstalling still cleans up the fallback. */
-function configuredBackend(manager) {
-    if (manager === 'systemd')
-        return systemd;
-    if (manager === 'launchd')
-        return launchd;
-    if (manager === 'windows-task')
-        return windowsTask;
-    if (manager === 'windows-service')
-        return windowsService;
-    return detached;
-}
-function backendOf(config) {
-    const manager = managerOf(config);
-    if (manager === 'windows-task') {
-        if (windowsTask.status().installed)
-            return windowsTask;
-        if (windowsService.status().installed)
-            return windowsService;
-    }
-    return configuredBackend(manager);
-}
-export function status(config = loadConfig()) {
-    if (managerOf(config) === 'none')
-        return { manager: 'none', installed: false, active: false, enabled: false };
-    return backendOf(config).status();
-}
-export async function install(config = loadConfig()) {
-    if (managerOf(config) === 'none')
-        throw new Error('keep-alive is disabled in the configuration');
-    const backend = configuredBackend(managerOf(config));
-    return { manager: backend.name, ...(await backend.install()) };
-}
-export async function uninstall(config = loadConfig()) {
-    const backend = backendOf(config);
-    return { manager: backend.name, ...(await backend.uninstall()) };
-}
-/** Restart whatever manages the services, so config edits take effect. */
-export function restart(config = loadConfig()) {
-    const backend = backendOf(config);
-    return { manager: backend.name, ...backend.restart() };
-}
-/**
- * Stop the managed services. Killing the child pids directly would only make
- * the service manager start them again, so an installed manager is asked to
- * stop instead.
- */
-export function stopManaged(config = loadConfig()) {
-    const current = status(config);
-    if (current.manager === 'none' || (!current.installed && !current.active))
-        return { managed: false };
-    backendOf(config).stop();
-    return { managed: true, manager: current.manager };
-}
-export function enableLinger() {
-    const username = os.userInfo().username;
-    const result = spawnSync('loginctl', ['enable-linger', username], {
-        encoding: 'utf8',
-        windowsHide: true,
-    });
-    if (result.status !== 0) {
-        throw new Error(String(result.stderr || '').trim() || 'loginctl enable-linger failed');
-    }
-    return { ok: true, username };
-}
-export function logsHint(config = loadConfig()) {
-    return backendOf(config).logsHint();
-}

package/dist/keepalive/launchd.js

@@ -1,117 +0,0 @@
-// launchd: a LaunchAgent that runs `herdr-remote run` and keeps it alive.
-import { spawnSync } from 'node:child_process';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { ensureDir } from 'herdr-remote-relay/state';
-import { logPath, stateDir } from '../paths.js';
-import { cliEntryPoint, serviceEnvironment } from './environment.js';
-const LAUNCHD_LABEL = 'dev.herdr.remote';
-function launchdPlistPath() {
-    return path.join(os.homedir(), 'Library', 'LaunchAgents', `${LAUNCHD_LABEL}.plist`);
-}
-export function escapeXml(value) {
-    return String(value)
-        .replace(/&/g, '&')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;')
-        .replace(/'/g, '&apos;');
-}
-export function renderLaunchdPlist({ nodePath = process.execPath, entryPoint = cliEntryPoint(), label = LAUNCHD_LABEL, outLog = logPath('supervisor'), errLog = logPath('supervisor'), environment = {}, } = {}) {
-    const environmentEntries = Object.entries(environment)
-        .map(([key, value]) => `      <key>${escapeXml(key)}</key>\n      <string>${escapeXml(value)}</string>`)
-        .join('\n');
-    const environmentBlock = environmentEntries
-        ? `    <key>EnvironmentVariables</key>\n    <dict>\n${environmentEntries}\n    </dict>\n`
-        : '';
-    return `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-  <dict>
-    <key>Label</key>
-    <string>${escapeXml(label)}</string>
-    <key>ProgramArguments</key>
-    <array>
-      <string>${escapeXml(nodePath)}</string>
-      <string>${escapeXml(entryPoint)}</string>
-      <string>run</string>
-    </array>
-    <key>RunAtLoad</key>
-    <true/>
-    <key>KeepAlive</key>
-    <true/>
-    <key>ProcessType</key>
-    <string>Background</string>
-${environmentBlock}    <key>StandardOutPath</key>
-    <string>${escapeXml(outLog)}</string>
-    <key>StandardErrorPath</key>
-    <string>${escapeXml(errLog)}</string>
-  </dict>
-</plist>
-`;
-}
-function domainTarget() {
-    return `gui/${process.getuid ? process.getuid() : ''}`;
-}
-function serviceTarget() {
-    return `${domainTarget()}/${LAUNCHD_LABEL}`;
-}
-function launchctl(args) {
-    return spawnSync('launchctl', args, { encoding: 'utf8', windowsHide: true });
-}
-/** A launchctl call whose outcome does not matter (bootout of nothing, say). */
-function launchctlQuietly(args) {
-    spawnSync('launchctl', args, { stdio: 'ignore', windowsHide: true });
-}
-export const launchd = {
-    name: 'launchd',
-    status() {
-        const plistPath = launchdPlistPath();
-        if (!fs.existsSync(plistPath))
-            return { manager: 'launchd', installed: false, active: false, enabled: false };
-        const result = launchctl(['print', serviceTarget()]);
-        const output = String(result.stdout || '');
-        return {
-            manager: 'launchd',
-            installed: true,
-            active: result.status === 0 && /state = running/.test(output),
-            enabled: result.status === 0,
-            unitPath: plistPath,
-            state: result.status === 0 ? 'loaded' : 'not loaded',
-        };
-    },
-    async install() {
-        const plistPath = launchdPlistPath();
-        ensureDir(path.dirname(plistPath));
-        ensureDir(stateDir());
-        fs.writeFileSync(plistPath, renderLaunchdPlist({ environment: serviceEnvironment() }), {
-            mode: 0o644,
-        });
-        // bootout first so a re-install picks up the rewritten plist.
-        launchctlQuietly(['bootout', serviceTarget()]);
-        const result = launchctl(['bootstrap', domainTarget(), plistPath]);
-        if (result.status !== 0) {
-            throw new Error(`launchctl bootstrap failed: ${String(result.stderr || '').trim()}`);
-        }
-        launchctlQuietly(['enable', serviceTarget()]);
-        return { ok: true, unitPath: plistPath };
-    },
-    async uninstall() {
-        const plistPath = launchdPlistPath();
-        launchctlQuietly(['bootout', serviceTarget()]);
-        fs.rmSync(plistPath, { force: true });
-        return { ok: true, unitPath: plistPath };
-    },
-    restart() {
-        launchctlQuietly(['kickstart', '-k', serviceTarget()]);
-        return { ok: true };
-    },
-    stop() {
-        launchctlQuietly(['bootout', serviceTarget()]);
-    },
-    // The plist sends the supervisor's output to its log file.
-    logsHint() {
-        return `tail -f ${logPath('supervisor')}`;
-    },
-};