kokorobox-native 0.10.1 → 0.11.1

package/README.md

@@ -45,7 +45,8 @@ The full TypeScript declarations are shipped in
 | macOS service | `getMacosManagedServiceStatus`, `registerMacosManagedService`, `unregisterMacosManagedService`, `reloadMacosManagedService`, `openMacosLoginItemsSettings` |
 | macOS application routing | `invokeMacosApplicationRouting` |
 | Core permissions | `getCorePrivilegeStatus`, `setCorePrivileges` |
-| Windows | `getCurrentUserSid`, `isRunningAsAdmin`, `runElevated`, `launchElevated`, `launchUnelevated`, `setupFirewallRules` |
+| Privileged operations | `runServiceLifecycleElevated`, `cleanupLegacyMacosService`, `stopMacosManagedService`, `repairManagedFilePermissions` |
+| Windows | `getCurrentUserSid`, `isRunningAsAdmin`, `relaunchCurrentApplicationWithPrivilege`, `setupFirewallRules` |
 
 `inspectApplication` validates the input for the current platform and resolves
 it to a routing identifier: an executable path on Windows and Linux, or a code
@@ -101,10 +102,15 @@ Windows account, elevation, Firewall, and application-scan APIs report an
 `UNSUPPORTED_PLATFORM:` error on other operating systems instead of behaving as
 no-ops.
 
-`launchElevated(command, args)` and `launchUnelevated(command, args)` start a
-new Windows process without waiting for it. The first presents the standard UAC
-prompt; the second uses the interactive desktop shell token so an elevated app
-can restart at normal user integrity. They do not configure persistent
+`runServiceLifecycleElevated(options)` accepts only the KokoroBox Service
+`init`, `install`, `uninstall`, `start`, `stop`, and `restart` actions. macOS
+legacy-service cleanup, managed-service stopping, and managed-file permission
+repair are separate purpose-specific APIs.
+
+`relaunchCurrentApplicationWithPrivilege(args, elevated)` starts a new copy of
+the current Windows application without accepting an executable path. An
+elevated relaunch presents the standard UAC prompt; the unelevated path uses
+the interactive desktop shell token. It does not configure persistent
 elevation.
 
 ## Contributing

package/index.d.ts

@@ -3,6 +3,13 @@ export interface FirewallRule {
   applicationPath: string;
 }
 
+export interface UwpLoopbackApp {
+  sid: string;
+  packageName: string;
+  displayName: string;
+  enabled: boolean;
+}
+
 export interface NativeCapabilities {
   applicationInspection: boolean;
   executableDiscovery: boolean;
@@ -185,6 +192,8 @@ export function setLaunchAtLogin(
   enabled: boolean,
 ): Promise<LaunchAtLoginStatus>;
 export function getNetworkContext(): Promise<NetworkContext>;
+/** Set DNS on the active macOS network service; [] restores automatic DNS. */
+export function setActiveNetworkDns(servers: string[]): Promise<void>;
 /** Resolve when the native network snapshot changes, or `undefined` on timeout. */
 export function waitForNetworkContextChange(
   previous: NetworkContext,
@@ -198,6 +207,38 @@ export function reloadMacosManagedService(plistName: string): MacOSManagedServic
 export function openMacosLoginItemsSettings(): void;
 /** Invoke the versioned macOS Network/System Extension control-plane protocol. */
 export function invokeMacosApplicationRouting(request: string): Promise<string>;
+export type ServiceLifecycleAction =
+  | "init"
+  | "install"
+  | "uninstall"
+  | "start"
+  | "stop"
+  | "restart";
+export interface ServiceLifecycleOptions {
+  executablePath: string;
+  action: ServiceLifecycleAction;
+  publicKey?: string;
+  authorizedSid?: string;
+  authorizedUid?: number;
+}
+/** Run only a validated KokoroBox Service lifecycle action with elevation. */
+export function runServiceLifecycleElevated(options: ServiceLifecycleOptions): Promise<void>;
+/** Remove only the fixed pre-SMAppService KokoroBox LaunchDaemon files. */
+export function cleanupLegacyMacosService(): Promise<void>;
+/** Stop the fixed KokoroBox SMAppService daemon label. */
+export function stopMacosManagedService(): Promise<void>;
+/** Repair one file below a validated managed root for the requested Unix owner. */
+export function repairManagedFilePermissions(
+  target: string,
+  managedRoot: string,
+  uid: number,
+  gid: number,
+): Promise<void>;
+/** Relaunch the current Windows application at the requested privilege level. */
+export function relaunchCurrentApplicationWithPrivilege(
+  args: string[],
+  elevated: boolean,
+): void;
 /** Inspect only validated `mihomo` and `mihomo-alpha` executable paths. */
 export function getCorePrivilegeStatus(paths: string[]): CorePrivilegeStatus[];
 /** Grant or revoke the constrained Unix core-file privilege. */
@@ -213,7 +254,6 @@ export function scanWindowsApplications(
 ): Promise<ApplicationScanResult>;
 export function getCurrentUserSid(): string;
 export function isRunningAsAdmin(): boolean;
-export function runElevated(command: string, args?: string[]): number;
-export function launchElevated(command: string, args?: string[]): void;
-export function launchUnelevated(command: string, args?: string[]): void;
 export function setupFirewallRules(rules: FirewallRule[]): void;
+export function listUwpLoopbackApps(): UwpLoopbackApp[];
+export function setUwpLoopbackExemption(sid: string, enabled: boolean): void;

package/index.js

@@ -104,6 +104,7 @@ export const findExecutables = nativeBinding.findExecutables;
 export const getLaunchAtLogin = nativeBinding.getLaunchAtLogin;
 export const setLaunchAtLogin = nativeBinding.setLaunchAtLogin;
 export const getNetworkContext = nativeBinding.getNetworkContext;
+export const setActiveNetworkDns = nativeBinding.setActiveNetworkDns;
 export const waitForNetworkContextChange = nativeBinding.waitForNetworkContextChange;
 export const getMacosManagedServiceStatus = nativeBinding.getMacosManagedServiceStatus;
 export const registerMacosManagedService = nativeBinding.registerMacosManagedService;
@@ -111,16 +112,20 @@ export const unregisterMacosManagedService = nativeBinding.unregisterMacosManage
 export const reloadMacosManagedService = nativeBinding.reloadMacosManagedService;
 export const openMacosLoginItemsSettings = nativeBinding.openMacosLoginItemsSettings;
 export const invokeMacosApplicationRouting = nativeBinding.invokeMacosApplicationRouting;
+export const runServiceLifecycleElevated = nativeBinding.runServiceLifecycleElevated;
+export const cleanupLegacyMacosService = nativeBinding.cleanupLegacyMacosService;
+export const stopMacosManagedService = nativeBinding.stopMacosManagedService;
+export const repairManagedFilePermissions = nativeBinding.repairManagedFilePermissions;
+export const relaunchCurrentApplicationWithPrivilege = nativeBinding.relaunchCurrentApplicationWithPrivilege;
 export const getCorePrivilegeStatus = nativeBinding.getCorePrivilegeStatus;
 export const setCorePrivileges = nativeBinding.setCorePrivileges;
 export const inspectApplication = nativeBinding.inspectApplication;
 export const scanWindowsApplications = nativeBinding.scanWindowsApplications;
 export const getCurrentUserSid = nativeBinding.getCurrentUserSid;
 export const isRunningAsAdmin = nativeBinding.isRunningAsAdmin;
-export const runElevated = nativeBinding.runElevated;
-export const launchElevated = nativeBinding.launchElevated;
-export const launchUnelevated = nativeBinding.launchUnelevated;
 export const setupFirewallRules = nativeBinding.setupFirewallRules;
+export const listUwpLoopbackApps = nativeBinding.listUwpLoopbackApps;
+export const setUwpLoopbackExemption = nativeBinding.setUwpLoopbackExemption;
 export const ServiceIdentity = nativeBinding.ServiceIdentity;
 export const openServiceIdentity = nativeBinding.openServiceIdentity;
 export const deleteServiceIdentity = nativeBinding.deleteServiceIdentity;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kokorobox-native",
-  "version": "0.10.1",
+  "version": "0.11.1",
   "description": "KokoroBox native bridge",
   "type": "module",
   "main": "index.js",
@@ -48,11 +48,11 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "kokorobox-native-win32-x64-msvc": "0.10.1",
-    "kokorobox-native-win32-arm64-msvc": "0.10.1",
-    "kokorobox-native-darwin-x64": "0.10.1",
-    "kokorobox-native-darwin-arm64": "0.10.1",
-    "kokorobox-native-linux-x64-gnu": "0.10.1",
-    "kokorobox-native-linux-arm64-gnu": "0.10.1"
+    "kokorobox-native-win32-x64-msvc": "0.11.1",
+    "kokorobox-native-win32-arm64-msvc": "0.11.1",
+    "kokorobox-native-darwin-x64": "0.11.1",
+    "kokorobox-native-darwin-arm64": "0.11.1",
+    "kokorobox-native-linux-x64-gnu": "0.11.1",
+    "kokorobox-native-linux-arm64-gnu": "0.11.1"
   }
 }