kokorobox-native 0.14.0 → 0.16.0

package/README.md

@@ -41,12 +41,14 @@ The full TypeScript declarations are shipped in
 | Icons | `fileToDataUrl`, `getAppName` |
 | Applications | `inspectApplication`, `scanWindowsApplications`, `findExecutables` |
 | Rules | `fileToStr` |
-| Platform | `getLaunchAtLogin`, `setLaunchAtLogin`, `getNetworkContext` |
+| Platform | `getLaunchAtLogin`, `setLaunchAtLogin`, `getNetworkContext`, `waitForNetworkContextChange` |
+| Service identity | `openServiceIdentity`, `deleteServiceIdentity`, `ServiceIdentity` |
+| Linux terminal proxy | `setTerminalProxyEnvironment`, `clearTerminalProxyEnvironment` |
 | macOS service | `getMacosManagedServiceStatus`, `registerMacosManagedService`, `unregisterMacosManagedService`, `reloadMacosManagedService`, `openMacosLoginItemsSettings` |
 | macOS application routing | `applyMacosApplicationRouting`, `getMacosApplicationRoutingStatus`, `stopMacosApplicationRouting`, `openMacosApplicationRoutingSettings` |
 | Core permissions | `getCorePrivilegeStatus`, `setCorePrivileges` |
 | Privileged operations | `runServiceLifecycleElevated`, `cleanupLegacyMacosService`, `stopMacosManagedService`, `repairManagedFilePermissions` |
-| Windows | `getCurrentUserSid`, `isRunningAsAdmin`, `relaunchCurrentApplicationWithPrivilege`, `ensureKokoroBoxCoreFirewall` |
+| Windows | `getCurrentUserSid`, `isRunningAsAdmin`, `relaunchCurrentApplicationWithPrivilege`, `ensureKokoroBoxCoreFirewall`, `listUwpLoopbackApps`, `setUwpLoopbackExemption` |
 
 `inspectApplication` validates the input for the current platform and resolves
 it to a routing identifier: an executable path on Windows and Linux, or a code
@@ -78,6 +80,18 @@ directly from SystemConfiguration without parsing command output.
 Windows obtains the preferred interface and DNS servers from IP Helper and the
 SSID from Native Wi-Fi, without spawning PowerShell.
 
+`waitForNetworkContextChange(previous, timeoutMs)` resolves with a changed
+snapshot or `null` when the timeout expires. `openServiceIdentity()` opens an
+opaque Ed25519 signer backed by the platform credential store; its private key
+is not returned to JavaScript. Linux can use an explicitly reported protected
+file fallback when Secret Service is unavailable.
+
+On Linux, the terminal proxy functions manage only KokoroBox's user-session
+configuration. The set call returns whether the systemd user manager was
+updated; clearing returns `null` when no managed file exists. See the
+[platform-services contract](../docs/platform-services.md) for the exact path
+and return semantics.
+
 The macOS managed-service functions accept the basename of an embedded
 LaunchDaemon plist and use `SMAppService` directly. They return an explicit
 `requires-approval` state when an administrator must approve the daemon in
@@ -116,6 +130,7 @@ support than the package itself:
 | `managedFilePermissions` | macOS, Linux |
 | `windowsPrivilegeRelaunch` | Windows |
 | `windowsUwpLoopback` | Windows |
+| `linuxTerminalProxy` | Linux |
 
 Use these flags instead of inferring availability from `process.platform` or
 from a related but broader capability.
@@ -131,10 +146,16 @@ elevated relaunch presents the standard UAC prompt; the unelevated path uses
 the interactive desktop shell token. It does not configure persistent
 elevation.
 
+`listUwpLoopbackApps()` reports Windows app containers with an opaque ID,
+display metadata, category (`user`, `microsoft`, or `system`), package type,
+and exemption status. Pass that ID to `setUwpLoopbackExemption()` to change the
+app's loopback exemption.
+
 ## Contributing
 
-The source is a two-crate Rust workspace. The root crate implements native
-behavior; `napi/` maps it into this package’s JavaScript API. See the root
+The source is a three-crate Rust workspace. The root crate implements native
+behavior, `napi/` maps it into this package’s JavaScript API, and
+`traffic-presenter/` builds the sidecar. See the root
 [README](../README.md#repository-structure) for the complete layout and build
 commands.
 

package/index.d.ts

@@ -1,8 +1,15 @@
 export interface UwpLoopbackApp {
-  sid: string;
-  packageName: string;
+  /** Opaque identifier used only when changing this app's loopback exemption. */
+  id: string;
+  packageFamilyName: string;
+  packageFullName?: string;
   displayName: string;
+  description?: string;
   enabled: boolean;
+  category: "user" | "microsoft" | "system";
+  packageType?: "main" | "framework" | "resource" | "optional";
+  framework: boolean;
+  resourcePackage: boolean;
 }
 
 export interface NativeCapabilities {
@@ -18,12 +25,15 @@ export interface NativeCapabilities {
   serviceLifecycle: boolean;
   managedFilePermissions: boolean;
   macosServiceManagement: boolean;
+  macosServiceProcessStatus: boolean;
   macosApplicationRouting: boolean;
   windowsPrivilegeRelaunch: boolean;
   windowsUwpLoopback: boolean;
+  windowsServiceStatus: boolean;
   coreFilePrivileges: boolean;
   serviceIdentity: boolean;
   linuxTerminalProxy: boolean;
+  linuxServiceStatus: boolean;
 }
 
 export interface ExecutableSearchOptions {
@@ -183,12 +193,18 @@ export function fileToStr(
 ): RuleStringResult;
 export function getAppName(path: string): string;
 export function getNativeCapabilities(): NativeCapabilities;
+/** Read-only status of KokoroBoxService from the Windows Service Control Manager. */
+export function getWindowsServiceStatus(): "running" | "stopped" | "paused" | "not-installed" | "unknown";
+/** Read-only status of the system-wide KokoroBoxService systemd unit. */
+export function getLinuxServiceStatus(): Promise<"running" | "stopped" | "not-installed" | "unknown">;
 /** Write KokoroBox's Linux user-session proxy file and update systemd --user over D-Bus. */
 export function setTerminalProxyEnvironment(host: string, port: number, bypass: string[]): Promise<boolean>;
 /** Remove only KokoroBox's Linux user-session proxy file and clear its session variables. */
 export function clearTerminalProxyEnvironment(): Promise<boolean | null>;
 /** Resolve the executable shipped beside the current platform binding. */
 export function getTrafficPresenterPath(): string;
+/** Resolve the Windows portable updater sidecar shipped with the native platform package. */
+export function getPortableUpdaterPath(): string;
 export function findExecutables(options: ExecutableSearchOptions): Promise<ExecutableCandidate[]>;
 export function getLaunchAtLogin(options: LaunchAtLoginOptions): Promise<LaunchAtLoginStatus>;
 export function setLaunchAtLogin(
@@ -203,6 +219,8 @@ export function waitForNetworkContextChange(
 ): Promise<NetworkContext | null>;
 /** Query a LaunchDaemon plist embedded in the calling macOS application. */
 export function getMacosManagedServiceStatus(plistName: string): MacOSManagedServiceStatus;
+/** Query launchd's process state for the fixed KokoroBoxService system daemon. */
+export function getMacosServiceProcessStatus(): Promise<"running" | "stopped" | "not-installed" | "unknown">;
 export function registerMacosManagedService(plistName: string): MacOSManagedServiceStatus;
 export function unregisterMacosManagedService(plistName: string): MacOSManagedServiceStatus;
 export function reloadMacosManagedService(plistName: string): MacOSManagedServiceStatus;
@@ -295,4 +313,4 @@ export function ensureKokoroBoxCoreFirewall(
   applicationPath: string,
 ): void;
 export function listUwpLoopbackApps(): UwpLoopbackApp[];
-export function setUwpLoopbackExemption(sid: string, enabled: boolean): void;
+export function setUwpLoopbackExemption(id: string, enabled: boolean): void;

package/index.js

@@ -59,6 +59,21 @@ export function getTrafficPresenterPath() {
   );
 }
 
+export function getPortableUpdaterPath() {
+  if (process.platform !== "win32") {
+    throw new Error("Portable updater is only available on Windows");
+  }
+  const filename = "kokorobox-portable-updater.exe";
+  const localPath = join(__dirname, filename);
+  if (existsSync(localPath)) return localPath;
+  if (loadedTuple) {
+    const packageEntry = require.resolve(`${packageName}-${loadedTuple}`);
+    const packagedPath = join(dirname(packageEntry), filename);
+    if (existsSync(packagedPath)) return packagedPath;
+  }
+  throw new Error(`Portable updater is missing for ${process.platform} ${process.arch}`);
+}
+
 function requireNative() {
   if (process.env.NAPI_RS_NATIVE_LIBRARY_PATH) {
     try {
@@ -100,6 +115,8 @@ export const fileToDataUrl = nativeBinding.fileToDataUrl;
 export const fileToStr = nativeBinding.fileToStr;
 export const getAppName = nativeBinding.getAppName;
 export const getNativeCapabilities = nativeBinding.getNativeCapabilities;
+export const getWindowsServiceStatus = nativeBinding.getWindowsServiceStatus;
+export const getLinuxServiceStatus = nativeBinding.getLinuxServiceStatus;
 export const setTerminalProxyEnvironment = nativeBinding.setTerminalProxyEnvironment;
 export const clearTerminalProxyEnvironment = nativeBinding.clearTerminalProxyEnvironment;
 export const findExecutables = nativeBinding.findExecutables;
@@ -108,6 +125,7 @@ export const setLaunchAtLogin = nativeBinding.setLaunchAtLogin;
 export const getNetworkContext = nativeBinding.getNetworkContext;
 export const waitForNetworkContextChange = nativeBinding.waitForNetworkContextChange;
 export const getMacosManagedServiceStatus = nativeBinding.getMacosManagedServiceStatus;
+export const getMacosServiceProcessStatus = nativeBinding.getMacosServiceProcessStatus;
 export const registerMacosManagedService = nativeBinding.registerMacosManagedService;
 export const unregisterMacosManagedService = nativeBinding.unregisterMacosManagedService;
 export const reloadMacosManagedService = nativeBinding.reloadMacosManagedService;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kokorobox-native",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "KokoroBox native bridge",
   "type": "module",
   "main": "index.js",
@@ -48,11 +48,11 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "kokorobox-native-win32-x64-msvc": "0.14.0",
-    "kokorobox-native-win32-arm64-msvc": "0.14.0",
-    "kokorobox-native-darwin-x64": "0.14.0",
-    "kokorobox-native-darwin-arm64": "0.14.0",
-    "kokorobox-native-linux-x64-gnu": "0.14.0",
-    "kokorobox-native-linux-arm64-gnu": "0.14.0"
+    "kokorobox-native-win32-x64-msvc": "0.16.0",
+    "kokorobox-native-win32-arm64-msvc": "0.16.0",
+    "kokorobox-native-darwin-x64": "0.16.0",
+    "kokorobox-native-darwin-arm64": "0.16.0",
+    "kokorobox-native-linux-x64-gnu": "0.16.0",
+    "kokorobox-native-linux-arm64-gnu": "0.16.0"
   }
 }