kokorobox-native 0.6.0 → 0.8.0

package/README.md

@@ -19,12 +19,14 @@ macOS, and GNU/Linux. The loader also accepts a development binary through
 import {
   getNativeCapabilities,
   getNetworkContext,
+  getTrafficPresenterPath,
   inspectApplication,
 } from "kokorobox-native";
 
 const capabilities = getNativeCapabilities();
 const network = await getNetworkContext();
 const app = await inspectApplication("/Applications/KokoroBox.app");
+const presenter = getTrafficPresenterPath();
 ```
 
 The full TypeScript declarations are shipped in
@@ -35,10 +37,12 @@ The full TypeScript declarations are shipped in
 | Area | Exports |
 | --- | --- |
 | Capabilities | `getNativeCapabilities` |
+| Traffic presenter | `getTrafficPresenterPath` |
 | Icons | `fileToDataUrl`, `getAppName` |
-| Applications | `inspectApplication`, `scanWindowsApplications` |
+| Applications | `inspectApplication`, `scanWindowsApplications`, `findExecutables` |
 | Rules | `fileToStr` |
 | Platform | `getLaunchAtLogin`, `setLaunchAtLogin`, `getNetworkContext` |
+| macOS service | `getMacosManagedServiceStatus`, `registerMacosManagedService`, `unregisterMacosManagedService`, `reloadMacosManagedService`, `openMacosLoginItemsSettings` |
 | Core permissions | `getCorePrivilegeStatus`, `setCorePrivileges` |
 | Windows | `getCurrentUserSid`, `isRunningAsAdmin`, `runElevated`, `launchElevated`, `launchUnelevated`, `setupFirewallRules` |
 
@@ -48,6 +52,11 @@ signing identifier on macOS. `scanWindowsApplications` is asynchronous and
 Windows-only; it accepts an optional result limit and executable-name exclusion
 list.
 
+`findExecutables` asynchronously searches absolute additional directories,
+`PATH`, and platform-standard binary locations without spawning command-line
+tools. It returns canonical paths for stable deduplication; prefix matching is
+available only when explicitly requested.
+
 `fileToStr` converts a rule file and returns each generated output keyed by its
 behavior, metadata for those outputs, and rules that were skipped. Its optional
 `RuleConvertOptions` accepts Mihomo, General, Egern, and sing-box targets and
@@ -63,12 +72,22 @@ directly from SystemConfiguration without parsing command output.
 Windows obtains the preferred interface and DNS servers from IP Helper and the
 SSID from Native Wi-Fi, without spawning PowerShell.
 
+The macOS managed-service functions accept the basename of an embedded
+LaunchDaemon plist and use `SMAppService` directly. They return an explicit
+`requires-approval` state when an administrator must approve the daemon in
+System Settings.
+
 Core-file privilege APIs are supported on macOS and Linux. They accept only
 canonical, existing executables named `mihomo` or `mihomo-alpha`; callers cannot
 use them as a general privileged-command interface. See the repository's
 [platform-services contract](../docs/platform-services.md) for validation and
 platform behavior.
 
+`getTrafficPresenterPath()` returns the presenter executable shipped in the
+same platform package as the loaded native binding. The presenter accepts the
+versioned JSON-lines protocol documented by the `traffic-presenter` crate on
+standard input and terminates when its parent closes that stream.
+
 ## Platform behavior
 
 Use `getNativeCapabilities()` before enabling an optional system feature.

package/index.d.ts

@@ -5,15 +5,41 @@ export interface FirewallRule {
 
 export interface NativeCapabilities {
   applicationInspection: boolean;
+  executableDiscovery: boolean;
   windowsApplicationScan: boolean;
   windowsAccount: boolean;
   windowsElevation: boolean;
   windowsFirewall: boolean;
   launchAtLogin: boolean;
   networkContext: boolean;
+  macosServiceManagement: boolean;
   coreFilePrivileges: boolean;
 }
 
+export interface ExecutableSearchOptions {
+  /** Safe executable basenames, without directory components. */
+  names: string[];
+  /** Absolute directories searched before PATH and platform-standard locations. */
+  additionalPaths?: string[];
+  /** Also match executable names beginning with a supplied name. */
+  matchNamePrefixes?: boolean;
+}
+
+export interface ExecutableCandidate {
+  /** The discovered path, which may be a symlink. */
+  path: string;
+  /** The canonical executable path used for deduplication. */
+  canonicalPath: string;
+  name: string;
+}
+
+export type MacOSManagedServiceStatus =
+  | "not-registered"
+  | "enabled"
+  | "requires-approval"
+  | "not-found"
+  | "unknown";
+
 export interface LaunchAtLoginOptions {
   /** Stable, filesystem-safe identifier, such as `com.amamiyakokoro.kokorobox`. */
   identifier: string;
@@ -109,12 +135,21 @@ export function fileToStr(
 ): RuleStringResult;
 export function getAppName(path: string): string;
 export function getNativeCapabilities(): NativeCapabilities;
+/** Resolve the executable shipped beside the current platform binding. */
+export function getTrafficPresenterPath(): string;
+export function findExecutables(options: ExecutableSearchOptions): Promise<ExecutableCandidate[]>;
 export function getLaunchAtLogin(options: LaunchAtLoginOptions): Promise<LaunchAtLoginStatus>;
 export function setLaunchAtLogin(
   options: LaunchAtLoginOptions,
   enabled: boolean,
 ): Promise<LaunchAtLoginStatus>;
 export function getNetworkContext(): Promise<NetworkContext>;
+/** Query a LaunchDaemon plist embedded in the calling macOS application. */
+export function getMacosManagedServiceStatus(plistName: string): MacOSManagedServiceStatus;
+export function registerMacosManagedService(plistName: string): MacOSManagedServiceStatus;
+export function unregisterMacosManagedService(plistName: string): MacOSManagedServiceStatus;
+export function reloadMacosManagedService(plistName: string): MacOSManagedServiceStatus;
+export function openMacosLoginItemsSettings(): void;
 /** Inspect only validated `mihomo` and `mihomo-alpha` executable paths. */
 export function getCorePrivilegeStatus(paths: string[]): CorePrivilegeStatus[];
 /** Grant or revoke the constrained Unix core-file privilege. */

package/index.js

@@ -3,7 +3,7 @@
 // @ts-nocheck
 
 import { existsSync } from 'node:fs'
-import { join } from "node:path";
+import { dirname, join } from "node:path";
 import { createRequire } from "node:module";
 
 const require = createRequire(import.meta.url);
@@ -15,6 +15,7 @@ const __dirname = new URL(".", import.meta.url).pathname.replace(
 const packageName = "kokorobox-native";
 const binaryName = "kokorobox-native";
 const loadErrors = [];
+let loadedTuple = null;
 
 function requireLocal(tuple) {
   const filename = join(__dirname, `${binaryName}.${tuple}.node`);
@@ -37,7 +38,25 @@ function requirePackage(tuple) {
 }
 
 function requireBinding(tuple) {
-  return requireLocal(tuple) || requirePackage(tuple);
+  const binding = requireLocal(tuple) || requirePackage(tuple);
+  if (binding) loadedTuple = tuple;
+  return binding;
+}
+
+export function getTrafficPresenterPath() {
+  const filename = `kokorobox-traffic-presenter${process.platform === "win32" ? ".exe" : ""}`;
+  const localPath = join(__dirname, filename);
+  if (existsSync(localPath)) return localPath;
+
+  if (loadedTuple) {
+    const packageEntry = require.resolve(`${packageName}-${loadedTuple}`);
+    const packagedPath = join(dirname(packageEntry), filename);
+    if (existsSync(packagedPath)) return packagedPath;
+  }
+
+  throw new Error(
+    `Traffic presenter is missing for ${process.platform} ${process.arch}`,
+  );
 }
 
 function requireNative() {
@@ -81,9 +100,15 @@ export const fileToDataUrl = nativeBinding.fileToDataUrl;
 export const fileToStr = nativeBinding.fileToStr;
 export const getAppName = nativeBinding.getAppName;
 export const getNativeCapabilities = nativeBinding.getNativeCapabilities;
+export const findExecutables = nativeBinding.findExecutables;
 export const getLaunchAtLogin = nativeBinding.getLaunchAtLogin;
 export const setLaunchAtLogin = nativeBinding.setLaunchAtLogin;
 export const getNetworkContext = nativeBinding.getNetworkContext;
+export const getMacosManagedServiceStatus = nativeBinding.getMacosManagedServiceStatus;
+export const registerMacosManagedService = nativeBinding.registerMacosManagedService;
+export const unregisterMacosManagedService = nativeBinding.unregisterMacosManagedService;
+export const reloadMacosManagedService = nativeBinding.reloadMacosManagedService;
+export const openMacosLoginItemsSettings = nativeBinding.openMacosLoginItemsSettings;
 export const getCorePrivilegeStatus = nativeBinding.getCorePrivilegeStatus;
 export const setCorePrivileges = nativeBinding.setCorePrivileges;
 export const inspectApplication = nativeBinding.inspectApplication;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kokorobox-native",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "KokoroBox native bridge",
   "type": "module",
   "main": "index.js",
@@ -35,7 +35,8 @@
     "build": "napi build --platform --release --strip --no-js --dts napi.generated.d.ts",
     "build:debug": "napi build --platform --no-js --dts napi.generated.d.ts",
     "create-npm-dirs": "napi create-npm-dirs",
-    "artifacts": "napi artifacts"
+    "artifacts": "napi artifacts",
+    "package-presenters": "node package-presenters.mjs"
   },
   "devDependencies": {
     "@napi-rs/cli": "^3.8.6"
@@ -47,11 +48,11 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "kokorobox-native-win32-x64-msvc": "0.6.0",
-    "kokorobox-native-win32-arm64-msvc": "0.6.0",
-    "kokorobox-native-darwin-x64": "0.6.0",
-    "kokorobox-native-darwin-arm64": "0.6.0",
-    "kokorobox-native-linux-x64-gnu": "0.6.0",
-    "kokorobox-native-linux-arm64-gnu": "0.6.0"
+    "kokorobox-native-win32-x64-msvc": "0.8.0",
+    "kokorobox-native-win32-arm64-msvc": "0.8.0",
+    "kokorobox-native-darwin-x64": "0.8.0",
+    "kokorobox-native-darwin-arm64": "0.8.0",
+    "kokorobox-native-linux-x64-gnu": "0.8.0",
+    "kokorobox-native-linux-arm64-gnu": "0.8.0"
   }
 }