sleev 0.0.11 → 0.0.13

package/dist/config/store.js

@@ -0,0 +1,270 @@
+// Owns persisted sleeved config shape, normalization, and state transitions.
+import fs from "node:fs/promises";
+import path from "node:path";
+import { resolveSleevedPaths } from "./paths.js";
+export function defaultConfig() {
+    return {
+        version: 1,
+        proxy: {
+            host: "127.0.0.1",
+            port: 17321,
+        },
+        auth: {
+            signedIn: false,
+        },
+        location: {
+            mode: null,
+        },
+        localInstallation: null,
+        gateway: null,
+        tokens: {
+            defaultId: null,
+            items: [],
+        },
+        harnesses: {},
+    };
+}
+export function signInConfig(config, session) {
+    return {
+        ...config,
+        auth: {
+            signedIn: true,
+            label: session.label,
+            accountId: session.accountId,
+            email: session.email,
+            createdAt: session.createdAt,
+        },
+    };
+}
+export function signOutConfig(config) {
+    return {
+        ...config,
+        auth: {
+            signedIn: false,
+        },
+        localInstallation: null,
+        tokens: {
+            defaultId: null,
+            items: [],
+        },
+        harnesses: {},
+    };
+}
+export function setLocalInstallationConfig(config, localInstallation) {
+    return {
+        ...config,
+        localInstallation,
+    };
+}
+export function setGatewayConfig(config, gateway) {
+    return {
+        ...config,
+        gateway,
+    };
+}
+export function setLocationConfig(config, mode) {
+    return {
+        ...config,
+        location: {
+            mode,
+        },
+    };
+}
+export function setHarnessesConfig(config, slugs) {
+    return {
+        ...config,
+        harnesses: {
+            ...config.harnesses,
+            ...Object.fromEntries(slugs.map((slug) => [slug, { configured: true }])),
+        },
+    };
+}
+export function addTokenConfig(config, token) {
+    const items = [
+        token,
+        ...config.tokens.items.filter((item) => item.id !== token.id),
+    ];
+    return {
+        ...config,
+        tokens: {
+            defaultId: token.id,
+            items,
+        },
+    };
+}
+export function setDefaultTokenConfig(config, id) {
+    const defaultId = config.tokens.items.some((item) => item.id === id)
+        ? id
+        : config.tokens.defaultId;
+    return {
+        ...config,
+        tokens: {
+            ...config.tokens,
+            defaultId,
+        },
+    };
+}
+export async function readConfig() {
+    const paths = resolveSleevedPaths();
+    try {
+        const raw = await fs.readFile(paths.configFile, "utf8");
+        return normalizeConfig(JSON.parse(raw));
+    }
+    catch (error) {
+        if (isNotFoundError(error)) {
+            return defaultConfig();
+        }
+        throw error;
+    }
+}
+export async function writeConfig(config) {
+    const paths = resolveSleevedPaths();
+    await fs.mkdir(path.dirname(paths.configFile), { recursive: true });
+    await fs.writeFile(paths.configFile, `${JSON.stringify(config, null, 2)}\n`, {
+        mode: 0o600,
+    });
+}
+function normalizeConfig(value) {
+    if (!isRecord(value)) {
+        return defaultConfig();
+    }
+    const defaults = defaultConfig();
+    const proxy = isRecord(value.proxy) ? value.proxy : {};
+    const auth = isRecord(value.auth) ? value.auth : {};
+    const location = isRecord(value.location) ? value.location : {};
+    const tokens = isRecord(value.tokens) ? value.tokens : {};
+    const harnesses = isRecord(value.harnesses) ? value.harnesses : {};
+    const accountId = nonEmptyString(auth.accountId);
+    const signedIn = auth.signedIn === true && typeof accountId === "string";
+    return {
+        version: 1,
+        proxy: {
+            host: typeof proxy.host === "string"
+                ? proxy.host
+                : defaults.proxy.host,
+            port: typeof proxy.port === "number"
+                ? proxy.port
+                : defaults.proxy.port,
+        },
+        auth: {
+            signedIn,
+            label: nullableString(auth.label),
+            accountId,
+            email: nullableString(auth.email),
+            createdAt: typeof auth.createdAt === "string" ? auth.createdAt : undefined,
+        },
+        location: {
+            mode: locationMode(location.mode),
+        },
+        localInstallation: normalizeLocalInstallation(value.localInstallation),
+        gateway: normalizeGatewayInstall(value.gateway),
+        tokens: normalizeTokens(tokens),
+        harnesses: normalizeHarnesses(harnesses),
+    };
+}
+function locationMode(value) {
+    if (value === "local" || value === "cloud")
+        return value;
+    return null;
+}
+function normalizeGatewayInstall(value) {
+    if (!isRecord(value))
+        return null;
+    const binPath = nonEmptyString(value.binPath);
+    const version = nonEmptyString(value.version);
+    const channel = nonEmptyString(value.channel);
+    if (!binPath || !version || !channel)
+        return null;
+    return { binPath, version, channel };
+}
+function normalizeLocalInstallation(value) {
+    if (!isRecord(value))
+        return null;
+    const installationId = nonEmptyString(value.installationId);
+    const credential = nonEmptyString(value.credential);
+    const controlUrl = nonEmptyString(value.controlUrl);
+    if (!installationId || !credential || !controlUrl)
+        return null;
+    if (!credential.startsWith("slv_inst_") || !validUrl(controlUrl)) {
+        return null;
+    }
+    return { installationId, credential, controlUrl };
+}
+function normalizeTokens(value) {
+    const items = Array.isArray(value.items)
+        ? value.items.flatMap(tokenRecord)
+        : [];
+    const rawDefaultId = typeof value.defaultId === "string" ? value.defaultId : null;
+    const defaultId = items.some((item) => item.id === rawDefaultId)
+        ? rawDefaultId
+        : (items[0]?.id ?? null);
+    return { defaultId, items };
+}
+function tokenRecord(value) {
+    if (!isRecord(value))
+        return [];
+    const id = nonEmptyString(value.id);
+    const token = nonEmptyString(value.token);
+    const proxyUrl = nonEmptyString(value.proxyUrl);
+    const createdAt = nonEmptyString(value.createdAt);
+    if (!id || !token || !token.startsWith("slv_live_"))
+        return [];
+    if (!proxyUrl || !validUrl(proxyUrl))
+        return [];
+    if (!createdAt || Number.isNaN(Date.parse(createdAt)))
+        return [];
+    return [
+        {
+            id,
+            token,
+            label: nullableString(value.label) ?? null,
+            proxyUrl,
+            createdAt,
+        },
+    ];
+}
+function normalizeHarnesses(value) {
+    const result = {};
+    for (const slug of [
+        "claude-code",
+        "codex",
+        "opencode",
+        "gemini",
+    ]) {
+        const entry = value[slug];
+        if (isRecord(entry) && typeof entry.configured === "boolean") {
+            result[slug] = { configured: entry.configured };
+        }
+    }
+    return result;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function nullableString(value) {
+    if (typeof value === "undefined")
+        return undefined;
+    if (value === null || typeof value === "string")
+        return value;
+    return undefined;
+}
+function nonEmptyString(value) {
+    if (typeof value !== "string")
+        return undefined;
+    return value ? value : undefined;
+}
+function validUrl(raw) {
+    try {
+        const url = new URL(raw);
+        return url.protocol === "https:" || url.protocol === "http:";
+    }
+    catch {
+        return false;
+    }
+}
+function isNotFoundError(error) {
+    return (error instanceof Error &&
+        "code" in error &&
+        error.code === "ENOENT");
+}
+//# sourceMappingURL=store.js.map

package/dist/config/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/config/store.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA+DjD,MAAM,UAAU,aAAa;IACzB,OAAO;QACH,OAAO,EAAE,CAAC;QACV,KAAK,EAAE;YACH,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,KAAK;SACd;QACD,IAAI,EAAE;YACF,QAAQ,EAAE,KAAK;SAClB;QACD,QAAQ,EAAE;YACN,IAAI,EAAE,IAAI;SACb;QACD,iBAAiB,EAAE,IAAI;QACvB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE;YACJ,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,EAAE;SACZ;QACD,SAAS,EAAE,EAAE;KAChB,CAAC;AACN,CAAC;AAED,MAAM,UAAU,YAAY,CACxB,MAAqB,EACrB,OAAoB;IAEpB,OAAO;QACH,GAAG,MAAM;QACT,IAAI,EAAE;YACF,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC/B;KACJ,CAAC;AACN,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAqB;IAC/C,OAAO;QACH,GAAG,MAAM;QACT,IAAI,EAAE;YACF,QAAQ,EAAE,KAAK;SAClB;QACD,iBAAiB,EAAE,IAAI;QACvB,MAAM,EAAE;YACJ,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,EAAE;SACZ;QACD,SAAS,EAAE,EAAE;KAChB,CAAC;AACN,CAAC;AAED,MAAM,UAAU,0BAA0B,CACtC,MAAqB,EACrB,iBAA2C;IAE3C,OAAO;QACH,GAAG,MAAM;QACT,iBAAiB;KACpB,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC5B,MAAqB,EACrB,OAA8B;IAE9B,OAAO;QACH,GAAG,MAAM;QACT,OAAO;KACV,CAAC;AACN,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC7B,MAAqB,EACrB,IAAqB;IAErB,OAAO;QACH,GAAG,MAAM;QACT,QAAQ,EAAE;YACN,IAAI;SACP;KACJ,CAAC;AACN,CAAC;AAED,MAAM,UAAU,kBAAkB,CAC9B,MAAqB,EACrB,KAA6B;IAE7B,OAAO;QACH,GAAG,MAAM;QACT,SAAS,EAAE;YACP,GAAG,MAAM,CAAC,SAAS;YACnB,GAAG,MAAM,CAAC,WAAW,CACjB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CACpD;SACJ;KACJ,CAAC;AACN,CAAC;AAED,MAAM,UAAU,cAAc,CAC1B,MAAqB,EACrB,KAAmB;IAEnB,MAAM,KAAK,GAAG;QACV,KAAK;QACL,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;KAChE,CAAC;IACF,OAAO;QACH,GAAG,MAAM;QACT,MAAM,EAAE;YACJ,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,KAAK;SACR;KACJ,CAAC;AACN,CAAC;AAED,MAAM,UAAU,qBAAqB,CACjC,MAAqB,EACrB,EAAU;IAEV,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;QAChE,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;IAC9B,OAAO;QACH,GAAG,MAAM;QACT,MAAM,EAAE;YACJ,GAAG,MAAM,CAAC,MAAM;YAChB,SAAS;SACZ;KACJ,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC5B,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IAEpC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,aAAa,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAqB;IACnD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,CAAC,SAAS,CACd,KAAK,CAAC,UAAU,EAChB,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACtC;QACI,IAAI,EAAE,KAAK;KACd,CACJ,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,aAAa,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC;IAEzE,OAAO;QACH,OAAO,EAAE,CAAC;QACV,KAAK,EAAE;YACH,IAAI,EACA,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC1B,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;YAC7B,IAAI,EACA,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC1B,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;SAChC;QACD,IAAI,EAAE;YACF,QAAQ;YACR,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YACjC,SAAS;YACT,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YACjC,SAAS,EACL,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SACtE;QACD,QAAQ,EAAE;YACN,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;SACpC;QACD,iBAAiB,EAAE,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACtE,OAAO,EAAE,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/C,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;QAC/B,SAAS,EAAE,kBAAkB,CAAC,SAAS,CAAC;KAC3C,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CACpB,KAA8B;IAE9B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QACpC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAClC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GACd,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,YAAY,CAAC;QAC5D,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC;IAE7B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEhC,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElD,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/D,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAEjE,OAAO;QACH;YACI,EAAE;YACF,KAAK;YACL,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI;YAC1C,QAAQ;YACR,SAAS;SACZ;KACJ,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CACvB,KAA8B;IAE9B,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI;QACf,aAAa;QACb,OAAO;QACP,UAAU;QACV,QAAQ;KACF,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QACpD,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IACzB,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACnC,OAAO,CACH,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACrD,CAAC;AACN,CAAC"}

package/dist/control/local-installations.d.ts

@@ -0,0 +1,13 @@
+import { FirebaseTokenManager } from "../auth/firebase-tokens.js";
+export type CreatedLocalInstallation = {
+    installationId: string;
+    accountId: string;
+    credential: string;
+    controlUrl: string;
+};
+export type CreateLocalInstallationOptions = {
+    label?: string | null;
+    manager?: FirebaseTokenManager;
+    fetchImpl?: typeof fetch;
+};
+export declare function createLocalInstallation(options?: CreateLocalInstallationOptions): Promise<CreatedLocalInstallation>;

package/dist/control/local-installations.js

@@ -0,0 +1,37 @@
+// Creates a local installation in control after Firebase sign-in (when the
+// user selects local mode) and returns the credential the installed-local
+// daemon will use for usage uploads.
+import { FirebaseTokenManager } from "../auth/firebase-tokens.js";
+import { apiOrigin } from "../product.js";
+export async function createLocalInstallation(options = {}) {
+    const manager = options.manager ?? new FirebaseTokenManager();
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const controlUrl = apiOrigin();
+    const idToken = await manager.getIdToken();
+    const response = await fetchImpl(`${controlUrl}/api/local/installations`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${idToken}`,
+            "content-type": "application/json",
+        },
+        body: JSON.stringify({ label: options.label ?? null }),
+    });
+    if (!response.ok) {
+        throw new Error(`Control rejected local installation creation (HTTP ${response.status}).`);
+    }
+    const body = (await response.json().catch(() => null));
+    if (!body ||
+        typeof body.installation_id !== "string" ||
+        typeof body.account_id !== "string" ||
+        typeof body.credential !== "string" ||
+        !body.credential.startsWith("slv_inst_")) {
+        throw new Error("Control returned an unexpected local installation body.");
+    }
+    return {
+        installationId: body.installation_id,
+        accountId: body.account_id,
+        credential: body.credential,
+        controlUrl,
+    };
+}
+//# sourceMappingURL=local-installations.js.map

package/dist/control/local-installations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-installations.js","sourceRoot":"","sources":["../../src/control/local-installations.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,0EAA0E;AAC1E,qCAAqC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAe1C,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,UAA0C,EAAE;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,oBAAoB,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,UAAU,GAAG,SAAS,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,UAAU,0BAA0B,EAAE;QACtE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACL,aAAa,EAAE,UAAU,OAAO,EAAE;YAClC,cAAc,EAAE,kBAAkB;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;KACzD,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACX,sDAAsD,QAAQ,CAAC,MAAM,IAAI,CAC5E,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAI7C,CAAC;IAET,IACI,CAAC,IAAI;QACL,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QACxC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,EAC1C,CAAC;QACC,MAAM,IAAI,KAAK,CACX,yDAAyD,CAC5D,CAAC;IACN,CAAC;IAED,OAAO;QACH,cAAc,EAAE,IAAI,CAAC,eAAe;QACpC,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU;KACb,CAAC;AACN,CAAC"}

package/dist/daemon/config.d.ts

@@ -0,0 +1,10 @@
+import type { SleevedConfig } from "../config/store.js";
+export type GatewayConfig = {
+    account_id: string;
+    installation_id: string;
+    credential: string;
+    control_url: string;
+};
+export declare function buildGatewayConfig(config: SleevedConfig): GatewayConfig | null;
+export declare function writeGatewayConfig(config: SleevedConfig): Promise<string>;
+export declare function clearGatewayConfig(): Promise<void>;

package/dist/daemon/config.js

@@ -0,0 +1,52 @@
+// Bridges the credential sleeved persists into the JSON file the gateway
+// daemon reads at startup (its InstalledLocalConfig). The two sides use
+// different shapes: sleeved stores camelCase `localInstallation` plus the
+// account id under `auth`, while the daemon expects a flat snake_case
+// document. This module is the producer; the gateway is the consumer.
+import fs from "node:fs/promises";
+import path from "node:path";
+import { resolveSleevedPaths } from "../config/paths.js";
+// Returns the daemon config, or null when sleeved is not in a state that can
+// configure the daemon (signed out, or local installation not provisioned).
+export function buildGatewayConfig(config) {
+    const accountId = config.auth.accountId;
+    const local = config.localInstallation;
+    if (!config.auth.signedIn || !accountId || !local) {
+        return null;
+    }
+    return {
+        account_id: accountId,
+        installation_id: local.installationId,
+        credential: local.credential,
+        control_url: local.controlUrl,
+    };
+}
+// Writes the daemon config file (0600) and returns its path. Throws if the
+// config is not materializable — callers should only start the daemon when
+// buildGatewayConfig would succeed.
+export async function writeGatewayConfig(config) {
+    const gateway = buildGatewayConfig(config);
+    if (gateway === null) {
+        throw new Error("Cannot write gateway config: not signed in or local installation missing.");
+    }
+    const paths = resolveSleevedPaths();
+    await fs.mkdir(path.dirname(paths.gatewayConfigFile), { recursive: true });
+    await fs.writeFile(paths.gatewayConfigFile, `${JSON.stringify(gateway, null, 2)}\n`, { mode: 0o600 });
+    return paths.gatewayConfigFile;
+}
+// Removes the daemon config file (used on sign-out / teardown). Absent file
+// is not an error.
+export async function clearGatewayConfig() {
+    const paths = resolveSleevedPaths();
+    try {
+        await fs.unlink(paths.gatewayConfigFile);
+    }
+    catch (error) {
+        if (!(error instanceof Error &&
+            "code" in error &&
+            error.code === "ENOENT")) {
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/daemon/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/daemon/config.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,sEAAsE;AACtE,sEAAsE;AACtE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAWzD,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAC9B,MAAqB;IAErB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO;QACH,UAAU,EAAE,SAAS;QACrB,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,UAAU;KAChC,CAAC;AACN,CAAC;AAED,2EAA2E;AAC3E,2EAA2E;AAC3E,oCAAoC;AACpC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAqB;IAErB,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACX,2EAA2E,CAC9E,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,EAAE,CAAC,SAAS,CACd,KAAK,CAAC,iBAAiB,EACvB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACvC,EAAE,IAAI,EAAE,KAAK,EAAE,CAClB,CAAC;IACF,OAAO,KAAK,CAAC,iBAAiB,CAAC;AACnC,CAAC;AAED,4EAA4E;AAC5E,mBAAmB;AACnB,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACpC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IACI,CAAC,CACG,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACrD,EACH,CAAC;YACC,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/daemon/controller.d.ts

@@ -0,0 +1,29 @@
+import type { SleevedConfig } from "../config/store.js";
+export type DaemonBackend = "systemd";
+export type DaemonStatus = {
+    backend: DaemonBackend;
+    running: boolean;
+    healthy: boolean;
+    configured: boolean | null;
+    version: string | null;
+    pid: number | null;
+    address: string;
+    detail: string | null;
+};
+export interface DaemonController {
+    readonly backend: DaemonBackend;
+    start(): Promise<DaemonStatus>;
+    stop(): Promise<DaemonStatus>;
+    restart(): Promise<DaemonStatus>;
+    status(): Promise<DaemonStatus>;
+    teardown(): Promise<void>;
+}
+export declare class UnsupportedDaemonEnvironmentError extends Error {
+    constructor(message: string);
+}
+export type ControllerDeps = {
+    platform?: NodeJS.Platform;
+    env?: NodeJS.ProcessEnv;
+    systemctlAvailable?: boolean;
+};
+export declare function createController(config: SleevedConfig, deps?: ControllerDeps): Promise<DaemonController>;

package/dist/daemon/controller.js

@@ -0,0 +1,34 @@
+// One interface over the daemon's lifecycle. The only compliant backend
+// today is systemd --user (Linux): it survives reboot and is supervised
+// without the CLI running. Environments that can't meet that contract fail
+// loudly rather than degrading to a non-persistent process — a daemon that
+// silently dies on reboot is worse than a clear error. macOS (launchd) and
+// Windows (service) are future backends behind this same seam.
+import os from "node:os";
+// Thrown when the host can't run a compliant (reboot-persistent,
+// supervised) daemon. Callers surface this; they must not fall back to an
+// unsupervised process.
+export class UnsupportedDaemonEnvironmentError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "UnsupportedDaemonEnvironmentError";
+    }
+}
+export async function createController(config, deps = {}) {
+    const platform = deps.platform ?? os.platform();
+    const env = deps.env ?? process.env;
+    if (platform !== "linux") {
+        throw new UnsupportedDaemonEnvironmentError(`The Sleeve gateway daemon is only supported on Linux ` +
+            `(systemd --user) right now; detected ${platform}. ` +
+            `macOS and Windows support is planned.`);
+    }
+    const { SystemdUserController, systemctlAvailable } = await import("./systemd.js");
+    const available = deps.systemctlAvailable ?? (await systemctlAvailable());
+    if (!available) {
+        throw new UnsupportedDaemonEnvironmentError("The Sleeve gateway daemon requires a systemd --user session " +
+            "(systemctl --user unavailable). A persistent, supervised " +
+            "daemon cannot be guaranteed without it.");
+    }
+    return new SystemdUserController(config, env);
+}
+//# sourceMappingURL=controller.js.map

package/dist/daemon/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/daemon/controller.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,+DAA+D;AAC/D,OAAO,EAAE,MAAM,SAAS,CAAC;AAoCzB,iEAAiE;AACjE,0EAA0E;AAC1E,wBAAwB;AACxB,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IACxD,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACpD,CAAC;CACJ;AASD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,MAAqB,EACrB,OAAuB,EAAE;IAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEpC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,iCAAiC,CACvC,uDAAuD;YACnD,wCAAwC,QAAQ,IAAI;YACpD,uCAAuC,CAC9C,CAAC;IACN,CAAC;IAED,MAAM,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,GAC/C,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,MAAM,IAAI,iCAAiC,CACvC,8DAA8D;YAC1D,2DAA2D;YAC3D,yCAAyC,CAChD,CAAC;IACN,CAAC;IACD,OAAO,IAAI,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC"}

package/dist/daemon/health.d.ts

@@ -0,0 +1,8 @@
+export type DaemonHealth = {
+    ok: boolean;
+    mode: string;
+    configured: boolean | null;
+    version: string | null;
+};
+export declare function probeHealth(host: string, port: number, timeoutMs?: number, fetchImpl?: typeof fetch): Promise<DaemonHealth | null>;
+export declare function isProcessAlive(pid: number): boolean;

package/dist/daemon/health.js

@@ -0,0 +1,47 @@
+// GETs /__sleeve_local/health. Returns null on any failure (down,
+// unreachable, timeout, non-200, garbage) — callers treat null as
+// "not running / not ours".
+export async function probeHealth(host, port, timeoutMs = 1500, fetchImpl = fetch) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetchImpl(`http://${host}:${port}/__sleeve_local/health`, { signal: controller.signal });
+        if (!response.ok)
+            return null;
+        const body = (await response.json().catch(() => null));
+        if (!body || body.ok !== true)
+            return null;
+        return {
+            ok: true,
+            mode: typeof body.mode === "string" ? body.mode : "",
+            configured: typeof body.configured === "boolean" ? body.configured : null,
+            version: typeof body.version === "string" ? body.version : null,
+        };
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+// True if a process with this pid exists and is signalable by us.
+// `kill(pid, 0)` sends no signal; it only performs the existence/permission
+// check. EPERM means it exists but is owned by someone else (still alive).
+export function isProcessAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            "code" in error &&
+            error.code === "EPERM") {
+            return true;
+        }
+        return false;
+    }
+}
+//# sourceMappingURL=health.js.map

package/dist/daemon/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/daemon/health.ts"],"names":[],"mappings":"AAUA,kEAAkE;AAClE,kEAAkE;AAClE,4BAA4B;AAC5B,MAAM,CAAC,KAAK,UAAU,WAAW,CAC7B,IAAY,EACZ,IAAY,EACZ,SAAS,GAAG,IAAI,EAChB,YAA0B,KAAK;IAE/B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC5B,UAAU,IAAI,IAAI,IAAI,wBAAwB,EAC9C,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAChC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAK7C,CAAC;QACT,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO;YACH,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACpD,UAAU,EACN,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YACjE,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;SAClE,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;YAAS,CAAC;QACP,YAAY,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACL,CAAC;AAED,kEAAkE;AAClE,4EAA4E;AAC5E,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,GAAW;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IACI,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,OAAO,EACnD,CAAC;YACC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC"}

package/dist/daemon/start.d.ts

@@ -0,0 +1,5 @@
+import type { SleevedConfig } from "../config/store.js";
+export declare class GatewayBinaryNotConfiguredError extends Error {
+    constructor();
+}
+export declare function resolveGatewayBinary(config: SleevedConfig, env?: NodeJS.ProcessEnv): string;

package/dist/daemon/start.js

@@ -0,0 +1,24 @@
+// Raised when no gateway executable is configured. Binary acquisition will
+// set SLEEVE_GATEWAY_BIN to the installed daemon; until then a developer
+// sets it by hand. The CLI deliberately never runs the gateway from a
+// source checkout.
+export class GatewayBinaryNotConfiguredError extends Error {
+    constructor() {
+        super("No gateway binary available. Run `sleeved gateway install` " +
+            "(or set SLEEVE_GATEWAY_BIN to an explicit binary for dev).");
+        this.name = "GatewayBinaryNotConfiguredError";
+    }
+}
+// Resolves which gateway executable to launch: an explicit
+// SLEEVE_GATEWAY_BIN (dev override) wins, else the acquired binary recorded
+// in config. Throws if neither is available.
+export function resolveGatewayBinary(config, env = process.env) {
+    const override = env.SLEEVE_GATEWAY_BIN?.trim();
+    if (override)
+        return override;
+    const installed = config.gateway?.binPath;
+    if (installed)
+        return installed;
+    throw new GatewayBinaryNotConfiguredError();
+}
+//# sourceMappingURL=start.js.map

package/dist/daemon/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/daemon/start.ts"],"names":[],"mappings":"AAIA,2EAA2E;AAC3E,yEAAyE;AACzE,sEAAsE;AACtE,mBAAmB;AACnB,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACtD;QACI,KAAK,CACD,6DAA6D;YACzD,4DAA4D,CACnE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAClD,CAAC;CACJ;AAED,2DAA2D;AAC3D,4EAA4E;AAC5E,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB,CAChC,MAAqB,EACrB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1C,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,IAAI,+BAA+B,EAAE,CAAC;AAChD,CAAC"}

package/dist/daemon/systemd.d.ts

@@ -0,0 +1,35 @@
+import type { SleevedConfig } from "../config/store.js";
+import type { DaemonController, DaemonStatus } from "./controller.js";
+export type CommandResult = {
+    code: number;
+    stdout: string;
+    stderr: string;
+};
+export type CommandRunner = (cmd: string, args: string[]) => Promise<CommandResult>;
+export declare function systemctlAvailable(run?: CommandRunner): Promise<boolean>;
+export declare function renderUnit(binPath: string, configPath: string, host: string, port: number): string;
+export type SystemdDeps = {
+    run?: CommandRunner;
+    fetchImpl?: typeof fetch;
+    sleep?: (ms: number) => Promise<void>;
+    readinessTimeoutMs?: number;
+};
+export declare class SystemdUserController implements DaemonController {
+    readonly backend: "systemd";
+    private readonly config;
+    private readonly env;
+    private readonly run;
+    private readonly fetchImpl;
+    private readonly sleep;
+    private readonly readinessTimeoutMs;
+    constructor(config: SleevedConfig, env?: NodeJS.ProcessEnv, deps?: SystemdDeps);
+    private get address();
+    private sc;
+    private install;
+    private waitHealthy;
+    start(): Promise<DaemonStatus>;
+    stop(): Promise<DaemonStatus>;
+    restart(): Promise<DaemonStatus>;
+    status(): Promise<DaemonStatus>;
+    teardown(): Promise<void>;
+}