sleev 0.0.13 → 0.1.0

package/dist/control/local-installations.d.ts

@@ -1,13 +0,0 @@
-import { FirebaseTokenManager } from "../auth/firebase-tokens.js";
-export type CreatedLocalInstallation = {
-    installationId: string;
-    accountId: string;
-    credential: string;
-    controlUrl: string;
-};
-export type CreateLocalInstallationOptions = {
-    label?: string | null;
-    manager?: FirebaseTokenManager;
-    fetchImpl?: typeof fetch;
-};
-export declare function createLocalInstallation(options?: CreateLocalInstallationOptions): Promise<CreatedLocalInstallation>;

package/dist/control/local-installations.js

@@ -1,37 +0,0 @@
-// Creates a local installation in control after Firebase sign-in (when the
-// user selects local mode) and returns the credential the installed-local
-// daemon will use for usage uploads.
-import { FirebaseTokenManager } from "../auth/firebase-tokens.js";
-import { apiOrigin } from "../product.js";
-export async function createLocalInstallation(options = {}) {
-    const manager = options.manager ?? new FirebaseTokenManager();
-    const fetchImpl = options.fetchImpl ?? fetch;
-    const controlUrl = apiOrigin();
-    const idToken = await manager.getIdToken();
-    const response = await fetchImpl(`${controlUrl}/api/local/installations`, {
-        method: "POST",
-        headers: {
-            authorization: `Bearer ${idToken}`,
-            "content-type": "application/json",
-        },
-        body: JSON.stringify({ label: options.label ?? null }),
-    });
-    if (!response.ok) {
-        throw new Error(`Control rejected local installation creation (HTTP ${response.status}).`);
-    }
-    const body = (await response.json().catch(() => null));
-    if (!body ||
-        typeof body.installation_id !== "string" ||
-        typeof body.account_id !== "string" ||
-        typeof body.credential !== "string" ||
-        !body.credential.startsWith("slv_inst_")) {
-        throw new Error("Control returned an unexpected local installation body.");
-    }
-    return {
-        installationId: body.installation_id,
-        accountId: body.account_id,
-        credential: body.credential,
-        controlUrl,
-    };
-}
-//# sourceMappingURL=local-installations.js.map

package/dist/control/local-installations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-installations.js","sourceRoot":"","sources":["../../src/control/local-installations.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,0EAA0E;AAC1E,qCAAqC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAe1C,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,UAA0C,EAAE;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,oBAAoB,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,UAAU,GAAG,SAAS,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,UAAU,0BAA0B,EAAE;QACtE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACL,aAAa,EAAE,UAAU,OAAO,EAAE;YAClC,cAAc,EAAE,kBAAkB;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;KACzD,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACX,sDAAsD,QAAQ,CAAC,MAAM,IAAI,CAC5E,CAAC;IACN,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAI7C,CAAC;IAET,IACI,CAAC,IAAI;QACL,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QACxC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,EAC1C,CAAC;QACC,MAAM,IAAI,KAAK,CACX,yDAAyD,CAC5D,CAAC;IACN,CAAC;IAED,OAAO;QACH,cAAc,EAAE,IAAI,CAAC,eAAe;QACpC,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU;KACb,CAAC;AACN,CAAC"}

package/dist/daemon/config.d.ts

@@ -1,10 +0,0 @@
-import type { SleevedConfig } from "../config/store.js";
-export type GatewayConfig = {
-    account_id: string;
-    installation_id: string;
-    credential: string;
-    control_url: string;
-};
-export declare function buildGatewayConfig(config: SleevedConfig): GatewayConfig | null;
-export declare function writeGatewayConfig(config: SleevedConfig): Promise<string>;
-export declare function clearGatewayConfig(): Promise<void>;

package/dist/daemon/config.js

@@ -1,52 +0,0 @@
-// Bridges the credential sleeved persists into the JSON file the gateway
-// daemon reads at startup (its InstalledLocalConfig). The two sides use
-// different shapes: sleeved stores camelCase `localInstallation` plus the
-// account id under `auth`, while the daemon expects a flat snake_case
-// document. This module is the producer; the gateway is the consumer.
-import fs from "node:fs/promises";
-import path from "node:path";
-import { resolveSleevedPaths } from "../config/paths.js";
-// Returns the daemon config, or null when sleeved is not in a state that can
-// configure the daemon (signed out, or local installation not provisioned).
-export function buildGatewayConfig(config) {
-    const accountId = config.auth.accountId;
-    const local = config.localInstallation;
-    if (!config.auth.signedIn || !accountId || !local) {
-        return null;
-    }
-    return {
-        account_id: accountId,
-        installation_id: local.installationId,
-        credential: local.credential,
-        control_url: local.controlUrl,
-    };
-}
-// Writes the daemon config file (0600) and returns its path. Throws if the
-// config is not materializable — callers should only start the daemon when
-// buildGatewayConfig would succeed.
-export async function writeGatewayConfig(config) {
-    const gateway = buildGatewayConfig(config);
-    if (gateway === null) {
-        throw new Error("Cannot write gateway config: not signed in or local installation missing.");
-    }
-    const paths = resolveSleevedPaths();
-    await fs.mkdir(path.dirname(paths.gatewayConfigFile), { recursive: true });
-    await fs.writeFile(paths.gatewayConfigFile, `${JSON.stringify(gateway, null, 2)}\n`, { mode: 0o600 });
-    return paths.gatewayConfigFile;
-}
-// Removes the daemon config file (used on sign-out / teardown). Absent file
-// is not an error.
-export async function clearGatewayConfig() {
-    const paths = resolveSleevedPaths();
-    try {
-        await fs.unlink(paths.gatewayConfigFile);
-    }
-    catch (error) {
-        if (!(error instanceof Error &&
-            "code" in error &&
-            error.code === "ENOENT")) {
-            throw error;
-        }
-    }
-}
-//# sourceMappingURL=config.js.map

package/dist/daemon/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/daemon/config.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,sEAAsE;AACtE,sEAAsE;AACtE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAWzD,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAC9B,MAAqB;IAErB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO;QACH,UAAU,EAAE,SAAS;QACrB,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,KAAK,CAAC,UAAU;KAChC,CAAC;AACN,CAAC;AAED,2EAA2E;AAC3E,2EAA2E;AAC3E,oCAAoC;AACpC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAqB;IAErB,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACX,2EAA2E,CAC9E,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,EAAE,CAAC,SAAS,CACd,KAAK,CAAC,iBAAiB,EACvB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACvC,EAAE,IAAI,EAAE,KAAK,EAAE,CAClB,CAAC;IACF,OAAO,KAAK,CAAC,iBAAiB,CAAC;AACnC,CAAC;AAED,4EAA4E;AAC5E,mBAAmB;AACnB,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACpC,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,CAAC;QACD,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IACI,CAAC,CACG,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,QAAQ,CACrD,EACH,CAAC;YACC,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/daemon/controller.d.ts

@@ -1,29 +0,0 @@
-import type { SleevedConfig } from "../config/store.js";
-export type DaemonBackend = "systemd";
-export type DaemonStatus = {
-    backend: DaemonBackend;
-    running: boolean;
-    healthy: boolean;
-    configured: boolean | null;
-    version: string | null;
-    pid: number | null;
-    address: string;
-    detail: string | null;
-};
-export interface DaemonController {
-    readonly backend: DaemonBackend;
-    start(): Promise<DaemonStatus>;
-    stop(): Promise<DaemonStatus>;
-    restart(): Promise<DaemonStatus>;
-    status(): Promise<DaemonStatus>;
-    teardown(): Promise<void>;
-}
-export declare class UnsupportedDaemonEnvironmentError extends Error {
-    constructor(message: string);
-}
-export type ControllerDeps = {
-    platform?: NodeJS.Platform;
-    env?: NodeJS.ProcessEnv;
-    systemctlAvailable?: boolean;
-};
-export declare function createController(config: SleevedConfig, deps?: ControllerDeps): Promise<DaemonController>;

package/dist/daemon/controller.js

@@ -1,34 +0,0 @@
-// One interface over the daemon's lifecycle. The only compliant backend
-// today is systemd --user (Linux): it survives reboot and is supervised
-// without the CLI running. Environments that can't meet that contract fail
-// loudly rather than degrading to a non-persistent process — a daemon that
-// silently dies on reboot is worse than a clear error. macOS (launchd) and
-// Windows (service) are future backends behind this same seam.
-import os from "node:os";
-// Thrown when the host can't run a compliant (reboot-persistent,
-// supervised) daemon. Callers surface this; they must not fall back to an
-// unsupervised process.
-export class UnsupportedDaemonEnvironmentError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "UnsupportedDaemonEnvironmentError";
-    }
-}
-export async function createController(config, deps = {}) {
-    const platform = deps.platform ?? os.platform();
-    const env = deps.env ?? process.env;
-    if (platform !== "linux") {
-        throw new UnsupportedDaemonEnvironmentError(`The Sleeve gateway daemon is only supported on Linux ` +
-            `(systemd --user) right now; detected ${platform}. ` +
-            `macOS and Windows support is planned.`);
-    }
-    const { SystemdUserController, systemctlAvailable } = await import("./systemd.js");
-    const available = deps.systemctlAvailable ?? (await systemctlAvailable());
-    if (!available) {
-        throw new UnsupportedDaemonEnvironmentError("The Sleeve gateway daemon requires a systemd --user session " +
-            "(systemctl --user unavailable). A persistent, supervised " +
-            "daemon cannot be guaranteed without it.");
-    }
-    return new SystemdUserController(config, env);
-}
-//# sourceMappingURL=controller.js.map

package/dist/daemon/controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/daemon/controller.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,+DAA+D;AAC/D,OAAO,EAAE,MAAM,SAAS,CAAC;AAoCzB,iEAAiE;AACjE,0EAA0E;AAC1E,wBAAwB;AACxB,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IACxD,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACpD,CAAC;CACJ;AASD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,MAAqB,EACrB,OAAuB,EAAE;IAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEpC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,iCAAiC,CACvC,uDAAuD;YACnD,wCAAwC,QAAQ,IAAI;YACpD,uCAAuC,CAC9C,CAAC;IACN,CAAC;IAED,MAAM,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,GAC/C,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,MAAM,IAAI,iCAAiC,CACvC,8DAA8D;YAC1D,2DAA2D;YAC3D,yCAAyC,CAChD,CAAC;IACN,CAAC;IACD,OAAO,IAAI,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC"}

package/dist/daemon/health.d.ts

@@ -1,8 +0,0 @@
-export type DaemonHealth = {
-    ok: boolean;
-    mode: string;
-    configured: boolean | null;
-    version: string | null;
-};
-export declare function probeHealth(host: string, port: number, timeoutMs?: number, fetchImpl?: typeof fetch): Promise<DaemonHealth | null>;
-export declare function isProcessAlive(pid: number): boolean;

package/dist/daemon/health.js

@@ -1,47 +0,0 @@
-// GETs /__sleeve_local/health. Returns null on any failure (down,
-// unreachable, timeout, non-200, garbage) — callers treat null as
-// "not running / not ours".
-export async function probeHealth(host, port, timeoutMs = 1500, fetchImpl = fetch) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-        const response = await fetchImpl(`http://${host}:${port}/__sleeve_local/health`, { signal: controller.signal });
-        if (!response.ok)
-            return null;
-        const body = (await response.json().catch(() => null));
-        if (!body || body.ok !== true)
-            return null;
-        return {
-            ok: true,
-            mode: typeof body.mode === "string" ? body.mode : "",
-            configured: typeof body.configured === "boolean" ? body.configured : null,
-            version: typeof body.version === "string" ? body.version : null,
-        };
-    }
-    catch {
-        return null;
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-// True if a process with this pid exists and is signalable by us.
-// `kill(pid, 0)` sends no signal; it only performs the existence/permission
-// check. EPERM means it exists but is owned by someone else (still alive).
-export function isProcessAlive(pid) {
-    if (!Number.isInteger(pid) || pid <= 0)
-        return false;
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        if (error instanceof Error &&
-            "code" in error &&
-            error.code === "EPERM") {
-            return true;
-        }
-        return false;
-    }
-}
-//# sourceMappingURL=health.js.map

package/dist/daemon/health.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/daemon/health.ts"],"names":[],"mappings":"AAUA,kEAAkE;AAClE,kEAAkE;AAClE,4BAA4B;AAC5B,MAAM,CAAC,KAAK,UAAU,WAAW,CAC7B,IAAY,EACZ,IAAY,EACZ,SAAS,GAAG,IAAI,EAChB,YAA0B,KAAK;IAE/B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC5B,UAAU,IAAI,IAAI,IAAI,wBAAwB,EAC9C,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAChC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAK7C,CAAC;QACT,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO;YACH,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACpD,UAAU,EACN,OAAO,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;YACjE,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;SAClE,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;YAAS,CAAC;QACP,YAAY,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACL,CAAC;AAED,kEAAkE;AAClE,4EAA4E;AAC5E,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,GAAW;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IACI,KAAK,YAAY,KAAK;YACtB,MAAM,IAAI,KAAK;YACd,KAA+B,CAAC,IAAI,KAAK,OAAO,EACnD,CAAC;YACC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC"}

package/dist/daemon/start.d.ts

@@ -1,5 +0,0 @@
-import type { SleevedConfig } from "../config/store.js";
-export declare class GatewayBinaryNotConfiguredError extends Error {
-    constructor();
-}
-export declare function resolveGatewayBinary(config: SleevedConfig, env?: NodeJS.ProcessEnv): string;

package/dist/daemon/start.js

@@ -1,24 +0,0 @@
-// Raised when no gateway executable is configured. Binary acquisition will
-// set SLEEVE_GATEWAY_BIN to the installed daemon; until then a developer
-// sets it by hand. The CLI deliberately never runs the gateway from a
-// source checkout.
-export class GatewayBinaryNotConfiguredError extends Error {
-    constructor() {
-        super("No gateway binary available. Run `sleeved gateway install` " +
-            "(or set SLEEVE_GATEWAY_BIN to an explicit binary for dev).");
-        this.name = "GatewayBinaryNotConfiguredError";
-    }
-}
-// Resolves which gateway executable to launch: an explicit
-// SLEEVE_GATEWAY_BIN (dev override) wins, else the acquired binary recorded
-// in config. Throws if neither is available.
-export function resolveGatewayBinary(config, env = process.env) {
-    const override = env.SLEEVE_GATEWAY_BIN?.trim();
-    if (override)
-        return override;
-    const installed = config.gateway?.binPath;
-    if (installed)
-        return installed;
-    throw new GatewayBinaryNotConfiguredError();
-}
-//# sourceMappingURL=start.js.map

package/dist/daemon/start.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/daemon/start.ts"],"names":[],"mappings":"AAIA,2EAA2E;AAC3E,yEAAyE;AACzE,sEAAsE;AACtE,mBAAmB;AACnB,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACtD;QACI,KAAK,CACD,6DAA6D;YACzD,4DAA4D,CACnE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAClD,CAAC;CACJ;AAED,2DAA2D;AAC3D,4EAA4E;AAC5E,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB,CAChC,MAAqB,EACrB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1C,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,IAAI,+BAA+B,EAAE,CAAC;AAChD,CAAC"}

package/dist/daemon/systemd.d.ts

@@ -1,35 +0,0 @@
-import type { SleevedConfig } from "../config/store.js";
-import type { DaemonController, DaemonStatus } from "./controller.js";
-export type CommandResult = {
-    code: number;
-    stdout: string;
-    stderr: string;
-};
-export type CommandRunner = (cmd: string, args: string[]) => Promise<CommandResult>;
-export declare function systemctlAvailable(run?: CommandRunner): Promise<boolean>;
-export declare function renderUnit(binPath: string, configPath: string, host: string, port: number): string;
-export type SystemdDeps = {
-    run?: CommandRunner;
-    fetchImpl?: typeof fetch;
-    sleep?: (ms: number) => Promise<void>;
-    readinessTimeoutMs?: number;
-};
-export declare class SystemdUserController implements DaemonController {
-    readonly backend: "systemd";
-    private readonly config;
-    private readonly env;
-    private readonly run;
-    private readonly fetchImpl;
-    private readonly sleep;
-    private readonly readinessTimeoutMs;
-    constructor(config: SleevedConfig, env?: NodeJS.ProcessEnv, deps?: SystemdDeps);
-    private get address();
-    private sc;
-    private install;
-    private waitHealthy;
-    start(): Promise<DaemonStatus>;
-    stop(): Promise<DaemonStatus>;
-    restart(): Promise<DaemonStatus>;
-    status(): Promise<DaemonStatus>;
-    teardown(): Promise<void>;
-}

package/dist/daemon/systemd.js

@@ -1,181 +0,0 @@
-// systemd --user backend (Linux): the daemon runs as a user service that
-// starts on login and (with linger) on boot, supervised without sleeved.
-// This is the product path on Linux.
-import { spawn } from "node:child_process";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { writeGatewayConfig } from "./config.js";
-import { probeHealth } from "./health.js";
-import { resolveGatewayBinary } from "./start.js";
-const UNIT_NAME = "sleeve-gateway.service";
-const defaultRun = (cmd, args) => new Promise((resolve) => {
-    const child = spawn(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
-    let stdout = "";
-    let stderr = "";
-    child.stdout?.on("data", (d) => (stdout += d.toString()));
-    child.stderr?.on("data", (d) => (stderr += d.toString()));
-    child.once("error", () => resolve({ code: 127, stdout, stderr: "spawn failed" }));
-    child.once("exit", (code) => resolve({ code: code ?? 1, stdout, stderr }));
-});
-export async function systemctlAvailable(run = defaultRun) {
-    if (os.platform() !== "linux")
-        return false;
-    const { code } = await run("systemctl", ["--user", "--version"]);
-    return code === 0;
-}
-function userUnitPath(env) {
-    const base = env.XDG_CONFIG_HOME?.trim() || path.join(os.homedir(), ".config");
-    return path.join(base, "systemd", "user", UNIT_NAME);
-}
-// Pure: the unit file content. Paths are quoted so spaces survive systemd's
-// ExecStart tokenisation.
-export function renderUnit(binPath, configPath, host, port) {
-    const exec = [
-        q(binPath),
-        "--local-installation",
-        "--config",
-        q(configPath),
-        "--host",
-        host,
-        "--port",
-        String(port),
-    ].join(" ");
-    return [
-        "[Unit]",
-        "Description=Sleeve local gateway",
-        "After=network-online.target",
-        "Wants=network-online.target",
-        "",
-        "[Service]",
-        "Type=simple",
-        `ExecStart=${exec}`,
-        "Restart=on-failure",
-        "RestartSec=2",
-        "",
-        "[Install]",
-        "WantedBy=default.target",
-        "",
-    ].join("\n");
-}
-function q(value) {
-    return `"${value.replace(/"/g, '\\"')}"`;
-}
-const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
-export class SystemdUserController {
-    backend = "systemd";
-    config;
-    env;
-    run;
-    fetchImpl;
-    sleep;
-    readinessTimeoutMs;
-    constructor(config, env = process.env, deps = {}) {
-        this.config = config;
-        this.env = env;
-        this.run = deps.run ?? defaultRun;
-        this.fetchImpl = deps.fetchImpl ?? fetch;
-        this.sleep = deps.sleep ?? defaultSleep;
-        this.readinessTimeoutMs = deps.readinessTimeoutMs ?? 10_000;
-    }
-    get address() {
-        return `http://${this.config.proxy.host}:${this.config.proxy.port}`;
-    }
-    async sc(args) {
-        return this.run("systemctl", ["--user", ...args]);
-    }
-    // Writes the unit + the gateway config, then reloads systemd. The unit
-    // is regenerated every time so a changed binary path/port is picked up.
-    async install() {
-        const binPath = resolveGatewayBinary(this.config, this.env);
-        const configPath = await writeGatewayConfig(this.config);
-        const unitPath = userUnitPath(this.env);
-        await fs.mkdir(path.dirname(unitPath), { recursive: true });
-        await fs.writeFile(unitPath, renderUnit(binPath, configPath, this.config.proxy.host, this.config.proxy.port), { mode: 0o644 });
-        await this.sc(["daemon-reload"]);
-    }
-    async waitHealthy() {
-        const deadline = Date.now() + this.readinessTimeoutMs;
-        while (Date.now() < deadline) {
-            await this.sleep(250);
-            const health = await probeHealth(this.config.proxy.host, this.config.proxy.port, 1000, this.fetchImpl);
-            if (health)
-                return;
-        }
-        const { stdout } = await this.sc(["is-active", UNIT_NAME]).catch(() => ({ stdout: "", code: 1, stderr: "" }));
-        throw new Error(`Gateway service did not become healthy within ` +
-            `${this.readinessTimeoutMs}ms (unit ${stdout.trim() || "inactive"}).`);
-    }
-    async start() {
-        const existing = await this.status();
-        if (existing.healthy)
-            return existing;
-        await this.install();
-        // enable --now: start immediately and on every login. Linger lets
-        // it also start at boot before any login; best-effort because it
-        // can require elevated privileges.
-        const enabled = await this.sc(["enable", "--now", UNIT_NAME]);
-        if (enabled.code !== 0) {
-            throw new Error(`systemctl --user enable --now failed: ${enabled.stderr.trim()}`);
-        }
-        await this.run("loginctl", [
-            "enable-linger",
-            os.userInfo().username,
-        ]).catch(() => undefined);
-        await this.waitHealthy();
-        return this.status();
-    }
-    async stop() {
-        await this.sc(["stop", UNIT_NAME]);
-        return this.status();
-    }
-    async restart() {
-        // Reinstall first so a changed config/binary/port is applied.
-        await this.install();
-        const r = await this.sc(["restart", UNIT_NAME]);
-        if (r.code !== 0) {
-            throw new Error(`systemctl --user restart failed: ${r.stderr.trim()}`);
-        }
-        await this.waitHealthy();
-        return this.status();
-    }
-    async status() {
-        const active = await this.sc(["is-active", UNIT_NAME]);
-        const running = active.stdout.trim() === "active";
-        const health = await probeHealth(this.config.proxy.host, this.config.proxy.port, 1500, this.fetchImpl);
-        let pid = null;
-        const show = await this.sc([
-            "show",
-            "-p",
-            "MainPID",
-            "--value",
-            UNIT_NAME,
-        ]);
-        const parsed = Number.parseInt(show.stdout.trim(), 10);
-        if (Number.isInteger(parsed) && parsed > 0)
-            pid = parsed;
-        return {
-            backend: this.backend,
-            running: running || health !== null,
-            healthy: health !== null,
-            configured: health?.configured ?? null,
-            version: health?.version ?? null,
-            pid,
-            address: this.address,
-            detail: health !== null
-                ? null
-                : `unit ${active.stdout.trim() || "inactive"}`,
-        };
-    }
-    async teardown() {
-        await this.sc(["disable", "--now", UNIT_NAME]);
-        try {
-            await fs.unlink(userUnitPath(this.env));
-        }
-        catch {
-            /* already gone */
-        }
-        await this.sc(["daemon-reload"]);
-    }
-}
-//# sourceMappingURL=systemd.js.map

package/dist/daemon/systemd.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"systemd.js","sourceRoot":"","sources":["../../src/daemon/systemd.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,yEAAyE;AACzE,qCAAqC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAQ3C,MAAM,UAAU,GAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAC5C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACpB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAClE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAClE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CACrB,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CACzD,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACxB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAC/C,CAAC;AACN,CAAC,CAAC,CAAC;AAEP,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAqB,UAAU;IAE/B,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACjE,OAAO,IAAI,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,GAAsB;IACxC,MAAM,IAAI,GACN,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,4EAA4E;AAC5E,0BAA0B;AAC1B,MAAM,UAAU,UAAU,CACtB,OAAe,EACf,UAAkB,EAClB,IAAY,EACZ,IAAY;IAEZ,MAAM,IAAI,GAAG;QACT,CAAC,CAAC,OAAO,CAAC;QACV,sBAAsB;QACtB,UAAU;QACV,CAAC,CAAC,UAAU,CAAC;QACb,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,MAAM,CAAC,IAAI,CAAC;KACf,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO;QACH,QAAQ;QACR,kCAAkC;QAClC,6BAA6B;QAC7B,6BAA6B;QAC7B,EAAE;QACF,WAAW;QACX,aAAa;QACb,aAAa,IAAI,EAAE;QACnB,oBAAoB;QACpB,cAAc;QACd,EAAE;QACF,WAAW;QACX,yBAAyB;QACzB,EAAE;KACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,CAAC,CAAC,KAAa;IACpB,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAC7C,CAAC;AASD,MAAM,YAAY,GAAG,CAAC,EAAU,EAAiB,EAAE,CAC/C,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1C,MAAM,OAAO,qBAAqB;IACrB,OAAO,GAAG,SAAkB,CAAC;IACrB,MAAM,CAAgB;IACtB,GAAG,CAAoB;IACvB,GAAG,CAAgB;IACnB,SAAS,CAAe;IACxB,KAAK,CAAgC;IACrC,kBAAkB,CAAS;IAE5C,YACI,MAAqB,EACrB,MAAyB,OAAO,CAAC,GAAG,EACpC,OAAoB,EAAE;QAEtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;QACxC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC;IAChE,CAAC;IAED,IAAY,OAAO;QACf,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,EAAE,CAAC,IAAc;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IAChE,KAAK,CAAC,OAAO;QACjB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,SAAS,CACd,QAAQ,EACR,UAAU,CACN,OAAO,EACP,UAAU,EACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACzB,EACD,EAAE,IAAI,EAAE,KAAK,EAAE,CAClB,CAAC;QACF,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,WAAW;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC;QACtD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,WAAW,CAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EACtB,IAAI,EACJ,IAAI,CAAC,SAAS,CACjB,CAAC;YACF,IAAI,MAAM;gBAAE,OAAO;QACvB,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAC5D,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAC9C,CAAC;QACF,MAAM,IAAI,KAAK,CACX,gDAAgD;YAC5C,GAAG,IAAI,CAAC,kBAAkB,YAAY,MAAM,CAAC,IAAI,EAAE,IAAI,UAAU,IAAI,CAC5E,CAAC;IACN,CAAC;IAED,KAAK,CAAC,KAAK;QACP,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC;QACtC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,kEAAkE;QAClE,iEAAiE;QACjE,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACX,yCAAyC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CACnE,CAAC;QACN,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE;YACvB,eAAe;YACf,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ;SACzB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI;QACN,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO;QACT,8DAA8D;QAC9D,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACX,oCAAoC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CACxD,CAAC;QACN,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM;QACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,WAAW,CAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EACtB,IAAI,EACJ,IAAI,CAAC,SAAS,CACjB,CAAC;QACF,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM;YACN,IAAI;YACJ,SAAS;YACT,SAAS;YACT,SAAS;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,GAAG,GAAG,MAAM,CAAC;QAEzD,OAAO;YACH,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,OAAO,IAAI,MAAM,KAAK,IAAI;YACnC,OAAO,EAAE,MAAM,KAAK,IAAI;YACxB,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI;YACtC,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI;YAChC,GAAG;YACH,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EACF,MAAM,KAAK,IAAI;gBACX,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,UAAU,EAAE;SACzD,CAAC;IACN,CAAC;IAED,KAAK,CAAC,QAAQ;QACV,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACL,kBAAkB;QACtB,CAAC;QACD,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACrC,CAAC;CACJ"}

package/dist/gateway/acquire.d.ts

@@ -1,14 +0,0 @@
-import { type GatewayPlatform } from "./platform.js";
-export type InstalledGateway = {
-    binPath: string;
-    version: string;
-    platform: GatewayPlatform;
-};
-export type AcquireDeps = {
-    fetchImpl?: typeof fetch;
-    extract?: (archive: string, destDir: string, kind: "tar.gz" | "zip") => Promise<void>;
-    currentVersion?: string | null;
-    platform?: GatewayPlatform;
-    env?: NodeJS.ProcessEnv;
-};
-export declare function acquireGateway(deps?: AcquireDeps): Promise<InstalledGateway>;

package/dist/gateway/acquire.js

@@ -1,112 +0,0 @@
-// Downloads, verifies, and installs the packaged gateway binary the channel
-// manifest points at. The CLI never builds from source; this is how the
-// `SLEEVE_GATEWAY_BIN`-shaped seam gets populated for real users.
-import { createHash } from "node:crypto";
-import { spawn } from "node:child_process";
-import fs from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { resolveSleevedPaths } from "../config/paths.js";
-import { archivedBinaryCandidates, archiveExtension, currentPlatformKey, installedBinaryName, } from "./platform.js";
-import { resolveLatestRelease, } from "./manifest.js";
-function gatewayInstallDir(version) {
-    return path.join(resolveSleevedPaths().dataDir, "gateway", version);
-}
-async function pathExists(p) {
-    try {
-        await fs.access(p);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-async function defaultExtract(archive, destDir, _kind) {
-    // `tar` extracts both gzip tarballs and (via libarchive/bsdtar, present
-    // on macOS and Windows 10+) zips. Linux ships GNU tar but only ever
-    // receives .tar.gz, so this is safe across the three built targets.
-    //
-    // Defense-in-depth: the archive is integrity-pinned upstream, but it is
-    // still attacker-influenced if the manifest is compromised. GNU tar (and
-    // bsdtar) already strip a leading `/` and refuse `..` members by default,
-    // so extraction cannot escape destDir without an explicit -P/--absolute-
-    // names; we never pass one. (An earlier `--no-absolute-filenames` flag
-    // was not a real GNU tar option — tar rejected it with exit 64 before
-    // extracting anything.)
-    await new Promise((resolve, reject) => {
-        const child = spawn("tar", ["-xf", archive, "-C", destDir], {
-            stdio: "ignore",
-        });
-        child.once("error", reject);
-        child.once("exit", (code) => code === 0
-            ? resolve()
-            : reject(new Error(`tar exited with code ${code ?? "null"}`)));
-    });
-}
-function sha256(buffer) {
-    return createHash("sha256").update(buffer).digest("hex");
-}
-// Resolves latest, and unless it's already installed, downloads + verifies +
-// installs it. Returns the path the daemon should be launched from.
-export async function acquireGateway(deps = {}) {
-    const fetchImpl = deps.fetchImpl ?? fetch;
-    const extract = deps.extract ?? defaultExtract;
-    const platform = deps.platform ?? currentPlatformKey();
-    const release = await resolveLatestRelease({
-        fetchImpl,
-        platform,
-        env: deps.env,
-    });
-    const binPath = path.join(gatewayInstallDir(release.version), installedBinaryName(platform));
-    // Skip when the resolved version is already installed and present.
-    if (deps.currentVersion === release.version &&
-        (await pathExists(binPath))) {
-        return { binPath, version: release.version, platform };
-    }
-    await installArtifact(release.artifact, {
-        fetchImpl,
-        extract,
-        archiveKind: archiveExtension(platform),
-        archivedNames: archivedBinaryCandidates(platform),
-        binPath,
-    });
-    return { binPath, version: release.version, platform };
-}
-async function installArtifact(artifact, opts) {
-    const response = await opts.fetchImpl(artifact.url);
-    if (!response.ok) {
-        throw new Error(`Failed to download gateway binary (${artifact.url}): HTTP ${response.status}.`);
-    }
-    const buffer = Buffer.from(await response.arrayBuffer());
-    if (buffer.byteLength !== artifact.size) {
-        throw new Error(`Downloaded gateway archive size ${buffer.byteLength} != expected ${artifact.size}.`);
-    }
-    const digest = sha256(buffer);
-    if (digest !== artifact.sha256) {
-        throw new Error(`Downloaded gateway archive sha256 mismatch (got ${digest}).`);
-    }
-    const work = await fs.mkdtemp(path.join(os.tmpdir(), "sleeve-gw-"));
-    try {
-        const archivePath = path.join(work, `archive.${opts.archiveKind === "zip" ? "zip" : "tar.gz"}`);
-        await fs.writeFile(archivePath, buffer);
-        await opts.extract(archivePath, work, opts.archiveKind);
-        let extracted = null;
-        for (const name of opts.archivedNames) {
-            const candidate = path.join(work, name);
-            if (await pathExists(candidate)) {
-                extracted = candidate;
-                break;
-            }
-        }
-        if (extracted === null) {
-            throw new Error(`Gateway archive did not contain any of: ${opts.archivedNames.join(", ")}.`);
-        }
-        await fs.mkdir(path.dirname(opts.binPath), { recursive: true });
-        await fs.copyFile(extracted, opts.binPath);
-        await fs.chmod(opts.binPath, 0o755);
-    }
-    finally {
-        await fs.rm(work, { recursive: true, force: true });
-    }
-}
-//# sourceMappingURL=acquire.js.map