terminay 4.2.0

package/dist/cli.js

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+import { ScopeError } from './account.js';
+import { HELP_TEXT, parseCommandLine, UsageError } from './args.js';
+import { runInstall } from './commands/install.js';
+import { runStart, runStatus, runStop } from './commands/lifecycle.js';
+import { runApprovals, runPairing, runResolveApproval, } from './commands/pairing.js';
+import { runResetIdentity, runUninstall } from './commands/uninstall.js';
+import { runUpgrade } from './commands/upgrade.js';
+import { NotInstalledError, resolveContext } from './context.js';
+import { ManifestError } from './manifest.js';
+import { assertSupportedHost, UnsupportedHostError } from './platform.js';
+import { SocketError } from './socket.js';
+import { VerificationError } from './verify.js';
+/**
+ * The `terminay` binary.
+ *
+ * Every daemon command passes the platform gate first, so an operator who runs
+ * this on their laptop is told immediately rather than part-way through an
+ * install. Failures print one clear line and exit non-zero; the stack trace is
+ * not the operator's problem.
+ */
+const write = (line) => process.stdout.write(`${line}\n`);
+async function main(argv) {
+    const parsed = parseCommandLine(argv);
+    if (parsed.command === 'help') {
+        process.stdout.write(HELP_TEXT);
+        return 0;
+    }
+    assertSupportedHost();
+    if (parsed.command === 'install') {
+        const result = await runInstall(parsed.ref, parsed.options, { write });
+        return result.ready ? 0 : 1;
+    }
+    const context = await resolveContext({ options: parsed.options, write });
+    switch (parsed.command) {
+        case 'upgrade':
+            await runUpgrade(parsed.ref, parsed.options, context);
+            return 0;
+        case 'start':
+            return (await runStart(context)) ? 0 : 1;
+        case 'stop':
+            await runStop(context);
+            return 0;
+        case 'status':
+            await runStatus(context);
+            return 0;
+        case 'uninstall':
+            await runUninstall(parsed.options, context);
+            return 0;
+        case 'qr-code':
+            await runPairing(parsed.options, context);
+            return 0;
+        case 'approvals':
+            await runApprovals(context);
+            return 0;
+        case 'approve':
+        case 'deny':
+            await runResolveApproval(parsed.command, parsed.approvalId, context);
+            return 0;
+        case 'reset-identity':
+            await runResetIdentity(parsed.options, context);
+            return 0;
+    }
+}
+/** Errors the operator caused or must act on print as one line, not a trace. */
+const EXPECTED_ERRORS = [
+    UsageError,
+    UnsupportedHostError,
+    ScopeError,
+    NotInstalledError,
+    VerificationError,
+    ManifestError,
+    SocketError,
+];
+try {
+    process.exitCode = await main(process.argv.slice(2));
+}
+catch (error) {
+    const expected = EXPECTED_ERRORS.some((kind) => error instanceof kind) ||
+        (error instanceof Error && error.name.endsWith('Error'));
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+    if (error instanceof UsageError)
+        process.stderr.write('\nRun `terminay --help` for usage.\n');
+    if (!expected &&
+        error instanceof Error &&
+        error.stack !== undefined &&
+        process.env.TERMINAY_DEBUG === '1') {
+        process.stderr.write(`${error.stack}\n`);
+    }
+    process.exitCode = 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EACN,YAAY,EACZ,UAAU,EACV,kBAAkB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;;;GAOG;AAEH,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAElE,KAAK,UAAU,IAAI,CAAC,IAAuB;IAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC;IACV,CAAC;IAED,mBAAmB,EAAE,CAAC;IAEtB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAEzE,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,SAAS;YACb,MAAM,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC;QACV,KAAK,OAAO;YACX,OAAO,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK,MAAM;YACV,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,CAAC;QACV,KAAK,QAAQ;YACZ,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,CAAC;QACV,KAAK,WAAW;YACf,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC;QACV,KAAK,SAAS;YACb,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC;QACV,KAAK,WAAW;YACf,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACV,KAAK,SAAS,CAAC;QACf,KAAK,MAAM;YACV,MAAM,kBAAkB,CACvB,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,UAAoB,EAC3B,OAAO,CACP,CAAC;YACF,OAAO,CAAC,CAAC;QACV,KAAK,gBAAgB;YACpB,MAAM,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC;IACX,CAAC;AACF,CAAC;AAED,gFAAgF;AAChF,MAAM,eAAe,GAAG;IACvB,UAAU;IACV,oBAAoB;IACpB,UAAU;IACV,iBAAiB;IACjB,iBAAiB;IACjB,aAAa;IACb,WAAW;CACX,CAAC;AAEF,IAAI,CAAC;IACJ,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IAChB,MAAM,QAAQ,GACb,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,YAAY,IAAI,CAAC;QACrD,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAC7D,CAAC;IACF,IAAI,KAAK,YAAY,UAAU;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9D,IACC,CAAC,QAAQ;QACT,KAAK,YAAY,KAAK;QACtB,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,EACjC,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACtB,CAAC"}

package/dist/commands/install.d.ts

@@ -0,0 +1,48 @@
+import type { DaemonOptions } from '../args.js';
+import { type PromptStreams } from '../prompt.js';
+/**
+ * `daemon install` — one command from a clean Linux box to a running,
+ * exposed, pairable server.
+ *
+ * The order matters: resolve, download, verify, unpack, verify again against
+ * the manifest, and only then touch systemd. Everything that can fail on the
+ * operator's behalf fails before the machine has been changed.
+ */
+export declare const DEFAULT_PORT = 8443;
+export declare const DEFAULT_HEALTH_PORT = 8444;
+export declare const DEFAULT_HOSTED_DOMAIN = "terminay.com";
+export declare const DEFAULT_EXPOSE = "hosted,direct";
+export interface InstallDependencies {
+    readonly home?: string;
+    readonly streams?: PromptStreams;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly write?: (line: string) => void;
+    readonly repository?: string;
+    readonly apiBase?: string;
+    readonly webBase?: string;
+    readonly architecture?: 'x64' | 'arm64';
+    readonly serverId?: string;
+    readonly uid?: number;
+    readonly readinessTimeoutMs?: number;
+    /**
+     * Verify against this key instead of the embedded one. A test seam for
+     * fixtures signed by a throwaway key; it still demands a valid signature,
+     * so it relaxes nothing. The `terminay` binary never passes it.
+     */
+    readonly releasePublicKeyPem?: string;
+    /**
+     * Install an archive already on this disk instead of resolving a release.
+     * It is treated exactly as a source build is — no publisher, so no
+     * signature, and the manifest checked as always — which is what the
+     * systemd container smoke installs. The `terminay` binary never passes it.
+     */
+    readonly localArchivePath?: string;
+}
+export interface InstallResult {
+    readonly version: string;
+    readonly channel: string;
+    readonly revision: string;
+    readonly directOrigin?: string;
+    readonly ready: boolean;
+}
+export declare function runInstall(ref: string | undefined, options: DaemonOptions, dependencies?: InstallDependencies): Promise<InstallResult>;

package/dist/commands/install.js

@@ -0,0 +1,213 @@
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { homedir, hostname } from 'node:os';
+import { dirname } from 'node:path';
+import { assertRootForSystemScope, prepareDataRoot, selectRunAs, selectScope, } from '../account.js';
+import { defaultDirectOrigin } from '../address.js';
+import { discardDownloads, downloadAsset, downloadBytes, downloadText, } from '../download.js';
+import { waitForReady } from '../health.js';
+import { activate, installArchive, installedVersions, retain, } from '../install.js';
+import { installLayout, writeInstallRecord, } from '../layout.js';
+import { hostArchitecture } from '../platform.js';
+import { defaultStreams } from '../prompt.js';
+import { resolveRef } from '../resolve.js';
+import { buildFromSource } from '../source.js';
+import { createSystemd } from '../systemd.js';
+import { parseEnvironmentFile, renderEnvironmentFile, renderUnit, } from '../unit.js';
+import { verifyArchive } from '../verify.js';
+/**
+ * `daemon install` — one command from a clean Linux box to a running,
+ * exposed, pairable server.
+ *
+ * The order matters: resolve, download, verify, unpack, verify again against
+ * the manifest, and only then touch systemd. Everything that can fail on the
+ * operator's behalf fails before the machine has been changed.
+ */
+export const DEFAULT_PORT = 8443;
+export const DEFAULT_HEALTH_PORT = 8444;
+export const DEFAULT_HOSTED_DOMAIN = 'terminay.com';
+export const DEFAULT_EXPOSE = 'hosted,direct';
+/** Fetch and verify an archive, or build one when the ref is a source ref. */
+async function stageArchive(resolved, layout, write, publicKeyPem) {
+    if (resolved.channel === 'source') {
+        write(`Building ${resolved.sourceRef ?? resolved.version} from source. This takes a while.`);
+        const built = await buildFromSource({
+            ref: resolved.sourceRef ?? resolved.version,
+            ...(resolved.revision === undefined
+                ? {}
+                : { revision: resolved.revision }),
+            destination: layout.prefix,
+            write,
+        });
+        return { archivePath: built.archivePath, signed: false };
+    }
+    const assets = resolved.assets;
+    if (assets === undefined)
+        throw new Error('the resolved release names no archive to download');
+    write(`Downloading ${resolved.channel === 'tag' ? resolved.version : `${resolved.channel} channel`} …`);
+    const asset = await downloadAsset(assets.archive, layout.prefix);
+    const [sidecar, signature] = await Promise.all([
+        downloadText(assets.sha256),
+        downloadBytes(assets.signature),
+    ]);
+    await verifyArchive({
+        archivePath: asset.path,
+        sidecar,
+        signature,
+        digest: asset.sha256,
+        ...(publicKeyPem === undefined ? {} : { publicKeyPem }),
+    });
+    write('Checksum and signature verified.');
+    return { archivePath: asset.path, signed: true };
+}
+export async function runInstall(ref, options, dependencies = {}) {
+    const home = dependencies.home ?? homedir();
+    const streams = dependencies.streams ?? defaultStreams();
+    const write = dependencies.write ?? ((line) => process.stdout.write(`${line}\n`));
+    const scope = await selectScope({
+        ...(options.scope === undefined ? {} : { requested: options.scope }),
+        streams,
+    });
+    if (scope === 'system') {
+        assertRootForSystemScope(`npx terminay daemon install${ref === undefined ? '' : ` ${ref}`} --system`, dependencies.uid ?? process.getuid?.());
+    }
+    const selection = await selectRunAs({
+        scope,
+        ...(options.runAs === undefined ? {} : { requested: options.runAs }),
+        streams,
+    });
+    const layout = installLayout(scope, home);
+    const architecture = dependencies.architecture ?? hostArchitecture();
+    const resolved = dependencies.localArchivePath === undefined
+        ? await resolveRef(ref, {
+            architecture,
+            ...(dependencies.repository === undefined
+                ? {}
+                : { repository: dependencies.repository }),
+            ...(dependencies.apiBase === undefined
+                ? {}
+                : { apiBase: dependencies.apiBase }),
+            ...(dependencies.webBase === undefined
+                ? {}
+                : { webBase: dependencies.webBase }),
+        })
+        : Object.freeze({ channel: 'source', version: 'local' });
+    await mkdir(layout.prefix, { recursive: true, mode: 0o755 });
+    const staged = dependencies.localArchivePath === undefined
+        ? await stageArchive(resolved, layout, write, dependencies.releasePublicKeyPem)
+        : { archivePath: dependencies.localArchivePath, signed: false };
+    const installed = await installArchive({
+        layout,
+        archivePath: staged.archivePath,
+        channel: resolved.channel,
+        expected: {
+            channel: resolved.channel,
+            architecture,
+            ...(resolved.channel === 'tag' ? { version: resolved.version } : {}),
+            ...(resolved.revision === undefined
+                ? {}
+                : { revision: resolved.revision }),
+        },
+    });
+    await discardDownloads(layout.prefix);
+    const port = options.port ?? DEFAULT_PORT;
+    const dataRoot = layout.defaultDataRoot;
+    await prepareDataRoot(dataRoot, selection.runAs, scope);
+    // A reinstall keeps the identity paired devices already know.
+    const existing = parseEnvironmentFile(await readFile(layout.environmentFile, 'utf8').catch(() => ''));
+    const serverId = existing.TERMINAY_SERVER_ID ?? dependencies.serverId ?? hostname();
+    const expose = options.expose ?? DEFAULT_EXPOSE;
+    const wantsDirect = expose.split(',').includes('direct');
+    const directOrigin = wantsDirect
+        ? (options.directOrigin ?? (await defaultDirectOrigin(port)))
+        : options.directOrigin;
+    if (wantsDirect && directOrigin === undefined) {
+        throw new Error('direct exposure needs an origin devices can reach, and this machine has no routable address to derive one from. Pass --direct-origin https://<host>:<port>.');
+    }
+    await mkdir(dirname(layout.environmentFile), {
+        recursive: true,
+        mode: 0o755,
+    });
+    await writeFile(layout.environmentFile, renderEnvironmentFile({
+        serverId,
+        dataRoot,
+        projectRoot: options.projectRoot ?? selection.home,
+        port,
+        healthPort: DEFAULT_HEALTH_PORT,
+        expose,
+        hostedDomain: options.hostedDomain ?? DEFAULT_HOSTED_DOMAIN,
+        ...(directOrigin === undefined ? {} : { directOrigin }),
+        uiBundle: `${layout.currentLink}/ui`,
+    }), { mode: 0o640 });
+    // Readable only by the account the service runs as.
+    await chmod(layout.environmentFile, 0o640);
+    await activate(layout, installed.name);
+    await mkdir(dirname(layout.unitPath), { recursive: true, mode: 0o755 });
+    await writeFile(layout.unitPath, renderUnit({
+        layout,
+        runAs: selection.runAs,
+        workingDirectory: options.projectRoot ?? selection.home,
+    }), { mode: 0o644 });
+    const systemd = createSystemd({
+        scope,
+        ...(dependencies.env === undefined ? {} : { env: dependencies.env }),
+    });
+    await systemd.daemonReload();
+    if (scope === 'user')
+        await systemd.enableLinger(selection.runAs);
+    await systemd.enableNow();
+    const ready = (await waitForReady(DEFAULT_HEALTH_PORT, dependencies.readinessTimeoutMs)) !== undefined;
+    const record = {
+        schemaVersion: 1,
+        scope,
+        channel: resolved.channel,
+        version: installed.manifest.version,
+        revision: installed.manifest.revision,
+        ...(resolved.publishedAt === undefined
+            ? {}
+            : { publishedAt: resolved.publishedAt }),
+        runAs: selection.runAs,
+        dataRoot,
+        projectRoot: options.projectRoot ?? selection.home,
+        port,
+        healthPort: DEFAULT_HEALTH_PORT,
+        expose,
+        hostedDomain: options.hostedDomain ?? DEFAULT_HOSTED_DOMAIN,
+        ...(directOrigin === undefined ? {} : { directOrigin }),
+        installedAt: new Date().toISOString(),
+    };
+    await writeInstallRecord(layout, record);
+    await retain(layout, [
+        installed.name,
+        ...(await installedVersions(layout))
+            .filter((name) => name !== installed.name)
+            .slice(-1),
+    ]);
+    write('');
+    write(`Terminay Server ${installed.manifest.version} is installed and ${ready ? 'running' : 'starting'}.`);
+    write(`  scope        ${scope}`);
+    write(`  runs as      ${selection.runAs}`);
+    write(`  channel      ${resolved.channel}`);
+    write(`  data root    ${dataRoot}`);
+    write(`  exposure     ${expose}`);
+    if (directOrigin !== undefined) {
+        write(`  direct URL   ${directOrigin}`);
+        write('');
+        write('If devices cannot reach that address — the machine is behind NAT, or has a');
+        write('DNS name — reinstall with --direct-origin https://<host>:<port>.');
+    }
+    if (!ready) {
+        write('');
+        write('The server has not reported ready yet. Recent log lines:');
+        write(await systemd.journal(20));
+    }
+    write('');
+    write('Pair a device with:  npx terminay daemon qr-code');
+    return Object.freeze({
+        version: installed.manifest.version,
+        channel: resolved.channel,
+        revision: installed.manifest.revision,
+        ...(directOrigin === undefined ? {} : { directOrigin }),
+        ready,
+    });
+}
+//# sourceMappingURL=install.js.map

package/dist/commands/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACN,wBAAwB,EACxB,eAAe,EACf,WAAW,EACX,WAAW,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EACN,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,YAAY,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACN,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,MAAM,GACN,MAAM,eAAe,CAAC;AACvB,OAAO,EAGN,aAAa,EACb,kBAAkB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AAClE,OAAO,EAAoB,UAAU,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACN,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC;AACpD,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;AAqC9C,8EAA8E;AAC9E,KAAK,UAAU,YAAY,CAC1B,QAAqB,EACrB,MAAqB,EACrB,KAA6B,EAC7B,YAAqB;IAErB,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnC,KAAK,CACJ,YAAY,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,mCAAmC,CACrF,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;YACnC,GAAG,EAAE,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO;YAC3C,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACnC,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,KAAK;SACL,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS;QACvB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,KAAK,CACJ,eAAe,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,UAAU,IAAI,CAChG,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9C,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3B,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;KAC/B,CAAC,CAAC;IACH,MAAM,aAAa,CAAC;QACnB,WAAW,EAAE,KAAK,CAAC,IAAI;QACvB,OAAO;QACP,SAAS;QACT,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACvD,CAAC,CAAC;IACH,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1C,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,GAAuB,EACvB,OAAsB,EACtB,eAAoC,EAAE;IAEtC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACzD,MAAM,KAAK,GACV,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAE7E,MAAM,KAAK,GAAiB,MAAM,WAAW,CAAC;QAC7C,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACpE,OAAO;KACP,CAAC,CAAC;IACH,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxB,wBAAwB,CACvB,8BAA8B,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,WAAW,EAC3E,YAAY,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CACtC,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC;QACnC,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACpE,OAAO;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,gBAAgB,EAAE,CAAC;IACrE,MAAM,QAAQ,GACb,YAAY,CAAC,gBAAgB,KAAK,SAAS;QAC1C,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE;YACtB,YAAY;YACZ,GAAG,CAAC,YAAY,CAAC,UAAU,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC;YAC3C,GAAG,CAAC,YAAY,CAAC,OAAO,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;YACrC,GAAG,CAAC,YAAY,CAAC,OAAO,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;SACrC,CAAC;QACH,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAEpE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,MAAM,GACX,YAAY,CAAC,gBAAgB,KAAK,SAAS;QAC1C,CAAC,CAAC,MAAM,YAAY,CAClB,QAAQ,EACR,MAAM,EACN,KAAK,EACL,YAAY,CAAC,mBAAmB,CAChC;QACF,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC;QACtC,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,YAAY;YACZ,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;SACnC;KACD,CAAC,CAAC;IACH,MAAM,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC;IACxC,MAAM,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAExD,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,oBAAoB,CACpC,MAAM,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAC9D,CAAC;IACF,MAAM,QAAQ,GACb,QAAQ,CAAC,kBAAkB,IAAI,YAAY,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC;IAEpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC;IAChD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,WAAW;QAC/B,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACxB,IAAI,WAAW,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACd,6JAA6J,CAC7J,CAAC;IACH,CAAC;IAED,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;QAC5C,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,KAAK;KACX,CAAC,CAAC;IACH,MAAM,SAAS,CACd,MAAM,CAAC,eAAe,EACtB,qBAAqB,CAAC;QACrB,QAAQ;QACR,QAAQ;QACR,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI;QAClD,IAAI;QACJ,UAAU,EAAE,mBAAmB;QAC/B,MAAM;QACN,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,qBAAqB;QAC3D,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,QAAQ,EAAE,GAAG,MAAM,CAAC,WAAW,KAAK;KACpC,CAAC,EACF,EAAE,IAAI,EAAE,KAAK,EAAE,CACf,CAAC;IACF,oDAAoD;IACpD,MAAM,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAE3C,MAAM,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAEvC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,MAAM,SAAS,CACd,MAAM,CAAC,QAAQ,EACf,UAAU,CAAC;QACV,MAAM;QACN,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,gBAAgB,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI;KACvD,CAAC,EACF,EAAE,IAAI,EAAE,KAAK,EAAE,CACf,CAAC;IAEF,MAAM,OAAO,GAAG,aAAa,CAAC;QAC7B,KAAK;QACL,GAAG,CAAC,YAAY,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;IAC7B,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IAE1B,MAAM,KAAK,GACV,CAAC,MAAM,YAAY,CAClB,mBAAmB,EACnB,YAAY,CAAC,kBAAkB,CAC/B,CAAC,KAAK,SAAS,CAAC;IAElB,MAAM,MAAM,GAAkB;QAC7B,aAAa,EAAE,CAAC;QAChB,KAAK;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;QACnC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;QACrC,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzC,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,QAAQ;QACR,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI;QAClD,IAAI;QACJ,UAAU,EAAE,mBAAmB;QAC/B,MAAM;QACN,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,qBAAqB;QAC3D,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,CAAC,MAAM,EAAE;QACpB,SAAS,CAAC,IAAI;QACd,GAAG,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;aAClC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC;aACzC,KAAK,CAAC,CAAC,CAAC,CAAC;KACX,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CACJ,mBAAmB,SAAS,CAAC,QAAQ,CAAC,OAAO,qBAAqB,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CACnG,CAAC;IACF,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,kBAAkB,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,kBAAkB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;IACpC,KAAK,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;IAClC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,kBAAkB,YAAY,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,EAAE,CAAC,CAAC;QACV,KAAK,CACJ,4EAA4E,CAC5E,CAAC;QACF,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,KAAK,CAAC,EAAE,CAAC,CAAC;QACV,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAClE,KAAK,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAE1D,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;QACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;QACrC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,KAAK;KACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/commands/lifecycle.d.ts

@@ -0,0 +1,23 @@
+import type { CommandContext } from '../context.js';
+/**
+ * `daemon start`, `daemon stop`, and `daemon status`.
+ *
+ * `status` is deliberately thin. It reports the unit, the version, the channel,
+ * readiness, and which exposure modes are on — and nothing else. Workspace
+ * names, project paths, and device records are the operator's data, not
+ * service metadata, and a status command is exactly the sort of thing that
+ * ends up pasted into an issue.
+ */
+export declare function runStart(context: CommandContext): Promise<boolean>;
+export declare function runStop(context: CommandContext): Promise<void>;
+export interface StatusReport {
+    readonly unit: string;
+    readonly enabled: boolean;
+    readonly version: string;
+    readonly channel: string;
+    readonly revision: string;
+    readonly ready: boolean;
+    readonly exposure: readonly string[] | 'off';
+    readonly activeVersion?: string;
+}
+export declare function runStatus(context: CommandContext): Promise<StatusReport>;

package/dist/commands/lifecycle.js

@@ -0,0 +1,66 @@
+import { probeHealth, waitForReady } from '../health.js';
+import { activeVersion } from '../install.js';
+import { approvalSocketPath, requireOk, sendAsUser } from '../socket.js';
+/**
+ * `daemon start`, `daemon stop`, and `daemon status`.
+ *
+ * `status` is deliberately thin. It reports the unit, the version, the channel,
+ * readiness, and which exposure modes are on — and nothing else. Workspace
+ * names, project paths, and device records are the operator's data, not
+ * service metadata, and a status command is exactly the sort of thing that
+ * ends up pasted into an issue.
+ */
+export async function runStart(context) {
+    await context.systemd.start();
+    const snapshot = await waitForReady(context.record.healthPort);
+    if (snapshot !== undefined) {
+        context.write(`Terminay Server ${snapshot.version ?? context.record.version} is ready.`);
+        return true;
+    }
+    context.write('The server started but has not reported ready. Recent log lines:');
+    context.write(await context.systemd.journal(20));
+    return false;
+}
+export async function runStop(context) {
+    await context.systemd.stop();
+    context.write('Terminay Server is stopped.');
+}
+export async function runStatus(context) {
+    const [unit, enabled, snapshot, active] = await Promise.all([
+        context.systemd.state(),
+        context.systemd.isEnabled(),
+        probeHealth(context.record.healthPort),
+        activeVersion(context.layout),
+    ]);
+    // Exposure is asked of the running server rather than read from the record,
+    // so a hand-edited environment file cannot make the status lie.
+    let exposure = context.record.expose
+        .split(',')
+        .filter((mode) => mode.length > 0);
+    try {
+        const response = requireOk(await sendAsUser(approvalSocketPath(context.record.dataRoot), { op: 'pairing' }, context.record.runAs));
+        if ('exposure' in response)
+            exposure = response.exposure;
+    }
+    catch {
+        // A stopped server cannot answer; the configured modes stand.
+    }
+    const report = Object.freeze({
+        unit,
+        enabled,
+        version: context.record.version,
+        channel: context.record.channel,
+        revision: context.record.revision,
+        ready: snapshot?.ready === true,
+        exposure,
+        ...(active === undefined ? {} : { activeVersion: active }),
+    });
+    context.write(`unit         ${report.unit}${report.enabled ? ' (enabled)' : ' (not enabled)'}`);
+    context.write(`version      ${report.version}`);
+    context.write(`channel      ${report.channel}`);
+    context.write(`revision     ${report.revision.slice(0, 12)}`);
+    context.write(`ready        ${report.ready ? 'yes' : 'no'}`);
+    context.write(`exposure     ${report.exposure === 'off' ? 'off' : report.exposure.join(', ') || 'off'}`);
+    return report;
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/commands/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/commands/lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEzE;;;;;;;;GAQG;AAEH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAuB;IACrD,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CACZ,mBAAmB,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,YAAY,CACzE,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,CAAC,KAAK,CACZ,kEAAkE,CAClE,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB;IACpD,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAC9C,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,OAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3D,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE;QACvB,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE;QAC3B,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QACtC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IAEH,4EAA4E;IAC5E,gEAAgE;IAChE,IAAI,QAAQ,GAA8B,OAAO,CAAC,MAAM,CAAC,MAAM;SAC7D,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,SAAS,CACzB,MAAM,UAAU,CACf,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC3C,EAAE,EAAE,EAAE,SAAS,EAAE,EACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CACpB,CACD,CAAC;QACF,IAAI,UAAU,IAAI,QAAQ;YAAE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACR,8DAA8D;IAC/D,CAAC;IAED,MAAM,MAAM,GAAiB,MAAM,CAAC,MAAM,CAAC;QAC1C,IAAI;QACJ,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;QAC/B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;QAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;QACjC,KAAK,EAAE,QAAQ,EAAE,KAAK,KAAK,IAAI;QAC/B,QAAQ;QACR,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;KAC1D,CAAC,CAAC;IAEH,OAAO,CAAC,KAAK,CACZ,gBAAgB,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAChF,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,KAAK,CACZ,gBAAgB,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CACzF,CAAC;IACF,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/commands/pairing.d.ts

@@ -0,0 +1,23 @@
+import type { DaemonOptions } from '../args.js';
+import type { CommandContext } from '../context.js';
+import { type PromptStreams } from '../prompt.js';
+import { type ApprovalResponse, type PendingApproval, sendAsUser } from '../socket.js';
+export declare class PairingError extends Error {
+}
+export interface PairingDependencies {
+    readonly streams?: PromptStreams;
+    readonly pollIntervalMs?: number;
+    readonly now?: () => number;
+    readonly renderQr?: (url: string) => Promise<string>;
+    readonly send?: (request: Parameters<typeof sendAsUser>[1]) => Promise<ApprovalResponse>;
+}
+export interface PairingResult {
+    readonly printed: readonly string[];
+    readonly waited: boolean;
+    readonly outcome?: 'approved' | 'denied';
+    readonly deviceName?: string;
+}
+export declare function runPairing(options: DaemonOptions, context: CommandContext, dependencies?: PairingDependencies): Promise<PairingResult>;
+/** `daemon approvals`, `approve <id>`, and `deny <id>` for scripted use. */
+export declare function runApprovals(context: CommandContext, dependencies?: PairingDependencies): Promise<readonly PendingApproval[]>;
+export declare function runResolveApproval(action: 'approve' | 'deny', approvalId: string, context: CommandContext, dependencies?: PairingDependencies): Promise<void>;

package/dist/commands/pairing.js

@@ -0,0 +1,143 @@
+import QRCode from 'qrcode';
+import { confirm, defaultStreams, isInteractive, } from '../prompt.js';
+import { approvalSocketPath, requireOk, sendAsUser, } from '../socket.js';
+/**
+ * `daemon qr-code` — pairing and approval on one screen.
+ *
+ * The runbook's version of this is: read the journal for a URL, type it into a
+ * device, read the match code off the device, then run `approve <id>` in
+ * another terminal before the room expires. This collapses that into one
+ * command without moving where the decision happens: the match code is still
+ * compared by a human on the host, and approval still goes to the server over
+ * its owner-only socket. Nothing here can approve a device on its own.
+ *
+ * Neither a host key nor a device key is ever printed. The pairing URL's
+ * fragment carries a one-time secret and is meant to be shown; a key is not.
+ */
+const POLL_INTERVAL_MS = 1_000;
+const REFRESH_WINDOW_MS = 30_000;
+export class PairingError extends Error {
+}
+async function renderTerminalQr(url) {
+    return QRCode.toString(url, { type: 'terminal', small: true });
+}
+function selectHandoff(handoffs, mode) {
+    if (mode !== undefined)
+        return handoffs.find((handoff) => handoff.mode === mode);
+    // Direct is preferred when it is on: it reaches the server without a relay,
+    // which is the point of enabling it.
+    return handoffs.find((handoff) => handoff.mode === 'direct') ?? handoffs[0];
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+export async function runPairing(options, context, dependencies = {}) {
+    const { record, write } = context;
+    const streams = dependencies.streams ?? defaultStreams();
+    const now = dependencies.now ?? Date.now;
+    const renderQr = dependencies.renderQr ?? renderTerminalQr;
+    const socketPath = approvalSocketPath(record.dataRoot);
+    const send = dependencies.send ??
+        ((request) => sendAsUser(socketPath, request, record.runAs));
+    const fetchPairing = async (rotate) => {
+        const response = requireOk(await send(rotate ? { op: 'pairing', rotate: true } : { op: 'pairing' }));
+        if (!('handoffs' in response))
+            throw new PairingError('the server did not return any pairing information');
+        if (response.exposure === 'off' || response.handoffs.length === 0) {
+            throw new PairingError('this server is not exposed, so there is no pairing URL to show. Reinstall with --expose hosted,direct, or edit the environment file and restart it.');
+        }
+        return response;
+    };
+    let pairing = await fetchPairing(false);
+    const printed = [];
+    const show = async () => {
+        const chosen = selectHandoff(pairing.handoffs, options.mode);
+        if (chosen === undefined) {
+            throw new PairingError(`this server does not expose a ${options.mode} pairing URL. Enabled modes: ${pairing.exposure === 'off' ? 'none' : pairing.exposure.join(', ')}.`);
+        }
+        write(await renderQr(chosen.pairingUrl));
+        write(`Scan this to pair, or open the ${chosen.mode} URL below.`);
+        write('');
+        for (const handoff of pairing.handoffs) {
+            write(`  ${handoff.mode.padEnd(7)} ${handoff.pairingUrl}`);
+            write(`  ${''.padEnd(7)} expires ${handoff.pairingExpiresAt}`);
+            printed.push(handoff.pairingUrl);
+        }
+        write('');
+    };
+    await show();
+    if (!options.wait)
+        return Object.freeze({ printed, waited: false });
+    if (!isInteractive(streams)) {
+        write('No terminal is attached, so there is nothing to approve on. Use `daemon approvals` and `daemon approve <id>`.');
+        return Object.freeze({ printed, waited: false });
+    }
+    write('Waiting for a device to scan it. Press Ctrl+C to stop.');
+    for (;;) {
+        const listed = requireOk(await send({ op: 'list' }));
+        const pending = 'pending' in listed ? listed.pending : [];
+        const first = pending[0];
+        if (first !== undefined) {
+            write('');
+            write(`Device:     ${first.deviceName}`);
+            write(`Match code: ${first.matchCode}`);
+            write('');
+            write('Approve this device only if that code is the one shown on it.');
+            const approved = await confirm('Approve?', streams);
+            const outcome = requireOk(await send(approved
+                ? { op: 'approve', approvalId: first.approvalId }
+                : { op: 'deny', approvalId: first.approvalId }));
+            const resolved = 'outcome' in outcome
+                ? outcome.outcome
+                : approved
+                    ? 'approved'
+                    : 'denied';
+            write(resolved === 'approved'
+                ? `${first.deviceName} is paired.`
+                : `${first.deviceName} was denied.`);
+            return Object.freeze({
+                printed,
+                waited: true,
+                outcome: resolved,
+                deviceName: first.deviceName,
+            });
+        }
+        // A room that expires while nobody is looking would leave a QR on
+        // screen that no longer works, so it is replaced before that happens.
+        const soonest = Math.min(...pairing.handoffs
+            .map((handoff) => Date.parse(handoff.pairingExpiresAt))
+            .filter((value) => Number.isFinite(value)));
+        if (Number.isFinite(soonest) && soonest - now() < REFRESH_WINDOW_MS) {
+            pairing = await fetchPairing(true);
+            write('');
+            write('That pairing code expired. Here is a fresh one:');
+            write('');
+            await show();
+            write('Waiting for a device to scan it. Press Ctrl+C to stop.');
+        }
+        await sleep(dependencies.pollIntervalMs ?? POLL_INTERVAL_MS);
+    }
+}
+/** `daemon approvals`, `approve <id>`, and `deny <id>` for scripted use. */
+export async function runApprovals(context, dependencies = {}) {
+    const socketPath = approvalSocketPath(context.record.dataRoot);
+    const send = dependencies.send ??
+        ((request) => sendAsUser(socketPath, request, context.record.runAs));
+    const response = requireOk(await send({ op: 'list' }));
+    const pending = 'pending' in response ? response.pending : [];
+    if (pending.length === 0) {
+        context.write('No devices are waiting for approval.');
+        return pending;
+    }
+    for (const approval of pending) {
+        context.write(`${approval.approvalId}  ${approval.deviceName}  match code ${approval.matchCode}`);
+    }
+    return pending;
+}
+export async function runResolveApproval(action, approvalId, context, dependencies = {}) {
+    const socketPath = approvalSocketPath(context.record.dataRoot);
+    const send = dependencies.send ??
+        ((request) => sendAsUser(socketPath, request, context.record.runAs));
+    const response = requireOk(await send({ op: action, approvalId }));
+    const name = 'deviceName' in response ? response.deviceName : approvalId;
+    context.write(action === 'approve' ? `${name} is paired.` : `${name} was denied.`);
+}
+//# sourceMappingURL=pairing.js.map