terminay 4.2.0

package/dist/http.js

@@ -0,0 +1,88 @@
+import { get } from 'node:https';
+/**
+ * The CLI talks to exactly one host family (github.com) over TLS and reads
+ * bounded documents. `node:https` covers that without a client library, which
+ * keeps the dependency an operator runs as root down to the QR renderer.
+ */
+const USER_AGENT = 'terminay-cli';
+const MAX_REDIRECTS = 5;
+const MAX_DOCUMENT_BYTES = 4 * 1024 * 1024;
+const REQUEST_TIMEOUT_MS = 30_000;
+/** Sentinel for `openStream`: return the redirect itself rather than follow it. */
+export const NO_REDIRECT = -1;
+function headers(accept) {
+    const value = { 'user-agent': USER_AGENT, accept };
+    // An authenticated request lifts the anonymous rate limit that an `npx`
+    // install on a busy network can otherwise hit.
+    const token = process.env.GITHUB_TOKEN;
+    if (typeof token === 'string' && token.length > 0)
+        value.authorization = `Bearer ${token}`;
+    return value;
+}
+export function openStream(url, accept = '*/*', redirectsLeft = MAX_REDIRECTS, extraHeaders) {
+    return new Promise((resolve, reject) => {
+        const parsed = new URL(url);
+        if (parsed.protocol !== 'https:') {
+            reject(new Error(`refusing a non-HTTPS download: ${url}`));
+            return;
+        }
+        const options = {
+            headers: { ...headers(accept), ...extraHeaders },
+        };
+        const request = get(parsed, options, (response) => {
+            const status = response.statusCode ?? 0;
+            const location = response.headers.location;
+            if (status >= 300 && status < 400 && typeof location === 'string') {
+                // A caller passing NO_REDIRECT wants the hop itself, not its target.
+                if (redirectsLeft === NO_REDIRECT) {
+                    resolve(response);
+                    return;
+                }
+                response.resume();
+                if (redirectsLeft <= 0) {
+                    reject(new Error(`too many redirects fetching ${url}`));
+                    return;
+                }
+                // A redirect to a signed asset host must not carry the GitHub
+                // token onward, so the next hop is a fresh request.
+                resolve(openStream(new URL(location, parsed).toString(), accept, redirectsLeft - 1, extraHeaders));
+                return;
+            }
+            resolve(response);
+        });
+        request.setTimeout(REQUEST_TIMEOUT_MS, () => request.destroy(new Error(`timed out fetching ${url}`)));
+        request.on('error', reject);
+    });
+}
+export async function request(url, accept = '*/*', followRedirects = true) {
+    // A caller that needs to read where a redirect points — `releases/latest`
+    // names the newest tag only in its Location — asks not to be followed.
+    const response = await openStream(url, accept, followRedirects ? MAX_REDIRECTS : NO_REDIRECT);
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of response) {
+        total += chunk.length;
+        if (total > MAX_DOCUMENT_BYTES) {
+            response.destroy();
+            throw new Error(`response from ${url} is larger than the ${MAX_DOCUMENT_BYTES}-byte limit`);
+        }
+        chunks.push(chunk);
+    }
+    return Object.freeze({
+        status: response.statusCode ?? 0,
+        headers: response.headers,
+        body: Buffer.concat(chunks).toString('utf8'),
+    });
+}
+export async function requestJson(url) {
+    const response = await request(url, 'application/vnd.github+json');
+    if (response.status !== 200)
+        throw new Error(`GitHub returned ${response.status} for ${url}`);
+    try {
+        return JSON.parse(response.body);
+    }
+    catch {
+        throw new Error(`GitHub returned an unreadable document for ${url}`);
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAuB,MAAM,YAAY,CAAC;AAEtD;;;;GAIG;AAEH,MAAM,UAAU,GAAG,cAAc,CAAC;AAClC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC;AAQ9B,SAAS,OAAO,CAAC,MAAc;IAC9B,MAAM,KAAK,GAA2B,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAC3E,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAChD,KAAK,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IACzC,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CACzB,GAAW,EACX,MAAM,GAAG,KAAK,EACd,gBAAwB,aAAa,EACrC,YAA+C;IAE/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3D,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAmB;YAC/B,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY,EAAE;SAChD,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3C,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnE,qEAAqE;gBACrE,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;oBACnC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAClB,OAAO;gBACR,CAAC;gBACD,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC,CAAC;oBACxD,OAAO;gBACR,CAAC;gBACD,8DAA8D;gBAC9D,oDAAoD;gBACpD,OAAO,CACN,UAAU,CACT,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,EACpC,MAAM,EACN,aAAa,GAAG,CAAC,EACjB,YAAY,CACZ,CACD,CAAC;gBACF,OAAO;YACR,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAC3C,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC,CACvD,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC5B,GAAW,EACX,MAAM,GAAG,KAAK,EACd,eAAe,GAAG,IAAI;IAEtB,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAChC,GAAG,EACH,MAAM,EACN,eAAe,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAC7C,CAAC;IACF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QACpC,KAAK,IAAK,KAAgB,CAAC,MAAM,CAAC;QAClC,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAChC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACd,iBAAiB,GAAG,uBAAuB,kBAAkB,aAAa,CAC1E,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC;QAChC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC5C,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC5C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAC1B,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;AACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+export type { DaemonCommand, DaemonOptions, InstallScope, PairingMode, ParsedCommandLine, } from './args.js';
+export { HELP_TEXT, parseCommandLine, UsageError } from './args.js';
+export { runInstall } from './commands/install.js';
+export { runStart, runStatus, runStop } from './commands/lifecycle.js';
+export { runApprovals, runPairing, runResolveApproval, } from './commands/pairing.js';
+export { runResetIdentity, runUninstall } from './commands/uninstall.js';
+export { runUpgrade } from './commands/upgrade.js';
+export { NotInstalledError, resolveContext } from './context.js';
+export { installLayout, readInstallRecord, writeInstallRecord, } from './layout.js';
+export type { HostFacts } from './platform.js';
+export { assertSupportedHost, hostArchitecture, readHostFacts, SYSTEMD_MARKER, UnsupportedHostError, } from './platform.js';
+export { buildFromSource, preflightToolchain } from './source.js';

package/dist/index.js

@@ -0,0 +1,11 @@
+export { HELP_TEXT, parseCommandLine, UsageError } from './args.js';
+export { runInstall } from './commands/install.js';
+export { runStart, runStatus, runStop } from './commands/lifecycle.js';
+export { runApprovals, runPairing, runResolveApproval, } from './commands/pairing.js';
+export { runResetIdentity, runUninstall } from './commands/uninstall.js';
+export { runUpgrade } from './commands/upgrade.js';
+export { NotInstalledError, resolveContext } from './context.js';
+export { installLayout, readInstallRecord, writeInstallRecord, } from './layout.js';
+export { assertSupportedHost, hostArchitecture, readHostFacts, SYSTEMD_MARKER, UnsupportedHostError, } from './platform.js';
+export { buildFromSource, preflightToolchain } from './source.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EACN,YAAY,EACZ,UAAU,EACV,kBAAkB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EACN,aAAa,EACb,iBAAiB,EACjB,kBAAkB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,oBAAoB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/install.d.ts

@@ -0,0 +1,30 @@
+import type { InstallLayout } from './layout.js';
+import { type ArchiveManifest, type ExpectedRelease } from './manifest.js';
+import type { ReleaseChannel } from './resolve.js';
+export interface InstalledVersion {
+    readonly directory: string;
+    readonly name: string;
+    readonly manifest: ArchiveManifest;
+}
+/**
+ * The archive contains a single top-level directory. It is extracted into a
+ * scratch directory first so a failed or partial unpack never appears under
+ * `versions/`, where the next command would treat it as installed.
+ */
+export declare function installArchive(options: {
+    readonly layout: InstallLayout;
+    readonly archivePath: string;
+    readonly channel: ReleaseChannel;
+    readonly expected?: ExpectedRelease;
+}): Promise<InstalledVersion>;
+/** Point `current` at a version. Written beside the link, then renamed over it. */
+export declare function activate(layout: InstallLayout, versionName: string): Promise<void>;
+export declare function activeVersion(layout: InstallLayout): Promise<string | undefined>;
+/** Roll back to a version known to have run. Identical to activation. */
+export declare function rollback(layout: InstallLayout, versionName: string): Promise<void>;
+export declare function installedVersions(layout: InstallLayout): Promise<readonly string[]>;
+/**
+ * Keep the active version and one previous, so a bad upgrade always has
+ * something proven to fall back to and disk use stays bounded.
+ */
+export declare function retain(layout: InstallLayout, keep: readonly string[]): Promise<readonly string[]>;

package/dist/install.js

@@ -0,0 +1,100 @@
+import { execFile } from 'node:child_process';
+import { chmod, lstat, mkdir, mkdtemp, readdir, readlink, rename, rm, symlink, } from 'node:fs/promises';
+import { basename, dirname, join } from 'node:path';
+import { promisify } from 'node:util';
+import { stagedName } from './layout.js';
+import { validateUnpackedArchive, } from './manifest.js';
+/**
+ * Laying a verified archive down on disk, and switching between versions
+ * without ever pointing `current` at something incomplete.
+ *
+ * Unpack, verify, then rename: the new version is fully present and hashed
+ * before anything references it, and the reference itself changes in a single
+ * atomic step. An interrupt at any point leaves `current` pointing at a
+ * complete version — either the old one or the new one, never a half-built
+ * directory.
+ */
+const execFileAsync = promisify(execFile);
+/**
+ * The archive contains a single top-level directory. It is extracted into a
+ * scratch directory first so a failed or partial unpack never appears under
+ * `versions/`, where the next command would treat it as installed.
+ */
+export async function installArchive(options) {
+    const { layout, archivePath } = options;
+    await mkdir(layout.versionsDirectory, { recursive: true, mode: 0o755 });
+    const scratch = await mkdtemp(join(layout.versionsDirectory, '.staging-'));
+    try {
+        await execFileAsync('tar', ['-xzf', archivePath, '-C', scratch], {
+            maxBuffer: 8 * 1024 * 1024,
+        });
+        const entries = await readdir(scratch, { withFileTypes: true });
+        const roots = entries.filter((entry) => entry.isDirectory());
+        if (roots.length !== 1 || entries.length !== roots.length) {
+            throw new Error('the server archive does not contain exactly one top-level directory');
+        }
+        const unpacked = join(scratch, roots[0].name);
+        const manifest = await validateUnpackedArchive(unpacked, options.expected ?? {});
+        const name = stagedName(options.channel, manifest.version, manifest.revision);
+        const directory = join(layout.versionsDirectory, name);
+        // Re-installing the same version replaces it, because the payload was
+        // just proven to match its signed manifest byte for byte.
+        await rm(directory, { recursive: true, force: true });
+        await rename(unpacked, directory);
+        await chmod(directory, 0o755);
+        return Object.freeze({ directory, name, manifest });
+    }
+    finally {
+        await rm(scratch, { recursive: true, force: true });
+    }
+}
+/** Point `current` at a version. Written beside the link, then renamed over it. */
+export async function activate(layout, versionName) {
+    const target = join(layout.versionsDirectory, versionName);
+    const info = await lstat(target).catch(() => undefined);
+    if (info === undefined || !info.isDirectory())
+        throw new Error(`cannot activate ${versionName}: it is not installed`);
+    await mkdir(dirname(layout.currentLink), { recursive: true, mode: 0o755 });
+    const temporary = `${layout.currentLink}.tmp`;
+    await rm(temporary, { force: true });
+    // Relative, so the tree can be relocated and inspected without the link
+    // dangling in a way that hides which version was active.
+    await symlink(join('versions', versionName), temporary);
+    await rename(temporary, layout.currentLink);
+}
+export async function activeVersion(layout) {
+    const target = await readlink(layout.currentLink).catch(() => undefined);
+    return target === undefined ? undefined : basename(target);
+}
+/** Roll back to a version known to have run. Identical to activation. */
+export async function rollback(layout, versionName) {
+    await activate(layout, versionName);
+}
+export async function installedVersions(layout) {
+    const entries = await readdir(layout.versionsDirectory, {
+        withFileTypes: true,
+    }).catch(() => []);
+    return entries
+        .filter((entry) => entry.isDirectory() && !entry.name.startsWith('.'))
+        .map((entry) => entry.name)
+        .sort();
+}
+/**
+ * Keep the active version and one previous, so a bad upgrade always has
+ * something proven to fall back to and disk use stays bounded.
+ */
+export async function retain(layout, keep) {
+    const kept = new Set(keep.filter((name) => name.length > 0));
+    const removed = [];
+    for (const name of await installedVersions(layout)) {
+        if (kept.has(name))
+            continue;
+        await rm(join(layout.versionsDirectory, name), {
+            recursive: true,
+            force: true,
+        });
+        removed.push(name);
+    }
+    return removed;
+}
+//# sourceMappingURL=install.js.map

package/dist/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACN,KAAK,EACL,KAAK,EACL,KAAK,EACL,OAAO,EACP,OAAO,EACP,QAAQ,EACR,MAAM,EACN,EAAE,EACF,OAAO,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAGN,uBAAuB,GACvB,MAAM,eAAe,CAAC;AAGvB;;;;;;;;;GASG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAQ1C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAKpC;IACA,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACJ,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YAChE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACd,qEAAqE,CACrE,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAG,KAAK,CAAC,CAAC,CAAsB,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC7C,QAAQ,EACR,OAAO,CAAC,QAAQ,IAAI,EAAE,CACtB,CAAC;QACF,MAAM,IAAI,GAAG,UAAU,CACtB,OAAO,CAAC,OAAO,EACf,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,QAAQ,CACjB,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACvD,sEAAsE;QACtE,0DAA0D;QAC1D,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACV,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;AACF,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,MAAqB,EACrB,WAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAC5C,MAAM,IAAI,KAAK,CAAC,mBAAmB,WAAW,uBAAuB,CAAC,CAAC;IACxE,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,WAAW,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,wEAAwE;IACxE,yDAAyD;IACzD,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,MAAqB,EACrB,WAAmB;IAEnB,MAAM,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,MAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE;QACvD,aAAa,EAAE,IAAI;KACnB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnB,OAAO,OAAO;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,EAAE,CAAC;AACV,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC3B,MAAqB,EACrB,IAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE;YAC9C,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI;SACX,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/layout.d.ts

@@ -0,0 +1,52 @@
+import type { InstallScope } from './args.js';
+import type { ReleaseChannel } from './resolve.js';
+/**
+ * Where an installation lives, and the one small record that describes it.
+ *
+ * Every version sits under `versions/<version>` and is immutable once
+ * verified; `current` is a symbolic link swapped by rename. Nothing the CLI
+ * does later edits a versioned directory, so an upgrade that fails can put
+ * the link back and be exactly where it started.
+ */
+export declare const UNIT_NAME = "terminay-server.service";
+export declare const INSTALL_RECORD = "install.json";
+export interface InstallLayout {
+    readonly scope: InstallScope;
+    readonly prefix: string;
+    readonly versionsDirectory: string;
+    readonly currentLink: string;
+    readonly recordPath: string;
+    readonly environmentFile: string;
+    readonly defaultDataRoot: string;
+    readonly unitPath: string;
+}
+export declare function installLayout(scope: InstallScope, home?: string): InstallLayout;
+/** What the CLI needs to remember between commands. It holds no secrets. */
+export interface InstallRecord {
+    readonly schemaVersion: 1;
+    readonly scope: InstallScope;
+    readonly channel: ReleaseChannel;
+    readonly version: string;
+    /** The commit the installed archive records in its own signed manifest. */
+    readonly revision: string;
+    readonly publishedAt?: string;
+    readonly runAs: string;
+    readonly dataRoot: string;
+    readonly projectRoot: string;
+    readonly port: number;
+    readonly healthPort: number;
+    readonly expose: string;
+    readonly hostedDomain: string;
+    readonly directOrigin?: string;
+    readonly installedAt: string;
+}
+export declare function parseInstallRecord(value: unknown): InstallRecord;
+export declare function readInstallRecord(layout: InstallLayout): Promise<InstallRecord | undefined>;
+export declare function writeInstallRecord(layout: InstallLayout, record: InstallRecord): Promise<void>;
+export declare function versionDirectory(layout: InstallLayout, version: string): string;
+/**
+ * The rolling channel reuses the version string `main` for every build, so its
+ * directories are named for the commit instead. Without this an upgrade would
+ * try to stage a new build on top of the running one.
+ */
+export declare function stagedName(channel: ReleaseChannel, version: string, revision: string): string;

package/dist/layout.js

@@ -0,0 +1,96 @@
+import { readFile, rename, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * Where an installation lives, and the one small record that describes it.
+ *
+ * Every version sits under `versions/<version>` and is immutable once
+ * verified; `current` is a symbolic link swapped by rename. Nothing the CLI
+ * does later edits a versioned directory, so an upgrade that fails can put
+ * the link back and be exactly where it started.
+ */
+export const UNIT_NAME = 'terminay-server.service';
+export const INSTALL_RECORD = 'install.json';
+export function installLayout(scope, home = homedir()) {
+    if (scope === 'system') {
+        const prefix = '/opt/terminay';
+        return Object.freeze({
+            scope,
+            prefix,
+            versionsDirectory: join(prefix, 'versions'),
+            currentLink: join(prefix, 'current'),
+            recordPath: join(prefix, INSTALL_RECORD),
+            environmentFile: '/etc/terminay/server.env',
+            defaultDataRoot: '/var/lib/terminay',
+            unitPath: join('/etc/systemd/system', UNIT_NAME),
+        });
+    }
+    const prefix = join(home, '.local/share/terminay');
+    return Object.freeze({
+        scope,
+        prefix,
+        versionsDirectory: join(prefix, 'versions'),
+        currentLink: join(prefix, 'current'),
+        recordPath: join(prefix, INSTALL_RECORD),
+        environmentFile: join(home, '.config/terminay/server.env'),
+        defaultDataRoot: join(prefix, 'data'),
+        unitPath: join(home, '.config/systemd/user', UNIT_NAME),
+    });
+}
+export function parseInstallRecord(value) {
+    if (typeof value !== 'object' || value === null)
+        throw new Error('the install record is not readable');
+    const record = value;
+    if (record.schemaVersion !== 1)
+        throw new Error('the install record has an unsupported schema version');
+    for (const field of [
+        'scope',
+        'channel',
+        'version',
+        'revision',
+        'runAs',
+        'dataRoot',
+        'projectRoot',
+        'expose',
+        'hostedDomain',
+    ]) {
+        if (typeof record[field] !== 'string' ||
+            record[field].length === 0) {
+            throw new Error(`the install record is missing ${field}`);
+        }
+    }
+    if (!Number.isSafeInteger(record.port) ||
+        !Number.isSafeInteger(record.healthPort)) {
+        throw new Error('the install record is missing its ports');
+    }
+    return record;
+}
+export async function readInstallRecord(layout) {
+    const raw = await readFile(layout.recordPath, 'utf8').catch(() => undefined);
+    if (raw === undefined)
+        return undefined;
+    return parseInstallRecord(JSON.parse(raw));
+}
+export async function writeInstallRecord(layout, record) {
+    // Replaced by rename so a command interrupted mid-write never leaves a
+    // half-written record that the next command would refuse to parse.
+    const temporary = `${layout.recordPath}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(record, null, 2)}\n`, {
+        mode: 0o644,
+    });
+    await rename(temporary, layout.recordPath);
+}
+export function versionDirectory(layout, version) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(version))
+        throw new Error(`unsafe version directory name: ${version}`);
+    return join(layout.versionsDirectory, version);
+}
+/**
+ * The rolling channel reuses the version string `main` for every build, so its
+ * directories are named for the commit instead. Without this an upgrade would
+ * try to stage a new build on top of the running one.
+ */
+export function stagedName(channel, version, revision) {
+    return channel === 'tag' ? version : `${channel}-${revision.slice(0, 12)}`;
+}
+//# sourceMappingURL=layout.js.map

package/dist/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.js","sourceRoot":"","sources":["../src/layout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAKjC;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,yBAAyB,CAAC;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC;AAa7C,MAAM,UAAU,aAAa,CAC5B,KAAmB,EACnB,OAAe,OAAO,EAAE;IAExB,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,eAAe,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,KAAK;YACL,MAAM;YACN,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC;YAC3C,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;YACpC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC;YACxC,eAAe,EAAE,0BAA0B;YAC3C,eAAe,EAAE,mBAAmB;YACpC,QAAQ,EAAE,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC;SAChD,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,KAAK;QACL,MAAM;QACN,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC;QAC3C,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;QACpC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC;QACxC,eAAe,EAAE,IAAI,CAAC,IAAI,EAAE,6BAA6B,CAAC;QAC1D,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QACrC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,sBAAsB,EAAE,SAAS,CAAC;KACvD,CAAC,CAAC;AACJ,CAAC;AAsBD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAC9C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACzE,KAAK,MAAM,KAAK,IAAI;QACnB,OAAO;QACP,SAAS;QACT,SAAS;QACT,UAAU;QACV,OAAO;QACP,UAAU;QACV,aAAa;QACb,QAAQ;QACR,cAAc;KACd,EAAE,CAAC;QACH,IACC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;YAChC,MAAM,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,EACrC,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;IACD,IACC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,EACvC,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAkC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,MAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7E,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,MAAqB,EACrB,MAAqB;IAErB,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,UAAU,MAAM,CAAC;IAC7C,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAClE,IAAI,EAAE,KAAK;KACX,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,MAAqB,EACrB,OAAe;IAEf,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACzB,OAAuB,EACvB,OAAe,EACf,QAAgB;IAEhB,OAAO,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC5E,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,46 @@
+import type { Architecture, ReleaseChannel } from './resolve.js';
+/**
+ * The manifest inside a server archive, and what makes it trustworthy.
+ *
+ * `scripts/build-standalone-server-artifact.mjs` writes this file, and the
+ * signature the CLI already checked covers it, so re-hashing the unpacked tree
+ * against it turns "the download was authentic" into "what landed on disk is
+ * what was signed". A tar that unpacked partially, or a versioned directory
+ * something later edited, is caught here rather than at first start.
+ */
+export declare const ARCHIVE_MANIFEST = "artifact-manifest.json";
+export interface ManifestFile {
+    readonly path: string;
+    readonly mode: string;
+    readonly size: number;
+    readonly sha256: string;
+}
+export interface ArchiveManifest {
+    readonly schemaVersion: 1;
+    readonly artifact: 'terminay-server';
+    readonly target: string;
+    readonly channel: ReleaseChannel;
+    readonly revision: string;
+    readonly architecture: Architecture;
+    readonly version: string;
+    readonly entrypoints: Readonly<{
+        server: string;
+    }>;
+    readonly files: readonly ManifestFile[];
+}
+export declare class ManifestError extends Error {
+}
+export declare function parseArchiveManifest(value: unknown): ArchiveManifest;
+export declare function readArchiveManifest(root: string): Promise<ArchiveManifest>;
+export interface ExpectedRelease {
+    readonly channel?: ReleaseChannel;
+    readonly architecture?: Architecture;
+    readonly version?: string;
+    readonly revision?: string;
+}
+/**
+ * Re-hash the unpacked tree against its manifest. Symbolic links are refused
+ * outright: the manifest describes regular files, and a link where a file is
+ * expected is how an archive escapes its own directory.
+ */
+export declare function validateUnpackedArchive(root: string, expected?: ExpectedRelease): Promise<ArchiveManifest>;

package/dist/manifest.js

@@ -0,0 +1,115 @@
+import { createHash } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+import { lstat, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { pipeline } from 'node:stream/promises';
+/**
+ * The manifest inside a server archive, and what makes it trustworthy.
+ *
+ * `scripts/build-standalone-server-artifact.mjs` writes this file, and the
+ * signature the CLI already checked covers it, so re-hashing the unpacked tree
+ * against it turns "the download was authentic" into "what landed on disk is
+ * what was signed". A tar that unpacked partially, or a versioned directory
+ * something later edited, is caught here rather than at first start.
+ */
+export const ARCHIVE_MANIFEST = 'artifact-manifest.json';
+export class ManifestError extends Error {
+}
+function fail(message) {
+    throw new ManifestError(`the installed archive is not valid: ${message}`);
+}
+const SAFE_PATH = /^(?!\/)(?!.*(?:^|\/)\.\.(?:\/|$))[^\\]+$/u;
+export function parseArchiveManifest(value) {
+    if (typeof value !== 'object' || value === null)
+        fail('its manifest is not an object');
+    const manifest = value;
+    if (manifest.schemaVersion !== 1)
+        fail('its manifest has an unsupported schema version');
+    if (manifest.artifact !== 'terminay-server')
+        fail(`its manifest describes ${String(manifest.artifact)}`);
+    for (const field of [
+        'target',
+        'revision',
+        'version',
+        'channel',
+        'architecture',
+    ]) {
+        if (typeof manifest[field] !== 'string' ||
+            manifest[field].length === 0)
+            fail(`its manifest is missing ${field}`);
+    }
+    if (!/^[a-f0-9]{40}$/u.test(manifest.revision))
+        fail('its manifest revision is not a commit sha');
+    const entrypoints = manifest.entrypoints;
+    if (typeof entrypoints?.server !== 'string')
+        fail('its manifest names no server entrypoint');
+    if (!Array.isArray(manifest.files) || manifest.files.length === 0)
+        fail('its manifest lists no files');
+    for (const file of manifest.files) {
+        const entry = file;
+        if (typeof entry.path !== 'string' || !SAFE_PATH.test(entry.path))
+            fail(`its manifest lists an unsafe path: ${String(entry.path)}`);
+        if (!/^[a-f0-9]{64}$/u.test(String(entry.sha256)))
+            fail(`its manifest has no digest for ${entry.path}`);
+        if (!Number.isSafeInteger(entry.size))
+            fail(`its manifest has no size for ${entry.path}`);
+        if (!/^[0-7]{3}$/u.test(String(entry.mode)))
+            fail(`its manifest has no mode for ${entry.path}`);
+    }
+    return manifest;
+}
+export async function readArchiveManifest(root) {
+    const raw = await readFile(join(root, ARCHIVE_MANIFEST), 'utf8').catch(() => undefined);
+    if (raw === undefined)
+        fail(`it has no ${ARCHIVE_MANIFEST}`);
+    try {
+        return parseArchiveManifest(JSON.parse(raw));
+    }
+    catch (error) {
+        if (error instanceof ManifestError)
+            throw error;
+        fail(`its ${ARCHIVE_MANIFEST} is not valid JSON`);
+    }
+}
+async function digest(path) {
+    const hash = createHash('sha256');
+    await pipeline(createReadStream(path), hash);
+    return hash.digest('hex');
+}
+/**
+ * Re-hash the unpacked tree against its manifest. Symbolic links are refused
+ * outright: the manifest describes regular files, and a link where a file is
+ * expected is how an archive escapes its own directory.
+ */
+export async function validateUnpackedArchive(root, expected = {}) {
+    const manifest = await readArchiveManifest(root);
+    for (const [field, wanted] of Object.entries(expected)) {
+        if (wanted === undefined)
+            continue;
+        const actual = manifest[field];
+        if (actual !== wanted)
+            fail(`its manifest records ${field} ${String(actual)}, but ${String(wanted)} was expected`);
+    }
+    for (const file of manifest.files) {
+        const absolute = join(root, file.path);
+        const info = await lstat(absolute).catch(() => undefined);
+        if (info === undefined)
+            fail(`${file.path} is missing`);
+        if (info.isSymbolicLink())
+            fail(`${file.path} is a symbolic link`);
+        if (!info.isFile())
+            fail(`${file.path} is not a regular file`);
+        if (info.size !== file.size)
+            fail(`${file.path} is ${info.size} bytes, but its manifest records ${file.size}`);
+        if ((await digest(absolute)) !== file.sha256)
+            fail(`${file.path} does not match the digest its manifest records`);
+    }
+    const entrypoint = join(root, manifest.entrypoints.server);
+    const launcher = await lstat(entrypoint).catch(() => undefined);
+    if (launcher === undefined || !launcher.isFile())
+        fail(`its server entrypoint ${manifest.entrypoints.server} is missing`);
+    if ((launcher.mode & 0o111) === 0)
+        fail(`its server entrypoint ${manifest.entrypoints.server} is not executable`);
+    return manifest;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAIhD;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAqBzD,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C,SAAS,IAAI,CAAC,OAAe;IAC5B,MAAM,IAAI,aAAa,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,SAAS,GAAG,2CAA2C,CAAC;AAE9D,MAAM,UAAU,oBAAoB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAC9C,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAC/B,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,QAAQ,KAAK,iBAAiB;QAC1C,IAAI,CAAC,0BAA0B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI;QACnB,QAAQ;QACR,UAAU;QACV,SAAS;QACT,SAAS;QACT,cAAc;KACd,EAAE,CAAC;QACH,IACC,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,QAAQ;YAClC,QAAQ,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC;YAExC,IAAI,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAkB,CAAC;QACvD,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAEjB,CAAC;IACb,IAAI,OAAO,WAAW,EAAE,MAAM,KAAK,QAAQ;QAC1C,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAChE,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAA+B,CAAC;QAC9C,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAChE,IAAI,CAAC,sCAAsC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,CAAC,kCAAkC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;YACpC,IAAI,CAAC,gCAAgC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,gCAAgC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,QAAsC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,IAAY;IAEZ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CACrE,GAAG,EAAE,CAAC,SAAS,CACf,CAAC;IACF,IAAI,GAAG,KAAK,SAAS;QAAE,IAAI,CAAC,aAAa,gBAAgB,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC;QACJ,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,IAAI,CAAC,OAAO,gBAAgB,oBAAoB,CAAC,CAAC;IACnD,CAAC;AACF,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,IAAY,EACZ,WAA4B,EAAE;IAE9B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,MAAM,GAAI,QAA+C,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,MAAM,KAAK,MAAM;YACpB,IAAI,CACH,wBAAwB,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,eAAe,CACrF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,qBAAqB,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAC1B,IAAI,CACH,GAAG,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,oCAAoC,IAAI,CAAC,IAAI,EAAE,CAC3E,CAAC;QACH,IAAI,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM;YAC3C,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,iDAAiD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAC/C,IAAI,CAAC,yBAAyB,QAAQ,CAAC,WAAW,CAAC,MAAM,aAAa,CAAC,CAAC;IACzE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAChC,IAAI,CACH,yBAAyB,QAAQ,CAAC,WAAW,CAAC,MAAM,oBAAoB,CACxE,CAAC;IACH,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/dist/platform.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The `daemon` commands drive systemd and install a Linux server archive, so
+ * they refuse anywhere that combination cannot exist. The refusal names the
+ * requirement rather than the failure, because an operator on macOS needs to
+ * know the CLI is for the box they are deploying to, not the one they typed on.
+ */
+export declare const SYSTEMD_MARKER = "/run/systemd/system";
+export interface HostFacts {
+    readonly platform: string;
+    readonly arch: string;
+    readonly hasSystemd: boolean;
+}
+export declare function readHostFacts(): HostFacts;
+export declare class UnsupportedHostError extends Error {
+}
+export declare function assertSupportedHost(facts?: HostFacts): void;
+export declare function hostArchitecture(facts?: HostFacts): 'x64' | 'arm64';

package/dist/platform.js

@@ -0,0 +1,34 @@
+import { existsSync } from 'node:fs';
+/**
+ * The `daemon` commands drive systemd and install a Linux server archive, so
+ * they refuse anywhere that combination cannot exist. The refusal names the
+ * requirement rather than the failure, because an operator on macOS needs to
+ * know the CLI is for the box they are deploying to, not the one they typed on.
+ */
+export const SYSTEMD_MARKER = '/run/systemd/system';
+const SUPPORTED_ARCHITECTURES = ['x64', 'arm64'];
+export function readHostFacts() {
+    return Object.freeze({
+        platform: process.platform,
+        arch: process.arch,
+        hasSystemd: existsSync(SYSTEMD_MARKER),
+    });
+}
+export class UnsupportedHostError extends Error {
+}
+export function assertSupportedHost(facts = readHostFacts()) {
+    if (facts.platform !== 'linux') {
+        throw new UnsupportedHostError(`terminay daemon runs on 64-bit Linux with systemd; this host is ${facts.platform}. Run it on the server you are deploying to.`);
+    }
+    if (!SUPPORTED_ARCHITECTURES.includes(facts.arch)) {
+        throw new UnsupportedHostError(`terminay daemon supports the x64 and arm64 architectures; this host is ${facts.arch}.`);
+    }
+    if (!facts.hasSystemd) {
+        throw new UnsupportedHostError(`terminay daemon requires systemd as the service manager; ${SYSTEMD_MARKER} is absent on this host.`);
+    }
+}
+export function hostArchitecture(facts = readHostFacts()) {
+    assertSupportedHost(facts);
+    return facts.arch;
+}
+//# sourceMappingURL=platform.js.map