terminay 4.2.0

package/dist/source.js

@@ -0,0 +1,152 @@
+import { execFile } from 'node:child_process';
+import { cp, mkdtemp, readdir, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { basename, join } from 'node:path';
+import { promisify } from 'node:util';
+import { downloadAsset } from './download.js';
+import { hostArchitecture } from './platform.js';
+import { DEFAULT_REPOSITORY } from './resolve.js';
+/**
+ * Building a server archive on the target when the reference is a branch or a
+ * commit rather than a release.
+ *
+ * There is no publisher for such a build, so there is no signature to check —
+ * the operator asked for this exact commit and the machine built it locally,
+ * which is a different trust story from a downloaded artifact rather than a
+ * weaker one. The manifest is still verified when it is installed, so a build
+ * that produced a broken tree is caught before it is activated.
+ *
+ * The toolchain is checked before anything is downloaded, because finding out
+ * a compiler is missing after a shallow clone and a Node download wastes the
+ * operator's time and bandwidth.
+ */
+const execFileAsync = promisify(execFile);
+export const REQUIRED_TOOLS = [
+    'git',
+    'python3',
+    'make',
+    'c++',
+];
+const BUILD_TIMEOUT_MS = 45 * 60 * 1000;
+export class ToolchainError extends Error {
+}
+export class SourceBuildError extends Error {
+}
+async function which(tool, env) {
+    try {
+        await execFileAsync('command', ['-v', tool], {
+            timeout: 30_000,
+            shell: '/bin/sh',
+            ...(env === undefined ? {} : { env }),
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function preflightToolchain(tools = REQUIRED_TOOLS, env) {
+    const missing = [];
+    for (const tool of tools) {
+        if (!(await which(tool, env)))
+            missing.push(tool);
+    }
+    if (missing.length > 0) {
+        throw new ToolchainError(`building from source needs ${missing.join(', ')}, which ${missing.length === 1 ? 'is' : 'are'} not installed. Install ${missing.length === 1 ? 'it' : 'them'} (on Debian: apt install build-essential python3 git) or install a released version instead.`);
+    }
+}
+async function run(command, args, cwd, env) {
+    const { stdout } = await execFileAsync(command, [...args], {
+        cwd,
+        timeout: BUILD_TIMEOUT_MS,
+        maxBuffer: 64 * 1024 * 1024,
+        ...(env === undefined ? {} : { env }),
+    });
+    return stdout;
+}
+export async function buildFromSource(options) {
+    const write = options.write ?? (() => undefined);
+    const env = options.env;
+    const architecture = options.architecture ?? hostArchitecture();
+    const target = `linux-${architecture}`;
+    // Before any download: a missing compiler must not cost a clone.
+    await preflightToolchain(REQUIRED_TOOLS, env);
+    const parent = options.workingDirectory ?? tmpdir();
+    const build = await mkdtemp(join(parent, 'terminay-source-build-'));
+    let succeeded = false;
+    try {
+        const remote = `https://github.com/${options.repository ?? DEFAULT_REPOSITORY}.git`;
+        write(`Cloning ${options.ref} …`);
+        const checkout = join(build, 'source');
+        // A commit cannot be cloned by branch, so it is fetched and checked out.
+        if (options.revision !== undefined && /^[0-9a-f]{40}$/u.test(options.ref)) {
+            await run('git', ['init', checkout], build, env);
+            await run('git', ['remote', 'add', 'origin', remote], checkout, env);
+            await run('git', ['fetch', '--depth', '1', 'origin', options.ref], checkout, env);
+            await run('git', ['checkout', '--detach', 'FETCH_HEAD'], checkout, env);
+        }
+        else {
+            await run('git', ['clone', '--depth', '1', '--branch', options.ref, remote, checkout], build, env);
+        }
+        const revision = (await run('git', ['rev-parse', 'HEAD'], checkout, env)).trim();
+        write('Installing dependencies …');
+        await run('npm', ['ci'], checkout, env);
+        write('Compiling …');
+        await run('npm', ['run', 'build:application-graph'], checkout, env);
+        await run('npm', ['run', 'build:server-postcompile'], checkout, env);
+        await run('node', ['scripts/stage-selected-secure-werift-runtime.mjs'], checkout, env);
+        write('Fetching the pinned Node runtime …');
+        const nodeArchiveUrl = (await run('node', [
+            '-e',
+            'import("./scripts/pty-runtime-platforms.mjs").then((m) => process.stdout.write(m.getPtyRuntimePlatform(process.argv[1]).nodeArchive))',
+            target,
+        ], checkout, env)).trim();
+        // The builder re-verifies this archive's pinned digest, so a wrong or
+        // tampered download fails there rather than being baked in.
+        const nodeArchive = await downloadAsset(nodeArchiveUrl, build, 'node-runtime.tar.xz');
+        write('Building the standalone archive …');
+        const output = join(build, 'artifact');
+        const built = await run('node', [
+            'scripts/build-standalone-server-artifact.mjs',
+            '--target',
+            target,
+            '--channel',
+            'source',
+            '--revision',
+            revision,
+            '--node-archive',
+            nodeArchive.path,
+            '--runtime-modules',
+            'node_modules',
+            '--webrtc-runtime',
+            'build/webrtc-runtime',
+            '--output-dir',
+            output,
+        ], checkout, env);
+        const archivePath = JSON.parse(built).archivePath;
+        const produced = await readdir(output).catch(() => []);
+        if (typeof archivePath !== 'string' || produced.length === 0) {
+            throw new SourceBuildError('the source build produced no archive');
+        }
+        // Moved out of the build tree before that tree is removed, so the
+        // caller has something to install from.
+        const kept = join(options.destination ?? parent, basename(archivePath));
+        await rm(kept, { force: true });
+        await cp(archivePath, kept);
+        succeeded = true;
+        return Object.freeze({
+            archivePath: kept,
+            revision,
+            buildDirectory: build,
+        });
+    }
+    catch (error) {
+        throw new SourceBuildError(`building ${options.ref} from source failed: ${error instanceof Error ? error.message : String(error)}. The build directory was kept at ${build}.`);
+    }
+    finally {
+        // Kept on failure so the operator can read the compiler's output.
+        if (succeeded && options.keepOnFailure !== true)
+            await rm(build, { recursive: true, force: true }).catch(() => undefined);
+    }
+}
+//# sourceMappingURL=source.js.map

package/dist/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../src/source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD;;;;;;;;;;;;;GAaG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,cAAc,GAAsB;IAChD,KAAK;IACL,SAAS;IACT,MAAM;IACN,KAAK;CACL,CAAC;AACF,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExC,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAC5C,MAAM,OAAO,gBAAiB,SAAQ,KAAK;CAAG;AAE9C,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,GAAuB;IACzD,IAAI,CAAC;QACJ,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;YAC5C,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,SAAS;YAChB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;SACrC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,QAA2B,cAAc,EACzC,GAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,cAAc,CACvB,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,2BAA2B,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,8FAA8F,CAC3P,CAAC;IACH,CAAC;AACF,CAAC;AAqBD,KAAK,UAAU,GAAG,CACjB,OAAe,EACf,IAAuB,EACvB,GAAW,EACX,GAAuB;IAEvB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QAC1D,GAAG;QACH,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;KACrC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,OAA2B;IAE3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAoC,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,gBAAgB,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,SAAS,YAAY,EAAE,CAAC;IAEvC,iEAAiE;IACjE,MAAM,kBAAkB,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACpE,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,sBAAsB,OAAO,CAAC,UAAU,IAAI,kBAAkB,MAAM,CAAC;QACpF,KAAK,CAAC,WAAW,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvC,yEAAyE;QACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACjD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,GAAG,CACR,KAAK,EACL,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,EAChD,QAAQ,EACR,GAAG,CACH,CAAC;YACF,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,CACR,KAAK,EACL,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EACpE,KAAK,EACL,GAAG,CACH,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,CAChB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CACtD,CAAC,IAAI,EAAE,CAAC;QAET,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACnC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAExC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,yBAAyB,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,0BAA0B,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,GAAG,CACR,MAAM,EACN,CAAC,kDAAkD,CAAC,EACpD,QAAQ,EACR,GAAG,CACH,CAAC;QAEF,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,CACtB,MAAM,GAAG,CACR,MAAM,EACN;YACC,IAAI;YACJ,uIAAuI;YACvI,MAAM;SACN,EACD,QAAQ,EACR,GAAG,CACH,CACD,CAAC,IAAI,EAAE,CAAC;QACT,sEAAsE;QACtE,4DAA4D;QAC5D,MAAM,WAAW,GAAG,MAAM,aAAa,CACtC,cAAc,EACd,KAAK,EACL,qBAAqB,CACrB,CAAC;QAEF,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,GAAG,CACtB,MAAM,EACN;YACC,8CAA8C;YAC9C,UAAU;YACV,MAAM;YACN,WAAW;YACX,QAAQ;YACR,YAAY;YACZ,QAAQ;YACR,gBAAgB;YAChB,WAAW,CAAC,IAAI;YAChB,mBAAmB;YACnB,cAAc;YACd,kBAAkB;YAClB,sBAAsB;YACtB,cAAc;YACd,MAAM;SACN,EACD,QAAQ,EACR,GAAG,CACH,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,WAAqB,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,gBAAgB,CAAC,sCAAsC,CAAC,CAAC;QACpE,CAAC;QACD,kEAAkE;QAClE,wCAAwC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5B,SAAS,GAAG,IAAI,CAAC;QACjB,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,IAAI;YACjB,QAAQ;YACR,cAAc,EAAE,KAAK;SACrB,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,gBAAgB,CACzB,YAAY,OAAO,CAAC,GAAG,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,GAAG,CAClJ,CAAC;IACH,CAAC;YAAS,CAAC;QACV,kEAAkE;QAClE,IAAI,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI;YAC9C,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3E,CAAC;AACF,CAAC"}

package/dist/systemd.d.ts

@@ -0,0 +1,30 @@
+import type { InstallScope } from './args.js';
+export interface SystemdOptions {
+    readonly scope: InstallScope;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+}
+export interface CommandResult {
+    readonly code: number;
+    readonly stdout: string;
+    readonly stderr: string;
+}
+export declare function createSystemd(options: SystemdOptions): {
+    daemonReload: () => Promise<CommandResult>;
+    enableNow: () => Promise<CommandResult>;
+    enable: () => Promise<CommandResult>;
+    disable: () => Promise<CommandResult>;
+    start: () => Promise<CommandResult>;
+    stop: () => Promise<CommandResult>;
+    resetFailed: () => Promise<CommandResult>;
+    isActive(): Promise<boolean>;
+    isEnabled(): Promise<boolean>;
+    state(): Promise<string>;
+    /** The last few journal lines, for a failure the operator has to read. */
+    journal(lines?: number): Promise<string>;
+    /**
+     * A user unit stops when its owner logs out unless lingering is on, so a
+     * user-scope server would die the moment the operator disconnected.
+     */
+    enableLinger(user: string): Promise<CommandResult>;
+};
+export type Systemd = ReturnType<typeof createSystemd>;

package/dist/systemd.js

@@ -0,0 +1,86 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { UNIT_NAME } from './layout.js';
+/**
+ * A thin wrapper over `systemctl`, `loginctl`, and `journalctl`.
+ *
+ * Nothing here reimplements systemd or talks to its bus: the CLI shells out to
+ * the tools already on the box. That is also what makes the rest of the CLI
+ * testable off a systemd host, because a stub earlier on PATH answers instead.
+ */
+const execFileAsync = promisify(execFile);
+const TIMEOUT_MS = 120_000;
+function scopeArguments(scope) {
+    return scope === 'user' ? ['--user'] : [];
+}
+async function run(command, args, options) {
+    try {
+        const { stdout, stderr } = await execFileAsync(command, [...args], {
+            timeout: TIMEOUT_MS,
+            maxBuffer: 4 * 1024 * 1024,
+            ...(options.env === undefined
+                ? {}
+                : { env: options.env }),
+        });
+        return Object.freeze({ code: 0, stdout, stderr });
+    }
+    catch (error) {
+        const failure = error;
+        // `systemctl is-active` exits non-zero to answer the question, so the
+        // exit status is returned rather than thrown for every caller to handle.
+        return Object.freeze({
+            code: typeof failure.code === 'number' ? failure.code : 1,
+            stdout: failure.stdout ?? '',
+            stderr: failure.stderr ?? failure.message ?? '',
+        });
+    }
+}
+export function createSystemd(options) {
+    const systemctl = (args) => run('systemctl', [...scopeArguments(options.scope), ...args], options);
+    const expect = async (args) => {
+        const result = await systemctl(args);
+        if (result.code !== 0) {
+            throw new Error(`systemctl ${args.join(' ')} failed: ${(result.stderr || result.stdout).trim()}`);
+        }
+        return result;
+    };
+    return {
+        daemonReload: () => expect(['daemon-reload']),
+        enableNow: () => expect(['enable', '--now', UNIT_NAME]),
+        enable: () => expect(['enable', UNIT_NAME]),
+        disable: () => systemctl(['disable', UNIT_NAME]),
+        start: () => expect(['start', UNIT_NAME]),
+        stop: () => expect(['stop', UNIT_NAME]),
+        resetFailed: () => systemctl(['reset-failed', UNIT_NAME]),
+        async isActive() {
+            return (await systemctl(['is-active', UNIT_NAME])).code === 0;
+        },
+        async isEnabled() {
+            return (await systemctl(['is-enabled', UNIT_NAME])).code === 0;
+        },
+        async state() {
+            const result = await systemctl(['is-active', UNIT_NAME]);
+            return (result.stdout || result.stderr).trim() || 'unknown';
+        },
+        /** The last few journal lines, for a failure the operator has to read. */
+        async journal(lines = 20) {
+            const result = await run('journalctl', [
+                ...scopeArguments(options.scope),
+                '-u',
+                UNIT_NAME,
+                '--no-pager',
+                '-n',
+                String(lines),
+            ], options);
+            return (result.stdout || result.stderr).trim();
+        },
+        /**
+         * A user unit stops when its owner logs out unless lingering is on, so a
+         * user-scope server would die the moment the operator disconnected.
+         */
+        async enableLinger(user) {
+            return run('loginctl', ['enable-linger', user], options);
+        },
+    };
+}
+//# sourceMappingURL=systemd.js.map

package/dist/systemd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemd.js","sourceRoot":"","sources":["../src/systemd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;GAMG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,UAAU,GAAG,OAAO,CAAC;AAa3B,SAAS,cAAc,CAAC,KAAmB;IAC1C,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,GAAG,CACjB,OAAe,EACf,IAAuB,EACvB,OAAuB;IAEvB,IAAI,CAAC;QACJ,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YAClE,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;YAC1B,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS;gBAC5B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAwB,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAKf,CAAC;QACF,sEAAsE;QACtE,yEAAyE;QACzE,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,EAAE;SAC/C,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAuB;IACpD,MAAM,SAAS,GAAG,CAAC,IAAuB,EAAE,EAAE,CAC7C,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,KAAK,EAAE,IAAuB,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACd,aAAa,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAChF,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC;IACF,OAAO;QACN,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7C,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QACzD,KAAK,CAAC,QAAQ;YACb,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,SAAS;YACd,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,CAAC,KAAK;YACV,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAC7D,CAAC;QACD,0EAA0E;QAC1E,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE;YACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CACvB,YAAY,EACZ;gBACC,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;gBAChC,IAAI;gBACJ,SAAS;gBACT,YAAY;gBACZ,IAAI;gBACJ,MAAM,CAAC,KAAK,CAAC;aACb,EACD,OAAO,CACP,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QACD;;;WAGG;QACH,KAAK,CAAC,YAAY,CAAC,IAAY;YAC9B,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/unit.d.ts

@@ -0,0 +1,37 @@
+import type { InstallLayout } from './layout.js';
+/**
+ * The unit and environment file the installer writes.
+ *
+ * Both are generated from these templates on every install and upgrade, with
+ * one exception: the server id is written once and never rewritten, because it
+ * is the identity paired devices know the machine by. Rewriting it on upgrade
+ * would silently unpair every device.
+ *
+ * Neither file ever carries a vault passphrase, a device key, or pairing
+ * material. Those live in the data root, which is the trust boundary; a unit
+ * file is world-readable on most systems and an environment file is visible to
+ * anything that can read the service's configuration.
+ */
+export interface ServiceConfiguration {
+    readonly serverId: string;
+    readonly dataRoot: string;
+    readonly projectRoot: string;
+    readonly port: number;
+    readonly healthPort: number;
+    readonly expose: string;
+    readonly hostedDomain: string;
+    readonly directOrigin?: string;
+    readonly uiBundle: string;
+}
+export declare function renderEnvironmentFile(configuration: ServiceConfiguration): string;
+/**
+ * Parse an existing environment file so a reinstall can keep the values it is
+ * not being asked to change — the server id above all.
+ */
+export declare function parseEnvironmentFile(contents: string): Readonly<Record<string, string>>;
+export interface UnitConfiguration {
+    readonly layout: InstallLayout;
+    readonly runAs: string;
+    readonly workingDirectory: string;
+}
+export declare function renderUnit(configuration: UnitConfiguration): string;

package/dist/unit.js

@@ -0,0 +1,74 @@
+export function renderEnvironmentFile(configuration) {
+    const lines = [
+        '# Written by `terminay daemon install`. Edit and restart the service to change it.',
+        '# No passphrase, device key, or pairing token belongs in this file.',
+        `TERMINAY_SERVER_ID=${configuration.serverId}`,
+        `TERMINAY_DATA_ROOT=${configuration.dataRoot}`,
+        `TERMINAY_PROJECT_ROOT=${configuration.projectRoot}`,
+        'TERMINAY_HTTP_HOST=0.0.0.0',
+        `TERMINAY_HTTP_PORT=${configuration.port}`,
+        // Health and readiness stay on loopback: they are an operator surface,
+        // not part of what the server exposes to devices.
+        'TERMINAY_HEALTH_HOST=127.0.0.1',
+        `TERMINAY_HEALTH_PORT=${configuration.healthPort}`,
+        `TERMINAY_EXPOSE=${configuration.expose}`,
+        `TERMINAY_HOSTED_DOMAIN=${configuration.hostedDomain}`,
+        ...(configuration.directOrigin === undefined
+            ? []
+            : [`TERMINAY_DIRECT_ORIGIN=${configuration.directOrigin}`]),
+        'TERMINAY_AGENT_INTEGRATION=enabled',
+        'TERMINAY_AI_PROVIDERS=disabled',
+        'TERMINAY_LOG_SINK=journal',
+        `TERMINAY_UI_BUNDLE=${configuration.uiBundle}`,
+    ];
+    return `${lines.join('\n')}\n`;
+}
+/**
+ * Parse an existing environment file so a reinstall can keep the values it is
+ * not being asked to change — the server id above all.
+ */
+export function parseEnvironmentFile(contents) {
+    const values = {};
+    for (const line of contents.split('\n')) {
+        const trimmed = line.trim();
+        if (trimmed.length === 0 || trimmed.startsWith('#'))
+            continue;
+        const equals = trimmed.indexOf('=');
+        if (equals <= 0)
+            continue;
+        values[trimmed.slice(0, equals)] = trimmed.slice(equals + 1);
+    }
+    return Object.freeze(values);
+}
+export function renderUnit(configuration) {
+    const { layout } = configuration;
+    // System scope names the account explicitly; a user unit already runs as
+    // its owner, and User=/Group= are rejected there.
+    const account = layout.scope === 'system'
+        ? [`User=${configuration.runAs}`, `Group=${configuration.runAs}`]
+        : [];
+    return `[Unit]
+Description=Terminay Server
+Documentation=https://terminay.com/docs/installation
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+${account.join('\n')}${account.length > 0 ? '\n' : ''}WorkingDirectory=${configuration.workingDirectory}
+EnvironmentFile=${layout.environmentFile}
+ExecStart=${layout.currentLink}/bin/terminay-server
+Restart=on-failure
+RestartSec=5s
+KillSignal=SIGTERM
+TimeoutStopSec=15s
+NoNewPrivileges=true
+PrivateTmp=true
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=${layout.scope === 'system' ? 'multi-user.target' : 'default.target'}
+`;
+}
+//# sourceMappingURL=unit.js.map

package/dist/unit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unit.js","sourceRoot":"","sources":["../src/unit.ts"],"names":[],"mappings":"AA4BA,MAAM,UAAU,qBAAqB,CACpC,aAAmC;IAEnC,MAAM,KAAK,GAAG;QACb,oFAAoF;QACpF,qEAAqE;QACrE,sBAAsB,aAAa,CAAC,QAAQ,EAAE;QAC9C,sBAAsB,aAAa,CAAC,QAAQ,EAAE;QAC9C,yBAAyB,aAAa,CAAC,WAAW,EAAE;QACpD,4BAA4B;QAC5B,sBAAsB,aAAa,CAAC,IAAI,EAAE;QAC1C,uEAAuE;QACvE,kDAAkD;QAClD,gCAAgC;QAChC,wBAAwB,aAAa,CAAC,UAAU,EAAE;QAClD,mBAAmB,aAAa,CAAC,MAAM,EAAE;QACzC,0BAA0B,aAAa,CAAC,YAAY,EAAE;QACtD,GAAG,CAAC,aAAa,CAAC,YAAY,KAAK,SAAS;YAC3C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,0BAA0B,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5D,oCAAoC;QACpC,gCAAgC;QAChC,2BAA2B;QAC3B,sBAAsB,aAAa,CAAC,QAAQ,EAAE;KAC9C,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CACnC,QAAgB;IAEhB,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,IAAI,CAAC;YAAE,SAAS;QAC1B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAQD,MAAM,UAAU,UAAU,CAAC,aAAgC;IAC1D,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;IACjC,yEAAyE;IACzE,kDAAkD;IAClD,MAAM,OAAO,GACZ,MAAM,CAAC,KAAK,KAAK,QAAQ;QACxB,CAAC,CAAC,CAAC,QAAQ,aAAa,CAAC,KAAK,EAAE,EAAE,SAAS,aAAa,CAAC,KAAK,EAAE,CAAC;QACjE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;;;;;;;;EAQN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,oBAAoB,aAAa,CAAC,gBAAgB;kBACrF,MAAM,CAAC,eAAe;YAC5B,MAAM,CAAC,WAAW;;;;;;;;;;;WAWnB,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB;CAC5E,CAAC;AACF,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The boundary this crosses is "release pipeline → operator's machine", and
+ * the embedded key is the only thing that makes the download trustworthy. So
+ * there is no skip flag and no environment override: if verification cannot
+ * pass, the install does not happen. A release that cannot be signed is a
+ * release to block, not a check to relax.
+ */
+export declare const RELEASE_PUBLIC_KEY_PEM = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAYC52lwOqFefLXCpv9GcplfMj8/+QDjA1Rh95vEZlLcg=\n-----END PUBLIC KEY-----\n";
+export declare class VerificationError extends Error {
+}
+/** The sidecar is `<sha256>  <filename>`, as `release-checksum.mjs` writes it. */
+export declare function parseChecksumSidecar(contents: string): string;
+export declare function releasePublicKey(pem?: string): import("crypto").KeyObject;
+export interface VerifyArchiveInput {
+    readonly archivePath: string;
+    readonly sidecar: string;
+    readonly signature: Buffer;
+    /** Present when the archive was already hashed while downloading. */
+    readonly digest?: string;
+    readonly publicKeyPem?: string;
+}
+export declare function verifyArchive(input: VerifyArchiveInput): Promise<{
+    readonly sha256: string;
+}>;

package/dist/verify.js

@@ -0,0 +1,46 @@
+import { createPublicKey, verify } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { hashFile } from './download.js';
+/**
+ * The boundary this crosses is "release pipeline → operator's machine", and
+ * the embedded key is the only thing that makes the download trustworthy. So
+ * there is no skip flag and no environment override: if verification cannot
+ * pass, the install does not happen. A release that cannot be signed is a
+ * release to block, not a check to relax.
+ */
+export const RELEASE_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAYC52lwOqFefLXCpv9GcplfMj8/+QDjA1Rh95vEZlLcg=
+-----END PUBLIC KEY-----
+`;
+export class VerificationError extends Error {
+}
+/** The sidecar is `<sha256>  <filename>`, as `release-checksum.mjs` writes it. */
+export function parseChecksumSidecar(contents) {
+    const match = /^([0-9a-f]{64})\s/u.exec(contents.trim());
+    if (match?.[1] === undefined)
+        throw new VerificationError('the published checksum sidecar is not readable');
+    return match[1];
+}
+export function releasePublicKey(pem = RELEASE_PUBLIC_KEY_PEM) {
+    const key = createPublicKey(pem);
+    if (key.asymmetricKeyType !== 'ed25519')
+        throw new VerificationError('the embedded release key is not an Ed25519 key');
+    return key;
+}
+export async function verifyArchive(input) {
+    const expected = parseChecksumSidecar(input.sidecar);
+    const actual = input.digest ?? (await hashFile(input.archivePath));
+    if (actual !== expected) {
+        throw new VerificationError(`the downloaded archive does not match its published checksum (expected ${expected}, got ${actual})`);
+    }
+    // Signing the archive bytes, not the sidecar, is what stops an attacker who
+    // can replace both the asset and its checksum. Ed25519 signs a whole
+    // message, so the archive is read in full here, exactly as the release
+    // pipeline reads it when signing.
+    const payload = await readFile(input.archivePath);
+    if (!verify(null, payload, releasePublicKey(input.publicKeyPem), input.signature)) {
+        throw new VerificationError('the downloaded archive is not signed by the Terminay release key');
+    }
+    return Object.freeze({ sha256: actual });
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;CAGrC,CAAC;AAEF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACpD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;QAC3B,MAAM,IAAI,iBAAiB,CAC1B,gDAAgD,CAChD,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc,sBAAsB;IACpE,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;QACtC,MAAM,IAAI,iBAAiB,CAC1B,gDAAgD,CAChD,CAAC;IACH,OAAO,GAAG,CAAC;AACZ,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,KAAyB;IAEzB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAiB,CAC1B,0EAA0E,QAAQ,SAAS,MAAM,GAAG,CACpG,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,qEAAqE;IACrE,uEAAuE;IACvE,kCAAkC;IAClC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClD,IACC,CAAC,MAAM,CACN,IAAI,EACJ,OAAO,EACP,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,EACpC,KAAK,CAAC,SAAS,CACf,EACA,CAAC;QACF,MAAM,IAAI,iBAAiB,CAC1B,kEAAkE,CAClE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "terminay",
+  "version": "4.2.0",
+  "type": "module",
+  "description": "Installs and controls a headless Terminay Server on Linux.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/markwylde/terminay.git",
+    "directory": "apps/terminay-cli"
+  },
+  "homepage": "https://terminay.com",
+  "keywords": [
+    "terminay",
+    "terminal",
+    "daemon",
+    "systemd",
+    "cli"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "bin": {
+    "terminay": "dist/cli.js"
+  },
+  "deterministicBuild": true,
+  "dependencies": {
+    "qrcode": "1.5.4"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "test:ci": "node --test test/*.test.mjs"
+  },
+  "devDependencies": {
+    "selfsigned": "^5.5.0"
+  }
+}