init

2026-07-06 16:21:06 +08:00
commit bb9f685221
41 changed files with 4333 additions and 0 deletions
@@ -0,0 +1,134 @@
+// Package daemon implements the privileged daemon process that owns
+// the WebSocket transport, TUN device, and routing. It receives
+// commands from the GUI over an IPC unix socket and broadcasts
+// state/stats events back.
+//
+// The daemon is launched (as root) by the GUI via osascript. It holds
+// no persistent state — all configuration is provided by the GUI in
+// the Start command.
+package daemon
+
+import (
+	"context"
+	"fmt"
+	"net"
+	"os"
+	"os/signal"
+	"syscall"
+
+	"lmvpn/internal/ipc"
+	"lmvpn/internal/log"
+	"lmvpn/internal/model"
+	"lmvpn/internal/paths"
+	"lmvpn/internal/stats"
+	"lmvpn/internal/vpn"
+)
+
+// Run starts the daemon and blocks until Shutdown is received or a
+// signal (SIGINT/SIGTERM) is delivered.
+func Run() error {
+	log.Init(log.RoleDaemon, paths.DaemonLogFile())
+	log.L().Info("lmvpn daemon starting")
+
+	server, err := ipc.NewServer()
+	if err != nil {
+		return fmt.Errorf("ipc server: %w", err)
+	}
+	defer server.Close()
+
+	d := &daemon{server: server}
+
+	// Signal handling for clean shutdown.
+	sigCh := make(chan os.Signal, 1)
+	signal.Notify(sigCh, syscall.SIGINT, syscall.SIGTERM)
+	go func() {
+		<-sigCh
+		log.L().Info("daemon received signal, shutting down")
+		d.stopSession()
+		server.Close()
+		os.Exit(0)
+	}()
+
+	log.L().Info("daemon listening", "socket", paths.IPCSocketPath())
+	return server.Accept(d.handle)
+}
+
+type daemon struct {
+	server  *ipc.Server
+	session *vpn.SessionManager
+	cancel  context.CancelFunc
+}
+
+func (d *daemon) handle(conn net.Conn, req ipc.Request) {
+	switch req.Cmd {
+	case ipc.CmdStart:
+		d.startSession(conn, req)
+	case ipc.CmdStop:
+		d.stopSession()
+		_ = ipc.WriteOK(conn)
+	case ipc.CmdShutdown:
+		d.stopSession()
+		_ = ipc.WriteOK(conn)
+		d.server.Close()
+		os.Exit(0)
+	case ipc.CmdStats:
+		if d.session != nil {
+			snap := d.session.Stats().Snapshot()
+			d.server.Broadcast(ipc.Event{Event: ipc.EvStats, Stats: &snap})
+		}
+		_ = ipc.WriteOK(conn)
+	default:
+		_ = ipc.WriteErr(conn, "unknown command: "+req.Cmd)
+	}
+}
+
+func (d *daemon) startSession(conn net.Conn, req ipc.Request) {
+	if req.Config == nil {
+		_ = ipc.WriteErr(conn, "missing config")
+		return
+	}
+	if d.session != nil {
+		d.stopSession()
+	}
+
+	cfg := vpn.SessionConfig{
+		ServerURL:   req.Config.ServerURL,
+		Username:    req.Config.Username,
+		Password:    req.Config.Password,
+		Token:       req.Config.Token,
+		AuthMode:    model.AuthMode(req.Config.AuthMode),
+		RoutingMode: ipc.RoutingModeFromIPC(req.Config.RoutingMode),
+		CustomCIDRs: req.Config.CustomCIDRs,
+		MTUOverride: req.Config.MTUOverride,
+	}
+
+	ctx, cancel := context.WithCancel(context.Background())
+	d.cancel = cancel
+	d.session = vpn.New(
+		func(s stats.State) {
+			d.server.Broadcast(ipc.Event{Event: ipc.EvState, State: string(s)})
+		},
+		func(snap stats.Snapshot) {
+			s := snap
+			d.server.Broadcast(ipc.Event{Event: ipc.EvStats, Stats: &s})
+		},
+	)
+
+	if err := d.session.Connect(ctx, cfg); err != nil {
+		_ = ipc.WriteErr(conn, "connect: "+err.Error())
+		d.session = nil
+		return
+	}
+	_ = ipc.WriteOK(conn)
+}
+
+func (d *daemon) stopSession() {
+	if d.cancel != nil {
+		d.cancel()
+		d.cancel = nil
+	}
+	if d.session != nil {
+		d.session.Disconnect()
+		d.session = nil
+	}
+}