Garmr/radiance daemon refactor and clean-up

.github/scripts/linux_config_url_smoke.sh

@@ -2,23 +2,25 @@
 set -euo pipefail
 
 if [[ -z "${JOIN_SERVER_CONFIG_URLS:-}" ]]; then
-  echo "Skipping Linux config URL smoke test (JOIN_SERVER_CONFIG_URLS is not set)."
-  exit 0
+	echo "Skipping Linux config URL smoke test (JOIN_SERVER_CONFIG_URLS is not set)."
+	exit 0
 fi
 
 config_urls_file="$(mktemp)"
 cleanup() {
-  rm -f "$config_urls_file"
+	rm -f "$config_urls_file"
 }
 trap cleanup EXIT
 
 set +x
-printf '%s' "$JOIN_SERVER_CONFIG_URLS" > "$config_urls_file"
+printf '%s' "$JOIN_SERVER_CONFIG_URLS" >"$config_urls_file"
 chmod 600 "$config_urls_file"
 set -x
 
 config_server_base="${JOIN_SERVER_CONFIG_SERVER_NAME:-ci-config-url-smoke-${GITHUB_RUN_ID:-local}-${GITHUB_RUN_ATTEMPT:-1}}"
 config_skip_cert="${JOIN_SERVER_CONFIG_SKIP_CERT_VERIFICATION:-true}"
 
-sg lantern -c "env PATH=$PATH HOME=$HOME JOIN_SERVER_CONFIG_URLS_FILE=\"$config_urls_file\" JOIN_SERVER_CONFIG_SERVER_NAME=\"${config_server_base}-api\" JOIN_SERVER_CONFIG_SKIP_CERT_VERIFICATION=\"$config_skip_cert\" xvfb-run -a flutter test integration_test/vpn/linux_config_url_api_smoke_test.dart -d linux --dart-define=DISABLE_SYSTEM_TRAY=true"
-sg lantern -c "env PATH=$PATH HOME=$HOME JOIN_SERVER_CONFIG_URLS_FILE=\"$config_urls_file\" JOIN_SERVER_CONFIG_SERVER_NAME=\"${config_server_base}-ui\" JOIN_SERVER_CONFIG_SKIP_CERT_VERIFICATION=\"$config_skip_cert\" xvfb-run -a flutter test integration_test/vpn/linux_config_url_smoke_test.dart -d linux --dart-define=DISABLE_SYSTEM_TRAY=true"
+JOIN_SERVER_CONFIG_URLS_FILE="$config_urls_file" JOIN_SERVER_CONFIG_SERVER_NAME="${config_server_base}-api" JOIN_SERVER_CONFIG_SKIP_CERT_VERIFICATION="$config_skip_cert" \
+	xvfb-run -a flutter test integration_test/vpn/linux_config_url_api_smoke_test.dart -d linux --dart-define=DISABLE_SYSTEM_TRAY=true
+JOIN_SERVER_CONFIG_URLS_FILE="$config_urls_file" JOIN_SERVER_CONFIG_SERVER_NAME="${config_server_base}-ui" JOIN_SERVER_CONFIG_SKIP_CERT_VERIFICATION="$config_skip_cert" \
+	xvfb-run -a flutter test integration_test/vpn/linux_config_url_smoke_test.dart -d linux --dart-define=DISABLE_SYSTEM_TRAY=true

.github/scripts/windows_connect_smoke.ps1

@@ -1,8 +1,7 @@
 param(
   [string]$ServiceName = "LanternSvc",
-  [string]$ServiceExe = "build/windows/x64/runner/Release/lanternsvc.exe",
+  [string]$ServiceExe = "build/windows/x64/runner/Release/lanternd.exe",
   [string]$InstallerPath = "",
-  [string]$TokenPath = "C:\ProgramData\Lantern\ipc-token",
   [string]$TestPath = "integration_test/vpn/windows_connect_smoke_test.dart",
   [string]$ConfigUrlApiTestPath = "integration_test/vpn/windows_config_url_api_smoke_test.dart",
   [string]$ConfigUrlUiTestPath = "integration_test/vpn/windows_config_url_smoke_test.dart",
@@ -152,33 +151,20 @@ function Wait-ServiceRunning {
   }
 
   sc.exe query $Name
-  throw "Windows service did not reach Running state"
-}
-
-function Wait-TokenFile {
-  param(
-    [string]$Path,
-    [int]$TimeoutSeconds
-  )
 
-  for ($i = 0; $i -lt $TimeoutSeconds; $i++) {
-    if (Test-Path $Path) {
-      try {
-        $token = (Get-Content -Path $Path -Raw -ErrorAction Stop).Trim()
-      } catch {
-        $token = ""
-      }
-      if (-not [string]::IsNullOrWhiteSpace($token)) {
-        Write-Step "IPC token detected at $Path with content"
-        return
-      }
-    }
-    if ($i -gt 0 -and ($i % 5) -eq 0) {
-      Write-Step "Waiting for non-empty IPC token at $Path ($i/$TimeoutSeconds s)"
-    }
-    Start-Sleep -Seconds 1
+  # Dump diagnostics so we can tell whether the daemon binary was installed and why the service wasn't created.
+  $lanterndPath = "C:\Program Files\Lantern\lanternd.exe"
+  if (Test-Path $lanterndPath) {
+    Write-Step "lanternd.exe exists at $lanterndPath"
+    & $lanterndPath version 2>&1 | ForEach-Object { Write-Step "  version: $_" }
+  } else {
+    Write-Step "lanternd.exe NOT found at $lanterndPath"
+    Write-Step "Contents of C:\Program Files\Lantern\:"
+    Get-ChildItem "C:\Program Files\Lantern\" -ErrorAction SilentlyContinue |
+      ForEach-Object { Write-Step "  $($_.Name)" }
   }
-  throw "IPC token file missing or empty at $Path"
+
+  throw "Windows service did not reach Running state"
 }
 
 function Install-FromInstaller {
@@ -199,6 +185,16 @@ function Install-FromInstaller {
     -PulseSeconds $HeartbeatSeconds `
     -Description "Running installer"
 
+  # After the installer runs, try running 'lanternd install' manually if the service
+  # wasn't created. This helps diagnose whether the issue is in the installer or the
+  # daemon itself.
+  $lanterndPath = "C:\Program Files\Lantern\lanternd.exe"
+  $svc = Get-Service -Name $Name -ErrorAction SilentlyContinue
+  if (-not $svc -and (Test-Path $lanterndPath)) {
+    Write-Step "Service not found after installer; running lanternd install manually for diagnostics"
+    & $lanterndPath install 2>&1 | ForEach-Object { Write-Step "  $_" }
+  }
+
   Write-Step "Waiting for Windows service after installer"
   Wait-ServiceRunning -Name $Name -TimeoutSeconds $TimeoutSeconds
 }
@@ -243,24 +239,11 @@ try {
     Write-Step "Smoke setup mode: direct service binary"
     $resolvedServiceExe = (Resolve-Path $ServiceExe).Path
     Remove-ServiceIfPresent -Name $ServiceName
-    Invoke-ScCommand `
-      -ArgumentList @(
-        "create",
-        $ServiceName,
-        "binPath= `"$resolvedServiceExe`"",
-        "start= demand",
-        "DisplayName= Lantern Service (CI)"
-      ) `
-      -Description "Creating Windows service from $resolvedServiceExe"
-    Invoke-ScCommand `
-      -ArgumentList @("start", $ServiceName) `
-      -AllowedExitCodes @(0, 1056) `
-      -Description "Starting Windows service $ServiceName"
+    Write-Step "Installing lanternd service from $resolvedServiceExe"
+    & $resolvedServiceExe install
     Wait-ServiceRunning -Name $ServiceName -TimeoutSeconds $WaitSeconds
   }
 
-  Wait-TokenFile -Path $TokenPath -TimeoutSeconds $WaitSeconds
-
   $flutterArgs = @(
     "test",
     $TestPath,
@@ -296,8 +279,7 @@ try {
       $env:JOIN_SERVER_CONFIG_SKIP_CERT_VERIFICATION = "true"
     }
 
-    # Rollout phase: run API smoke and UI smoke with unique names to avoid collisions.
-    $env:JOIN_SERVER_CONFIG_SERVER_NAME = "$configServerBaseName-api"
+    # API smoke: server tag comes from the URL, no server name needed.
     $configApiArgs = @(
       "test",
       $ConfigUrlApiTestPath,
@@ -312,6 +294,7 @@ try {
       throw "Windows config URL API smoke test failed with exit code $LASTEXITCODE"
     }
 
+    # UI smoke: server name is typed into the join form.
     $env:JOIN_SERVER_CONFIG_SERVER_NAME = "$configServerBaseName-ui"
     $configUiArgs = @(
       "test",
@@ -334,7 +317,12 @@ finally {
     if ($UseInstaller) {
       Uninstall-FromInstalledService -Name $ServiceName
     } else {
-      Remove-ServiceIfPresent -Name $ServiceName
+      $resolvedServiceExe = (Resolve-Path $ServiceExe -ErrorAction SilentlyContinue).Path
+      if ($resolvedServiceExe) {
+        & $resolvedServiceExe uninstall
+      } else {
+        Remove-ServiceIfPresent -Name $ServiceName
+      }
     }
     Write-Step "Cleanup finished"
   } catch {

.github/workflows/build-android.yml

@@ -44,7 +44,6 @@ jobs:
         with:
           path: |
             ~/.pub-cache
-            .dart_tool
           key: ${{ runner.os }}-flutter-${{ hashFiles('**/pubspec.lock') }}
           restore-keys: |
             ${{ runner.os }}-flutter-
@@ -101,7 +100,6 @@ jobs:
         with:
           path: |
             ~/.pub-cache
-            .dart_tool
           key: ${{ runner.os }}-dart-${{ hashFiles('**/pubspec.lock') }}
           restore-keys: |
             ${{ runner.os }}-dart-

.github/workflows/build-ios.yml

@@ -52,7 +52,7 @@ jobs:
         continue-on-error: true
         with:
           path: |
-            .dart_tool
+            ~/.pub-cache
           key: ${{ runner.os }}-flutter-${{ hashFiles('**/pubspec.lock') }}
           restore-keys: |
             ${{ runner.os }}-flutter-    

.github/workflows/build-linux.yml

@@ -53,7 +53,6 @@ jobs:
         with:
           path: |
             ~/.pub-cache
-            .dart_tool
           key: ${{ runner.os }}-flutter-${{ hashFiles('**/pubspec.lock') }}
           restore-keys: |
             ${{ runner.os }}-flutter-
@@ -192,8 +191,6 @@ jobs:
             exit 1
           fi
 
-          sudo usermod -aG lantern "$USER" || true
-
           systemctl is-active --quiet lanternd.service
           test -S /run/lantern/lanternd.sock
           sudo stat -c "%a %U %G %n" /run/lantern/lanternd.sock
@@ -203,7 +200,7 @@ jobs:
         run: |
           set -euxo pipefail
           code=0
-          sg lantern -c "env HOME=$HOME PATH=$PATH xvfb-run -a timeout 15s /usr/bin/lantern >/tmp/lantern-installed-smoke.log 2>&1" || code=$?
+          xvfb-run -a timeout 15s /usr/bin/lantern >/tmp/lantern-installed-smoke.log 2>&1 || code=$?
           if [[ "$code" -ne 124 ]]; then
             cat /tmp/lantern-installed-smoke.log || true
             echo "Installed /usr/bin/lantern did not stay up under xvfb"
@@ -226,7 +223,7 @@ jobs:
             ENABLE_IP_CHECK=true
           fi
           set +e
-          sg lantern -c "env PATH=$PATH HOME=$HOME timeout --signal=TERM --kill-after=30s 8m xvfb-run -a flutter test integration_test/vpn/linux_connect_smoke_test.dart -d linux --reporter=expanded --dart-define=DISABLE_SYSTEM_TRAY=true --dart-define=ENABLE_IP_CHECK=${ENABLE_IP_CHECK}"
+          timeout --signal=TERM --kill-after=30s 8m xvfb-run -a flutter test integration_test/vpn/linux_connect_smoke_test.dart -d linux --reporter=expanded --dart-define=DISABLE_SYSTEM_TRAY=true --dart-define=ENABLE_IP_CHECK=${ENABLE_IP_CHECK}
           SMOKE_EXIT=$?
           set -e
 
@@ -241,14 +238,14 @@ jobs:
             exit "$SMOKE_EXIT"
           fi
 
-          if ! grep -Eq 'IPC request.*path=/service/start' /tmp/lanternd-journal-ui-smoke.log; then
-            echo "Missing /service/start IPC request in lanternd journal"
+          if ! grep -Eq 'IPC request.*path=/vpn/connect' /tmp/lanternd-journal-ui-smoke.log; then
+            echo "Missing /vpn/connect IPC request in lanternd journal"
             tail -n 200 /tmp/lanternd-journal-ui-smoke.log || true
             exit 1
           fi
 
-          if ! grep -Eq 'IPC request.*path=/service/stop' /tmp/lanternd-journal-ui-smoke.log; then
-            echo "Missing /service/stop IPC request in lanternd journal"
+          if ! grep -Eq 'IPC request.*path=/vpn/disconnect' /tmp/lanternd-journal-ui-smoke.log; then
+            echo "Missing /vpn/disconnect IPC request in lanternd journal"
             tail -n 200 /tmp/lanternd-journal-ui-smoke.log || true
             exit 1
           fi
@@ -268,3 +265,10 @@ jobs:
           name: lantern-installer-deb-${{ matrix.arch }}
           path: ${{ env.FULL_INSTALLER_NAME }}.deb
           retention-days: 2
+
+      - name: Upload Linux build (Arch)
+        uses: actions/upload-artifact@v4
+        with:
+          name: lantern-installer-pkg-${{ matrix.arch }}
+          path: ${{ env.FULL_INSTALLER_NAME }}.pkg.tar.zst
+          retention-days: 2

.github/workflows/build-macos.yml

@@ -46,10 +46,9 @@ jobs:
         with:
           path: |
             ~/.pub-cache
-            .dart_tool
           key: ${{ runner.os }}-flutter-${{ hashFiles('**/pubspec.lock') }}
           restore-keys: |
-            ${{ runner.os }}-flutter-    
+            ${{ runner.os }}-flutter-
 
       - name: Cache macOS CocoaPods
         uses: actions/cache@v4

.github/workflows/build-windows-service.yml

@@ -28,12 +28,12 @@ jobs:
       - name: Build Windows service
         shell: pwsh
         run: |
-          make windows-service-build
-          Move-Item "bin\windows-amd64\lanternsvc.exe" "lanternsvc.exe"
+          make lanternd-windows-amd64
+          Move-Item "bin\windows-amd64\lanternd.exe" "lanternd.exe"
 
       - name: Upload Windows service executable
         uses: actions/upload-artifact@v4
         with:
           name: lantern-service-exe
-          path: "lanternsvc.exe"
+          path: "lanternd.exe"
           retention-days: 2

.github/workflows/build-windows.yml

@@ -55,7 +55,6 @@ jobs:
         with:
           path: |
             ~/.pub-cache
-            .dart_tool
           key: ${{ runner.os }}-flutter-${{ hashFiles('**/pubspec.lock') }}
           restore-keys: |
             ${{ runner.os }}-flutter-
@@ -135,7 +134,6 @@ jobs:
 
           # Third-party binaries that are already signed by their vendors
           $thirdParty = @(
-            'wintun.dll',           # WinTun
             'flutter_windows.dll',  # Google/Flutter
             'WebView2Loader.dll',   # Microsoft
             'WinSparkle.dll'        # WinSparkle

.github/workflows/release.yml

@@ -388,13 +388,10 @@ jobs:
         build-android,
         build-ios,
       ]
+    # Run if at least one platform build succeeded. Individual platform failures
+    # (e.g., Linux arm64) should not block uploading successful builds.
     if: |
       !cancelled() &&
-      (needs.build-macos.result == 'success' || needs.build-macos.result == 'skipped') &&
-      (needs.build-windows.result == 'success' || needs.build-windows.result == 'skipped') &&
-      (needs.build-linux.result == 'success' || needs.build-linux.result == 'skipped') &&
-      (needs.build-android.result == 'success' || needs.build-android.result == 'skipped') &&
-      (needs.build-ios.result == 'success' || needs.build-ios.result == 'skipped') &&
       (needs.build-macos.result == 'success' || needs.build-windows.result == 'success' ||
        needs.build-linux.result == 'success' || needs.build-android.result == 'success' ||
        needs.build-ios.result == 'success')
@@ -470,14 +467,10 @@ jobs:
         build-android,
         build-ios,
       ]
+    # Run if at least one platform build succeeded.
     if: |
       !cancelled() &&
       needs.release-create.result == 'success' &&
-      (needs.build-macos.result == 'success' || needs.build-macos.result == 'skipped') &&
-      (needs.build-windows.result == 'success' || needs.build-windows.result == 'skipped') &&
-      (needs.build-linux.result == 'success' || needs.build-linux.result == 'skipped') &&
-      (needs.build-android.result == 'success' || needs.build-android.result == 'skipped') &&
-      (needs.build-ios.result == 'success' || needs.build-ios.result == 'skipped') &&
       (needs.build-macos.result == 'success' || needs.build-windows.result == 'success' ||
        needs.build-linux.result == 'success' || needs.build-android.result == 'success' ||
        needs.build-ios.result == 'success')
@@ -565,6 +558,9 @@ jobs:
           upload_if_exists "lantern-installer-rpm-arm64/${FULL_NAME}-arm64.rpm"
           upload_if_exists "lantern-installer-deb/${FULL_NAME}.deb"
           upload_if_exists "lantern-installer-rpm/${FULL_NAME}.rpm"
+          upload_if_exists "lantern-installer-pkg-amd64/${FULL_NAME}.pkg.tar.zst"
+          upload_if_exists "lantern-installer-pkg-arm64/${FULL_NAME}-arm64.pkg.tar.zst"
+          upload_if_exists "lantern-installer-pkg/${FULL_NAME}.pkg.tar.zst"
           upload_if_exists "lantern-installer-ipa/${FULL_NAME}.ipa"
 
   # Post-publish steps (only for non-nightly production/beta builds)