@covro/covro 0.1.1-dev.8 → 0.2.0-beta.1

package/dist/web/index.html

@@ -6,8 +6,8 @@
     <meta name="theme-color" content="#f7f8fa" />
     <link rel="icon" type="image/svg+xml" href="/covro.svg" />
     <title>Covro · 工作空间</title>
-    <script type="module" crossorigin src="/assets/index-CAtxws9I.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-BmbPtei8.css">
+    <script type="module" crossorigin src="/assets/index-z5RGzL8u.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-Dr0Qkixk.css">
   </head>
   <body>
     <div id="root"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@covro/covro",
-  "version": "0.1.1-dev.8",
+  "version": "0.2.0-beta.1",
   "description": "A self-hosted browser workspace for your local Codex",
   "bin": {
     "covro": "bin/covro.mjs"
@@ -24,8 +24,6 @@
   },
   "scripts": {
     "dev": "concurrently -k -n api,web 'node --import tsx --watch src/server/main.ts --config config.local.json --dev' 'vite'",
-    "format": "prettier --write .",
-    "format:check": "prettier --check .",
     "typecheck": "tsc --noEmit",
     "lint": "eslint .",
     "test": "vitest run",
@@ -87,10 +85,10 @@
     ],
     "unsupported": []
   },
-  "covroCommit": "9aa427ad5b5835f1b9a5be4936bab66567655442",
-  "covroChannel": "dev",
+  "covroCommit": "143a52af6e24e6a953ebd6cbf049a5c851e4df92",
+  "covroChannel": "beta",
   "covroRelease": {
-    "runId": "39372876914",
+    "runId": "39368655900",
     "runAttempt": "1"
   }
 }

package/dist/cli/background.js

@@ -1,103 +0,0 @@
-import { spawn, execFile } from "node:child_process";
-import { mkdir, open } from "node:fs/promises";
-import { join } from "node:path";
-import { promisify } from "node:util";
-import { setTimeout } from "node:timers/promises";
-import lockfile from "proper-lockfile";
-import { control, isNotRunning, stopAndWait } from "./control.js";
-import {
-  configureLaunchdLogin,
-  guiSessionAvailable,
-  loginServiceInstalled,
-  startLaunchd,
-  unloadLaunchd
-} from "./launchd.js";
-import { readJson } from "../updates/files.js";
-const exec = promisify(execFile);
-async function lifecycle(location, action) {
-  await mkdir(location.state, { recursive: true, mode: 448 });
-  const release = await lockfile.lock(location.state, {
-    lockfilePath: join(location.state, "lifecycle.lock"),
-    stale: 1e4,
-    update: 2e3,
-    retries: { retries: 280, minTimeout: 250, maxTimeout: 250 }
-  });
-  try {
-    return await action();
-  } finally {
-    await release();
-  }
-}
-async function start(location, entry) {
-  try {
-    return await control(location, "status");
-  } catch (error) {
-    if (!isNotRunning(error)) throw error;
-  }
-  let child;
-  const installed = await readJson(
-    join(location.state, "service.json")
-  );
-  if (process.platform === "darwin" && await startLaunchd(location, entry)) {
-  } else if (installed?.platform === "linux") {
-    await exec("systemctl", ["--user", "start", `${installed.label}.service`]);
-  } else {
-    if (process.platform === "darwin")
-      console.warn(
-        "\u5F53\u524D\u6CA1\u6709 macOS \u684C\u9762\u767B\u5F55\u4F1A\u8BDD\uFF0C\u4F7F\u7528 headless \u540E\u53F0\u542F\u52A8\uFF1B\u7CFB\u7EDF\u94A5\u5319\u4E32\u51ED\u8BC1\u53EF\u80FD\u4E0D\u53EF\u7528\u3002"
-      );
-    const log = await open(location.log, "a", 384);
-    try {
-      child = spawn(process.execPath, [entry, "run", "--config", location.config], {
-        detached: true,
-        stdio: ["ignore", log.fd, log.fd],
-        windowsHide: true,
-        env: { ...process.env, COVRO_HOME: location.home }
-      });
-      await new Promise((resolve, reject) => {
-        child.once("spawn", resolve);
-        child.once("error", reject);
-      });
-      child.unref();
-    } finally {
-      await log.close();
-    }
-  }
-  for (let attempt = 0; attempt < 240; attempt++) {
-    try {
-      return await control(location, "status");
-    } catch (error) {
-      if (!isNotRunning(error)) throw error;
-    }
-    if (child && child.exitCode !== null) throw new Error(`Covro \u542F\u52A8\u5931\u8D25\uFF0C\u8BF7\u67E5\u770B ${location.log}`);
-    await setTimeout(250);
-  }
-  throw new Error(`Covro \u5C1A\u672A\u786E\u8BA4\u542F\u52A8\uFF0C\u8BF7\u8FD0\u884C covro status \u5E76\u67E5\u770B ${location.log}`);
-}
-async function stop(location) {
-  await stopAndWait(location);
-  if (process.platform === "darwin") await unloadLaunchd(location);
-  else {
-    const installed = await readJson(
-      join(location.state, "service.json")
-    );
-    if (installed?.platform === "linux")
-      await exec("systemctl", ["--user", "stop", `${installed.label}.service`]);
-  }
-}
-const startBackground = (location, entry) => lifecycle(location, () => start(location, entry));
-const stopBackground = (location) => lifecycle(location, () => stop(location));
-const macOSLoginService = (location, entry, install) => lifecycle(location, async () => {
-  if (install && !await guiSessionAvailable(location))
-    throw new Error("\u542F\u7528\u767B\u5F55\u81EA\u542F\u9700\u8981\u5F53\u524D\u7528\u6237\u5DF2\u767B\u5F55 macOS \u684C\u9762");
-  if (!install && !await loginServiceInstalled(location)) return;
-  await stop(location);
-  await configureLaunchdLogin(location, entry, install);
-  if (install) await start(location, entry);
-});
-export {
-  macOSLoginService,
-  startBackground,
-  stopBackground
-};
-//# sourceMappingURL=background.js.map

package/dist/cli/background.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/cli/background.ts"],
-  "sourcesContent": ["import { spawn, execFile } from 'node:child_process';\nimport { mkdir, open } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { promisify } from 'node:util';\nimport { setTimeout } from 'node:timers/promises';\nimport lockfile from 'proper-lockfile';\nimport type { CovroPaths } from './paths.js';\nimport { control, isNotRunning, stopAndWait } from './control.js';\nimport {\n  configureLaunchdLogin,\n  guiSessionAvailable,\n  loginServiceInstalled,\n  startLaunchd,\n  unloadLaunchd,\n} from './launchd.js';\nimport { readJson } from '../updates/files.js';\n\nconst exec = promisify(execFile);\nasync function lifecycle<T>(location: CovroPaths, action: () => Promise<T>) {\n  await mkdir(location.state, { recursive: true, mode: 0o700 });\n  const release = await lockfile.lock(location.state, {\n    lockfilePath: join(location.state, 'lifecycle.lock'),\n    stale: 10_000,\n    update: 2_000,\n    retries: { retries: 280, minTimeout: 250, maxTimeout: 250 },\n  });\n  try {\n    return await action();\n  } finally {\n    await release();\n  }\n}\n\nasync function start(location: CovroPaths, entry: string) {\n  try {\n    return await control(location, 'status');\n  } catch (error) {\n    if (!isNotRunning(error)) throw error;\n  }\n  let child: ReturnType<typeof spawn> | undefined;\n  const installed = await readJson<{ platform: string; label: string }>(\n    join(location.state, 'service.json'),\n  );\n  if (process.platform === 'darwin' && (await startLaunchd(location, entry))) {\n    // launchd owns the process; startup is confirmed through the same private control socket.\n  } else if (installed?.platform === 'linux') {\n    await exec('systemctl', ['--user', 'start', `${installed.label}.service`]);\n  } else {\n    if (process.platform === 'darwin')\n      console.warn(\n        '\u5F53\u524D\u6CA1\u6709 macOS \u684C\u9762\u767B\u5F55\u4F1A\u8BDD\uFF0C\u4F7F\u7528 headless \u540E\u53F0\u542F\u52A8\uFF1B\u7CFB\u7EDF\u94A5\u5319\u4E32\u51ED\u8BC1\u53EF\u80FD\u4E0D\u53EF\u7528\u3002',\n      );\n    const log = await open(location.log, 'a', 0o600);\n    try {\n      child = spawn(process.execPath, [entry, 'run', '--config', location.config], {\n        detached: true,\n        stdio: ['ignore', log.fd, log.fd],\n        windowsHide: true,\n        env: { ...process.env, COVRO_HOME: location.home },\n      });\n      await new Promise<void>((resolve, reject) => {\n        child!.once('spawn', resolve);\n        child!.once('error', reject);\n      });\n      child.unref();\n    } finally {\n      await log.close();\n    }\n  }\n  for (let attempt = 0; attempt < 240; attempt++) {\n    try {\n      return await control(location, 'status');\n    } catch (error) {\n      if (!isNotRunning(error)) throw error;\n    }\n    if (child && child.exitCode !== null) throw new Error(`Covro \u542F\u52A8\u5931\u8D25\uFF0C\u8BF7\u67E5\u770B ${location.log}`);\n    await setTimeout(250);\n  }\n  throw new Error(`Covro \u5C1A\u672A\u786E\u8BA4\u542F\u52A8\uFF0C\u8BF7\u8FD0\u884C covro status \u5E76\u67E5\u770B ${location.log}`);\n}\n\nasync function stop(location: CovroPaths) {\n  await stopAndWait(location);\n  if (process.platform === 'darwin') await unloadLaunchd(location);\n  else {\n    const installed = await readJson<{ platform: string; label: string }>(\n      join(location.state, 'service.json'),\n    );\n    if (installed?.platform === 'linux')\n      await exec('systemctl', ['--user', 'stop', `${installed.label}.service`]);\n  }\n}\n\nexport const startBackground = (location: CovroPaths, entry: string) =>\n  lifecycle(location, () => start(location, entry));\nexport const stopBackground = (location: CovroPaths) => lifecycle(location, () => stop(location));\nexport const macOSLoginService = (location: CovroPaths, entry: string, install: boolean) =>\n  lifecycle(location, async () => {\n    if (install && !(await guiSessionAvailable(location)))\n      throw new Error('\u542F\u7528\u767B\u5F55\u81EA\u542F\u9700\u8981\u5F53\u524D\u7528\u6237\u5DF2\u767B\u5F55 macOS \u684C\u9762');\n    if (!install && !(await loginServiceInstalled(location))) return;\n    await stop(location);\n    await configureLaunchdLogin(location, entry, install);\n    if (install) await start(location, entry);\n  });\n"],
-  "mappings": "AAAA,SAAS,OAAO,gBAAgB;AAChC,SAAS,OAAO,YAAY;AAC5B,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,OAAO,cAAc;AAErB,SAAS,SAAS,cAAc,mBAAmB;AACnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gBAAgB;AAEzB,MAAM,OAAO,UAAU,QAAQ;AAC/B,eAAe,UAAa,UAAsB,QAA0B;AAC1E,QAAM,MAAM,SAAS,OAAO,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC5D,QAAM,UAAU,MAAM,SAAS,KAAK,SAAS,OAAO;AAAA,IAClD,cAAc,KAAK,SAAS,OAAO,gBAAgB;AAAA,IACnD,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,EAAE,SAAS,KAAK,YAAY,KAAK,YAAY,IAAI;AAAA,EAC5D,CAAC;AACD,MAAI;AACF,WAAO,MAAM,OAAO;AAAA,EACtB,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAEA,eAAe,MAAM,UAAsB,OAAe;AACxD,MAAI;AACF,WAAO,MAAM,QAAQ,UAAU,QAAQ;AAAA,EACzC,SAAS,OAAO;AACd,QAAI,CAAC,aAAa,KAAK,EAAG,OAAM;AAAA,EAClC;AACA,MAAI;AACJ,QAAM,YAAY,MAAM;AAAA,IACtB,KAAK,SAAS,OAAO,cAAc;AAAA,EACrC;AACA,MAAI,QAAQ,aAAa,YAAa,MAAM,aAAa,UAAU,KAAK,GAAI;AAAA,EAE5E,WAAW,WAAW,aAAa,SAAS;AAC1C,UAAM,KAAK,aAAa,CAAC,UAAU,SAAS,GAAG,UAAU,KAAK,UAAU,CAAC;AAAA,EAC3E,OAAO;AACL,QAAI,QAAQ,aAAa;AACvB,cAAQ;AAAA,QACN;AAAA,MACF;AACF,UAAM,MAAM,MAAM,KAAK,SAAS,KAAK,KAAK,GAAK;AAC/C,QAAI;AACF,cAAQ,MAAM,QAAQ,UAAU,CAAC,OAAO,OAAO,YAAY,SAAS,MAAM,GAAG;AAAA,QAC3E,UAAU;AAAA,QACV,OAAO,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE;AAAA,QAChC,aAAa;AAAA,QACb,KAAK,EAAE,GAAG,QAAQ,KAAK,YAAY,SAAS,KAAK;AAAA,MACnD,CAAC;AACD,YAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,cAAO,KAAK,SAAS,OAAO;AAC5B,cAAO,KAAK,SAAS,MAAM;AAAA,MAC7B,CAAC;AACD,YAAM,MAAM;AAAA,IACd,UAAE;AACA,YAAM,IAAI,MAAM;AAAA,IAClB;AAAA,EACF;AACA,WAAS,UAAU,GAAG,UAAU,KAAK,WAAW;AAC9C,QAAI;AACF,aAAO,MAAM,QAAQ,UAAU,QAAQ;AAAA,IACzC,SAAS,OAAO;AACd,UAAI,CAAC,aAAa,KAAK,EAAG,OAAM;AAAA,IAClC;AACA,QAAI,SAAS,MAAM,aAAa,KAAM,OAAM,IAAI,MAAM,0DAAkB,SAAS,GAAG,EAAE;AACtF,UAAM,WAAW,GAAG;AAAA,EACtB;AACA,QAAM,IAAI,MAAM,sGAAqC,SAAS,GAAG,EAAE;AACrE;AAEA,eAAe,KAAK,UAAsB;AACxC,QAAM,YAAY,QAAQ;AAC1B,MAAI,QAAQ,aAAa,SAAU,OAAM,cAAc,QAAQ;AAAA,OAC1D;AACH,UAAM,YAAY,MAAM;AAAA,MACtB,KAAK,SAAS,OAAO,cAAc;AAAA,IACrC;AACA,QAAI,WAAW,aAAa;AAC1B,YAAM,KAAK,aAAa,CAAC,UAAU,QAAQ,GAAG,UAAU,KAAK,UAAU,CAAC;AAAA,EAC5E;AACF;AAEO,MAAM,kBAAkB,CAAC,UAAsB,UACpD,UAAU,UAAU,MAAM,MAAM,UAAU,KAAK,CAAC;AAC3C,MAAM,iBAAiB,CAAC,aAAyB,UAAU,UAAU,MAAM,KAAK,QAAQ,CAAC;AACzF,MAAM,oBAAoB,CAAC,UAAsB,OAAe,YACrE,UAAU,UAAU,YAAY;AAC9B,MAAI,WAAW,CAAE,MAAM,oBAAoB,QAAQ;AACjD,UAAM,IAAI,MAAM,+GAA0B;AAC5C,MAAI,CAAC,WAAW,CAAE,MAAM,sBAAsB,QAAQ,EAAI;AAC1D,QAAM,KAAK,QAAQ;AACnB,QAAM,sBAAsB,UAAU,OAAO,OAAO;AACpD,MAAI,QAAS,OAAM,MAAM,UAAU,KAAK;AAC1C,CAAC;",
-  "names": []
-}

package/dist/cli/doctor.js

@@ -1,92 +0,0 @@
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-const exec = promisify(execFile);
-async function probe(command, args) {
-  try {
-    const result = await exec(command, args, { timeout: 4e3, maxBuffer: 64 * 1024 });
-    return { exitCode: 0, ...result, failure: void 0 };
-  } catch (error) {
-    const result = error;
-    return {
-      exitCode: typeof result.code === "number" ? result.code : null,
-      stdout: result.stdout ?? "",
-      stderr: result.stderr ?? "",
-      failure: result.killed ? "timeout" : typeof result.code === "string" ? result.code : void 0
-    };
-  }
-}
-async function launchContext() {
-  const manager = process.platform === "darwin" ? await probe("/bin/launchctl", ["managername"]) : void 0;
-  return {
-    platform: process.platform,
-    manager: manager?.exitCode === 0 && /^(Aqua|Background|System|LoginWindow|StandardIO)$/.test(manager.stdout.trim()) ? manager.stdout.trim() : null,
-    uid: process.getuid?.() ?? null
-  };
-}
-async function doctor() {
-  const context = await launchContext();
-  const environmentToken = Boolean(process.env.GH_TOKEN || process.env.GITHUB_TOKEN);
-  const credential = await probe("gh", ["auth", "token", "--hostname", "github.com"]);
-  const found = credential.exitCode === 0 && Boolean(credential.stdout.trim());
-  const credentialSource = environmentToken ? "environment" : "stored";
-  const notes = [
-    "\u68C0\u67E5\u6765\u81EA\u8FD0\u884C\u4E2D\u7684 Covro \u5B9E\u4F8B\uFF0C\u4E0D\u662F\u8C03\u7528 doctor \u7684\u7EC8\u7AEF\u3002",
-    "\u672A\u63A2\u6D4B Agent \u6216 Shell \u7684 Codex \u6C99\u7BB1\uFF1B\u5B9E\u4F8B\u8BA4\u8BC1\u6210\u529F\u4E0D\u4EE3\u8868\u53D7\u9650\u547D\u4EE4\u5177\u6709\u76F8\u540C\u6743\u9650\u3002"
-  ];
-  if (context.platform === "darwin" && context.manager && context.manager !== "Aqua")
-    notes.push(
-      "\u5B9E\u4F8B\u4E0D\u5728 Aqua \u684C\u9762\u4F1A\u8BDD\uFF0C\u7CFB\u7EDF\u94A5\u5319\u4E32\u53EF\u80FD\u4E0D\u53EF\u8BBF\u95EE\uFF1B\u5728\u684C\u9762\u767B\u5F55\u540E\u7528 covro stop \u548C covro start \u91CD\u542F\uFF0C\u6216\u5B89\u88C5 GUI \u767B\u5F55\u670D\u52A1\u3002"
-    );
-  if (environmentToken)
-    notes.push("GH_TOKEN \u6216 GITHUB_TOKEN \u5DF2\u8BBE\u7F6E\uFF0CGitHub CLI \u4F1A\u4F18\u5148\u4F7F\u7528\u73AF\u5883\u53D8\u91CF\u4E2D\u7684\u51ED\u8BC1\u3002");
-  const base = {
-    pid: process.pid,
-    launchContext: context,
-    scope: "daemon-child-process",
-    sandbox: "not-tested",
-    credentialSource,
-    credentialReadable: found
-  };
-  if (credential.failure === "ENOENT")
-    return {
-      ...base,
-      result: "gh-unavailable",
-      notes: [...notes, "\u5B9E\u4F8B PATH \u4E2D\u6CA1\u6709 GitHub CLI\u3002"]
-    };
-  if (!found)
-    return {
-      ...base,
-      result: "credential-unavailable",
-      lookupExitCode: credential.exitCode,
-      notes: [
-        ...notes,
-        "\u672A\u80FD\u8BFB\u53D6\u51ED\u8BC1\uFF0C\u5C1A\u672A\u9A8C\u8BC1\u4EE4\u724C\u662F\u5426\u6709\u6548\uFF1B\u8BF7\u5206\u522B\u68C0\u67E5\u542F\u52A8\u4F1A\u8BDD\u3001\u94A5\u5319\u4E32/\u6C99\u7BB1\u8BBF\u95EE\u548C\u662F\u5426\u5DF2\u914D\u7F6E\u51ED\u8BC1\uFF0C\u4E0D\u80FD\u636E\u6B64\u8BA4\u5B9A\u9700\u8981\u91CD\u65B0\u767B\u5F55\u3002"
-      ]
-    };
-  const api = await probe("gh", [
-    "api",
-    "user",
-    "--hostname",
-    "github.com",
-    "--include",
-    "--silent"
-  ]);
-  const status = /HTTP\/[\d.]+\s+(\d{3})/.exec(`${api.stdout}
-${api.stderr}`)?.[1];
-  const httpStatus = status ? Number(status) : null;
-  const result = api.exitCode === 0 ? "authenticated" : httpStatus === 401 ? "authentication-rejected" : httpStatus === 403 ? "request-forbidden" : "request-failed";
-  if (result === "authentication-rejected")
-    notes.push(
-      "\u5DF2\u8BFB\u53D6\u51ED\u8BC1\uFF0C\u4F46 GitHub \u8FD4\u56DE 401\uFF1B\u8BF7\u68C0\u67E5\u64A4\u9500\u3001\u5931\u6548\u6216\u73AF\u5883\u53D8\u91CF\u8986\u76D6\uFF0C\u800C\u4E0D\u662F\u5C06\u5176\u5F52\u56E0\u4E8E\u94A5\u5319\u4E32\u8BFB\u53D6\u5931\u8D25\u3002"
-    );
-  else if (result === "request-forbidden")
-    notes.push("GitHub \u8FD4\u56DE 403\uFF1B\u8BF7\u68C0\u67E5\u6743\u9650\u3001\u7EC4\u7EC7\u7B56\u7565\u6216\u8BF7\u6C42\u9650\u989D\uFF0C\u4E0D\u80FD\u636E\u6B64\u8BA4\u5B9A\u4EE4\u724C\u5931\u6548\u3002");
-  else if (result === "request-failed")
-    notes.push("\u5DF2\u8BFB\u53D6\u51ED\u8BC1\uFF0C\u4F46\u8BA4\u8BC1\u8BF7\u6C42\u672A\u6210\u529F\uFF1B\u8BF7\u68C0\u67E5\u7F51\u7EDC\u3001\u4EE3\u7406\u6216\u670D\u52A1\u72B6\u6001\uFF0C\u672A\u786E\u8BA4\u4EE4\u724C\u5931\u6548\u3002");
-  return { ...base, result, httpStatus, requestExitCode: api.exitCode, notes };
-}
-export {
-  doctor,
-  launchContext
-};
-//# sourceMappingURL=doctor.js.map

package/dist/cli/doctor.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/cli/doctor.ts"],
-  "sourcesContent": ["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\n\nconst exec = promisify(execFile);\nasync function probe(command: string, args: string[]) {\n  try {\n    const result = await exec(command, args, { timeout: 4000, maxBuffer: 64 * 1024 });\n    return { exitCode: 0, ...result, failure: undefined };\n  } catch (error) {\n    const result = error as {\n      code?: string | number;\n      stdout?: string;\n      stderr?: string;\n      killed?: boolean;\n    };\n    return {\n      exitCode: typeof result.code === 'number' ? result.code : null,\n      stdout: result.stdout ?? '',\n      stderr: result.stderr ?? '',\n      failure: result.killed\n        ? 'timeout'\n        : typeof result.code === 'string'\n          ? result.code\n          : undefined,\n    };\n  }\n}\n\nexport async function launchContext() {\n  const manager =\n    process.platform === 'darwin' ? await probe('/bin/launchctl', ['managername']) : undefined;\n  return {\n    platform: process.platform,\n    manager:\n      manager?.exitCode === 0 &&\n      /^(Aqua|Background|System|LoginWindow|StandardIO)$/.test(manager.stdout.trim())\n        ? manager.stdout.trim()\n        : null,\n    uid: process.getuid?.() ?? null,\n  };\n}\n\n/** Runs inside the daemon. Return classifications only: command errors can contain credentials. */\nexport async function doctor() {\n  const context = await launchContext();\n  const environmentToken = Boolean(process.env.GH_TOKEN || process.env.GITHUB_TOKEN);\n  const credential = await probe('gh', ['auth', 'token', '--hostname', 'github.com']);\n  const found = credential.exitCode === 0 && Boolean(credential.stdout.trim());\n  const credentialSource = environmentToken ? 'environment' : 'stored';\n  const notes = [\n    '\u68C0\u67E5\u6765\u81EA\u8FD0\u884C\u4E2D\u7684 Covro \u5B9E\u4F8B\uFF0C\u4E0D\u662F\u8C03\u7528 doctor \u7684\u7EC8\u7AEF\u3002',\n    '\u672A\u63A2\u6D4B Agent \u6216 Shell \u7684 Codex \u6C99\u7BB1\uFF1B\u5B9E\u4F8B\u8BA4\u8BC1\u6210\u529F\u4E0D\u4EE3\u8868\u53D7\u9650\u547D\u4EE4\u5177\u6709\u76F8\u540C\u6743\u9650\u3002',\n  ];\n  if (context.platform === 'darwin' && context.manager && context.manager !== 'Aqua')\n    notes.push(\n      '\u5B9E\u4F8B\u4E0D\u5728 Aqua \u684C\u9762\u4F1A\u8BDD\uFF0C\u7CFB\u7EDF\u94A5\u5319\u4E32\u53EF\u80FD\u4E0D\u53EF\u8BBF\u95EE\uFF1B\u5728\u684C\u9762\u767B\u5F55\u540E\u7528 covro stop \u548C covro start \u91CD\u542F\uFF0C\u6216\u5B89\u88C5 GUI \u767B\u5F55\u670D\u52A1\u3002',\n    );\n  if (environmentToken)\n    notes.push('GH_TOKEN \u6216 GITHUB_TOKEN \u5DF2\u8BBE\u7F6E\uFF0CGitHub CLI \u4F1A\u4F18\u5148\u4F7F\u7528\u73AF\u5883\u53D8\u91CF\u4E2D\u7684\u51ED\u8BC1\u3002');\n  const base = {\n    pid: process.pid,\n    launchContext: context,\n    scope: 'daemon-child-process',\n    sandbox: 'not-tested',\n    credentialSource,\n    credentialReadable: found,\n  };\n  if (credential.failure === 'ENOENT')\n    return {\n      ...base,\n      result: 'gh-unavailable',\n      notes: [...notes, '\u5B9E\u4F8B PATH \u4E2D\u6CA1\u6709 GitHub CLI\u3002'],\n    };\n  if (!found)\n    return {\n      ...base,\n      result: 'credential-unavailable',\n      lookupExitCode: credential.exitCode,\n      notes: [\n        ...notes,\n        '\u672A\u80FD\u8BFB\u53D6\u51ED\u8BC1\uFF0C\u5C1A\u672A\u9A8C\u8BC1\u4EE4\u724C\u662F\u5426\u6709\u6548\uFF1B\u8BF7\u5206\u522B\u68C0\u67E5\u542F\u52A8\u4F1A\u8BDD\u3001\u94A5\u5319\u4E32/\u6C99\u7BB1\u8BBF\u95EE\u548C\u662F\u5426\u5DF2\u914D\u7F6E\u51ED\u8BC1\uFF0C\u4E0D\u80FD\u636E\u6B64\u8BA4\u5B9A\u9700\u8981\u91CD\u65B0\u767B\u5F55\u3002',\n      ],\n    };\n  const api = await probe('gh', [\n    'api',\n    'user',\n    '--hostname',\n    'github.com',\n    '--include',\n    '--silent',\n  ]);\n  const status = /HTTP\\/[\\d.]+\\s+(\\d{3})/.exec(`${api.stdout}\\n${api.stderr}`)?.[1];\n  const httpStatus = status ? Number(status) : null;\n  const result =\n    api.exitCode === 0\n      ? 'authenticated'\n      : httpStatus === 401\n        ? 'authentication-rejected'\n        : httpStatus === 403\n          ? 'request-forbidden'\n          : 'request-failed';\n  if (result === 'authentication-rejected')\n    notes.push(\n      '\u5DF2\u8BFB\u53D6\u51ED\u8BC1\uFF0C\u4F46 GitHub \u8FD4\u56DE 401\uFF1B\u8BF7\u68C0\u67E5\u64A4\u9500\u3001\u5931\u6548\u6216\u73AF\u5883\u53D8\u91CF\u8986\u76D6\uFF0C\u800C\u4E0D\u662F\u5C06\u5176\u5F52\u56E0\u4E8E\u94A5\u5319\u4E32\u8BFB\u53D6\u5931\u8D25\u3002',\n    );\n  else if (result === 'request-forbidden')\n    notes.push('GitHub \u8FD4\u56DE 403\uFF1B\u8BF7\u68C0\u67E5\u6743\u9650\u3001\u7EC4\u7EC7\u7B56\u7565\u6216\u8BF7\u6C42\u9650\u989D\uFF0C\u4E0D\u80FD\u636E\u6B64\u8BA4\u5B9A\u4EE4\u724C\u5931\u6548\u3002');\n  else if (result === 'request-failed')\n    notes.push('\u5DF2\u8BFB\u53D6\u51ED\u8BC1\uFF0C\u4F46\u8BA4\u8BC1\u8BF7\u6C42\u672A\u6210\u529F\uFF1B\u8BF7\u68C0\u67E5\u7F51\u7EDC\u3001\u4EE3\u7406\u6216\u670D\u52A1\u72B6\u6001\uFF0C\u672A\u786E\u8BA4\u4EE4\u724C\u5931\u6548\u3002');\n  return { ...base, result, httpStatus, requestExitCode: api.exitCode, notes };\n}\n"],
-  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAE1B,MAAM,OAAO,UAAU,QAAQ;AAC/B,eAAe,MAAM,SAAiB,MAAgB;AACpD,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,SAAS,MAAM,EAAE,SAAS,KAAM,WAAW,KAAK,KAAK,CAAC;AAChF,WAAO,EAAE,UAAU,GAAG,GAAG,QAAQ,SAAS,OAAU;AAAA,EACtD,SAAS,OAAO;AACd,UAAM,SAAS;AAMf,WAAO;AAAA,MACL,UAAU,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAAA,MAC1D,QAAQ,OAAO,UAAU;AAAA,MACzB,QAAQ,OAAO,UAAU;AAAA,MACzB,SAAS,OAAO,SACZ,YACA,OAAO,OAAO,SAAS,WACrB,OAAO,OACP;AAAA,IACR;AAAA,EACF;AACF;AAEA,eAAsB,gBAAgB;AACpC,QAAM,UACJ,QAAQ,aAAa,WAAW,MAAM,MAAM,kBAAkB,CAAC,aAAa,CAAC,IAAI;AACnF,SAAO;AAAA,IACL,UAAU,QAAQ;AAAA,IAClB,SACE,SAAS,aAAa,KACtB,oDAAoD,KAAK,QAAQ,OAAO,KAAK,CAAC,IAC1E,QAAQ,OAAO,KAAK,IACpB;AAAA,IACN,KAAK,QAAQ,SAAS,KAAK;AAAA,EAC7B;AACF;AAGA,eAAsB,SAAS;AAC7B,QAAM,UAAU,MAAM,cAAc;AACpC,QAAM,mBAAmB,QAAQ,QAAQ,IAAI,YAAY,QAAQ,IAAI,YAAY;AACjF,QAAM,aAAa,MAAM,MAAM,MAAM,CAAC,QAAQ,SAAS,cAAc,YAAY,CAAC;AAClF,QAAM,QAAQ,WAAW,aAAa,KAAK,QAAQ,WAAW,OAAO,KAAK,CAAC;AAC3E,QAAM,mBAAmB,mBAAmB,gBAAgB;AAC5D,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,EACF;AACA,MAAI,QAAQ,aAAa,YAAY,QAAQ,WAAW,QAAQ,YAAY;AAC1E,UAAM;AAAA,MACJ;AAAA,IACF;AACF,MAAI;AACF,UAAM,KAAK,sJAAuD;AACpE,QAAM,OAAO;AAAA,IACX,KAAK,QAAQ;AAAA,IACb,eAAe;AAAA,IACf,OAAO;AAAA,IACP,SAAS;AAAA,IACT;AAAA,IACA,oBAAoB;AAAA,EACtB;AACA,MAAI,WAAW,YAAY;AACzB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ;AAAA,MACR,OAAO,CAAC,GAAG,OAAO,uDAAyB;AAAA,IAC7C;AACF,MAAI,CAAC;AACH,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ;AAAA,MACR,gBAAgB,WAAW;AAAA,MAC3B,OAAO;AAAA,QACL,GAAG;AAAA,QACH;AAAA,MACF;AAAA,IACF;AACF,QAAM,MAAM,MAAM,MAAM,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,SAAS,yBAAyB,KAAK,GAAG,IAAI,MAAM;AAAA,EAAK,IAAI,MAAM,EAAE,IAAI,CAAC;AAChF,QAAM,aAAa,SAAS,OAAO,MAAM,IAAI;AAC7C,QAAM,SACJ,IAAI,aAAa,IACb,kBACA,eAAe,MACb,4BACA,eAAe,MACb,sBACA;AACV,MAAI,WAAW;AACb,UAAM;AAAA,MACJ;AAAA,IACF;AAAA,WACO,WAAW;AAClB,UAAM,KAAK,iMAA2C;AAAA,WAC/C,WAAW;AAClB,UAAM,KAAK,gOAAuC;AACpD,SAAO,EAAE,GAAG,MAAM,QAAQ,YAAY,iBAAiB,IAAI,UAAU,MAAM;AAC7E;",
-  "names": []
-}

package/dist/cli/launch-environment.js

@@ -1,85 +0,0 @@
-import { createServer } from "node:net";
-import { chmod, rm } from "node:fs/promises";
-import { randomBytes } from "node:crypto";
-import { join } from "node:path";
-async function environmentBridge(home) {
-  const path = join(home, `e-${randomBytes(6).toString("hex")}.sock`);
-  const clients = /* @__PURE__ */ new Set();
-  let accept;
-  const consumed = new Promise((resolve) => {
-    accept = resolve;
-  });
-  const payload = JSON.stringify({ env: { ...process.env, COVRO_HOME: home }, cwd: process.cwd() });
-  const server = createServer((socket) => {
-    clients.add(socket);
-    socket.setTimeout(5e3, () => socket.destroy());
-    socket.on("error", () => {
-    });
-    socket.on("close", () => clients.delete(socket));
-    socket.end(payload, () => accept?.());
-  });
-  try {
-    await new Promise((resolve, reject) => {
-      server.once("error", reject);
-      server.listen(path, resolve);
-    });
-    await chmod(path, 384);
-    return {
-      path,
-      async wait() {
-        let timer;
-        try {
-          await Promise.race([
-            consumed,
-            new Promise((_, reject) => {
-              timer = setTimeout(
-                () => reject(new Error("launchd \u542F\u52A8\u73AF\u5883\u4F20\u9012\u8D85\u65F6\uFF0C\u8BF7\u67E5\u770B Covro \u65E5\u5FD7")),
-                1e4
-              );
-            })
-          ]);
-        } finally {
-          clearTimeout(timer);
-        }
-      },
-      async close() {
-        for (const socket of clients) socket.destroy();
-        await new Promise(
-          (resolve, reject) => server.close((error) => error ? reject(error) : resolve())
-        );
-        await rm(path, { force: true });
-      }
-    };
-  } catch (error) {
-    server.close();
-    await rm(path, { force: true });
-    throw error;
-  }
-}
-const launchRunner = `import { connect } from 'node:net';
-const [socketPath, entry, config] = process.argv.slice(2);
-try {
-  const input = await new Promise((resolve, reject) => {
-    const socket = connect(socketPath);
-    let body = '';
-    socket.setTimeout(10000, () => socket.destroy(new Error('launch environment timed out')));
-    socket.setEncoding('utf8');
-    socket.on('data', chunk => {
-      body += chunk;
-      if (Buffer.byteLength(body) > 2 * 1024 * 1024) socket.destroy(new Error('launch environment too large'));
-    });
-    socket.on('error', reject);
-    socket.on('end', () => { try { resolve(JSON.parse(body)); } catch { reject(new Error('invalid launch environment')); } });
-  });
-  process.chdir(input.cwd);
-  process.execve(process.execPath, [process.execPath, entry, 'run', '--config', config], input.env);
-} catch {
-  console.error('Covro launch environment unavailable; restart with covro start.');
-  process.exitCode = 1;
-}
-`;
-export {
-  environmentBridge,
-  launchRunner
-};
-//# sourceMappingURL=launch-environment.js.map

package/dist/cli/launch-environment.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/cli/launch-environment.ts"],
-  "sourcesContent": ["import { createServer, type Socket } from 'node:net';\nimport { chmod, rm } from 'node:fs/promises';\nimport { randomBytes } from 'node:crypto';\nimport { join } from 'node:path';\n\n// The launchd job receives only this socket path. Credentials stay in memory, never in a plist.\nexport async function environmentBridge(home: string) {\n  const path = join(home, `e-${randomBytes(6).toString('hex')}.sock`);\n  const clients = new Set<Socket>();\n  let accept: (() => void) | undefined;\n  const consumed = new Promise<void>((resolve) => {\n    accept = resolve;\n  });\n  const payload = JSON.stringify({ env: { ...process.env, COVRO_HOME: home }, cwd: process.cwd() });\n  const server = createServer((socket) => {\n    clients.add(socket);\n    socket.setTimeout(5000, () => socket.destroy());\n    socket.on('error', () => {});\n    socket.on('close', () => clients.delete(socket));\n    socket.end(payload, () => accept?.());\n  });\n  try {\n    await new Promise<void>((resolve, reject) => {\n      server.once('error', reject);\n      server.listen(path, resolve);\n    });\n    await chmod(path, 0o600);\n    return {\n      path,\n      async wait() {\n        let timer: ReturnType<typeof setTimeout> | undefined;\n        try {\n          await Promise.race([\n            consumed,\n            new Promise<never>((_, reject) => {\n              timer = setTimeout(\n                () => reject(new Error('launchd \u542F\u52A8\u73AF\u5883\u4F20\u9012\u8D85\u65F6\uFF0C\u8BF7\u67E5\u770B Covro \u65E5\u5FD7')),\n                10_000,\n              );\n            }),\n          ]);\n        } finally {\n          clearTimeout(timer);\n        }\n      },\n      async close() {\n        for (const socket of clients) socket.destroy();\n        await new Promise<void>((resolve, reject) =>\n          server.close((error) => (error ? reject(error) : resolve())),\n        );\n        await rm(path, { force: true });\n      },\n    };\n  } catch (error) {\n    server.close();\n    await rm(path, { force: true });\n    throw error;\n  }\n}\n\n// Standalone Node runner also works when the update worker restores a version predating this fix.\n// execve preserves launchd's process identity and signal handling without an extra supervisor.\nexport const launchRunner = `import { connect } from 'node:net';\nconst [socketPath, entry, config] = process.argv.slice(2);\ntry {\n  const input = await new Promise((resolve, reject) => {\n    const socket = connect(socketPath);\n    let body = '';\n    socket.setTimeout(10000, () => socket.destroy(new Error('launch environment timed out')));\n    socket.setEncoding('utf8');\n    socket.on('data', chunk => {\n      body += chunk;\n      if (Buffer.byteLength(body) > 2 * 1024 * 1024) socket.destroy(new Error('launch environment too large'));\n    });\n    socket.on('error', reject);\n    socket.on('end', () => { try { resolve(JSON.parse(body)); } catch { reject(new Error('invalid launch environment')); } });\n  });\n  process.chdir(input.cwd);\n  process.execve(process.execPath, [process.execPath, entry, 'run', '--config', config], input.env);\n} catch {\n  console.error('Covro launch environment unavailable; restart with covro start.');\n  process.exitCode = 1;\n}\n`;\n"],
-  "mappings": "AAAA,SAAS,oBAAiC;AAC1C,SAAS,OAAO,UAAU;AAC1B,SAAS,mBAAmB;AAC5B,SAAS,YAAY;AAGrB,eAAsB,kBAAkB,MAAc;AACpD,QAAM,OAAO,KAAK,MAAM,KAAK,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,OAAO;AAClE,QAAM,UAAU,oBAAI,IAAY;AAChC,MAAI;AACJ,QAAM,WAAW,IAAI,QAAc,CAAC,YAAY;AAC9C,aAAS;AAAA,EACX,CAAC;AACD,QAAM,UAAU,KAAK,UAAU,EAAE,KAAK,EAAE,GAAG,QAAQ,KAAK,YAAY,KAAK,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC;AAChG,QAAM,SAAS,aAAa,CAAC,WAAW;AACtC,YAAQ,IAAI,MAAM;AAClB,WAAO,WAAW,KAAM,MAAM,OAAO,QAAQ,CAAC;AAC9C,WAAO,GAAG,SAAS,MAAM;AAAA,IAAC,CAAC;AAC3B,WAAO,GAAG,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC;AAC/C,WAAO,IAAI,SAAS,MAAM,SAAS,CAAC;AAAA,EACtC,CAAC;AACD,MAAI;AACF,UAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,aAAO,KAAK,SAAS,MAAM;AAC3B,aAAO,OAAO,MAAM,OAAO;AAAA,IAC7B,CAAC;AACD,UAAM,MAAM,MAAM,GAAK;AACvB,WAAO;AAAA,MACL;AAAA,MACA,MAAM,OAAO;AACX,YAAI;AACJ,YAAI;AACF,gBAAM,QAAQ,KAAK;AAAA,YACjB;AAAA,YACA,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,sBAAQ;AAAA,gBACN,MAAM,OAAO,IAAI,MAAM,qGAA+B,CAAC;AAAA,gBACvD;AAAA,cACF;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH,UAAE;AACA,uBAAa,KAAK;AAAA,QACpB;AAAA,MACF;AAAA,MACA,MAAM,QAAQ;AACZ,mBAAW,UAAU,QAAS,QAAO,QAAQ;AAC7C,cAAM,IAAI;AAAA,UAAc,CAAC,SAAS,WAChC,OAAO,MAAM,CAAC,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE;AAAA,QAC7D;AACA,cAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,WAAO,MAAM;AACb,UAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAC9B,UAAM;AAAA,EACR;AACF;AAIO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;",
-  "names": []
-}

package/dist/cli/launchd.js

@@ -1,172 +0,0 @@
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-import { createHash } from "node:crypto";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
-import { mkdir, rm, writeFile } from "node:fs/promises";
-import { environmentBridge, launchRunner } from "./launch-environment.js";
-import { readJson, saveJson } from "../updates/files.js";
-const exec = promisify(execFile);
-const launchctl = (args) => exec("/bin/launchctl", args, { timeout: 5e3, maxBuffer: 2 * 1024 * 1024 });
-const xml = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
-function failureDetail(error) {
-  const failure = error;
-  if (failure.killed) return "launchctl \u8BF7\u6C42\u8D85\u65F6";
-  return (failure.stderr?.trim() || (error instanceof Error ? error.message : "\u672A\u77E5\u9519\u8BEF")).slice(
-    0,
-    1024
-  );
-}
-function launchdPaths(location, label = `dev.covro.${location.key}.${createHash("sha256").update(location.home).digest("hex").slice(0, 12)}`) {
-  const domain = `gui/${process.getuid()}`;
-  return {
-    label,
-    domain,
-    target: `${domain}/${label}`,
-    temporary: join(location.state, "launchd.plist"),
-    login: join(homedir(), "Library/LaunchAgents", `${label}.plist`)
-  };
-}
-async function loaded(target) {
-  try {
-    await launchctl(["print", target]);
-    return true;
-  } catch (error) {
-    const stderr = error.stderr ?? "";
-    if (/Could not find (?:domain|service|specified service)/i.test(stderr)) return false;
-    throw new Error(
-      `\u65E0\u6CD5\u67E5\u8BE2 launchd ${target}\uFF1A${failureDetail(error)}\uFF1B\u8BF7\u68C0\u67E5\u5F53\u524D\u7528\u6237\u7684 launchd \u6743\u9650`,
-      { cause: error }
-    );
-  }
-}
-async function guiSessionAvailable(location) {
-  return loaded(launchdPaths(location).domain);
-}
-async function loginRegistration(location) {
-  const installed = await readJson(
-    join(location.state, "service.json")
-  );
-  if (installed?.platform !== "darwin") return void 0;
-  if (installed.label !== launchdPaths(location).label && installed.label !== `dev.covro.${location.key}`)
-    throw new Error("\u767B\u5F55\u670D\u52A1\u8EAB\u4EFD\u4E0E\u5F53\u524D\u914D\u7F6E\u4E0D\u5339\u914D");
-  return installed;
-}
-async function loginServiceInstalled(location) {
-  return Boolean(await loginRegistration(location));
-}
-function launchdPlist(location, args, login) {
-  const { label } = launchdPaths(location, login ? `dev.covro.${location.key}` : void 0);
-  const environment = {
-    PATH: process.env.PATH ?? "/usr/bin:/bin",
-    COVRO_HOME: location.home,
-    ...process.env.CODEX_HOME ? { CODEX_HOME: process.env.CODEX_HOME } : {}
-  };
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0"><dict>
-<key>Label</key><string>${label}</string>
-<key>ProgramArguments</key><array>${args.map((arg) => `<string>${xml(arg)}</string>`).join("")}</array>
-<key>LimitLoadToSessionType</key><string>Aqua</string>
-<key>RunAtLoad</key><true/>
-${login ? "<key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict><key>ThrottleInterval</key><integer>30</integer>" : ""}
-<key>EnvironmentVariables</key><dict>${Object.entries(environment).map(([key, value]) => `<key>${key}</key><string>${xml(value)}</string>`).join("")}</dict>
-<key>StandardOutPath</key><string>${xml(location.log)}</string>
-<key>StandardErrorPath</key><string>${xml(location.log)}</string>
-</dict></plist>
-`;
-}
-async function unloadLaunchd(location) {
-  const { target, temporary } = launchdPaths(location);
-  const installed = await loginRegistration(location);
-  const targets = /* @__PURE__ */ new Set([
-    target,
-    ...installed ? [launchdPaths(location, installed.label).target] : []
-  ]);
-  for (const serviceTarget of targets) {
-    if (await loaded(serviceTarget)) {
-      try {
-        await launchctl(["bootout", serviceTarget]);
-      } catch (error) {
-        if (await loaded(serviceTarget)) throw error;
-      }
-    }
-  }
-  await rm(temporary, { force: true });
-}
-async function configureLaunchdLogin(location, entry, install) {
-  const { label, login } = launchdPaths(location, `dev.covro.${location.key}`);
-  const previous = await loginRegistration(location);
-  if (install) {
-    if (!await guiSessionAvailable(location))
-      throw new Error("\u542F\u7528\u767B\u5F55\u81EA\u542F\u9700\u8981\u5F53\u524D\u7528\u6237\u5DF2\u767B\u5F55 macOS \u684C\u9762");
-    await mkdir(dirname(login), { recursive: true });
-    await writeFile(
-      login,
-      launchdPlist(location, [process.execPath, entry, "run", "--config", location.config], true),
-      { mode: 384 }
-    );
-    await saveJson(join(location.state, "service.json"), { platform: "darwin", label });
-    if (previous && previous.label !== label)
-      await rm(launchdPaths(location, previous.label).login, { force: true });
-  } else {
-    if (previous) await rm(launchdPaths(location, previous.label).login, { force: true });
-    await rm(login, { force: true });
-    await rm(join(location.state, "service.json"), { force: true });
-  }
-}
-async function startLaunchd(location, entry) {
-  const installed = await loginRegistration(location);
-  const { domain, target, temporary, login } = launchdPaths(location, installed?.label);
-  if (!await guiSessionAvailable(location)) {
-    if (installed) throw new Error("\u5F53\u524D\u6CA1\u6709 macOS \u684C\u9762\u767B\u5F55\u4F1A\u8BDD\uFF0C\u65E0\u6CD5\u542F\u52A8 GUI \u767B\u5F55\u670D\u52A1");
-    return false;
-  }
-  await unloadLaunchd(location);
-  if (installed) {
-    await launchctl(["enable", target]);
-    await launchctl(["bootstrap", domain, login]);
-    return true;
-  }
-  const bridge = await environmentBridge(location.home);
-  try {
-    const runner = join(location.state, "launch-runner.mjs");
-    await writeFile(runner, launchRunner, { mode: 384 });
-    await writeFile(
-      temporary,
-      launchdPlist(
-        location,
-        [process.execPath, runner, bridge.path, entry, location.config],
-        false
-      ),
-      { mode: 384 }
-    );
-    await launchctl(["enable", target]);
-    await launchctl(["bootstrap", domain, temporary]);
-    await bridge.wait();
-    return true;
-  } catch (error) {
-    let cleanup = "";
-    try {
-      await unloadLaunchd(location);
-    } catch (cleanupError) {
-      cleanup = `\uFF1B\u6E05\u7406\u4EFB\u52A1\u5931\u8D25\uFF1A${failureDetail(cleanupError)}`;
-    }
-    throw new Error(
-      `Covro GUI \u540E\u53F0\u542F\u52A8\u5931\u8D25\uFF1A${failureDetail(error)}${cleanup}\uFF1B\u8FDB\u7A0B\u65E5\u5FD7\u4F4D\u4E8E ${location.log}`,
-      { cause: error }
-    );
-  } finally {
-    await bridge.close();
-  }
-}
-export {
-  configureLaunchdLogin,
-  guiSessionAvailable,
-  launchdPaths,
-  launchdPlist,
-  loginServiceInstalled,
-  startLaunchd,
-  unloadLaunchd
-};
-//# sourceMappingURL=launchd.js.map

package/dist/cli/launchd.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/cli/launchd.ts"],
-  "sourcesContent": ["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport { createHash } from 'node:crypto';\nimport { homedir } from 'node:os';\nimport { dirname, join } from 'node:path';\nimport { mkdir, rm, writeFile } from 'node:fs/promises';\nimport type { CovroPaths } from './paths.js';\nimport { environmentBridge, launchRunner } from './launch-environment.js';\nimport { readJson, saveJson } from '../updates/files.js';\n\nconst exec = promisify(execFile);\nconst launchctl = (args: string[]) =>\n  exec('/bin/launchctl', args, { timeout: 5000, maxBuffer: 2 * 1024 * 1024 });\nconst xml = (value: string) =>\n  value\n    .replaceAll('&', '&amp;')\n    .replaceAll('<', '&lt;')\n    .replaceAll('>', '&gt;')\n    .replaceAll('\"', '&quot;');\n\nfunction failureDetail(error: unknown) {\n  const failure = error as { killed?: boolean; stderr?: string };\n  if (failure.killed) return 'launchctl \u8BF7\u6C42\u8D85\u65F6';\n  return (failure.stderr?.trim() || (error instanceof Error ? error.message : '\u672A\u77E5\u9519\u8BEF')).slice(\n    0,\n    1024,\n  );\n}\n\nexport function launchdPaths(\n  location: CovroPaths,\n  label = `dev.covro.${location.key}.${createHash('sha256').update(location.home).digest('hex').slice(0, 12)}`,\n) {\n  const domain = `gui/${process.getuid!()}`;\n  return {\n    label,\n    domain,\n    target: `${domain}/${label}`,\n    temporary: join(location.state, 'launchd.plist'),\n    login: join(homedir(), 'Library/LaunchAgents', `${label}.plist`),\n  };\n}\n\nasync function loaded(target: string) {\n  try {\n    await launchctl(['print', target]);\n    return true;\n  } catch (error) {\n    const stderr = (error as { stderr?: string }).stderr ?? '';\n    if (/Could not find (?:domain|service|specified service)/i.test(stderr)) return false;\n    throw new Error(\n      `\u65E0\u6CD5\u67E5\u8BE2 launchd ${target}\uFF1A${failureDetail(error)}\uFF1B\u8BF7\u68C0\u67E5\u5F53\u524D\u7528\u6237\u7684 launchd \u6743\u9650`,\n      { cause: error },\n    );\n  }\n}\n\nexport async function guiSessionAvailable(location: CovroPaths) {\n  return loaded(launchdPaths(location).domain);\n}\n\nasync function loginRegistration(location: CovroPaths) {\n  const installed = await readJson<{ platform: string; label: string }>(\n    join(location.state, 'service.json'),\n  );\n  if (installed?.platform !== 'darwin') return undefined;\n  // Older releases used a config-only label; keep those installed login services operable.\n  if (\n    installed.label !== launchdPaths(location).label &&\n    installed.label !== `dev.covro.${location.key}`\n  )\n    throw new Error('\u767B\u5F55\u670D\u52A1\u8EAB\u4EFD\u4E0E\u5F53\u524D\u914D\u7F6E\u4E0D\u5339\u914D');\n  return installed;\n}\n\nexport async function loginServiceInstalled(location: CovroPaths) {\n  return Boolean(await loginRegistration(location));\n}\n\nexport function launchdPlist(location: CovroPaths, args: string[], login: boolean) {\n  const { label } = launchdPaths(location, login ? `dev.covro.${location.key}` : undefined);\n  const environment = {\n    PATH: process.env.PATH ?? '/usr/bin:/bin',\n    COVRO_HOME: location.home,\n    ...(process.env.CODEX_HOME ? { CODEX_HOME: process.env.CODEX_HOME } : {}),\n  };\n  return `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\"><dict>\n<key>Label</key><string>${label}</string>\n<key>ProgramArguments</key><array>${args.map((arg) => `<string>${xml(arg)}</string>`).join('')}</array>\n<key>LimitLoadToSessionType</key><string>Aqua</string>\n<key>RunAtLoad</key><true/>\n${login ? '<key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict><key>ThrottleInterval</key><integer>30</integer>' : ''}\n<key>EnvironmentVariables</key><dict>${Object.entries(environment)\n    .map(([key, value]) => `<key>${key}</key><string>${xml(value)}</string>`)\n    .join('')}</dict>\n<key>StandardOutPath</key><string>${xml(location.log)}</string>\n<key>StandardErrorPath</key><string>${xml(location.log)}</string>\n</dict></plist>\n`;\n}\n\nexport async function unloadLaunchd(location: CovroPaths) {\n  const { target, temporary } = launchdPaths(location);\n  const installed = await loginRegistration(location);\n  const targets = new Set([\n    target,\n    ...(installed ? [launchdPaths(location, installed.label).target] : []),\n  ]);\n  for (const serviceTarget of targets) {\n    if (await loaded(serviceTarget)) {\n      try {\n        await launchctl(['bootout', serviceTarget]);\n      } catch (error) {\n        if (await loaded(serviceTarget)) throw error;\n      }\n    }\n  }\n  await rm(temporary, { force: true });\n}\n\nexport async function configureLaunchdLogin(location: CovroPaths, entry: string, install: boolean) {\n  // Preserve the installed label so older CLIs can still uninstall it after a rollback.\n  const { label, login } = launchdPaths(location, `dev.covro.${location.key}`);\n  const previous = await loginRegistration(location);\n  if (install) {\n    if (!(await guiSessionAvailable(location)))\n      throw new Error('\u542F\u7528\u767B\u5F55\u81EA\u542F\u9700\u8981\u5F53\u524D\u7528\u6237\u5DF2\u767B\u5F55 macOS \u684C\u9762');\n    await mkdir(dirname(login), { recursive: true });\n    await writeFile(\n      login,\n      launchdPlist(location, [process.execPath, entry, 'run', '--config', location.config], true),\n      { mode: 0o600 },\n    );\n    await saveJson(join(location.state, 'service.json'), { platform: 'darwin', label });\n    if (previous && previous.label !== label)\n      await rm(launchdPaths(location, previous.label).login, { force: true });\n  } else {\n    if (previous) await rm(launchdPaths(location, previous.label).login, { force: true });\n    await rm(login, { force: true });\n    await rm(join(location.state, 'service.json'), { force: true });\n  }\n}\n\n/** Caller holds the per-instance lifecycle lock and has verified the daemon is stopped. */\nexport async function startLaunchd(location: CovroPaths, entry: string) {\n  const installed = await loginRegistration(location);\n  const { domain, target, temporary, login } = launchdPaths(location, installed?.label);\n  if (!(await guiSessionAvailable(location))) {\n    if (installed) throw new Error('\u5F53\u524D\u6CA1\u6709 macOS \u684C\u9762\u767B\u5F55\u4F1A\u8BDD\uFF0C\u65E0\u6CD5\u542F\u52A8 GUI \u767B\u5F55\u670D\u52A1');\n    return false;\n  }\n  await unloadLaunchd(location);\n  if (installed) {\n    await launchctl(['enable', target]);\n    await launchctl(['bootstrap', domain, login]);\n    return true;\n  }\n  const bridge = await environmentBridge(location.home);\n  try {\n    const runner = join(location.state, 'launch-runner.mjs');\n    await writeFile(runner, launchRunner, { mode: 0o600 });\n    await writeFile(\n      temporary,\n      launchdPlist(\n        location,\n        [process.execPath, runner, bridge.path, entry, location.config],\n        false,\n      ),\n      { mode: 0o600 },\n    );\n    await launchctl(['enable', target]);\n    await launchctl(['bootstrap', domain, temporary]);\n    await bridge.wait();\n    return true;\n  } catch (error) {\n    let cleanup = '';\n    try {\n      await unloadLaunchd(location);\n    } catch (cleanupError) {\n      cleanup = `\uFF1B\u6E05\u7406\u4EFB\u52A1\u5931\u8D25\uFF1A${failureDetail(cleanupError)}`;\n    }\n    throw new Error(\n      `Covro GUI \u540E\u53F0\u542F\u52A8\u5931\u8D25\uFF1A${failureDetail(error)}${cleanup}\uFF1B\u8FDB\u7A0B\u65E5\u5FD7\u4F4D\u4E8E ${location.log}`,\n      { cause: error },\n    );\n  } finally {\n    await bridge.close();\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAC9B,SAAS,OAAO,IAAI,iBAAiB;AAErC,SAAS,mBAAmB,oBAAoB;AAChD,SAAS,UAAU,gBAAgB;AAEnC,MAAM,OAAO,UAAU,QAAQ;AAC/B,MAAM,YAAY,CAAC,SACjB,KAAK,kBAAkB,MAAM,EAAE,SAAS,KAAM,WAAW,IAAI,OAAO,KAAK,CAAC;AAC5E,MAAM,MAAM,CAAC,UACX,MACG,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,QAAQ;AAE7B,SAAS,cAAc,OAAgB;AACrC,QAAM,UAAU;AAChB,MAAI,QAAQ,OAAQ,QAAO;AAC3B,UAAQ,QAAQ,QAAQ,KAAK,MAAM,iBAAiB,QAAQ,MAAM,UAAU,6BAAS;AAAA,IACnF;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,aACd,UACA,QAAQ,aAAa,SAAS,GAAG,IAAI,WAAW,QAAQ,EAAE,OAAO,SAAS,IAAI,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC,IAC1G;AACA,QAAM,SAAS,OAAO,QAAQ,OAAQ,CAAC;AACvC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ,GAAG,MAAM,IAAI,KAAK;AAAA,IAC1B,WAAW,KAAK,SAAS,OAAO,eAAe;AAAA,IAC/C,OAAO,KAAK,QAAQ,GAAG,wBAAwB,GAAG,KAAK,QAAQ;AAAA,EACjE;AACF;AAEA,eAAe,OAAO,QAAgB;AACpC,MAAI;AACF,UAAM,UAAU,CAAC,SAAS,MAAM,CAAC;AACjC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,UAAM,SAAU,MAA8B,UAAU;AACxD,QAAI,uDAAuD,KAAK,MAAM,EAAG,QAAO;AAChF,UAAM,IAAI;AAAA,MACR,oCAAgB,MAAM,SAAI,cAAc,KAAK,CAAC;AAAA,MAC9C,EAAE,OAAO,MAAM;AAAA,IACjB;AAAA,EACF;AACF;AAEA,eAAsB,oBAAoB,UAAsB;AAC9D,SAAO,OAAO,aAAa,QAAQ,EAAE,MAAM;AAC7C;AAEA,eAAe,kBAAkB,UAAsB;AACrD,QAAM,YAAY,MAAM;AAAA,IACtB,KAAK,SAAS,OAAO,cAAc;AAAA,EACrC;AACA,MAAI,WAAW,aAAa,SAAU,QAAO;AAE7C,MACE,UAAU,UAAU,aAAa,QAAQ,EAAE,SAC3C,UAAU,UAAU,aAAa,SAAS,GAAG;AAE7C,UAAM,IAAI,MAAM,sFAAgB;AAClC,SAAO;AACT;AAEA,eAAsB,sBAAsB,UAAsB;AAChE,SAAO,QAAQ,MAAM,kBAAkB,QAAQ,CAAC;AAClD;AAEO,SAAS,aAAa,UAAsB,MAAgB,OAAgB;AACjF,QAAM,EAAE,MAAM,IAAI,aAAa,UAAU,QAAQ,aAAa,SAAS,GAAG,KAAK,MAAS;AACxF,QAAM,cAAc;AAAA,IAClB,MAAM,QAAQ,IAAI,QAAQ;AAAA,IAC1B,YAAY,SAAS;AAAA,IACrB,GAAI,QAAQ,IAAI,aAAa,EAAE,YAAY,QAAQ,IAAI,WAAW,IAAI,CAAC;AAAA,EACzE;AACA,SAAO;AAAA;AAAA;AAAA,0BAGiB,KAAK;AAAA,oCACK,KAAK,IAAI,CAAC,QAAQ,WAAW,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;AAAA;AAAA;AAAA,EAG5F,QAAQ,uHAAuH,EAAE;AAAA,uCAC5F,OAAO,QAAQ,WAAW,EAC5D,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,QAAQ,GAAG,iBAAiB,IAAI,KAAK,CAAC,WAAW,EACvE,KAAK,EAAE,CAAC;AAAA,oCACuB,IAAI,SAAS,GAAG,CAAC;AAAA,sCACf,IAAI,SAAS,GAAG,CAAC;AAAA;AAAA;AAGvD;AAEA,eAAsB,cAAc,UAAsB;AACxD,QAAM,EAAE,QAAQ,UAAU,IAAI,aAAa,QAAQ;AACnD,QAAM,YAAY,MAAM,kBAAkB,QAAQ;AAClD,QAAM,UAAU,oBAAI,IAAI;AAAA,IACtB;AAAA,IACA,GAAI,YAAY,CAAC,aAAa,UAAU,UAAU,KAAK,EAAE,MAAM,IAAI,CAAC;AAAA,EACtE,CAAC;AACD,aAAW,iBAAiB,SAAS;AACnC,QAAI,MAAM,OAAO,aAAa,GAAG;AAC/B,UAAI;AACF,cAAM,UAAU,CAAC,WAAW,aAAa,CAAC;AAAA,MAC5C,SAAS,OAAO;AACd,YAAI,MAAM,OAAO,aAAa,EAAG,OAAM;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AACA,QAAM,GAAG,WAAW,EAAE,OAAO,KAAK,CAAC;AACrC;AAEA,eAAsB,sBAAsB,UAAsB,OAAe,SAAkB;AAEjG,QAAM,EAAE,OAAO,MAAM,IAAI,aAAa,UAAU,aAAa,SAAS,GAAG,EAAE;AAC3E,QAAM,WAAW,MAAM,kBAAkB,QAAQ;AACjD,MAAI,SAAS;AACX,QAAI,CAAE,MAAM,oBAAoB,QAAQ;AACtC,YAAM,IAAI,MAAM,+GAA0B;AAC5C,UAAM,MAAM,QAAQ,KAAK,GAAG,EAAE,WAAW,KAAK,CAAC;AAC/C,UAAM;AAAA,MACJ;AAAA,MACA,aAAa,UAAU,CAAC,QAAQ,UAAU,OAAO,OAAO,YAAY,SAAS,MAAM,GAAG,IAAI;AAAA,MAC1F,EAAE,MAAM,IAAM;AAAA,IAChB;AACA,UAAM,SAAS,KAAK,SAAS,OAAO,cAAc,GAAG,EAAE,UAAU,UAAU,MAAM,CAAC;AAClF,QAAI,YAAY,SAAS,UAAU;AACjC,YAAM,GAAG,aAAa,UAAU,SAAS,KAAK,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,EAC1E,OAAO;AACL,QAAI,SAAU,OAAM,GAAG,aAAa,UAAU,SAAS,KAAK,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC;AACpF,UAAM,GAAG,OAAO,EAAE,OAAO,KAAK,CAAC;AAC/B,UAAM,GAAG,KAAK,SAAS,OAAO,cAAc,GAAG,EAAE,OAAO,KAAK,CAAC;AAAA,EAChE;AACF;AAGA,eAAsB,aAAa,UAAsB,OAAe;AACtE,QAAM,YAAY,MAAM,kBAAkB,QAAQ;AAClD,QAAM,EAAE,QAAQ,QAAQ,WAAW,MAAM,IAAI,aAAa,UAAU,WAAW,KAAK;AACpF,MAAI,CAAE,MAAM,oBAAoB,QAAQ,GAAI;AAC1C,QAAI,UAAW,OAAM,IAAI,MAAM,gIAAiC;AAChE,WAAO;AAAA,EACT;AACA,QAAM,cAAc,QAAQ;AAC5B,MAAI,WAAW;AACb,UAAM,UAAU,CAAC,UAAU,MAAM,CAAC;AAClC,UAAM,UAAU,CAAC,aAAa,QAAQ,KAAK,CAAC;AAC5C,WAAO;AAAA,EACT;AACA,QAAM,SAAS,MAAM,kBAAkB,SAAS,IAAI;AACpD,MAAI;AACF,UAAM,SAAS,KAAK,SAAS,OAAO,mBAAmB;AACvD,UAAM,UAAU,QAAQ,cAAc,EAAE,MAAM,IAAM,CAAC;AACrD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,CAAC,QAAQ,UAAU,QAAQ,OAAO,MAAM,OAAO,SAAS,MAAM;AAAA,QAC9D;AAAA,MACF;AAAA,MACA,EAAE,MAAM,IAAM;AAAA,IAChB;AACA,UAAM,UAAU,CAAC,UAAU,MAAM,CAAC;AAClC,UAAM,UAAU,CAAC,aAAa,QAAQ,SAAS,CAAC;AAChD,UAAM,OAAO,KAAK;AAClB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,UAAU;AACd,QAAI;AACF,YAAM,cAAc,QAAQ;AAAA,IAC9B,SAAS,cAAc;AACrB,gBAAU,mDAAW,cAAc,YAAY,CAAC;AAAA,IAClD;AACA,UAAM,IAAI;AAAA,MACR,uDAAoB,cAAc,KAAK,CAAC,GAAG,OAAO,8CAAW,SAAS,GAAG;AAAA,MACzE,EAAE,OAAO,MAAM;AAAA,IACjB;AAAA,EACF,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;",
-  "names": []
-}