@kaitranntt/ccs 8.1.4 → 8.2.0-dev.2

package/dist/commands/bar/install-subcommand.js

@@ -0,0 +1,383 @@
+"use strict";
+/**
+ * `ccs bar install` — download the CCS Bar app from the floating
+ * `ccs-bar-latest` GitHub release tag and install to ~/Applications.
+ *
+ * Intentionally uses a FLOATING tag (not the exact CLI version) so the
+ * Swift app can be rebuilt and published independently. After install the
+ * handler calls GET /api/overview to verify version compatibility and warns
+ * (but does not hard-fail) on mismatch.
+ *
+ * Mirrors the download/version-pin pattern in src/cliproxy/binary-manager.ts.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleBarInstall = exports.validateDownloadUrl = void 0;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const config_loader_facade_1 = require("../../config/config-loader-facade");
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Floating release tag — never pin to exact CLI semver. */
+const BAR_RELEASE_TAG = 'ccs-bar-latest';
+const BAR_APP_NAME = 'CCS Bar.app';
+const BAR_ASSET_NAME = 'CCS-Bar.app.zip';
+const BAR_GITHUB_REPO = 'kaitranntt/ccs';
+/**
+ * Allowlist of hostnames from which we will accept asset downloads.
+ * GitHub releases redirect from github.com to objects.githubusercontent.com.
+ *
+ * TODO(checksum-v2): once release assets ship a checksums.txt/.sha256 file,
+ * wire SHA-256 verification here. The download URL is already validated for
+ * host+HTTPS as a v1 minimum guard. The verifier hook below is the intended
+ * extension point.
+ */
+const DOWNLOAD_HOST_ALLOWLIST = [
+    'github.com',
+    'objects.githubusercontent.com',
+];
+// ---------------------------------------------------------------------------
+// Host allowlist validation (Finding #9)
+// ---------------------------------------------------------------------------
+/**
+ * Validate that a download URL is https and its hostname is in the allowlist
+ * (exact match or *.githubusercontent.com wildcard).
+ * Throws a descriptive Error if validation fails.
+ */
+function validateDownloadUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error(`Download URL is not a valid URL: ${url}`);
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new Error(`Download URL must use HTTPS, got: ${parsed.protocol} for ${url}`);
+    }
+    const host = parsed.hostname.toLowerCase();
+    const allowed = DOWNLOAD_HOST_ALLOWLIST.includes(host) || host.endsWith('.githubusercontent.com');
+    if (!allowed) {
+        throw new Error(`Download URL hostname "${host}" is not in the trusted allowlist ` +
+            `(${DOWNLOAD_HOST_ALLOWLIST.join(', ')}, *.githubusercontent.com). ` +
+            `Refusing to download from untrusted host.`);
+    }
+}
+exports.validateDownloadUrl = validateDownloadUrl;
+// ---------------------------------------------------------------------------
+// Production implementation helpers
+// ---------------------------------------------------------------------------
+async function defaultFetchReleaseAsset(tag, asset) {
+    const { request } = await Promise.resolve().then(() => __importStar(require('undici')));
+    const apiUrl = `https://api.github.com/repos/${BAR_GITHUB_REPO}/releases/tags/${tag}`;
+    const { statusCode, body } = await request(apiUrl, {
+        headers: {
+            'User-Agent': 'ccs-cli',
+            Accept: 'application/vnd.github+json',
+        },
+    });
+    if (statusCode !== 200) {
+        throw new Error(`GitHub API returned ${statusCode} for tag ${tag}`);
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const release = (await body.json());
+    const tagName = release.tag_name ?? tag;
+    // Strip leading 'v' for the version pin file.
+    const version = tagName.replace(/^v/, '');
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const found = release.assets.find((a) => a.name === asset);
+    if (!found) {
+        throw new Error(`Asset "${asset}" not found in release ${tag}`);
+    }
+    return { downloadUrl: found.browser_download_url, version };
+}
+/**
+ * Download a zip from `url` (following up to 5 GitHub 302 redirects, re-validating
+ * each hop's Location hostname) and extract its contents into `dest`.
+ *
+ * Fixes applied:
+ * - Fix #6: maxRedirections:0 + manual redirect following so every hop's Location
+ *   header is passed through validateDownloadUrl before following it.
+ *   The previous maxRedirections:5 let undici follow redirects to ANY host unchecked.
+ * - Fix #14: list zip entries with `unzip -l` before extracting; reject the archive
+ *   if any entry path contains ".." or starts with "/" (zip-slip guard).
+ * - Finding #11: check `statusCode` and throw a descriptive error before streaming.
+ * - Finding #9: validate host+HTTPS before making the first request.
+ */
+async function defaultDownloadAndExtract(url, dest) {
+    const { request } = await Promise.resolve().then(() => __importStar(require('undici')));
+    const { createWriteStream, mkdirSync } = fs;
+    const { promisify } = await Promise.resolve().then(() => __importStar(require('util')));
+    const { pipeline } = await Promise.resolve().then(() => __importStar(require('stream')));
+    const streamPipeline = promisify(pipeline);
+    const { execFile } = await Promise.resolve().then(() => __importStar(require('child_process')));
+    const execFileAsync = promisify(execFile);
+    // Validate initial URL (Finding #9)
+    validateDownloadUrl(url);
+    mkdirSync(dest, { recursive: true });
+    // Fix #6: follow redirects manually so each hop is re-validated.
+    const MAX_REDIRECTS = 5;
+    let currentUrl = url;
+    let redirectsFollowed = 0;
+    while (true) {
+        const { statusCode, headers, body } = await request(currentUrl, {
+            maxRedirections: 0, // disable undici's auto-follow; we follow manually
+        });
+        if (statusCode >= 300 && statusCode < 400) {
+            const location = Array.isArray(headers['location'])
+                ? headers['location'][0]
+                : headers['location'];
+            if (!location) {
+                throw new Error(`Redirect (HTTP ${statusCode}) from ${currentUrl} has no Location header`);
+            }
+            // Resolve relative redirects against the current URL
+            const resolved = new URL(location, currentUrl).toString();
+            // Re-validate the redirect target — this is the key fix for #6
+            validateDownloadUrl(resolved);
+            if (redirectsFollowed >= MAX_REDIRECTS) {
+                throw new Error(`Too many redirects (>${MAX_REDIRECTS}) while downloading ${url}`);
+            }
+            // Drain the body to free the socket before following the redirect
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            await body.dump?.();
+            currentUrl = resolved;
+            redirectsFollowed++;
+            continue;
+        }
+        if (statusCode !== 200) {
+            throw new Error(`Download failed: HTTP ${statusCode} for ${currentUrl}`);
+        }
+        const tmpZip = path.join(os.tmpdir(), `ccs-bar-${Date.now()}.zip`);
+        // Stream body to tmpZip
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        await streamPipeline(body, createWriteStream(tmpZip));
+        // Fix #14: zip-slip guard — inspect entries before extraction.
+        // `unzip -l` lists entries in a machine-readable format; we scan for ".." or
+        // absolute paths that would escape the destination directory.
+        try {
+            const { stdout: listing } = await execFileAsync('unzip', ['-l', tmpZip]);
+            const lines = listing.split('\n');
+            for (const line of lines) {
+                // Entry lines look like: "  <size>  <date> <time>  <path>"
+                // We extract the path from the last whitespace-delimited field.
+                const match = /^\s+\d+\s+[\d-]+\s+[\d:]+\s+(.+)$/.exec(line);
+                if (!match || !match[1])
+                    continue;
+                const entryPath = match[1].trim();
+                if (!entryPath || entryPath.endsWith('/'))
+                    continue; // skip directory entries
+                // Reject absolute paths and paths with traversal components
+                if (path.isAbsolute(entryPath) || entryPath.includes('..')) {
+                    try {
+                        fs.unlinkSync(tmpZip);
+                    }
+                    catch {
+                        /* ignore */
+                    }
+                    throw new Error(`Zip-slip detected: archive entry "${entryPath}" contains a path traversal ` +
+                        `component. Refusing to extract.`);
+                }
+            }
+        }
+        catch (err) {
+            // If the guard itself throws (e.g. zip-slip detected above), propagate it.
+            // If it's a system error (unzip not available), let extraction proceed and
+            // surface the issue then.
+            if (err.message?.includes('Zip-slip'))
+                throw err;
+            // Warn but continue — extraction will likely also fail if unzip is missing
+            console.error(`[!] Zip entry scan failed (will attempt extraction): ${err.message}`);
+        }
+        // Extract the zip into dest
+        await execFileAsync('unzip', ['-o', tmpZip, '-d', dest]);
+        // Clean up the temp archive
+        try {
+            fs.unlinkSync(tmpZip);
+        }
+        catch {
+            /* ignore */
+        }
+        break;
+    }
+}
+/**
+ * Call GET {baseUrl}/api/overview and compare server version against the
+ * installed bar version. Returns compat=false whenever the comparison cannot
+ * be made (server unreachable, version strings unparseable, etc.).
+ *
+ * Fix for Finding #10: replaces the phantom check that always returned true.
+ * Compatible is defined as same semver major (0 vs 0, 1 vs 1, etc.).
+ */
+async function defaultVerifyCompat(baseUrl, installedVersion) {
+    try {
+        const { request } = await Promise.resolve().then(() => __importStar(require('undici')));
+        const { statusCode, body } = await request(`${baseUrl}/api/overview`, {
+            headers: { 'User-Agent': 'ccs-cli' },
+        });
+        if (statusCode !== 200) {
+            console.log(`[!] Version compatibility check failed: /api/overview returned HTTP ${statusCode}.`);
+            return { version: 'unknown', compatible: false };
+        }
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const data = (await body.json());
+        const serverVersion = data.version ?? 'unknown';
+        if (serverVersion === 'unknown') {
+            console.log('[!] Version compatibility: server did not report a version.');
+            return { version: serverVersion, compatible: false };
+        }
+        // Parse installed version major from the pinned version string.
+        const installedMajorRaw = installedVersion.split('.')[0];
+        const serverMajorRaw = serverVersion.split('.')[0];
+        const installedMajor = parseInt(installedMajorRaw ?? '', 10);
+        const serverMajor = parseInt(serverMajorRaw ?? '', 10);
+        if (isNaN(installedMajor) || isNaN(serverMajor)) {
+            console.log(`[!] Version compatibility: cannot parse major versions ` +
+                `(installed="${installedVersion}", server="${serverVersion}").`);
+            return { version: serverVersion, compatible: false };
+        }
+        const compatible = installedMajor === serverMajor;
+        return { version: serverVersion, compatible };
+    }
+    catch {
+        // Server unreachable — warn but do not claim compatible.
+        return { version: 'unknown', compatible: false };
+    }
+}
+function defaultGetCcsDir() {
+    return (0, config_loader_facade_1.getCcsDir)();
+}
+function defaultGetAppsDir() {
+    return path.join(os.homedir(), 'Applications');
+}
+// ---------------------------------------------------------------------------
+// Version pin helpers
+// ---------------------------------------------------------------------------
+function getBarVersionFilePath(ccsDir) {
+    return path.join(ccsDir, 'bar', '.version');
+}
+function pinBarVersion(ccsDir, version) {
+    const versionFile = getBarVersionFilePath(ccsDir);
+    fs.mkdirSync(path.dirname(versionFile), { recursive: true });
+    fs.writeFileSync(versionFile, version);
+}
+// ---------------------------------------------------------------------------
+// Implementation
+// ---------------------------------------------------------------------------
+async function handleBarInstall(_args, deps = {}) {
+    const fetchReleaseAsset = deps.fetchReleaseAsset ?? defaultFetchReleaseAsset;
+    const downloadAndExtract = deps.downloadAndExtract ?? defaultDownloadAndExtract;
+    const verifyCompat = deps.verifyCompat ?? defaultVerifyCompat;
+    const ccsDir = (deps.getCcsDir ?? defaultGetCcsDir)();
+    const appsDir = (deps.getAppsDir ?? defaultGetAppsDir)();
+    console.log('[i] Fetching CCS Bar release info...');
+    // 1. Resolve the floating tag → download URL + version.
+    let releaseInfo;
+    try {
+        releaseInfo = await fetchReleaseAsset(BAR_RELEASE_TAG, BAR_ASSET_NAME);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[X] Failed to fetch release asset: ${msg}`);
+        console.error('[i] Check your network connection and try again.');
+        return;
+    }
+    const { downloadUrl, version } = releaseInfo;
+    console.log(`[i] Installing CCS Bar v${version} from ${BAR_RELEASE_TAG}...`);
+    // 2. Download and extract into ~/Applications.
+    try {
+        await downloadAndExtract(downloadUrl, appsDir);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[X] Download or extraction failed: ${msg}`);
+        return;
+    }
+    // 3. Finding #12: assert that the expected .app bundle was actually extracted
+    //    before reporting success.
+    const appPath = path.join(appsDir, BAR_APP_NAME);
+    if (!fs.existsSync(appPath)) {
+        // Report what was actually extracted to help diagnose archive issues.
+        let extracted = [];
+        try {
+            extracted = fs.readdirSync(appsDir);
+        }
+        catch {
+            /* ignore */
+        }
+        const found = extracted.length > 0 ? extracted.join(', ') : '(none)';
+        console.error(`[X] Extraction succeeded but "${BAR_APP_NAME}" was not found in ${appsDir}.`);
+        console.error(`[i] Files found in ${appsDir}: ${found}`);
+        return;
+    }
+    // 4. Pin the installed version to ~/.ccs/bar/.version.
+    try {
+        pinBarVersion(ccsDir, version);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[!] Could not write version pin: ${msg}`);
+        // Non-fatal — continue.
+    }
+    console.log(`[OK] CCS Bar v${version} installed to ${appsDir}/${BAR_APP_NAME}`);
+    // 5. Version-compat handshake via /api/overview.
+    //    Read bar.json for baseUrl if present; otherwise fall back to localhost:3000.
+    const barJsonPath = path.join(ccsDir, 'bar.json');
+    let baseUrl = 'http://127.0.0.1:3000';
+    try {
+        const raw = fs.readFileSync(barJsonPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (parsed.baseUrl)
+            baseUrl = parsed.baseUrl;
+    }
+    catch {
+        /* bar.json absent — use fallback */
+    }
+    try {
+        // Pass the pinned version so verifyCompat can do a real major-version comparison.
+        const compat = await verifyCompat(baseUrl, version);
+        if (!compat.compatible) {
+            console.log(`[!] Version mismatch: CCS server reports v${compat.version}, ` +
+                `app is v${version}. Some features may not work until you restart ` +
+                '`ccs bar` or update CCS.');
+        }
+        else {
+            console.log(`[OK] Version compatibility confirmed (server: v${compat.version}).`);
+        }
+    }
+    catch {
+        console.log('[!] Could not verify version compatibility (server may not be running).');
+        console.log('[i] Run `ccs bar` to start the server and recheck.');
+    }
+    // 6. Print Gatekeeper guidance for ad-hoc/unsigned builds.
+    console.log('');
+    console.log('[i] Gatekeeper note (ad-hoc build):');
+    console.log('    If macOS says the app is "damaged" or "unverified", run:');
+    console.log(`      xattr -dr com.apple.quarantine "${path.join(appsDir, BAR_APP_NAME)}"`);
+    console.log('    Or right-click the app and select Open.');
+}
+exports.handleBarInstall = handleBarInstall;
+//# sourceMappingURL=install-subcommand.js.map

package/dist/commands/bar/install-subcommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-subcommand.js","sourceRoot":"","sources":["../../../src/commands/bar/install-subcommand.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,4EAA8D;AAE9D,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,4DAA4D;AAC5D,MAAM,eAAe,GAAG,gBAAgB,CAAC;AACzC,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAA0B;IACrD,YAAY;IACZ,+BAA+B;CAChC,CAAC;AAwCF,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,QAAQ,QAAQ,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GACV,uBAAoC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAElG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,oCAAoC;YAChE,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B;YACpE,2CAA2C,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC;AAvBD,kDAuBC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,KAAK,UAAU,wBAAwB,CAAC,GAAW,EAAE,KAAa;IAChE,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,gCAAgC,eAAe,kBAAkB,GAAG,EAAE,CAAC;IACtF,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE;QACjD,OAAO,EAAE;YACP,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,6BAA6B;SACtC;KACF,CAAC,CAAC;IAEH,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,YAAY,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAQ,CAAC;IAC3C,MAAM,OAAO,GAAW,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC;IAChD,8CAA8C;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAE1C,8DAA8D;IAC9D,MAAM,KAAK,GAAI,OAAO,CAAC,MAAgB,CAAC,IAAI,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IACxF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,0BAA0B,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,oBAA8B,EAAE,OAAO,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,yBAAyB,CAAC,GAAW,EAAE,IAAY;IAChE,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;IAC3C,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,MAAM,GAAC,CAAC;IAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;IACnD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE1C,oCAAoC;IACpC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEzB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAErC,iEAAiE;IACjE,MAAM,aAAa,GAAG,CAAC,CAAC;IACxB,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE;YAC9D,eAAe,EAAE,CAAC,EAAE,mDAAmD;SACxE,CAAC,CAAC;QAEH,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACjD,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACxB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAExB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,kBAAkB,UAAU,UAAU,UAAU,yBAAyB,CAAC,CAAC;YAC7F,CAAC;YAED,qDAAqD;YACrD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;YAE1D,+DAA+D;YAC/D,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAE9B,IAAI,iBAAiB,IAAI,aAAa,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,wBAAwB,aAAa,uBAAuB,GAAG,EAAE,CAAC,CAAC;YACrF,CAAC;YAED,kEAAkE;YAClE,8DAA8D;YAC9D,MAAO,IAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7B,UAAU,GAAG,QAAQ,CAAC;YACtB,iBAAiB,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,QAAQ,UAAU,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEnE,wBAAwB;QACxB,8DAA8D;QAC9D,MAAM,cAAc,CAAC,IAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7D,+DAA+D;QAC/D,6EAA6E;QAC7E,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACzE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,2DAA2D;gBAC3D,gEAAgE;gBAChE,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,yBAAyB;gBAE9E,4DAA4D;gBAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC;wBACH,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,YAAY;oBACd,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,qCAAqC,SAAS,8BAA8B;wBAC1E,iCAAiC,CACpC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,2EAA2E;YAC3E,0BAA0B;YAC1B,IAAK,GAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5D,2EAA2E;YAC3E,OAAO,CAAC,KAAK,CACX,wDAAyD,GAAa,CAAC,OAAO,EAAE,CACjF,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAEzD,4BAA4B;QAC5B,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QAED,MAAM;IACR,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB,CAChC,OAAe,EACf,gBAAwB;IAExB,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;QAC3C,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,eAAe,EAAE;YACpE,OAAO,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE;SACrC,CAAC,CAAC;QACH,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,uEAAuE,UAAU,GAAG,CACrF,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACnD,CAAC;QACD,8DAA8D;QAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAQ,CAAC;QACxC,MAAM,aAAa,GAAY,IAAI,CAAC,OAAkB,IAAI,SAAS,CAAC;QAEpE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACvD,CAAC;QAED,gEAAgE;QAChE,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,QAAQ,CAAC,iBAAiB,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,QAAQ,CAAC,cAAc,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEvD,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CACT,yDAAyD;gBACvD,eAAe,gBAAgB,cAAc,aAAa,KAAK,CAClE,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,KAAK,WAAW,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAA,gCAAS,GAAE,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,SAAS,qBAAqB,CAAC,MAAc;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,OAAe;IACpD,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAClD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAEvE,KAAK,UAAU,gBAAgB,CACpC,KAAe,EACf,OAA6B,EAAE;IAE/B,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC7E,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,yBAAyB,CAAC;IAChF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC,EAAE,CAAC;IAEzD,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAEpD,wDAAwD;IACxD,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,iBAAiB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,SAAS,eAAe,KAAK,CAAC,CAAC;IAE7E,+CAA+C;IAC/C,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,+BAA+B;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,sEAAsE;QACtE,IAAI,SAAS,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrE,OAAO,CAAC,KAAK,CAAC,iCAAiC,YAAY,sBAAsB,OAAO,GAAG,CAAC,CAAC;QAC7F,OAAO,CAAC,KAAK,CAAC,sBAAsB,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,uDAAuD;IACvD,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACzD,wBAAwB;IAC1B,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,iBAAiB,OAAO,IAAI,YAAY,EAAE,CAAC,CAAC;IAEhF,iDAAiD;IACjD,kFAAkF;IAClF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,OAAO,GAAG,uBAAuB,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,IAAI,CAAC;QACH,kFAAkF;QAClF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,6CAA6C,MAAM,CAAC,OAAO,IAAI;gBAC7D,WAAW,OAAO,iDAAiD;gBACnE,0BAA0B,CAC7B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kDAAkD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACpE,CAAC;IAED,2DAA2D;IAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,yCAAyC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;AAC7D,CAAC;AAlGD,4CAkGC"}

package/dist/commands/bar/launch-subcommand.d.ts

@@ -0,0 +1,38 @@
+/**
+ * `ccs bar launch` — ensure web-server is up, write ~/.ccs/bar.json, open the app.
+ *
+ * bar.json shape (v1):
+ *   { baseUrl: string, port: number, authMode: "loopback" }
+ *
+ * authMode is always "loopback" for v1 (auth-enabled unsupported until v1.1).
+ */
+export interface BarDiscoveryJson {
+    baseUrl: string;
+    port: number;
+    authMode: 'loopback';
+}
+export interface DashboardInfo {
+    port: number;
+    baseUrl: string;
+}
+export interface LaunchDeps {
+    /**
+     * Ensure the CCS web-server / dashboard is running.
+     * Returns { port, baseUrl } of the running server.
+     * Throws if the server cannot be started (degraded path).
+     */
+    ensureDashboard: () => Promise<DashboardInfo>;
+    /** Open the installed .app bundle. Throws if the app is not found. */
+    openApp: (appPath: string) => Promise<void>;
+    /** Returns path to ~/.ccs (respects CCS_HOME for test isolation). */
+    getCcsDir: () => string;
+    /** Full path where the .app should be installed, e.g. ~/Applications/CCS Bar.app */
+    appInstallPath: string;
+}
+/**
+ * Read the port recorded in an existing bar.json.
+ * Returns null when the file is absent or malformed.
+ */
+export declare function resolveBarPort(ccsDir: string): number | null;
+export declare function handleBarLaunch(_args: string[], deps?: Partial<LaunchDeps>): Promise<void>;
+//# sourceMappingURL=launch-subcommand.d.ts.map

package/dist/commands/bar/launch-subcommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-subcommand.d.ts","sourceRoot":"","sources":["../../../src/commands/bar/launch-subcommand.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,eAAe,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,sEAAsE;IACtE,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,qEAAqE;IACrE,SAAS,EAAE,MAAM,MAAM,CAAC;IACxB,oFAAoF;IACpF,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS5D;AA4CD,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,GAAE,OAAO,CAAC,UAAU,CAAM,GAC7B,OAAO,CAAC,IAAI,CAAC,CAmDf"}

package/dist/commands/bar/launch-subcommand.js

@@ -0,0 +1,144 @@
+"use strict";
+/**
+ * `ccs bar launch` — ensure web-server is up, write ~/.ccs/bar.json, open the app.
+ *
+ * bar.json shape (v1):
+ *   { baseUrl: string, port: number, authMode: "loopback" }
+ *
+ * authMode is always "loopback" for v1 (auth-enabled unsupported until v1.1).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleBarLaunch = exports.resolveBarPort = void 0;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const config_loader_facade_1 = require("../../config/config-loader-facade");
+// ---------------------------------------------------------------------------
+// Port discovery helpers (exported for unit tests)
+// ---------------------------------------------------------------------------
+/**
+ * Read the port recorded in an existing bar.json.
+ * Returns null when the file is absent or malformed.
+ */
+function resolveBarPort(ccsDir) {
+    const barJsonPath = path.join(ccsDir, 'bar.json');
+    try {
+        const raw = fs.readFileSync(barJsonPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        return typeof parsed.port === 'number' ? parsed.port : null;
+    }
+    catch {
+        return null;
+    }
+}
+exports.resolveBarPort = resolveBarPort;
+// ---------------------------------------------------------------------------
+// Default production dependencies
+// ---------------------------------------------------------------------------
+async function defaultEnsureDashboard() {
+    // Reuse the same startup path as `ccs config`:
+    // find a free port then start the web-server via startServer().
+    const getPort = (await Promise.resolve().then(() => __importStar(require('get-port')))).default;
+    const { startServer } = await Promise.resolve().then(() => __importStar(require('../../web-server')));
+    const port = await getPort({ port: [3000, 3001, 3002, 8000, 8080] });
+    // Bind IPv4 loopback explicitly. Without a host, startServer defaults to
+    // 'localhost', which on macOS resolves to ::1 (IPv6) — but bar.json's baseUrl
+    // (and the Swift app) use 127.0.0.1, so the app could not reach its own server.
+    const { server } = await startServer({ port, host: '127.0.0.1' });
+    const addr = server.address();
+    const resolvedPort = addr && typeof addr === 'object' ? addr.port : port;
+    const baseUrl = `http://127.0.0.1:${resolvedPort}`;
+    return { port: resolvedPort, baseUrl };
+}
+async function defaultOpenApp(appPath) {
+    const { execFile } = await Promise.resolve().then(() => __importStar(require('child_process')));
+    const { promisify } = await Promise.resolve().then(() => __importStar(require('util')));
+    const execFileAsync = promisify(execFile);
+    await execFileAsync('open', ['-a', appPath]);
+}
+function defaultGetCcsDir() {
+    return (0, config_loader_facade_1.getCcsDir)();
+}
+// Fix #5: use os.homedir() to match install-subcommand.ts and uninstall-subcommand.ts.
+// process.env.HOME may be unset in restricted environments, and CCS_HOME is the CCS
+// data directory (~/.ccs), not the user's home — neither is a safe fallback here.
+const DEFAULT_APP_INSTALL_PATH = path.join(os.homedir(), 'Applications', 'CCS Bar.app');
+// ---------------------------------------------------------------------------
+// Implementation
+// ---------------------------------------------------------------------------
+async function handleBarLaunch(_args, deps = {}) {
+    const ensureDashboard = deps.ensureDashboard ?? defaultEnsureDashboard;
+    const openApp = deps.openApp ?? defaultOpenApp;
+    const ccsDir = (deps.getCcsDir ?? defaultGetCcsDir)();
+    const appInstallPath = deps.appInstallPath ?? DEFAULT_APP_INSTALL_PATH;
+    // 1. Ensure the web-server/dashboard is running.
+    let dashboardInfo;
+    try {
+        dashboardInfo = await ensureDashboard();
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[X] Could not start CCS web-server: ${msg}`);
+        console.error('[i] Run `ccs config` to start the dashboard manually.');
+        return;
+    }
+    // 2. Write bar.json — this is the single source of discovery for the Swift app.
+    const barJson = {
+        baseUrl: dashboardInfo.baseUrl,
+        port: dashboardInfo.port,
+        authMode: 'loopback',
+    };
+    try {
+        fs.mkdirSync(ccsDir, { recursive: true });
+        fs.writeFileSync(path.join(ccsDir, 'bar.json'), JSON.stringify(barJson, null, 2));
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[X] Failed to write bar.json: ${msg}`);
+        return;
+    }
+    console.log(`[OK] CCS web-server running at ${dashboardInfo.baseUrl}`);
+    console.log(`[i]  Discovery file written: ${path.join(ccsDir, 'bar.json')}`);
+    // 3. Open the app.
+    try {
+        await openApp(appInstallPath);
+        console.log('[OK] CCS Bar launched.');
+    }
+    catch {
+        // Degraded path: app not installed or open failed.
+        if (!fs.existsSync(appInstallPath)) {
+            console.log('[!] CCS Bar app is not installed.');
+            console.log('[i] Run `ccs bar install` to install it.');
+        }
+        else {
+            console.log('[!] Could not open CCS Bar. Try right-clicking and selecting Open.');
+            console.log('[i] If Gatekeeper blocks the app, run:');
+            console.log(`      xattr -dr com.apple.quarantine "${appInstallPath}"`);
+        }
+    }
+}
+exports.handleBarLaunch = handleBarLaunch;
+//# sourceMappingURL=launch-subcommand.js.map

package/dist/commands/bar/launch-subcommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-subcommand.js","sourceRoot":"","sources":["../../../src/commands/bar/launch-subcommand.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,4EAA8D;AAgC9D,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E;;;GAGG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,CAAC;QAC5D,OAAO,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AATD,wCASC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,KAAK,UAAU,sBAAsB;IACnC,+CAA+C;IAC/C,gEAAgE;IAChE,MAAM,OAAO,GAAG,CAAC,wDAAa,UAAU,GAAC,CAAC,CAAC,OAAO,CAAC;IACnD,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;IAEzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,yEAAyE;IACzE,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAElE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,MAAM,OAAO,GAAG,oBAAoB,YAAY,EAAE,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAe;IAC3C,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;IACnD,MAAM,EAAE,SAAS,EAAE,GAAG,wDAAa,MAAM,GAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAA,gCAAS,GAAE,CAAC;AACrB,CAAC;AAED,uFAAuF;AACvF,oFAAoF;AACpF,kFAAkF;AAClF,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AAExF,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAEvE,KAAK,UAAU,eAAe,CACnC,KAAe,EACf,OAA4B,EAAE;IAE9B,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAEvE,iDAAiD;IACjD,IAAI,aAA4B,CAAC;IACjC,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,eAAe,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,gFAAgF;IAChF,MAAM,OAAO,GAAqB;QAChC,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,QAAQ,EAAE,UAAU;KACrB,CAAC;IAEF,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAE7E,mBAAmB;IACnB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,yCAAyC,cAAc,GAAG,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;AACH,CAAC;AAtDD,0CAsDC"}

package/dist/commands/bar/uninstall-subcommand.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `ccs bar uninstall` — remove CCS Bar.app from ~/Applications
+ * and clear the version pin at ~/.ccs/bar/.version.
+ *
+ * No-op (and no error) when neither the app nor the pin exists.
+ */
+export interface UninstallDeps {
+    getCcsDir: () => string;
+    getAppsDir: () => string;
+    appName: string;
+}
+export declare function handleBarUninstall(_args: string[], deps?: Partial<UninstallDeps>): Promise<void>;
+//# sourceMappingURL=uninstall-subcommand.d.ts.map

package/dist/commands/bar/uninstall-subcommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall-subcommand.d.ts","sourceRoot":"","sources":["../../../src/commands/bar/uninstall-subcommand.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,GAAE,OAAO,CAAC,aAAa,CAAM,GAChC,OAAO,CAAC,IAAI,CAAC,CAsCf"}