@miraland-labs/conduit-bridge 0.11.11 → 0.11.12

package/dist/service.js

@@ -2,7 +2,7 @@ import { mkdir, readFile, unlink, writeFile } from "node:fs/promises";
 import { homedir, platform } from "node:os";
 import { dirname, join } from "node:path";
 import { realpathSync } from "node:fs";
-import { spawnSync } from "node:child_process";
+import { spawn, spawnSync } from "node:child_process";
 export const SERVICE_LABEL = "io.miraland.conduit-runner";
 function configDir() {
     return join(homedir(), ".config", "conduit");
@@ -118,6 +118,22 @@ function run(command, args) {
         throw new Error(`${command} ${args.join(" ")} failed: ${detail}`);
     }
 }
+function shellQuote(value) {
+    return `'${value.replaceAll("'", `'\\''`)}'`;
+}
+/**
+ * `launchctl bootout` of a loaded service kills that service's whole process group — including
+ * this process when install-service runs from inside the runner it replaces (Connect on-shift
+ * auto-apply). Observed in the field (2026-08-05): the runner died at bootout, the bootstrap on
+ * the next line never ran, and the machine stayed Binding incomplete with the service unloaded.
+ * The swap therefore runs in a detached helper that survives the bootout; failures append to the
+ * runner log.
+ */
+export function launchdSwapCommand(domain, plistPath, log) {
+    const plist = shellQuote(plistPath);
+    const logQ = shellQuote(log);
+    return `sleep 1; launchctl bootout ${domain}/${SERVICE_LABEL} 2>>${logQ}; launchctl bootstrap ${domain} ${plist} 2>>${logQ} || launchctl load -w ${plist} 2>>${logQ}`;
+}
 export async function installRunnerService(options = {}) {
     const host = platform();
     if (host !== "darwin" && host !== "linux") {
@@ -129,12 +145,19 @@ export async function installRunnerService(options = {}) {
         await mkdir(dirname(plistPath), { recursive: true });
         await mkdir(dirname(logPath()), { recursive: true });
         await writeFile(plistPath, launchdPlist(programArguments, logPath()), { mode: 0o644 });
-        // Prefer modern bootout/bootstrap; fall back to load for older macOS.
-        spawnSync("launchctl", ["bootout", `gui/${process.getuid?.() ?? 501}/${SERVICE_LABEL}`], { encoding: "utf8" });
-        const boot = spawnSync("launchctl", ["bootstrap", `gui/${process.getuid?.() ?? 501}`, plistPath], { encoding: "utf8" });
-        if (boot.status !== 0) {
-            run("launchctl", ["load", "-w", plistPath]);
+        // Detached helper (bootout → bootstrap → load fallback): see launchdSwapCommand for why the
+        // swap must survive this process dying at bootout.
+        const domain = `gui/${process.getuid?.() ?? 501}`;
+        spawn("/bin/sh", ["-c", launchdSwapCommand(domain, plistPath, logPath())], { detached: true, stdio: "ignore" }).unref();
+        // Confirm the reloaded service when this process survives to see it (an interactive install).
+        // A self-replacing runner dies at the helper's bootout and the helper still finishes the swap.
+        let loaded = false;
+        for (let attempt = 0; attempt < 16 && !loaded; attempt++) {
+            await new Promise((resolveSleep) => setTimeout(resolveSleep, attempt === 0 ? 2000 : 500));
+            loaded = spawnSync("launchctl", ["print", `${domain}/${SERVICE_LABEL}`], { encoding: "utf8" }).status === 0;
         }
+        if (!loaded)
+            throw new Error(`launchd did not load ${SERVICE_LABEL}; see ${logPath()}`);
         await writeFile(serviceStatePath(), `${JSON.stringify({ platform: "darwin", programArguments, options, installed_at: new Date().toISOString() }, null, 2)}\n`, { mode: 0o600 });
         return { path: plistPath, platform: "darwin" };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraland-labs/conduit-bridge",
-  "version": "0.11.11",
+  "version": "0.11.12",
   "description": "Conduit Bridge CLI — join, connect, disconnect, multi-driver lanes, and run Claude Code / Codex / Cursor / OpenCode / Pi / Kiro / Antigravity agents for a Conduit organization",
   "type": "module",
   "bin": {