centralu 0.1.0-beta.1 → 0.1.0-beta.10

package/bin/centralu.mjs

@@ -1,18 +1,48 @@
 #!/usr/bin/env node
 /**
- * Centralu 실행기.
+ * The Centralu launcher.
  *
- * **왜 npm으로 주는가:** macOS는 앱을 검사해서 위험하다고 판정하는 게 아니라,
- * 파일에 붙은 `com.apple.quarantine` 딱지를 보고 개발자 신원을 따진다. 그 딱지는
- * **받아온 프로그램이** 붙인다 — 브라우저는 붙이고 npm은 안 붙인다. 그래서 npm으로
- * 설치하면 서명이 애드혹이어도 경고 없이 그냥 열린다 (docs/plans/beta-release-checklist.md §2).
+ * **Why this ships through npm:** macOS does not inspect the app and decide it is dangerous —
+ * it looks at the `com.apple.quarantine` flag attached to the file and checks the developer's
+ * identity from that. That flag is attached **by the program that downloaded it** — a browser
+ * attaches it, npm does not. So an npm install just opens with no warning even with an ad hoc
+ * signature (docs/plans/beta-release-checklist.md §2).
  *
- * 앱 본체는 아키텍처별 패키지(`centralu-darwin-arm64`)에 들어 있다. 이 패키지는
- * 그것을 찾아 띄우는 얇은 껍데기다 — esbuild·swc가 쓰는 것과 같은 구조.
+ * The app itself lives inside an architecture-specific package (`@centralu/darwin-arm64`). This
+ * package is a thin shell that finds it and launches it — the same structure esbuild and swc
+ * use.
+ *
+ * Linux is served from the same shim (issue #14). The two platforms disagree about what
+ * "the app" even is — macOS hands a `.app` directory to LaunchServices, Linux runs a
+ * self-contained AppImage itself — so that difference lives in one table (`TARGETS`)
+ * instead of being rediscovered in every function.
+ *
+ * Windows joined in W3 of #14. Its decisions — the exe inside the folder, a detached start,
+ * where `install` copies to, the WebView2 check — live in `platform.mjs` as functions of the
+ * platform, so they are tested on macOS CI (tooling/launcher-platform.test.ts) instead of
+ * being first exercised on someone's laptop.
  */
 import { execFileSync, spawn } from 'node:child_process'
-import { existsSync, rmSync } from 'node:fs'
+import { copyDiffers, isNewer } from './semver.mjs'
+import {
+  busyMessage,
+  earlyExitMessage,
+  executableIn,
+  installedPaths,
+  isBusyError,
+  launchPlan,
+  npmCommand,
+  regExe,
+  shortcutCommand,
+  targetFor,
+  TARGETS,
+  webview2MissingMessage,
+  webview2Status,
+  windowsInstall,
+} from './platform.mjs'
+import { chmodSync, cpSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs'
 import { createRequire } from 'node:module'
+import { homedir } from 'node:os'
 import { dirname, join } from 'node:path'
 
 const require = createRequire(import.meta.url)
@@ -22,89 +52,307 @@ const APP_NAME = 'Centralu'
 const BUNDLE = `${APP_NAME}.app`
 const INSTALLED = `/Applications/${BUNDLE}`
 
-/** 아키텍처별 패키지 안의 `.app`. 못 찾으면 null */
+const PLATFORM = process.platform
+const HOME = homedir()
+
+/** Where a menu entry for the app goes on freedesktop desktops */
+const DESKTOP_ENTRY = join(HOME, '.local/share/applications/centralu.desktop')
+
+/** Where `centralu install` copies the app on Windows (see `windowsInstall`) */
+const WIN = PLATFORM === 'win32' ? windowsInstall(process.env, HOME) : null
+
+/** The arch package for this machine (the table lives in platform.mjs) */
+const TARGET = targetFor(PLATFORM, process.arch)
+
+/** The app inside the architecture-specific package. null if it cannot be found. */
 function bundledApp() {
-  for (const dep of ['centralu-darwin-arm64']) {
-    try {
-      return join(dirname(require.resolve(`${dep}/package.json`)), BUNDLE)
-    } catch {
-      // 이 아키텍처용 패키지가 안 깔린 것 — 아래에서 이유를 말한다
-    }
+  if (!TARGET) return null
+  let root
+  try {
+    root = dirname(require.resolve(`${TARGET.pkg}/package.json`))
+  } catch {
+    return null // The package for this architecture is not installed — the reason is explained below.
   }
-  return null
+  const app = join(root, TARGET.artifact)
+  return existsSync(executableIn(PLATFORM, app)) ? app : null
 }
 
 /**
- * 지금 이 맥에서 왜 못 쓰는지를 **구체적으로** 말한다.
- * "설치가 안 됐습니다"만 뜨면 사용자가 할 수 있는 일이 없다.
+ * States **specifically** why this machine cannot run it right now.
+ * If all that shows is "not installed", there is nothing the person can act on.
  */
 function explainMissing() {
-  if (process.platform !== 'darwin') {
-    return `${APP_NAME}는 macOS 앱입니다 (지금 플랫폼: ${process.platform}).`
-  }
-  if (process.arch !== 'arm64') {
+  if (!TARGET) {
+    // Kept as its own case: "not published for your machine" and "not published for
+    // Intel Macs, and here is the reason" send the user to different places.
+    if (PLATFORM === 'darwin') {
+      return (
+        `${APP_NAME} is Apple Silicon only for now (current architecture: ${process.arch}).\n` +
+        'Intel Mac support needs native addons bundled in as well, and is tracked as separate work.'
+      )
+    }
+    const supported = Object.keys(TARGETS).join(', ')
     return (
-      `${APP_NAME}는 아직 Apple Silicon 전용입니다 (지금 아키텍처: ${process.arch}).\n` +
-      'Intel 맥 지원은 네이티브 애드온까지 함께 묶어야 해서 별도 작업으로 잡혀 있습니다.'
+      `${APP_NAME} does not support ${PLATFORM}/${process.arch} yet.\n` +
+      `Currently supported combinations: ${supported}\n` +
+      'Progress is tracked at https://github.com/ijun17/centralu/issues/14.'
     )
   }
   return (
-    '앱 본체 패키지(centralu-darwin-arm64)를 찾지 못했습니다.\n' +
-    '설치가 중간에 끊겼을 수 있습니다 — `npm i -g centralu`로 다시 설치해 주세요.'
+    `Could not find the app package (${TARGET.pkg}).\n` +
+    'The install may have been interrupted — please reinstall with `npm i -g centralu`.'
   )
 }
 
 function requireApp() {
   const app = bundledApp()
-  if (!app || !existsSync(app)) {
+  if (!app) {
     console.error(explainMissing())
     process.exit(1)
   }
   return app
 }
 
-/** 앱을 띄운다. `/Applications`에 설치돼 있으면 그쪽을 먼저 쓴다 */
-function run(args) {
-  const app = existsSync(INSTALLED) ? INSTALLED : requireApp()
-  // `open`은 LaunchServices를 거친다 — Dock 아이콘·단일 인스턴스가 그래야 제대로 산다
-  const r = spawn('open', ['-a', app, ...(args.length ? ['--args', ...args] : [])], { stdio: 'inherit' })
+/**
+ * Launches the app. If it is installed in `/Applications` (macOS) or
+ * `%LOCALAPPDATA%\Programs\Centralu` (Windows), that copy is used first.
+ *
+ * Linux has no such preference, and not for lack of an equivalent: `centralu install`
+ * on Linux writes a launcher that points back at this same package, so there is never a
+ * second copy to prefer.
+ *
+ * Resolves once the launcher has nothing more to wait for. Only Windows waits at all —
+ * briefly, to report an exe that dies on start (see runWindows).
+ */
+async function run(args) {
+  if (PLATFORM === 'darwin') {
+    const app = existsSync(INSTALLED) ? INSTALLED : requireApp()
+    // `open` goes through LaunchServices — the dock icon and single-instance behavior only
+    // work correctly that way.
+    const plan = launchPlan(PLATFORM, app, args, HOME)
+    const r = spawn(plan.command, plan.args, plan.options)
+    r.on('exit', (code) => process.exit(code ?? 0))
+    return
+  }
+  if (PLATFORM === 'win32') return runWindows(args)
+  // Linux has no LaunchServices — the AppImage is its own launcher, so run it directly.
+  //
+  // Staying attached to the terminal is on purpose. The two usual first failures on
+  // Linux both explain themselves on stderr and nowhere else: a missing FUSE
+  // ("AppImages require FUSE to run", with the workaround in the same sentence) and a
+  // missing system library from the loader. Detaching would hand back the shell prompt
+  // and throw away the one line that says what to do.
+  const app = requireApp()
+  const plan = launchPlan(PLATFORM, app, args, HOME)
+  const r = spawn(plan.command, plan.args, plan.options)
+  r.on('error', (e) => {
+    console.error(`Failed to run ${app}: ${e.message}`)
+    // EACCES here means the executable bit did not survive the trip through npm, which
+    // is invisible from the message alone.
+    if (e.code === 'EACCES') console.error(`No execute permission — run \`chmod +x "${app}"\` then try again.`)
+    process.exit(1)
+  })
   r.on('exit', (code) => process.exit(code ?? 0))
 }
 
+/** How long to watch a freshly started exe for an immediate exit */
+const EARLY_EXIT_MS = 3000
+
+/**
+ * Windows: check WebView2, start `centralu.exe` detached, and watch it for a few seconds.
+ *
+ * The app is a GUI program, so a failure to start has nowhere to print. Without WebView2
+ * the exe ends before it has a window, and the person sees nothing happen at all — the
+ * registry check turns that into a message with the download link before anything starts.
+ * The short watch afterwards catches whatever the registry cannot see (a broken runtime, a
+ * blocked exe), then lets go so the app outlives this launcher.
+ */
+async function runWindows(args) {
+  const webview = webview2Status(process.env, queryRegistry)
+  if (webview.state === 'missing') {
+    console.error(webview2MissingMessage())
+    process.exit(1)
+  }
+  const app = existsSync(WIN.exe) ? WIN.dir : requireApp()
+  const plan = launchPlan(PLATFORM, app, args, HOME)
+  const child = spawn(plan.command, plan.args, plan.options)
+  await new Promise((resolve) => {
+    const done = () => {
+      clearTimeout(timer)
+      child.removeAllListeners()
+      child.unref()
+      resolve()
+    }
+    const timer = setTimeout(done, EARLY_EXIT_MS)
+    child.on('error', (e) => {
+      console.error(`Failed to start ${plan.command}: ${e.message}`)
+      process.exitCode = 1
+      done()
+    })
+    child.on('exit', (code) => {
+      // 0 is a normal answer this early: a second start hands over to the window that is
+      // already open and leaves.
+      if (code !== 0 && code !== null) {
+        console.error(earlyExitMessage(code, HOME))
+        process.exitCode = 1
+      }
+      done()
+    })
+  })
+}
+
+/**
+ * `reg query <key> /v pv`: stdout, null when the key or value does not exist (reg exits 1),
+ * undefined when reg itself could not run.
+ */
+function queryRegistry(key) {
+  try {
+    return execFileSync(regExe(process.env), ['query', key, '/v', 'pv'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+      windowsHide: true,
+    })
+  } catch (e) {
+    return typeof e?.status === 'number' ? null : undefined
+  }
+}
+
 /**
- * `/Applications`에 복사한다.
+ * Registers the app in the system menu.
  *
- * **postinstall로 몰래 하지 않는다.** 남의 `/Applications`에 조용히 쓰는 것은 신뢰를 깎고,
- * pnpm은 postinstall을 기본 차단한다. 사용자가 원할 때 명시적으로 부르게 한다.
+ * **Never done quietly through postinstall.** Writing silently into someone's `/Applications`
+ * erodes trust, and pnpm blocks postinstall by default anyway. This is only run when the
+ * person explicitly asks for it.
  */
 function install() {
   const app = requireApp()
+  if (PLATFORM === 'win32') return installWindows(app)
+  if (PLATFORM !== 'darwin') return installDesktopEntry(app)
   if (existsSync(INSTALLED)) {
-    console.log(`기존 ${INSTALLED}를 새 버전으로 교체합니다.`)
+    console.log(`Replacing the existing ${INSTALLED} with the new version.`)
     rmSync(INSTALLED, { recursive: true, force: true })
   }
-  // cp가 아니라 ditto — 번들의 권한·확장속성을 그대로 옮긴다 (서명이 깨지지 않게)
+  // ditto, not cp — carries over the bundle's permissions and extended attributes unchanged
+  // (so the signature does not break).
   execFileSync('/usr/bin/ditto', [app, INSTALLED], { stdio: 'inherit' })
-  console.log(`설치했습니다: ${INSTALLED}`)
-  console.log('이제 Launchpad·Spotlight에서도 찾을 수 있습니다.')
+  console.log(`Installed: ${INSTALLED}`)
+  console.log('It can now be found in Launchpad and Spotlight too.')
+}
+
+/**
+ * The Linux answer to "copy it into /Applications so it shows up in Launchpad".
+ *
+ * It writes a launcher, not a copy. On macOS the `.app` has to move because
+ * LaunchServices only indexes a few directories; on Linux the menu indexes `.desktop`
+ * files that may point anywhere, so pointing at the npm package leaves exactly one copy
+ * of the binary — and `npm i -g centralu@newer` then updates the menu entry too,
+ * because the path it names does not change.
+ */
+function installDesktopEntry(app) {
+  const icon = join(dirname(app), 'icon.png')
+  const entry = [
+    '[Desktop Entry]',
+    'Type=Application',
+    `Name=${APP_NAME}`,
+    'Comment=Run, watch and steer several coding agents in one window',
+    // Quoted because the path runs through node_modules and npm prefixes can contain spaces
+    `Exec="${app}" %U`,
+    `Icon=${existsSync(icon) ? icon : 'centralu'}`,
+    'Terminal=false',
+    'Categories=Development;Utility;',
+    // Guessed, not measured: this must equal the WM class the running window reports,
+    // and we have no Linux desktop here to read it off. If the taskbar shows two icons
+    // for one window, this line is why.
+    'StartupWMClass=Centralu',
+    '',
+  ].join('\n')
+  mkdirSync(dirname(DESKTOP_ENTRY), { recursive: true })
+  writeFileSync(DESKTOP_ENTRY, entry)
+  chmodSync(DESKTOP_ENTRY, 0o755)
+  console.log(`Registered: ${DESKTOP_ENTRY}`)
+  console.log('It can now be found in the app list too (some desktops require logging back in before it shows up).')
+}
+
+/**
+ * The Windows answer to "copy it into /Applications": copy the folder into
+ * `%LOCALAPPDATA%\Programs\Centralu` and put a shortcut in the Start menu.
+ *
+ * A copy rather than a shortcut into the npm package (the Linux shape), because Windows
+ * will not replace a running program's files: with the app running from the package,
+ * `npm i -g centralu@newer` fails. Running from the copy leaves the package free to update.
+ *
+ * The old copy is never deleted before the new one is complete. The new folder is
+ * assembled beside it, the old one is renamed aside, and only then is the new one moved in
+ * — so a copy that fails halfway, or an app that is still running, leaves the working
+ * install untouched rather than a folder with half its files.
+ */
+function installWindows(app) {
+  const staging = `${WIN.dir}.new`
+  const aside = `${WIN.dir}.old-${Date.now()}`
+  rmSync(staging, { recursive: true, force: true })
+  mkdirSync(dirname(WIN.dir), { recursive: true })
+  cpSync(app, staging, { recursive: true })
+  writeFileSync(join(staging, 'centralu-version.txt'), `${pkg.version}\n`)
+  if (existsSync(WIN.dir)) {
+    console.log(`Replacing the existing ${WIN.dir} with the new version.`)
+    try {
+      renameSync(WIN.dir, aside)
+    } catch (e) {
+      rmSync(staging, { recursive: true, force: true })
+      if (!isBusyError(e)) throw e
+      console.error(busyMessage(WIN.dir))
+      process.exit(1)
+    }
+  }
+  renameSync(staging, WIN.dir)
+  try {
+    rmSync(aside, { recursive: true, force: true })
+  } catch {
+    // A rename can succeed while the old copy is running; its files then stay locked until
+    // it quits. Harmless — it is no longer the one anything starts — but worth a line.
+    console.log(`The previous copy is still in use and was left at ${aside}. Delete it after quitting ${APP_NAME}.`)
+  }
+  const sc = shortcutCommand(process.env, { shortcut: WIN.shortcut, target: WIN.exe, workdir: HOME })
+  try {
+    execFileSync(sc.command, sc.args, { env: sc.env, stdio: ['ignore', 'ignore', 'inherit'], windowsHide: true })
+  } catch (e) {
+    console.log(`Installed: ${WIN.dir}`)
+    console.error(`Could not create the Start menu shortcut (${e.message}). Start ${WIN.exe} directly, or run \`centralu\`.`)
+    process.exit(1)
+  }
+  console.log(`Installed: ${WIN.dir}`)
+  console.log(`Start menu: ${WIN.shortcut}`)
+  console.log('It can now be found in Start and Windows search, and `centralu` starts this copy too.')
 }
 
 function uninstall() {
-  if (!existsSync(INSTALLED)) {
-    console.log(`${INSTALLED}가 없습니다 — 지울 것이 없습니다.`)
+  const paths = installedPaths(PLATFORM, process.env, HOME)
+  const present = paths.filter((p) => existsSync(p))
+  if (present.length === 0) {
+    console.log(`${paths[0]} does not exist — nothing to remove.`)
     return
   }
-  rmSync(INSTALLED, { recursive: true, force: true })
-  console.log(`지웠습니다: ${INSTALLED}`)
-  console.log('패키지 자체를 지우려면: npm uninstall -g centralu')
-  console.log(`대화 기록은 그대로 남아 있습니다 (~/.control-center). 지우려면 직접 지우세요.`)
+  for (const installed of present) {
+    try {
+      rmSync(installed, { recursive: true, force: true })
+    } catch (e) {
+      if (PLATFORM !== 'win32' || !isBusyError(e)) throw e
+      console.error(busyMessage(installed))
+      process.exit(1)
+    }
+    console.log(`Removed: ${installed}`)
+  }
+  console.log('To remove the package itself: npm uninstall -g centralu')
+  const data = PLATFORM === 'win32' ? '%USERPROFILE%\\.centralu' : '~/.centralu'
+  console.log(`Conversation history is left in place (${data}). Remove it yourself if you want to.`)
 }
 
 /**
- * npm 레지스트리가 곧 업데이트 채널이다 — 서버도 서명 키도 따로 필요 없다.
+ * The npm registry itself is the update channel — no separate server or signing key needed.
  *
- * 실패를 뭉뚱그리지 않는다. 못 닿은 것(네트워크)과 없는 것(404)은 **사용자가 할 일이 다르다** —
- * 앞은 연결을 보라는 말이고, 뒤는 봐도 소용없다는 말이다.
+ * Failures are not lumped together. Being unreachable (network) and not existing (404) call
+ * for **different actions from the person** — the first says to check the connection, the
+ * second says checking will not help.
  */
 async function latestVersion(timeoutMs = 2000) {
   try {
@@ -117,68 +365,128 @@ async function latestVersion(timeoutMs = 2000) {
     const version = body?.version
     return typeof version === 'string' ? { ok: true, version } : { ok: false, reason: 'bad-response' }
   } catch {
-    return { ok: false, reason: 'network' } // 네트워크가 없어도 앱은 떠야 한다
+    return { ok: false, reason: 'network' } // The app has to launch even with no network.
   }
 }
 
-/** `1.2.10` > `1.2.9` — 문자열 비교로는 틀린다 */
-function isNewer(a, b) {
-  const pa = String(a).split('.').map(Number)
-  const pb = String(b).split('.').map(Number)
-  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
-    const x = pa[i] ?? 0
-    const y = pb[i] ?? 0
-    if (x !== y) return x > y
-  }
-  return false
-}
 
 async function update() {
   const res = await latestVersion(8000)
   if (!res.ok) {
     if (res.reason === 'missing') {
-      console.error(`레지스트리에 ${pkg.name}가 없습니다. 이름이 바뀌었거나 아직 발행 전입니다.`)
-      console.error('https://github.com/ijun17/centralu/releases 를 확인해 주세요.')
+      console.error(`${pkg.name} is not on the registry. The name may have changed, or it has not been published yet.`)
+      console.error('Please check https://github.com/ijun17/centralu/releases.')
     } else if (res.reason === 'network') {
-      console.error('레지스트리에 닿지 못했습니다. 네트워크를 확인하고 다시 시도해 주세요.')
+      console.error('Could not reach the registry. Please check your network and try again.')
     } else {
-      console.error(`레지스트리가 예상 밖의 응답을 했습니다 (${res.reason}).`)
+      console.error(`The registry gave an unexpected response (${res.reason}).`)
     }
     process.exit(1)
   }
   const latest = res.version
   if (!isNewer(latest, pkg.version)) {
-    console.log(`이미 최신입니다 (${pkg.version}).`)
+    console.log(`Already up to date (${pkg.version}).`)
+    // The package can be up to date while the copy is not — that is exactly the state of
+    // someone who upgraded with `npm i -g`.
+    notifyIfCopyStale()
     return
   }
-  console.log(`${pkg.version} → ${latest} 로 올립니다.`)
-  execFileSync('npm', ['i', '-g', `${pkg.name}@${latest}`], { stdio: 'inherit' })
-  // /Applications에 넣어둔 사람은 그쪽도 함께 갱신해야 옛 버전이 남지 않는다
-  if (existsSync(INSTALLED)) {
-    console.log(`${INSTALLED}도 갱신합니다.`)
-    execFileSync(process.argv[1], ['install'], { stdio: 'inherit' })
+  console.log(`Upgrading ${pkg.version} → ${latest}.`)
+  const npm = npmCommand(PLATFORM, ['i', '-g', `${pkg.name}@${latest}`])
+  try {
+    execFileSync(npm.command, npm.args, npm.options)
+  } catch (e) {
+    // On Windows the usual cause is the app running from inside the package: its files are
+    // locked, and npm cannot replace them. npm's own output (above) has the details.
+    if (PLATFORM === 'win32') console.error(`\n${busyMessage('the npm package')}`)
+    process.exit(typeof e?.status === 'number' ? e.status : 1)
+  }
+  // Someone with a copy in /Applications (or %LOCALAPPDATA%\Programs) needs that updated
+  // too, or the old version stays behind.
+  // On Linux the menu entry points at the package instead of a copy, so rewriting it is
+  // cheap — but it is still worth doing, because the Exec path is what would go stale.
+  //
+  // The *new* launcher does the refresh: this file has just been replaced on disk. It is
+  // run through `node` rather than as a script, because Windows cannot execute a `.mjs`.
+  const installed = installedPaths(PLATFORM, process.env, HOME)[0]
+  if (existsSync(installed)) {
+    console.log(`Updating ${installed} too.`)
+    execFileSync(process.execPath, [process.argv[1], 'install'], { stdio: 'inherit' })
+  }
+  console.log('Done. If the app is open, please restart it.')
+}
+
+/**
+ * The version of the copy placed in /Applications. null if there is nothing to compare.
+ *
+ * `defaults` is used because there is no guarantee Info.plist stays XML — Tauri just happens
+ * to write it as XML today, and if it ever switches to a binary plist, anything reading it
+ * with a regex would silently stop working. `defaults` is always present on a Mac and reads
+ * both formats.
+ *
+ * On Windows it is the file `centralu install` wrote beside the copy (see `windowsInstall`
+ * for why not the exe's own version).
+ */
+function installedCopyVersion() {
+  if (PLATFORM === 'win32') {
+    try {
+      return readFileSync(WIN.versionFile, 'utf8').trim()
+    } catch {
+      return null
+    }
+  }
+  if (PLATFORM !== 'darwin' || !existsSync(INSTALLED)) return null
+  try {
+    const out = execFileSync('/usr/bin/defaults', ['read', join(INSTALLED, 'Contents/Info.plist'), 'CFBundleShortVersionString'], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+    })
+    return out.trim()
+  } catch {
+    // Failing to read this is not worth mentioning — the app has already launched, and there
+    // is nothing useful to say here.
+    return null
   }
-  console.log('끝났습니다. 앱이 떠 있다면 다시 시작해 주세요.')
 }
 
-/** 앱을 띄운 뒤에만 알린다 — 업데이트 확인 때문에 실행이 늦어지면 안 된다 */
+/**
+ * One line, if the package and the /Applications copy have drifted apart.
+ *
+ * `npm i -g centralu` only changes the package. So a state quietly forms where the launcher is
+ * new but the app that opens from Spotlight is old — this actually happened (beta.1 stayed in
+ * /Applications while only the package moved to beta.3), and nothing on screen said so.
+ *
+ * **Says it, does not do it.** The same rule as the in-app update line. Overwriting someone's
+ * /Applications without asking is the exact reason this package keeps `install` as a separate
+ * step.
+ */
+function notifyIfCopyStale() {
+  const version = installedCopyVersion()
+  if (!copyDiffers(pkg.version, version)) return
+  const where = PLATFORM === 'win32' ? WIN.dir : '/Applications'
+  console.log(`\nThe ${where} copy is ${version} (this package is ${pkg.version}).\n  centralu install`)
+}
+
+/** Only announced after the app has launched — checking for updates must never delay startup. */
 async function notifyIfOutdated() {
-  // 여기서는 실패를 **전부 삼킨다.** 앱을 띄우러 온 사람에게 레지스트리 사정을 말할 이유가 없다
+  // Every failure here is **swallowed entirely.** Someone who came here to launch the app has
+  // no reason to be told about registry troubles.
   const res = await latestVersion()
   if (res.ok && isNewer(res.version, pkg.version)) {
-    console.log(`\n새 버전이 있습니다: ${pkg.version} → ${res.version}\n  centralu update`)
+    console.log(`\nA new version is available: ${pkg.version} → ${res.version}\n  centralu update`)
   }
 }
 
 const HELP = `${APP_NAME} ${pkg.version}
 
-  centralu              앱을 실행합니다
-  centralu install      /Applications에 복사합니다 (Launchpad·Spotlight에 뜨게)
-  centralu uninstall    /Applications에서 지웁니다 (대화 기록은 남습니다)
-  centralu update       새 버전이 있으면 올립니다
-  centralu --version    버전을 출력합니다
+  centralu              Launches the app
+  centralu install      Registers it in the app list (macOS: /Applications, Linux: a menu entry,
+                        Windows: %LOCALAPPDATA%\\Programs\\Centralu and a Start menu shortcut)
+  centralu uninstall    Removes that registration (conversation history is kept)
+  centralu update       Upgrades if a new version is available
+  centralu --version    Prints the version
 
-필요한 것: Node 22+, 그리고 claude 또는 codex CLI (앱 첫 화면이 상태를 알려줍니다)`
+Requires: Node 22+, and the claude or codex CLI (the app's first screen reports the status)`
 
 const [cmd, ...rest] = process.argv.slice(2)
 switch (cmd) {
@@ -200,7 +508,10 @@ switch (cmd) {
   case 'help':
     console.log(HELP)
     break
-  default:
-    run(cmd ? [cmd, ...rest] : [])
-    await notifyIfOutdated()
+  default: {
+    // Started before the update check, never after it: the check must not delay startup.
+    const launched = run(cmd ? [cmd, ...rest] : [])
+    notifyIfCopyStale()
+    await Promise.all([launched, notifyIfOutdated()])
+  }
 }

package/bin/platform.mjs

@@ -0,0 +1,292 @@
+/**
+ * The launcher's per-platform decisions, as plain functions of the platform.
+ *
+ * Lives apart from `centralu.mjs` for the same reason `semver.mjs` does: the launcher runs
+ * a command at import time, so a test cannot import it. Everything here takes the platform
+ * (and the environment, and the home folder) as an argument instead of reading `process`,
+ * so `tooling/launcher-platform.test.ts` can ask what Windows would do from a Mac — which
+ * is the only place this project can run a test before the Windows package ships.
+ *
+ * package.json "files" lists the whole bin/ directory, so this ships automatically.
+ */
+import { posix, win32 } from 'node:path'
+
+export const APP_NAME = 'Centralu'
+
+/**
+ * The arch package for each machine, and what the app is called inside it.
+ *
+ * `artifact` must match `scripts/release-npm.mts` exactly — that script renames what
+ * Tauri produced (`Centralu_0.1.0-beta.2_amd64.AppImage`) to a fixed name precisely so
+ * the launcher does not have to know version or architecture. If the two ever disagree
+ * the symptom is "installed fine, does nothing".
+ *
+ * Only combinations that are actually published belong here. Listing a package that was
+ * never released would turn "not supported yet" into "your install is broken", which
+ * sends the user off to reinstall something that can never appear.
+ * `tooling/launcher-platform.test.ts` holds this table to the shim's `optionalDependencies`.
+ *
+ * Windows ships a folder, not a single file: `Centralu\centralu.exe` beside
+ * `Centralu\resources\host\`. Tauri looks for its resources next to the exe when nothing
+ * is installed, so the folder runs where npm unpacked it (#14, W1 in #307).
+ */
+export const TARGETS = {
+  'darwin-arm64': { pkg: '@centralu/darwin-arm64', artifact: `${APP_NAME}.app` },
+  'linux-arm64': { pkg: '@centralu/linux-arm64', artifact: `${APP_NAME}.AppImage` },
+  'linux-x64': { pkg: '@centralu/linux-x64', artifact: `${APP_NAME}.AppImage` },
+  'win32-x64': { pkg: '@centralu/win32-x64', artifact: APP_NAME },
+}
+
+/** The target for a platform/arch pair, or null when nothing is published for it. */
+export function targetFor(platform, arch) {
+  return TARGETS[`${platform}-${arch}`] ?? null
+}
+
+/**
+ * The file that proves the artifact is there and is what gets started.
+ *
+ * On macOS and Linux that is the artifact itself (a bundle handed to `open`, an AppImage
+ * run directly). On Windows the artifact is a folder, and a folder that exists without its
+ * exe — an interrupted extract — must count as missing, not as found.
+ */
+export function executableIn(platform, app) {
+  return platform === 'win32' ? win32.join(app, 'centralu.exe') : app
+}
+
+/**
+ * How to start the app: the command, its arguments, the spawn options, and whether the
+ * launcher stays attached until it exits.
+ *
+ * - macOS goes through `open`, so LaunchServices handles the dock icon and single instance.
+ * - Linux runs the AppImage attached to the terminal, because its two usual first failures
+ *   (missing FUSE, a missing system library) explain themselves on stderr and nowhere else.
+ * - Windows starts `centralu.exe` **detached**. That is not only about handing the prompt
+ *   back: libuv puts every non-detached child in a job object that kills it when the parent
+ *   exits, so an attached app would die the moment this launcher returns, or when the
+ *   console window is closed. `centralu.exe` is a GUI-subsystem program (checked by
+ *   `scripts/release-npm.mts`), so no console window appears for it either way.
+ *   `windowsHide` stays off on purpose: it starts the process with SW_HIDE, which a GUI
+ *   program applies to its first window — the app would start invisible.
+ *   The working directory is the home folder, because a process holds its working
+ *   directory open on Windows, and that would stop the shell's folder from being renamed
+ *   or deleted (and `centralu install` from replacing the app's own folder).
+ */
+export function launchPlan(platform, app, args, home) {
+  if (platform === 'darwin') {
+    return {
+      command: 'open',
+      args: ['-a', app, ...(args.length ? ['--args', ...args] : [])],
+      options: { stdio: 'inherit' },
+      attached: true,
+    }
+  }
+  if (platform === 'win32') {
+    return {
+      command: executableIn(platform, app),
+      args,
+      options: { detached: true, stdio: 'ignore', windowsHide: false, cwd: home },
+      attached: false,
+    }
+  }
+  return { command: app, args, options: { stdio: 'inherit' }, attached: true }
+}
+
+/**
+ * Where `centralu install` puts the app on Windows, and what it writes there.
+ *
+ * The analogue of copying the bundle into `/Applications` on macOS, not of the Linux menu
+ * entry that points back into the npm package. The reason is Windows-specific: a running
+ * program's files cannot be replaced, so while the app runs from inside the npm package,
+ * `npm i -g centralu@newer` fails with EBUSY. A copy elsewhere is what lets the package
+ * update while the app is open.
+ *
+ * `%LOCALAPPDATA%\Programs` is the per-user program folder (VS Code's user installer and
+ * winget's user scope use it). No admin rights, nothing outside the user's own profile.
+ * The Start menu entry is a shortcut in the per-user Start menu folder; Windows search
+ * indexes it.
+ *
+ * `versionFile` records which package version the copy came from, so the launcher can say
+ * when the copy is behind — the exe's own version resource does not carry a prerelease tag.
+ */
+export function windowsInstall(env, home) {
+  const local = env.LOCALAPPDATA || win32.join(home, 'AppData', 'Local')
+  const roaming = env.APPDATA || win32.join(home, 'AppData', 'Roaming')
+  const dir = win32.join(local, 'Programs', APP_NAME)
+  return {
+    dir,
+    shortcut: win32.join(roaming, 'Microsoft', 'Windows', 'Start Menu', 'Programs', `${APP_NAME}.lnk`),
+    exe: win32.join(dir, 'centralu.exe'),
+    versionFile: win32.join(dir, 'centralu-version.txt'),
+  }
+}
+
+/**
+ * What `centralu install` creates, per platform. `uninstall` removes exactly these and
+ * `update` refreshes them when the first one exists.
+ */
+export function installedPaths(platform, env, home) {
+  if (platform === 'darwin') return [`/Applications/${APP_NAME}.app`]
+  if (platform === 'win32') {
+    const w = windowsInstall(env, home)
+    return [w.dir, w.shortcut]
+  }
+  return [posix.join(home, '.local/share/applications/centralu.desktop')]
+}
+
+function systemRoot(env) {
+  return env.SystemRoot || env.SYSTEMROOT || 'C:\\Windows'
+}
+
+/**
+ * A PowerShell invocation that writes the Start-menu shortcut.
+ *
+ * Windows has no file format for a shortcut that Node can write; `.lnk` is a binary shell
+ * format, and the supported way to write one is the WScript.Shell COM object. The paths go
+ * in through environment variables rather than the script text, so a profile path with a
+ * space or an apostrophe (`C:\Users\O'Brien Kim\…`) needs no quoting at all — the one way
+ * this cannot be got wrong. PowerShell is named by its full path under `%SystemRoot%` so a
+ * `powershell.exe` earlier on PATH (or in the current folder) is never the one that runs.
+ */
+export function shortcutCommand(env, { shortcut, target, workdir }) {
+  const script = [
+    '$ErrorActionPreference = "Stop"',
+    'New-Item -ItemType Directory -Force -Path (Split-Path -Parent $env:CENTRALU_SHORTCUT) | Out-Null',
+    '$s = (New-Object -ComObject WScript.Shell).CreateShortcut($env:CENTRALU_SHORTCUT)',
+    '$s.TargetPath = $env:CENTRALU_TARGET',
+    '$s.WorkingDirectory = $env:CENTRALU_WORKDIR',
+    '$s.IconLocation = "$env:CENTRALU_TARGET,0"',
+    `$s.Description = "${APP_NAME}"`,
+    '$s.Save()',
+  ].join('; ')
+  return {
+    command: win32.join(systemRoot(env), 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe'),
+    args: ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script],
+    env: { ...env, CENTRALU_SHORTCUT: shortcut, CENTRALU_TARGET: target, CENTRALU_WORKDIR: workdir },
+  }
+}
+
+/**
+ * How to run npm from the launcher (`centralu update`).
+ *
+ * On Windows `npm` is `npm.cmd`, and Node refuses to start a `.cmd` without a shell
+ * (EINVAL, since the April 2024 security releases) — and without one it would not find it
+ * either, as libuv only tries `.com` and `.exe`. So Windows goes through the shell, and
+ * because a shell re-parses its command line, every argument has to be a plain token. The
+ * version comes from the registry's response, so that is checked rather than trusted.
+ */
+export function npmCommand(platform, args) {
+  for (const a of args) {
+    if (!/^[\w@./:+-]+$/.test(a)) throw new Error(`refusing to pass an unexpected argument to npm: ${JSON.stringify(a)}`)
+  }
+  return platform === 'win32'
+    ? { command: 'npm', args, options: { stdio: 'inherit', shell: true } }
+    : { command: 'npm', args, options: { stdio: 'inherit' } }
+}
+
+export const WEBVIEW2_DOWNLOAD = 'https://developer.microsoft.com/microsoft-edge/webview2/'
+/** Microsoft's link to the Evergreen Bootstrapper itself, for someone who wants one click. */
+export const WEBVIEW2_BOOTSTRAPPER = 'https://go.microsoft.com/fwlink/p/?LinkId=2124703'
+
+/** The Evergreen WebView2 Runtime's client id, the same under every registry hive. */
+const WEBVIEW2_CLIENT = '{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}'
+
+/**
+ * Where an installed WebView2 Runtime registers itself: per machine (the 32-bit view on
+ * 64-bit Windows, which is where the installer writes), per machine on 32-bit Windows, and
+ * per user. This is Microsoft's documented detection
+ * (learn.microsoft.com/microsoft-edge/webview2/concepts/distribution, "Detect if a WebView2
+ * Runtime is already installed").
+ */
+export const WEBVIEW2_KEYS = [
+  `HKLM\\SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate\\Clients\\${WEBVIEW2_CLIENT}`,
+  `HKLM\\SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\${WEBVIEW2_CLIENT}`,
+  `HKCU\\Software\\Microsoft\\EdgeUpdate\\Clients\\${WEBVIEW2_CLIENT}`,
+]
+
+/** `reg.exe` by full path, for the same reason PowerShell is. */
+export function regExe(env) {
+  return win32.join(systemRoot(env), 'System32', 'reg.exe')
+}
+
+/**
+ * The `pv` value out of `reg query <key> /v pv`, or null. Microsoft's rule: the runtime is
+ * installed when `pv` exists and is neither empty nor `0.0.0.0` (an uninstall can leave
+ * the key behind with that value).
+ */
+export function parseRegPv(stdout) {
+  const m = /^\s*pv\s+REG_SZ\s+(\S*)\s*$/im.exec(String(stdout ?? ''))
+  const v = m?.[1] ?? ''
+  return v && v !== '0.0.0.0' ? v : null
+}
+
+/**
+ * Whether WebView2 is there, from a `query(key)` that returns `reg`'s stdout, `null` when
+ * the key does not exist, or `undefined` when `reg` itself could not run.
+ *
+ * Three answers, not two. "Missing" stops the launch with a message, so it has to be a
+ * positive finding — every hive was readable and none has the runtime. If `reg` could not
+ * run at all the answer is "unknown" and the app starts anyway: refusing to launch because
+ * a check broke would be worse than the blank window the check exists to explain.
+ *
+ * `WEBVIEW2_BROWSER_EXECUTABLE_FOLDER` points WebView2 at a fixed-version runtime that the
+ * registry knows nothing about; when it is set, the person has made that choice.
+ */
+export function webview2Status(env, query) {
+  if (env.WEBVIEW2_BROWSER_EXECUTABLE_FOLDER) return { state: 'present', version: 'fixed' }
+  let unknown = false
+  for (const key of WEBVIEW2_KEYS) {
+    const out = query(key)
+    if (out === undefined) {
+      unknown = true
+      continue
+    }
+    const version = parseRegPv(out)
+    if (version) return { state: 'present', version }
+  }
+  return { state: unknown ? 'unknown' : 'missing' }
+}
+
+export function webview2MissingMessage() {
+  return (
+    `${APP_NAME} needs the Microsoft Edge WebView2 Runtime, and it is not installed on this machine.\n` +
+    'Windows 11 includes it; some Windows 10 installs do not.\n' +
+    `Install the "Evergreen Bootstrapper" from ${WEBVIEW2_DOWNLOAD}\n` +
+    `(direct download: ${WEBVIEW2_BOOTSTRAPPER}),\n` +
+    'then run `centralu` again.'
+  )
+}
+
+/**
+ * What to say when the exe exits nonzero within moments of starting.
+ *
+ * The launcher is detached by then, so this is the only place a failure to start can be
+ * reported at all — a GUI program has no stderr to read. The registry check catches the
+ * usual cause before the start; this catches the rest (a runtime that is registered but
+ * broken, a blocked exe, a crash before the window).
+ */
+export function earlyExitMessage(code, home) {
+  return (
+    `${APP_NAME} exited right after starting (exit code ${code}).\n` +
+    `- If no window appeared, check the WebView2 Runtime: ${WEBVIEW2_DOWNLOAD}\n` +
+    `- The host log is ${win32.join(home, '.centralu', 'host.log')}\n` +
+    'Please report it at https://github.com/ijun17/centralu/issues/14 with that log.'
+  )
+}
+
+/**
+ * What to say when Windows refuses to replace or remove the app's files.
+ *
+ * EBUSY / EPERM on a program folder almost always means the program is running: Windows
+ * locks a running exe and the native modules the host loaded. Macs and Linux let both be
+ * replaced underneath a running process, which is why this message exists only here.
+ */
+export function busyMessage(path) {
+  return (
+    `Windows would not replace ${path} — ${APP_NAME} is probably still running.\n` +
+    'Quit it (close the window and choose Quit), then run the command again.'
+  )
+}
+
+export function isBusyError(e) {
+  return e?.code === 'EBUSY' || e?.code === 'EPERM' || e?.code === 'EACCES' || e?.code === 'ENOTEMPTY'
+}

package/bin/semver.mjs

@@ -0,0 +1,76 @@
+/**
+ * Version comparison for the launcher's update check.
+ *
+ * Lives in its own file so it can be tested (tooling/launcher-semver.test.ts):
+ * the launcher itself runs commands at import time and cannot be imported by a
+ * test. package.json "files" lists the whole bin/ directory, so this ships
+ * automatically — but note npm silently drops anything "files" does not cover,
+ * and an unshipped import only crashes on users' machines.
+ *
+ * Why not `.split('.').map(Number)`: that turns `0.1.0-beta.2` into
+ * [0, 1, NaN, 2], and `NaN !== NaN` ends the comparison at the third slot with
+ * `NaN > NaN` = false — so no beta ever saw the next beta. That is exactly how
+ * `centralu update` on 0.1.0-beta.1 answered "Already up to date" while
+ * beta.2 sat on the registry (found the day beta.2 shipped).
+ */
+export function isNewer(a, b) {
+  const [coreA, preA] = split(String(a))
+  const [coreB, preB] = split(String(b))
+  for (let i = 0; i < 3; i++) {
+    const x = coreA[i] ?? 0
+    const y = coreB[i] ?? 0
+    if (x !== y) return x > y
+  }
+  // Same core: a release outranks any prerelease of it (1.0.0 > 1.0.0-beta.9).
+  if (preA === null && preB === null) return false
+  if (preA === null) return true
+  if (preB === null) return false
+  // Both prereleases: compare dot-separated identifiers, numeric ones as
+  // numbers (semver: numeric identifiers always rank below alphanumeric).
+  const ia = preA.split('.')
+  const ib = preB.split('.')
+  for (let i = 0; i < Math.max(ia.length, ib.length); i++) {
+    const x = ia[i]
+    const y = ib[i]
+    if (x === undefined) return false // shorter prerelease ranks lower
+    if (y === undefined) return true
+    const nx = /^\d+$/.test(x) ? Number(x) : null
+    const ny = /^\d+$/.test(y) ? Number(y) : null
+    if (nx !== null && ny !== null) {
+      if (nx !== ny) return nx > ny
+    } else if (nx !== null) {
+      return false // numeric < alphanumeric
+    } else if (ny !== null) {
+      return true
+    } else if (x !== y) {
+      return x > y
+    }
+  }
+  return false
+}
+
+/**
+ * Whether the copy in /Applications is a different app than the one this package carries.
+ *
+ * `npm i -g centralu` replaces the package and nothing else. That is deliberate — this
+ * project does not write into someone's /Applications unless asked (`centralu install`) —
+ * but the cost is that the two drift apart in silence, and the copy is the one people
+ * actually click. So the launcher says so. It still does not act.
+ *
+ * Not `isNewer`. Drift in either direction is worth a line: a copy *newer* than the package
+ * means an update went backwards, which is more surprising, not less.
+ *
+ * Lives beside `isNewer` because it ships and is tested for the same reason — a launcher
+ * already on someone's machine cannot be corrected later. 0.1.0-beta.1 is still out there
+ * answering "Already up to date" and always will be.
+ */
+export function copyDiffers(pkgVersion, copyVersion) {
+  return typeof copyVersion === 'string' && copyVersion !== '' && copyVersion !== pkgVersion
+}
+
+function split(v) {
+  const dash = v.indexOf('-')
+  const core = (dash === -1 ? v : v.slice(0, dash)).split('.').map(Number)
+  const pre = dash === -1 ? null : v.slice(dash + 1)
+  return [core, pre]
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "centralu",
-  "version": "0.1.0-beta.1",
-  "description": "여러 에이전트 코딩 도구(Claude Code, Codex CLI)를 한 창에서 실행·관찰·제어하는 macOS 데스크톱 앱",
+  "version": "0.1.0-beta.10",
+  "description": "Run, watch and steer several Claude Code and Codex CLI sessions from one window",
   "license": "MIT",
   "author": "ijun17",
   "homepage": "https://github.com/ijun17/centralu",
@@ -17,6 +17,8 @@
     "codex",
     "agent",
     "macos",
+    "linux",
+    "windows",
     "desktop"
   ],
   "type": "module",
@@ -30,9 +32,14 @@
     "node": ">=22"
   },
   "os": [
-    "darwin"
+    "darwin",
+    "linux",
+    "win32"
   ],
   "optionalDependencies": {
-    "centralu-darwin-arm64": "0.1.0-beta.1"
+    "@centralu/darwin-arm64": "0.1.0-beta.10",
+    "@centralu/linux-arm64": "0.1.0-beta.10",
+    "@centralu/linux-x64": "0.1.0-beta.10",
+    "@centralu/win32-x64": "0.1.0-beta.10"
   }
 }