cicy-desktop 2.1.61 → 2.1.62

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cicy-desktop",
-  "version": "2.1.61",
+  "version": "2.1.62",
   "description": "CiCy - AI-powered operating system browser",
   "main": "src/main.js",
   "bin": {

package/src/backends/sidecar-ipc.js

@@ -50,11 +50,17 @@ function register({ sidecarLogPath } = {}) {
         onProgress: (ev) => { try { e.sender.send("docker:bootstrap-progress", ev); } catch {} },
       });
       // Healthy local stack → make sure it shows up as a team ("本地团队就加
-      // 上去了"). addTeam dedups by host:port, so re-runs are no-ops.
+      // 上去了"). addTeam dedups by host:port, so re-runs are no-ops. The
+      // api_token must be the CONTAINER's own (volume global.json) — the
+      // host's token is a different credential and fails verify.
       if (result && result.ok) {
         try {
           const lt = require("./local-teams");
-          await lt.addTeam({ base_url: `http://127.0.0.1:${PORT}`, name: "本地团队" });
+          const tok = await docker.readContainerToken(PORT);
+          await lt.addTeam({
+            base_url: `http://127.0.0.1:${PORT}`, name: "本地团队",
+            ...(tok ? { api_token: tok } : {}),
+          });
         } catch { /* best-effort — the stack itself is up */ }
       }
       return result;

package/src/sidecar/docker.js

@@ -189,6 +189,20 @@ async function ensureDownloaded(url, dest, mirror, { emit, phase, label } = {})
   });
 }
 
+// The container's cicy-code mints its own api_token in its volume-persisted
+// global.json — the HOST's global.json token is a different credential and
+// won't verify. Read the real one out of whatever container publishes :port
+// (works for adopted legacy-named containers too).
+async function readContainerToken(port = 8008) {
+  try {
+    const { stdout } = await run(["ps", "--filter", `publish=${port}`, "--format", "{{.Names}}"]);
+    const name = stdout.trim().split("\n")[0];
+    if (!name) return "";
+    const r = await run(["exec", name, "cat", "/home/cicy/cicy-ai/global.json"], { timeout: 10000 });
+    return (JSON.parse(r.stdout).api_token || "");
+  } catch { return ""; }
+}
+
 // HTTP /health probe of the container on :port.
 function probeHealth(port = 8008, timeoutMs = 2500) {
   return new Promise((resolve) => {
@@ -358,4 +372,4 @@ async function bootstrap({ onProgress, port = 8008 } = {}) {
   return { ok: healthy, container: CONTAINER };
 }
 
-module.exports = { start, stop, checkStatus, loadImage, imagePresent, dockerOk, installDocker, bootstrap, probeHealth };
+module.exports = { start, stop, checkStatus, loadImage, imagePresent, dockerOk, installDocker, bootstrap, probeHealth, readContainerToken };