drafted 1.14.21 → 1.14.23

package/install-mcp.sh

@@ -161,7 +161,7 @@ install_portable_node() {
   mkdir -p "$HOME/.drafted"
   node_dir="$HOME/.drafted/node"
   tmp="$(mktemp -d)"
-  filename="$(curl -fsSL https://nodejs.org/dist/latest-v22.x/SHASUMS256.txt | awk "/node-v.*-${platform}-${arch}\\.tar\\.xz/ {print \\$2; exit}")"
+  filename="$(curl -fsSL https://nodejs.org/dist/latest-v22.x/SHASUMS256.txt | awk "/node-v.*-${platform}-${arch}\\.tar\\.xz/ {print \$2; exit}")"
   if [ -z "$filename" ]; then
     fail "Could not find Node.js 22 download for $platform-$arch"
     exit 1
@@ -702,14 +702,8 @@ install_desktop_app() {
   # Clear quarantine so Gatekeeper doesn't block a freshly downloaded bundle.
   xattr -dr com.apple.quarantine "$app_bundle" >/dev/null 2>&1 || true
 
-  # Kill any already-running instance first — including a stray one that isn't
-  # launchd-managed (e.g. left over from a prior run of this same installer,
-  # before this pkill existed: `open` below used to spawn a second, untracked
-  # process alongside the launchd-supervised one, and `launchctl bootout` only
-  # ever stops the launchd-managed process, not that rogue one).
-  pkill -x "$exe_name" >/dev/null 2>&1 || true
-
-  # Register run-at-login for the new app (mirrors the legacy launch agent).
+  # Register run-at-login for the new app (mirrors the legacy launch agent). Write the
+  # plist BEFORE touching launchd so the bootstrap below loads the new binary path.
   uid="$(id -u)"
   plist="$HOME/Library/LaunchAgents/live.drafted.desktop.plist"
   mkdir -p "$HOME/Library/LaunchAgents"
@@ -731,11 +725,23 @@ install_desktop_app() {
 </dict>
 </plist>
 PLIST
-  # launchctl bootstrap + RunAtLoad is the sole launch path — it already starts
-  # the app, so a trailing `open "$app_bundle"` here would start a second,
-  # launchd-unaware process every time this function runs (that was the bug).
-  launchctl bootout "gui/$uid" "$plist" >/dev/null 2>&1 || true
+  # Restart under launchd DETERMINISTICALLY. bootout is async: bootstrapping before the old
+  # service is fully torn down races, and when it loses the label is left UNLOADED — the app
+  # dies with no KeepAlive to save it (that bricked the in-app updater, which is itself a child
+  # of the very app being replaced). And a bare pkill while the service is still loaded just
+  # trips KeepAlive into respawning the old binary mid-swap. So: bootout, POLL until the label
+  # is actually gone, kill any stray non-launchd instance, bootstrap the new plist, and
+  # kickstart -k to guarantee it comes up (RunAtLoad alone is not proof it started).
+  local svc="gui/$uid/live.drafted.desktop"
+  launchctl bootout "$svc" >/dev/null 2>&1 || true
+  local waited=0
+  while [ "$waited" -lt 40 ] && launchctl print "$svc" >/dev/null 2>&1; do
+    sleep 0.25
+    waited=$((waited + 1))
+  done
+  pkill -x "$exe_name" >/dev/null 2>&1 || true
   launchctl bootstrap "gui/$uid" "$plist" >/dev/null 2>&1 || true
+  launchctl kickstart -k "$svc" >/dev/null 2>&1 || true
   return 0
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "drafted",
-  "version": "1.14.21",
+  "version": "1.14.23",
   "description": "Drafted — visual thinking surface for humans and AI agents. Renders HTML, markdown, images, and code as frames on a zoomable canvas, with MCP tools for AI agents and real-time sync for humans.",
   "type": "module",
   "files": [