Function ensureSupervisedConnection

apps/desktop/src/main/index.ts:224–283

()

 * declined — the caller then falls back to managed-spawn.
 */
const ensureSupervisedConnection = async (): Promise<SidecarConnection | null> => {
  // 1. Already running → attach.
  const attached = await attachToSupervisedDaemon();
  if (attached) {
    if (!shouldReplaceDaemonForDesktop(attached)) return attached;
    const settings = getServerSettings();
    return replaceSupervisedDaemonForDesktop(attached, {
      install: () =>
        installSupervisedService({
          port: settings.port,
          dataDir: DESKTOP_DATA_DIR,
        }),
      waitForAttach: () => waitForSupervisedAttach(30_000, { port: settings.port }),
      attach: attachToSupervisedDaemon,
      onInstallFailure: (error) => {
        log.warn(
          "Failed to replace older supervised daemon; re-checking before falling back",
          error,
        );
      },
    });
  }

  // Headless/e2e: the first-run background-service prompt and the systemd/
  // launchd install both need a user (and a real session bus) present. With
  // this set, fall straight through to managed-spawn after the attach attempt
  // so the packaged app can be driven without a window server. Mirrors
  // EXECUTOR_TEST_AUTO_CONFIRM_RESET in reset-state.ts.
  if (process.env.EXECUTOR_TEST_SKIP_BACKGROUND_SERVICE === "1") return null;

  const status = await supervisedServiceStatus();
  if (!status.supported) return null;

  // 2. Registered but not currently serving → kick it and wait.
  if (status.registered) {
    // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: a restart failure just falls through to managed-spawn
    try {
      await restartSupervisedService();
    } catch (error) {
      log.warn("Failed to kickstart supervised service", error);
    }
    return waitForSupervisedAttach(15_000);
  }

  // 3. First run → ask, then install + start. The unit carries no secret; the
  // supervised daemon mints/loads its bearer from auth.json under DESKTOP_DATA_DIR.
  if (!(await confirmEnableBackgroundService())) return null;
  const settings = getServerSettings();
  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: install failure falls back to managed-spawn so the app still launches
  try {
    await installSupervisedService({
      port: settings.port,
      dataDir: DESKTOP_DATA_DIR,
    });
  } catch (error) {
    log.error("Failed to install supervised service; using managed sidecar", error);
    return null;
  }