Function resolveSidecarCommand

apps/desktop/src/main/sidecar.ts:169–202

(input: {
  readonly port: number;
  readonly hostname: string;
  readonly authToken: string;
})

};

const resolveSidecarCommand = (input: {
  readonly port: number;
  readonly hostname: string;
  readonly authToken: string;
}): { command: string; args: string[]; cwd: string; cliManagedManifest: boolean } => {
  if (app.isPackaged) {
    const binaryName = process.platform === "win32" ? "executor.exe" : "executor";
    const binaryPath = join(process.resourcesPath, "executor", binaryName);
    return {
      command: binaryPath,
      args: [
        "daemon",
        "run",
        "--foreground",
        "--port",
        String(input.port),
        "--hostname",
        input.hostname,
        // Combined `--flag=value` form: the auth token is base64url and can
        // start with "-", which the space-separated form makes the CLI parser
        // read as an unknown flag, so the daemon prints help and exits and the
        // desktop reports a fatal "server crashed during startup". Persistent
        // until the token rotates, and cross-platform (~1 in 64 fresh installs).
        `--auth-token=${input.authToken}`,
      ],
      cwd: process.resourcesPath,
      cliManagedManifest: true,
    };
  }
  // Dev: run the TS source directly via bun on PATH.
  const repoRoot = resolve(import.meta.dirname, "..", "..", "..", "..");
  const sidecarSource = resolve(repoRoot, "apps/desktop/src/sidecar/server.ts");
  return { command: "bun", args: ["run", sidecarSource], cwd: repoRoot, cliManagedManifest: false };
};

const resolveClientDir = (): string => {
  const repoRoot = resolve(import.meta.dirname, "..", "..", "..", "..");