Function registerIpcHandlers

apps/desktop/src/main/index.ts:680–799

()

});

const registerIpcHandlers = () => {
  ipcMain.handle("executor:server:connection", (): DesktopServerConnection | null =>
    connection ? toDesktopServerConnection(connection) : null,
  );
  // The bearer token, exposed only for the "Connect an agent" install command
  // (an external agent needs it in plaintext). The renderer's own requests
  // never use it — the header is injected at the session layer.
  ipcMain.handle("executor:server:auth-token", (): string | null => connection?.authToken ?? null);
  ipcMain.handle("executor:settings:get", (): DesktopServerSettings => getServerSettings());
  ipcMain.handle(
    "executor:settings:update",
    (_evt, patch: Partial<DesktopServerSettings>): DesktopServerSettings =>
      updateServerSettings(patch),
  );
  // Rotate the bearer token (auth.json). A supervised daemon must be restarted
  // so it re-reads auth.json at boot, then re-attached; a managed sidecar is
  // restarted in-process. Either way the webview header is re-injected.
  ipcMain.handle("executor:server:rotate-token", async (): Promise<DesktopServerConnection> => {
    rotateServerToken();
    if (connection?.supervisedDaemon) {
      const previous = connection;
      await restartSupervisedService();
      const active = (await waitForSupervisedAttach(15_000)) ?? previous;
      connection = active;
      installBearerAuthHeader(active.baseUrl, active.authToken);
      const window = liveMainWindow();
      if (window) await window.loadURL(webUrlForConnection(active));
      return toDesktopServerConnection(active);
    }
    return restartSidecarAndReload();
  });
  // Background-service control surface — lets a Settings toggle enable or
  // disable the supervised daemon. Disabling tears down the service and falls
  // back to a managed sidecar on next launch.
  ipcMain.handle("executor:service:status", () => supervisedServiceStatus());
  ipcMain.handle(
    "executor:service:set-enabled",
    async (_evt, enabled: unknown): Promise<boolean> => {
      if (typeof enabled !== "boolean") return false;
      if (enabled) {
        const settings = getServerSettings();
        await installSupervisedService({
          port: settings.port,
          dataDir: DESKTOP_DATA_DIR,
        });
        const next = await waitForSupervisedAttach(15_000);
        if (next) {
          if (connection && !connection.supervisedDaemon) await stopConnection(connection);
          connection = next;
          armSupervisedMonitor();
          installBearerAuthHeader(next.baseUrl, next.authToken);
          const window = liveMainWindow();
          if (window) await window.loadURL(webUrlForConnection(next));
        }
        return true;
      }
      stopSupervisedMonitor();
      await uninstallSupervisedService(DESKTOP_DATA_DIR);