Function restartSidecarAndReload

apps/desktop/src/main/index.ts:669–709

()

};

const restartSidecarAndReload = async (): Promise<DesktopServerConnection> => {
  // A supervised daemon owns its own process lifetime. Re-installing the unit
  // rewrites settings such as the configured port, then launchd restarts it.
  if (connection?.supervisedDaemon) {
    const port = getServerSettings().port;
    await installSupervisedService({
      port,
      dataDir: DESKTOP_DATA_DIR,
    });
    const next = await waitForSupervisedAttach(30_000, { port });
    if (!next) {
      // oxlint-disable-next-line executor/no-error-constructor, executor/no-try-catch-or-throw -- boundary: surfaces to renderer as a rejected IPC call
      throw new Error("Supervised daemon failed to restart — see Settings");
    }
    connection = next;
    installBearerAuthHeader(next.baseUrl, next.authToken);
    const window = liveMainWindow();
    if (window) await window.loadURL(webUrlForConnection(next));
    return toDesktopServerConnection(next);
  }
  if (connection) {
    await stopConnection(connection);
    connection = null;
  }
  const next = await startWithCurrentSettings();
  if (!next) {
    // oxlint-disable-next-line executor/no-try-catch-or-throw, executor/no-error-constructor -- boundary: surfaces to renderer as a rejected IPC call
    throw new Error("Sidecar failed to restart — see Settings");
  }
  connection = next;
  // A restart can adopt a daemon that already owns the data dir (the
  // attach-on-conflict fallback). An adopted daemon has no child process, so
  // onUnexpectedSidecarExit can't see it die — watch it with the supervised
  // monitor instead. A freshly spawned sidecar keeps the child-exit path.
  if (next.supervisedDaemon) armSupervisedMonitor();
  else stopSupervisedMonitor();
  installBearerAuthHeader(next.baseUrl, next.authToken);
  const window = liveMainWindow();
  if (window) await window.loadURL(webUrlForConnection(next));
  return toDesktopServerConnection(next);
};

// The renderer's connection carries NO auth: the main process injects the
// bearer header at the session layer (installBearerAuthHeader), so the token