From b88042feed538be90a63133330b3b10154773dc4 Mon Sep 17 00:00:00 2001
From: saladday <1203511142@qq.com>
Date: Tue, 29 Sep 2026 22:38:22 +0800
Subject: [PATCH 1/6] fix(example): use Core self-hosted installation commands
---
CONTRIBUTING.md | 5 +-
example/parsar/README.md | 18 +++---
example/parsar/src/ConnectMachine.tsx | 84 +++++++++++----------------
example/parsar/tests/fixture.mjs | 6 ++
example/parsar/tests/workflow.spec.ts | 24 ++++++--
5 files changed, 70 insertions(+), 67 deletions(-)
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index b0aa35e7b..dd261ae16 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -156,8 +156,9 @@ databases, credentials and migrations. The product uses Core exclusively; it has
[README](example/parsar/README.md) owns its product behavior. The boundary rules are:
- It calls only public `/v1` APIs. Its Project key stays server-side; it never
- holds a Core key or issues machine credentials. Core-only credential issuance
- stays in the operator console.
+ holds a Core key or issues machine credentials. Self-hosted connection displays
+ the public Session installation command unchanged; Core owns bootstrap
+ authorization and machine credential issuance.
- It may reuse product UI and keep a small product-owned SQLite database (Node's
built-in module, Node 22.13+), outside the checkout and isolated by Core origin
and Project key fingerprint. Provider keys never reach the browser.
diff --git a/example/parsar/README.md b/example/parsar/README.md
index d795cf169..8bb30ae88 100644
--- a/example/parsar/README.md
+++ b/example/parsar/README.md
@@ -146,16 +146,14 @@ Agent organization informs the product flow; no Multica code is copied.
## Connect a user machine
-Run a matching Core and daemon version.
-
Create a user-machine runtime and start a Session with an Agent using Codex or
-Claude Code. No initial Turn is sent. Open **Connect user machine**, obtain the
-Session's executor credential in Core Web (Session log), save the credential on
-the host as instructed, and run the generated platform-specific install/start
-command. The daemon binary and native harness must already be installed. Windows
-Claude Code also requires Git Bash. The page reads Core's public Environment
+Claude Code. No initial Turn is sent. Open **Connect user machine** and run the
+Core-provided command on the target host. The installer downloads the matching
+native distribution, installs the selected harness and starts the connection.
+Windows Claude Code also requires Git Bash. The page reads Core's public Environment
status and enables sending after it reports connected. The example backend does
-not need or accept the administrator Core key.
+not need or accept the administrator Core key. Commands carry temporary
+Environment-scoped authorization; do not share them. Session refresh renews them.
The selected model Provider needs an HTTPS Base URL and API key. Its protocol is
Responses for Codex and Anthropic for Claude Code. Core freezes and delivers the
@@ -170,6 +168,4 @@ included in this example because its required token limits are not exposed.
The daemon runs with the starting user's permissions and adds no sandbox. Runtime
home is separate per Session; stopping it preserves local files. Credential
-rotation and revocation remain Core console operations. Native install commands
-are for fresh installations; restart an existing one with the same Runtime home
-and `start`, without rerunning `install`.
+rotation and revocation remain Core console operations. Reuse the original installation directory when reconnecting.
diff --git a/example/parsar/src/ConnectMachine.tsx b/example/parsar/src/ConnectMachine.tsx
index 214f25f73..097817b80 100644
--- a/example/parsar/src/ConnectMachine.tsx
+++ b/example/parsar/src/ConnectMachine.tsx
@@ -15,9 +15,6 @@ import {
} from "./components/ui/dialog";
import { ErrorNotice, Help } from "./components/shared";
-const shell = (value: string) => `'${value.replaceAll("'", "'\\''")}'`;
-const powershell = (value: string) => `'${value.replaceAll("'", "''")}'`;
-
export function ConnectMachine({
session,
machine,
@@ -28,7 +25,7 @@ export function ConnectMachine({
onConnected: (connected: boolean) => void;
}) {
const [open, setOpen] = useState(false);
- const [copied, setCopied] = useState(false);
+ const [copied, setCopied] = useState("");
const environment = session.environment as SelfHostedAgentEnvironment;
const id = environment.type === "self_hosted" ? environment.id : "";
const query = useQuery({
@@ -50,9 +47,12 @@ export function ConnectMachine({
};
const status = query.data?.status;
const windows = machine.platform === "windows";
- const command = windows
- ? `$env:OAC_RUNTIME_HOME = "$HOME\\.oac\\sessions\\${id}"\noac-daemon.exe install --remote ${powershell(environment.remote_url)} --environment-id ${powershell(id)} --workspace ${powershell(machine.workspace_directory)} --credential-file "$HOME\\executor-credential-${id}.json"\noac-daemon.exe start`
- : `export OAC_RUNTIME_HOME="$HOME/.oac/sessions/${id}"\nchmod 600 "$HOME/executor-credential-${id}.json"\noac-daemon install --remote ${shell(environment.remote_url)} --environment-id ${shell(id)} --workspace ${shell(machine.workspace_directory)} --credential-file "$HOME/executor-credential-${id}.json"\noac-daemon start`;
+ const installation = session.x_agents_core?.installation;
+ const command =
+ installation?.status === "available" &&
+ (installation.expires_at ?? 0) > Date.now() / 1000
+ ? installation.commands?.[windows ? "powershell" : "posix"]
+ : undefined;
return (
<>
@@ -76,53 +76,39 @@ export function ConnectMachine({
连接用户机器