merge develop into release

.gitignore

@@ -5,22 +5,3 @@ out/
 .env.*
 *.log
 .DS_Store
-
-# Direct `tsc -p` output. Electron Vite owns application compilation.
-/electron.vite.config.js
-/electron.vite.config.d.ts
-/src/main/*.js
-/src/main/*.d.ts
-/src/main/**/*.js
-/src/main/**/*.d.ts
-/src/preload/*.js
-/src/preload/*.d.ts
-/src/preload/**/*.js
-/src/preload/**/*.d.ts
-/src/renderer/src/*.js
-/src/renderer/src/*.jsx
-/src/renderer/src/*.d.ts
-/src/renderer/src/**/*.js
-/src/renderer/src/**/*.jsx
-/src/renderer/src/**/*.d.ts
-*.tsbuildinfo

electron.vite.config.ts

@@ -8,13 +8,9 @@ const { version } = JSON.parse(readFileSync('./package.json', 'utf-8'))
 
 export default defineConfig({
   main: {
-    resolve: { extensions: ['.ts', '.tsx', '.mjs', '.js', '.json'] },
-    build: { rollupOptions: { input: resolve('src/main/index.ts') } },
     plugins: [externalizeDepsPlugin()]
   },
   preload: {
-    resolve: { extensions: ['.ts', '.tsx', '.mjs', '.js', '.json'] },
-    build: { rollupOptions: { input: resolve('src/preload/index.ts') } },
     plugins: [externalizeDepsPlugin()]
   },
   renderer: {
@@ -23,7 +19,6 @@ export default defineConfig({
       'import.meta.env.VITE_APP_VERSION': JSON.stringify(version)
     },
     resolve: {
-      extensions: ['.ts', '.tsx', '.mjs', '.js', '.jsx', '.json'],
       alias: {
         '@renderer': resolve('src/renderer/src')
       }

package-lock.json

@@ -1,19 +1,18 @@
 {
   "name": "autonomy-studio-launcher",
-  "version": "1.0.27",
+  "version": "1.0.14",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "autonomy-studio-launcher",
-      "version": "1.0.27",
+      "version": "1.0.14",
       "hasInstallScript": true,
       "dependencies": {
         "@electron-toolkit/preload": "^3.0.1",
         "@electron-toolkit/utils": "^4.0.0",
         "@tailwindcss/vite": "^4.2.4",
         "lucide-react": "^1.14.0",
-        "node-pty": "^1.1.0",
         "tailwindcss": "^4.2.4"
       },
       "devDependencies": {
@@ -8308,22 +8307,6 @@
         "node": ">=10"
       }
     },
-    "node_modules/node-pty": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/node-pty/-/node-pty-1.1.0.tgz",
-      "integrity": "sha512-20JqtutY6JPXTUnL0ij1uad7Qe1baT46lyolh2sSENDd4sTzKZ4nmAFkeAARDKwmlLjPx6XKRlwRUxwjOy+lUg==",
-      "hasInstallScript": true,
-      "license": "MIT",
-      "dependencies": {
-        "node-addon-api": "^7.1.0"
-      }
-    },
-    "node_modules/node-pty/node_modules/node-addon-api": {
-      "version": "7.1.1",
-      "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-7.1.1.tgz",
-      "integrity": "sha512-5m3bsyrjFWE1xf7nz7YXdN4udnVtXK6/Yfgn5qnahL6bCkf2yKt4k3nuTKAtT4r3IG8JNR2ncsIMdZuAzJjHQQ==",
-      "license": "MIT"
-    },
     "node_modules/node-releases": {
       "version": "2.0.38",
       "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.38.tgz",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "autonomy-studio-launcher",
-  "version": "1.1.5",
+  "version": "1.0.26",
   "description": "Autonomy Studio v2 Frontend",
   "main": "./out/main/index.js",
   "author": {
@@ -14,13 +14,13 @@
     "typecheck:node": "tsc --noEmit -p tsconfig.node.json --composite false",
     "typecheck:web": "tsc --noEmit -p tsconfig.web.json --composite false",
     "typecheck": "npm run typecheck:node && npm run typecheck:web",
-    "start": "electron-vite preview --config electron.vite.config.ts",
-    "dev": "electron-vite dev --config electron.vite.config.ts",
-    "build": "npm run typecheck && electron-vite build --config electron.vite.config.ts",
+    "start": "electron-vite preview",
+    "dev": "electron-vite dev",
+    "build": "npm run typecheck && electron-vite build",
     "postinstall": "electron-builder install-app-deps",
     "build:unpack": "npm run build && electron-builder --dir",
     "build:win": "npm run build && electron-builder --win",
-    "build:mac": "electron-vite build --config electron.vite.config.ts && electron-builder --mac",
+    "build:mac": "electron-vite build && electron-builder --mac",
     "build:linux": "npm run build && electron-builder --linux"
   },
   "build": {
@@ -58,7 +58,6 @@
     "@electron-toolkit/utils": "^4.0.0",
     "@tailwindcss/vite": "^4.2.4",
     "lucide-react": "^1.14.0",
-    "node-pty": "^1.1.0",
     "tailwindcss": "^4.2.4"
   },
   "devDependencies": {

scripts/test-appimage-fuse.cjs

@@ -1,70 +0,0 @@
-const { test } = require('node:test')
-const assert = require('node:assert/strict')
-const { readFileSync } = require('node:fs')
-const { join } = require('node:path')
-const ts = require('typescript')
-const source = readFileSync(join(__dirname, '../src/main/appImageFuse.ts'), 'utf8')
-const compiled = ts.transpileModule(source, { compilerOptions: { module: ts.ModuleKind.CommonJS } }).outputText
-const api = {}
-new Function('exports', compiled)(api)
-const cache = 'libfuse.so.2 (libc6,x86-64) => /lib/x86_64-linux-gnu/libfuse.so.2'
-
-function fixture(options = {}) {
-  let installed = Boolean(options.installed)
-  const calls = []
-  const prepare = api.createFusePreparation({
-    platform: options.platform ?? 'linux', arch: 'x64',
-    readOsRelease: () => `ID=ubuntu\nVERSION_ID="${options.version ?? '24.04'}"\nPRETTY_NAME="Ubuntu"`,
-    confirm: async () => { calls.push('confirm'); return options.accept !== false },
-    run: async (command, args) => {
-      calls.push([command, ...args])
-      if (command === '/sbin/ldconfig') return { stdout: installed ? cache : '', stderr: '' }
-      if (command === '/usr/bin/apt-cache') return { stdout: options.noCandidate ? 'Candidate: (none)' : 'Candidate: 2.9.9', stderr: '' }
-      if (command === 'pkexec') {
-        if (options.fail) throw new Error('authentication cancelled')
-        installed = options.stillMissing !== true
-        return { stdout: '', stderr: '' }
-      }
-      throw new Error(`Unexpected command ${command}`)
-    },
-  })
-  return { prepare, calls }
-}
-
-test('FUSE 3 and a foreign architecture do not satisfy FUSE 2', () => {
-  assert.equal(api.hasFuseLibrary(cache, 'x64'), true)
-  assert.equal(api.hasFuseLibrary(cache, 'arm64'), false)
-  assert.equal(api.hasFuseLibrary('libfuse3.so.3 (libc6,x86-64)', 'x64'), false)
-})
-test('existing library and non-Linux skip installation', async () => {
-  for (const options of [{ installed: true }, { platform: 'darwin' }]) {
-    const f = fixture(options)
-    await f.prepare()
-    assert.equal(f.calls.includes('confirm'), false)
-  }
-})
-test('Ubuntu versions choose the appropriate package and recheck installation', async () => {
-  for (const [version, pkg] of [['22.04', 'libfuse2'], ['24.04', 'libfuse2t64'], ['26.04', 'libfuse2t64']]) {
-    const f = fixture({ version })
-    await f.prepare()
-    assert.deepEqual(f.calls.find((call) => call[0] === 'pkexec'), ['pkexec', '/usr/bin/apt-get', 'install', '-y', '--no-remove', pkg])
-    assert.equal(f.calls.filter((call) => call[0] === '/sbin/ldconfig').length, 2)
-  }
-})
-test('cancel does not install and can be retried', async () => {
-  const f = fixture({ accept: false })
-  await assert.rejects(f.prepare(), /취소/)
-  await assert.rejects(f.prepare(), /취소/)
-  assert.equal(f.calls.some((call) => call[0] === 'pkexec'), false)
-})
-test('missing candidate, failed authentication and failed postcheck reject', async () => {
-  for (const options of [{ noCandidate: true }, { fail: true }, { stillMissing: true }]) {
-    await assert.rejects(fixture(options).prepare())
-  }
-})
-test('concurrent preparations share one prompt and installation', async () => {
-  const f = fixture()
-  await Promise.all([f.prepare(), f.prepare()])
-  assert.equal(f.calls.filter((call) => call === 'confirm').length, 1)
-  assert.equal(f.calls.filter((call) => call[0] === 'pkexec').length, 1)
-})

src/main/appImageFuse.ts

@@ -1,65 +0,0 @@
-export type FusePackage = 'libfuse2' | 'libfuse2t64'
-
-export function parseOsRelease(content: string): Record<string, string> {
-  return Object.fromEntries(content.split('\n').flatMap((line) => {
-    const match = line.match(/^([A-Z_]+)=(.*)$/)
-    return match ? [[match[1], match[2].replace(/^(["'])(.*)\1$/, '$2')]] : []
-  }))
-}
-
-export function fusePackageCandidates(os: Record<string, string>): FusePackage[] {
-  const modern = (os.ID === 'ubuntu' && Number.parseFloat(os.VERSION_ID) >= 24.04)
-    || (os.ID === 'debian' && Number.parseFloat(os.VERSION_ID) >= 13)
-  return modern ? ['libfuse2t64', 'libfuse2'] : ['libfuse2', 'libfuse2t64']
-}
-
-export function hasFuseLibrary(cache: string, arch: string): boolean {
-  const architecture = arch === 'x64' ? 'x86-64' : arch === 'arm64' ? 'AArch64' : null
-  return cache.split('\n').some((line) => /^\s*libfuse\.so\.2\s/.test(line)
-    && (!architecture || line.includes(architecture)))
-}
-
-type Dependencies = {
-  platform: string
-  arch: string
-  readOsRelease: () => string
-  run: (command: string, args: string[], timeout?: number) => Promise<{ stdout: string; stderr: string }>
-  confirm: (details: string) => Promise<boolean>
-}
-
-export function createFusePreparation(deps: Dependencies): () => Promise<void> {
-  let pending: Promise<void> | null = null
-  const ready = async (): Promise<boolean> => {
-    const result = await deps.run('/sbin/ldconfig', ['-p'], 10000)
-    return hasFuseLibrary(result.stdout, deps.arch)
-  }
-  const prepare = async (): Promise<void> => {
-    if (deps.platform !== 'linux' || await ready()) return
-    const os = parseOsRelease(deps.readOsRelease())
-    if (![os.ID, ...(os.ID_LIKE ?? '').split(/\s+/)].some((id) => id === 'ubuntu' || id === 'debian')) {
-      throw new Error('LMS 실행에 libfuse.so.2가 필요합니다. 이 운영체제에서는 자동 설치를 지원하지 않습니다. 배포판의 FUSE 2 라이브러리를 설치한 뒤 다시 실행하세요.')
-    }
-    let selected: FusePackage | undefined
-    for (const candidate of fusePackageCandidates(os)) {
-      const result = await deps.run('/usr/bin/apt-cache', ['policy', candidate], 10000)
-      if (/Candidate:\s*(?!\(none\))\S+/.test(result.stdout)) {
-        selected = candidate
-        break
-      }
-    }
-    if (!selected) throw new Error('FUSE 2 설치 패키지를 찾지 못했습니다. 시스템 패키지 목록과 Ubuntu 저장소 설정을 확인한 뒤 다시 시도하세요.')
-    if (!await deps.confirm(`${os.PRETTY_NAME ?? os.ID}\n\nLMS 실행에 필요한 ${selected} 라이브러리가 없습니다. 설치를 누르면 관리자 인증 후 설치합니다.`)) {
-      throw new Error('필수 구성요소 설치를 취소했습니다. 다음 설치 또는 실행 시 다시 진행할 수 있습니다.')
-    }
-    try {
-      await deps.run('pkexec', ['/usr/bin/apt-get', 'install', '-y', '--no-remove', selected], 600000)
-    } catch (error) {
-      throw new Error(`필수 구성요소 설치가 완료되지 않았습니다. 관리자 인증 취소, 네트워크 또는 패키지 관리자 잠금 상태를 확인하세요.\n${error instanceof Error ? error.message : String(error)}`)
-    }
-    if (!await ready()) throw new Error('설치 후에도 libfuse.so.2를 확인하지 못했습니다. 시스템 패키지 상태를 확인한 뒤 다시 시도하세요.')
-  }
-  return () => {
-    if (!pending) pending = prepare().finally(() => { pending = null })
-    return pending
-  }
-}

src/main/index.ts

@@ -5,8 +5,6 @@ import { get as httpGet } from 'http'
 import { get as httpsGet } from 'https'
 import { spawn, exec, execFile, ChildProcess } from 'child_process'
 import { electronApp, optimizer, is } from '@electron-toolkit/utils'
-import { LmsWebBridge } from './lms-web-bridge'
-import { createFusePreparation } from './appImageFuse'
 
 protocol.registerSchemesAsPrivileged([
   { scheme: 'appdocs', privileges: { secure: true, standard: true, supportFetchAPI: true, corsEnabled: true } }
@@ -14,36 +12,6 @@ protocol.registerSchemesAsPrivileged([
 
 let splash: BrowserWindow | null = null
 let pendingGoogleOAuthPayload: { loginToken?: string; error?: string } | null = null
-const lmsWebBridge = new LmsWebBridge()
-const prepareLmsFuse = createFusePreparation({
-  platform: process.platform,
-  arch: process.arch,
-  readOsRelease: () => readFileSync('/etc/os-release', 'utf8'),
-  run: (command, args, timeout) => runCommand(command, args, timeout, { LC_ALL: 'C', LANG: 'C' }),
-  confirm: async (detail) => {
-    const options = {
-      type: 'info' as const,
-      title: 'LMS 실행 환경 준비',
-      message: '필수 구성요소를 설치하시겠습니까?',
-      detail,
-      buttons: ['설치', '취소'],
-      defaultId: 0,
-      cancelId: 1,
-      noLink: true,
-    }
-    const parent = BrowserWindow.getFocusedWindow()
-    const result = parent ? await dialog.showMessageBox(parent, options) : await dialog.showMessageBox(options)
-    return result.response === 0
-  },
-})
-
-async function prepareAppRuntime(payload: { appName: string; execPath?: string; devAppPath?: string }): Promise<void> {
-  if (payload.appName.trim().toLowerCase() !== 'lms') return
-  const devPath = resolveDevAppPath(payload.devAppPath) ?? getDefaultDevAppPath(payload.appName)
-  if (is.dev && devPath && isRunnableDevAppPath(devPath)) return
-  const path = resolveExecPath(payload.execPath, payload.appName)
-  if (path?.toLowerCase().endsWith('.appimage')) await prepareLmsFuse()
-}
 
 type CommandResult = {
   ok: boolean
@@ -350,17 +318,12 @@ function downloadFile(
 
       const total = Number(response.headers['content-length'] ?? 0)
       let received = 0
-      let lastProgress = -1
       const file = createWriteStream(tmpPath)
 
       response.on('data', (chunk: Buffer) => {
         received += chunk.length
         if (total > 0) {
-          const progress = Math.min(99, Math.round((received / total) * 100))
-          if (progress !== lastProgress) {
-            lastProgress = progress
-            onProgress(progress)
-          }
+          onProgress(Math.min(99, Math.round((received / total) * 100)))
         }
       })
 
@@ -439,41 +402,18 @@ function createCleanChildEnv(extraEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv {
   return env
 }
 
-function terminateChildProcess(child: ChildProcess): void {
-  if (child.killed) return
-
-  const kill = (signal: NodeJS.Signals): boolean => {
-    if (process.platform !== 'win32' && child.pid) {
-      try {
-        process.kill(-child.pid, signal)
-        return true
-      } catch {
-        // Fall back to the direct child when a process group is unavailable.
-      }
-    }
-    child.kill(signal)
-    return false
-  }
-
-  const killedProcessGroup = kill('SIGTERM')
-  setTimeout(() => {
-    if (killedProcessGroup && process.platform !== 'win32' && child.pid) {
-      try {
-        process.kill(-child.pid, 'SIGKILL')
-        return
-      } catch {
-        // The group already exited.
-      }
-    }
-    if (!child.killed) child.kill('SIGKILL')
-  }, 1500).unref()
-}
-
 function stopChildApps(
   appProcesses: Map<string, ChildProcess>,
   appWindows: Map<string, BrowserWindow>,
 ): void {
-  for (const child of appProcesses.values()) terminateChildProcess(child)
+  for (const child of appProcesses.values()) {
+    if (!child.killed) {
+      child.kill('SIGTERM')
+      setTimeout(() => {
+        if (!child.killed) child.kill('SIGKILL')
+      }, 1500).unref()
+    }
+  }
   appProcesses.clear()
 
   for (const win of appWindows.values()) {
@@ -547,38 +487,6 @@ function tailscaleCommandEnv(loginServer: string): NodeJS.ProcessEnv | undefined
   return /^http:\/\//i.test(loginServer.trim()) ? { TS_DEBUG_ALLOW_HTTP: '1' } : undefined
 }
 
-function getLauncherOsUser(): string {
-  const user = (process.env.USER ?? process.env.LOGNAME ?? '').trim()
-  return /^[a-z_][a-z0-9_-]*\$?$/i.test(user) ? user : ''
-}
-
-async function ensureTailscaleOperator(): Promise<CommandResult> {
-  const operator = getLauncherOsUser()
-  if (!operator) {
-    return { ok: false, message: '현재 OS 사용자를 확인하지 못했습니다.' }
-  }
-
-  const args = ['set', `--operator=${operator}`]
-  try {
-    await runCommand('tailscale', args, 15000)
-    return { ok: true, message: 'Tailscale 제어 권한이 준비되었습니다.' }
-  } catch (error) {
-    if (!isTailscalePermissionError(error)) {
-      return { ok: false, message: commandErrorMessage(error, 'Tailscale 제어 권한 설정 실패') }
-    }
-
-    try {
-      await runCommand('pkexec', ['/usr/bin/tailscale', ...args], 30000)
-      return { ok: true, message: 'Tailscale 제어 권한이 준비되었습니다.' }
-    } catch (pkexecError) {
-      return {
-        ok: false,
-        message: commandErrorMessage(pkexecError, commandErrorMessage(error, 'Tailscale 제어 권한 설정 실패')),
-      }
-    }
-  }
-}
-
 async function installTailscale(): Promise<CommandResult> {
   const installScript = [
     'set -e',
@@ -657,6 +565,13 @@ async function resetTailscaleSession(commandEnv?: NodeJS.ProcessEnv): Promise<vo
   await runCommandIfPossible('tailscale', ['down'], 10000, commandEnv)
 }
 
+async function resetTailscaleSessionWithPkexec(commandEnv?: NodeJS.ProcessEnv): Promise<void> {
+  const loggedOut = await runCommandIfPossible('pkexec', ['/usr/bin/tailscale', 'logout'], 30000, commandEnv)
+  if (!loggedOut) {
+    await runCommandIfPossible('pkexec', ['/usr/bin/tailscale', 'down'], 30000, commandEnv)
+  }
+}
+
 async function readTailscaleStatus(): Promise<TailscaleStatusResult> {
   const attempts: Array<[string, string[]]> = [
     ['tailscale', ['status', '--json']],
@@ -776,24 +691,16 @@ async function loginTailscale(
   } catch (error) {
     if (isTailscalePermissionError(error)) {
       try {
+        if (forceReset) {
+          await resetTailscaleSessionWithPkexec(commandEnv)
+        }
         await runCommand('pkexec', ['/usr/bin/tailscale', ...tailscaleArgs], 60000, commandEnv)
         await waitForTailscaleConnected()
-
-        // Persist unprivileged access after the one privileged recovery login.
-        const operator = await ensureTailscaleOperator()
-        return {
-          ok: true,
-          message: operator.ok
-            ? 'Tailscale 연결 완료'
-            : 'Tailscale 연결 완료. 다음 연결을 위해 제어 권한을 다시 확인하세요.',
-        }
+        return { ok: true, message: 'Tailscale 연결 완료' }
       } catch (pkexecError) {
         return {
           ok: false,
-          message: commandErrorMessage(
-            pkexecError,
-            commandErrorMessage(error, 'Tailscale 제어 권한이 없습니다. 다시 연결해 주세요.'),
-          ),
+          message: commandErrorMessage(pkexecError, commandErrorMessage(error, 'Tailscale 제어 권한이 없습니다.')),
         }
       }
     }
@@ -840,23 +747,6 @@ async function logoutTailscale(): Promise<CommandResult> {
   }
 }
 
-async function restartTailscaleService(): Promise<CommandResult> {
-  try {
-    await runCommand('pkexec', ['/usr/bin/systemctl', 'restart', 'tailscaled'], 60000)
-    await delay(1000)
-    const status = await readTailscaleStatus()
-    return {
-      ok: true,
-      message: status.connected ? '원격 연결 서비스가 재시작되었습니다.' : '원격 연결 서비스가 재시작되었습니다. 연결 상태를 다시 확인하세요.',
-    }
-  } catch (error) {
-    return {
-      ok: false,
-      message: commandErrorMessage(error, '원격 연결 서비스 재시작 실패'),
-    }
-  }
-}
-
 function createSplashWindow(): void {
   splash = new BrowserWindow({
     width: 580,
@@ -907,9 +797,7 @@ function createWindow(): void {
     autoHideMenuBar: true,
     webPreferences: {
       preload: join(__dirname, '../preload/index.js'),
-      sandbox: false,
-      // Keep token refresh and launcher background work running while child apps are open.
-      backgroundThrottling: false
+      sandbox: false
     }
   })
   attachDevToolsShortcut(mainWindow)
@@ -925,10 +813,6 @@ function createWindow(): void {
       }
     }, 1500)
   })
-  mainWindow.on('close', () => {
-    lmsWebBridge.invalidateSessions()
-    stopChildApps(appProcesses, appWindows)
-  })
 
   mainWindow.webContents.setWindowOpenHandler((details) => {
     shell.openExternal(details.url)
@@ -987,10 +871,6 @@ function createWindow(): void {
     const targetPath = resolveExecPath(payload.execPath, payload.appName)
     if (!targetPath) throw new Error('설치 경로가 설정되지 않았습니다.')
 
-    if (payload.appName.trim().toLowerCase() === 'lms' && targetPath.toLowerCase().endsWith('.appimage')) {
-      await prepareLmsFuse()
-    }
-
     await downloadFile(payload.downloadUrl, targetPath, (progress) => {
       event.sender.send('app-download-progress', {
         appName: payload.appName,
@@ -1074,32 +954,8 @@ function createWindow(): void {
   ipcMain.handle('get-launcher-cache-status', () => getLauncherCacheStatus())
   ipcMain.handle('clear-launcher-cache', () => clearLauncherCache())
   ipcMain.handle('start-google-login', (_, url: string) => shell.openExternal(url))
-  ipcMain.handle('launch-web-app', async (_event, payload: { appName?: string; url?: string }) => {
-    const rawUrl = payload.url?.trim()
-    if (!rawUrl) throw new Error('웹 실행 주소가 없습니다.')
-
-    try {
-      const url = new URL(rawUrl)
-      if (url.protocol !== 'https:' && url.protocol !== 'http:') {
-        throw new Error('웹 실행 주소 형식이 올바르지 않습니다.')
-      }
-      if (payload.appName?.trim().toLowerCase() === 'lms') {
-        const bridge = await lmsWebBridge.createSession(url.origin)
-        const hash = new URLSearchParams(url.hash.replace(/^#/, ''))
-        hash.set('bridgeUrl', bridge.url)
-        hash.set('bridgeToken', bridge.token)
-        url.hash = hash.toString()
-      }
-      await shell.openExternal(url.toString())
-      mainWindow.minimize()
-      return { ok: true }
-    } catch (error) {
-      throw new Error(error instanceof Error ? error.message : '웹 브라우저를 열지 못했습니다.')
-    }
-  })
   ipcMain.handle('launcher-tailscale-status', () => readTailscaleStatus())
   ipcMain.handle('launcher-tailscale-install', () => installTailscale())
-  ipcMain.handle('launcher-tailscale-ensure-operator', () => ensureTailscaleOperator())
   ipcMain.handle('launcher-ssh-key-ensure', () => ensureLauncherSshKey())
   ipcMain.handle(
     'launcher-tailscale-login',
@@ -1107,7 +963,6 @@ function createWindow(): void {
       loginTailscale(authKey, loginServer, hostname, Boolean(forceReset)),
   )
   ipcMain.handle('launcher-tailscale-logout', () => logoutTailscale())
-  ipcMain.handle('launcher-tailscale-restart-service', () => restartTailscaleService())
 
   const onAppClosed = (appName: string): void => {
     mainWindow.webContents.send('app-window-closed', appName)
@@ -1117,28 +972,7 @@ function createWindow(): void {
     }
   }
 
-  ipcMain.handle('launcher-end-user-session', () => {
-    lmsWebBridge.invalidateSessions()
-
-    for (const [appName, win] of appWindows) {
-      if (appName.trim().toLowerCase() !== 'lms') continue
-      if (!win.isDestroyed()) win.close()
-    }
-
-    for (const [appName, child] of appProcesses) {
-      if (appName.trim().toLowerCase() !== 'lms' || child.killed) continue
-      terminateChildProcess(child)
-    }
-
-    return { ok: true }
-  })
-
-  ipcMain.handle('prepare-app-runtime', async (_event, payload: { appName: string; execPath?: string; devAppPath?: string }) => {
-    await prepareAppRuntime(payload)
-    return { ok: true }
-  })
-
-  ipcMain.on('launch-app', async (_, payload: {
+  ipcMain.on('launch-app', (_, payload: {
     appName: string
     url?: string
     width?: number
@@ -1148,13 +982,6 @@ function createWindow(): void {
     handoffCode?: string
     audienceApp?: string
   }) => {
-    try {
-      await prepareAppRuntime(payload)
-    } catch (error) {
-      mainWindow.webContents.send('app-window-closed', payload.appName)
-      dialog.showErrorBox('LMS 실행 환경 준비 실패', error instanceof Error ? error.message : String(error))
-      return
-    }
     const { appName, url, width = 1280, height = 800, devAppPath, execPath, handoffCode, audienceApp = appName } = payload
     const authProtocolUrl = handoffCode && audienceApp === 'ADS IDE' ? `ads-ide://auth?handoffToken=${encodeURIComponent(handoffCode)}` : undefined
     const authLaunchArgs = handoffCode
@@ -1203,9 +1030,12 @@ function createWindow(): void {
     if (spawnPath) {
       const useDevLauncher = is.dev && spawnPath === resolvedDevAppPath
       const launchUrlArg = url ? [`--url=${encodeURIComponent(url)}`] : []
+      const noSandboxArg = !useDevLauncher && process.platform === 'linux' && spawnPath.toLowerCase().endsWith('.appimage')
+        ? ['--no-sandbox']
+        : []
       const args = useDevLauncher
         ? ['run', 'dev']
-        : [...launchUrlArg, ...authLaunchArgs, ...(authProtocolUrl ? [authProtocolUrl] : [])]
+        : [...noSandboxArg, ...launchUrlArg, ...authLaunchArgs, ...(authProtocolUrl ? [authProtocolUrl] : [])]
       const execBin = useDevLauncher ? 'npm' : spawnPath
 
       const childEnv = createCleanChildEnv()
@@ -1390,8 +1220,4 @@ if (!gotSingleInstanceLock) {
       app.quit()
     }
   })
-
-  app.on('will-quit', () => {
-    void lmsWebBridge.stop()
-  })
 }

src/preload/index.ts

@@ -14,11 +14,9 @@ const appWindowMeta = { isAppWindow, appName, url: appUrl }
 const launcherTailscale = {
   status: () => ipcRenderer.invoke('launcher-tailscale-status'),
   install: () => ipcRenderer.invoke('launcher-tailscale-install'),
-  ensureOperator: () => ipcRenderer.invoke('launcher-tailscale-ensure-operator'),
   login: (authKey: string, loginServer: string, hostname?: string, forceReset?: boolean) =>
     ipcRenderer.invoke('launcher-tailscale-login', authKey, loginServer, hostname, forceReset),
   logout: () => ipcRenderer.invoke('launcher-tailscale-logout'),
-  restartService: () => ipcRenderer.invoke('launcher-tailscale-restart-service'),
 }
 const launcherSshKey = {
   ensure: () => ipcRenderer.invoke('launcher-ssh-key-ensure'),
@@ -31,9 +29,6 @@ const launcherAuth = {
     return () => ipcRenderer.removeListener('google-oauth-callback', listener)
   },
 }
-const launcherSession = {
-  endUserSession: () => ipcRenderer.invoke('launcher-end-user-session'),
-}
 
 if (process.contextIsolated) {
   try {
@@ -42,7 +37,6 @@ if (process.contextIsolated) {
     contextBridge.exposeInMainWorld('launcherTailscale', launcherTailscale)
     contextBridge.exposeInMainWorld('launcherSshKey', launcherSshKey)
     contextBridge.exposeInMainWorld('launcherAuth', launcherAuth)
-    contextBridge.exposeInMainWorld('launcherSession', launcherSession)
   } catch (error) {
     console.error(error)
   }
@@ -57,6 +51,4 @@ if (process.contextIsolated) {
   window.launcherSshKey = launcherSshKey
   // @ts-ignore
   window.launcherAuth = launcherAuth
-  // @ts-ignore
-  window.launcherSession = launcherSession
 }

src/renderer/src/App.tsx

@@ -1,14 +1,9 @@
-import { useCallback, useEffect, useRef, useState } from 'react'
+import { useCallback, useEffect, useState } from 'react'
 import { createPortal } from 'react-dom'
 import Login from './pages/Login'
 import Dashboard from './pages/Dashboard'
 import AppWindowShell from './pages/AppWindowShell'
 import type { AuthSession } from './pages/LoginForm'
-import {
-  blockLauncherSessionRefresh,
-  refreshLauncherSession,
-  resetLauncherSessionRefresh,
-} from './auth/sessionRefresh'
 
 const AUTH_SESSION_KEY = 'atnmy.auth.session'
 const LAUNCHER_API_BASE_URL = (import.meta.env.VITE_ATNMY_STDO_API_BASE_URL || 'http://localhost:4200').replace(/\/+$/, '')
@@ -23,7 +18,6 @@ function App(): React.JSX.Element {
     }
   })
   const [sessionExpiredOpen, setSessionExpiredOpen] = useState(false)
-  const sessionExpiredRef = useRef(false)
 
   const meta = window.appWindowMeta
   if (meta?.isAppWindow) {
@@ -31,8 +25,6 @@ function App(): React.JSX.Element {
   }
 
   const handleSessionUpdate = useCallback((session: AuthSession): void => {
-    if (sessionExpiredRef.current) return
-
     const nextSession: AuthSession = {
       ...session,
       user: {
@@ -58,19 +50,14 @@ function App(): React.JSX.Element {
   }, [])
 
   const handleLogout = useCallback((): void => {
-    blockLauncherSessionRefresh()
-    window.launcherSession?.endUserSession().catch(() => undefined)
     requestLogout(authSession?.accessToken)
+    window.launcherTailscale?.logout().catch(() => undefined)
     window.localStorage.removeItem(AUTH_SESSION_KEY)
     window.sessionStorage.removeItem(AUTH_SESSION_KEY)
     setAuthSession(null)
   }, [authSession?.accessToken, requestLogout])
 
   const handleSessionExpired = useCallback((): void => {
-    if (sessionExpiredRef.current) return
-    sessionExpiredRef.current = true
-    blockLauncherSessionRefresh()
-    window.launcherSession?.endUserSession().catch(() => undefined)
     setSessionExpiredOpen(true)
   }, [])
 
@@ -81,20 +68,33 @@ function App(): React.JSX.Element {
     setAuthSession(null)
   }, [])
 
-  const handleLogin = useCallback((session: AuthSession): void => {
-    sessionExpiredRef.current = false
-    resetLauncherSessionRefresh()
-    setSessionExpiredOpen(false)
-    setAuthSession(session)
-  }, [])
+
+  useEffect(() => {
+    if (!authSession?.accessToken) return
+
+    const accessToken = authSession.accessToken
+    const handleSessionClose = (): void => {
+      requestLogout(accessToken)
+    }
+
+    window.addEventListener('pagehide', handleSessionClose)
+    window.addEventListener('beforeunload', handleSessionClose)
+    return () => {
+      window.removeEventListener('pagehide', handleSessionClose)
+      window.removeEventListener('beforeunload', handleSessionClose)
+    }
+  }, [authSession?.accessToken, requestLogout])
 
   useEffect(() => {
     if (!authSession?.accessToken) return
 
     const refreshDelayMs = Math.max(30_000, ((authSession.accessTokenExpiresIn ?? 900) - 60) * 1000)
-    let timer: number | null = null
-    const refresh = (): void => {
-      refreshLauncherSession()
+    const timer = window.setTimeout(() => {
+      fetch(`${LAUNCHER_API_BASE_URL}/api/auth/refresh`, {
+        method: 'POST',
+        credentials: 'include',
+      })
+        .then((response) => response.ok ? response.json() as Promise<AuthSession> : null)
         .then((session) => {
           if (session?.accessToken) {
             handleSessionUpdate(session)
@@ -102,25 +102,19 @@ function App(): React.JSX.Element {
             handleSessionExpired()
           }
         })
-        .catch((error: unknown) => {
-          console.warn('[launcher] session refresh failed; retrying in 30 seconds', error)
-          timer = window.setTimeout(refresh, 30_000)
+        .catch(() => {
+          handleSessionExpired()
         })
-    }
+    }, refreshDelayMs)
 
-    timer = window.setTimeout(refresh, refreshDelayMs)
-
-    return () => {
-      if (timer !== null) window.clearTimeout(timer)
-    }
+    return () => window.clearTimeout(timer)
   }, [authSession, handleSessionExpired, handleSessionUpdate])
 
   return (
     <>
       {authSession
-        && !sessionExpiredOpen
         ? <Dashboard authSession={authSession} onSessionUpdate={handleSessionUpdate} onLogout={handleLogout} onSessionExpired={handleSessionExpired} />
-        : <Login onLogin={handleLogin} />}
+        : <Login onLogin={setAuthSession} />}
       {sessionExpiredOpen && createPortal(
         <div className="fixed inset-0 z-[20000] flex items-center justify-center bg-[rgba(2,6,18,0.5)] px-4 backdrop-blur-[6px]">
           <section className="w-full max-w-[400px] overflow-hidden rounded-lg border border-[rgba(255,255,255,0.18)] bg-[rgba(22,27,39,0.86)] shadow-[0_28px_90px_rgba(0,0,0,0.58),inset_0_1px_0_rgba(255,255,255,0.12)] backdrop-blur-2xl">

src/renderer/src/assets/main.css

@@ -355,7 +355,6 @@ body,
   display: flex;
   align-items: center;
   justify-content: center;
-  gap: 7px;
   padding: 7px 16px;
   min-width: 78px;
   background: rgba(255, 255, 255, 0.08);
@@ -438,7 +437,7 @@ body,
   padding: 9px 12px;
   background: transparent;
   border: 0;
-  color: var(--text-secondary);
+  color: #fca5a5;
   font-family: 'NanumGothic', sans-serif;
   font-size: 12px;
   font-weight: 700;
@@ -447,14 +446,6 @@ body,
 }
 
 .launch-action-dropdown button:hover:not(:disabled) {
-  background: rgba(255, 255, 255, 0.07);
-}
-
-.launch-action-dropdown .launch-action-danger {
-  color: #fca5a5;
-}
-
-.launch-action-dropdown .launch-action-danger:hover:not(:disabled) {
   background: rgba(239, 68, 68, 0.12);
 }
 
@@ -728,10 +719,6 @@ body,
   line-height: 18px;
 }
 
-.login-version-wrap .launcher-update-text {
-  transform: translateY(-1px);
-}
-
 .app-version-wrap {
   position: absolute;
   right: 24px;

src/renderer/src/auth/sessionRefresh.ts

@@ -1,37 +0,0 @@
-import type { AuthSession } from '../pages/LoginForm'
-
-const launcherApiBaseUrl = (import.meta.env.VITE_ATNMY_STDO_API_BASE_URL || 'http://localhost:4200').replace(/\/+$/, '')
-
-let pendingRefresh: Promise<AuthSession | null> | null = null
-let refreshBlocked = false
-
-export function blockLauncherSessionRefresh(): void {
-  refreshBlocked = true
-}
-
-export function resetLauncherSessionRefresh(): void {
-  refreshBlocked = false
-}
-
-export function refreshLauncherSession(): Promise<AuthSession | null> {
-  if (refreshBlocked) return Promise.resolve(null)
-  if (pendingRefresh) return pendingRefresh
-
-  pendingRefresh = fetch(`${launcherApiBaseUrl}/api/auth/refresh`, {
-    method: 'POST',
-    credentials: 'include',
-  })
-    .then((response) => {
-      if (response.ok) return response.json() as Promise<AuthSession>
-      if (response.status === 401 || response.status === 403) {
-        refreshBlocked = true
-        return null
-      }
-      throw new Error(`세션 갱신 요청에 실패했습니다. (${response.status})`)
-    })
-    .finally(() => {
-      pendingRefresh = null
-    })
-
-  return pendingRefresh
-}

src/renderer/src/components/Sidebar.tsx

@@ -21,17 +21,12 @@ import {
   MonitorCog,
   Palette,
   Info,
-  Network,
-  Copy,
-  Check
+  Network
 } from 'lucide-react'
 import type { LauncherApp } from '../config/apps'
 
 const ICON_SIZE = 14
 const LAUNCHER_API_BASE_URL = (import.meta.env.VITE_ATNMY_STDO_API_BASE_URL || 'http://localhost:4200').replace(/\/+$/, '')
-const PLATFORM_AGENT_INSTALL_URL = import.meta.env.VITE_PLATFORM_AGENT_INSTALL_URL
-  || 'https://pub-ca72c40797144462bdb7d200c215d361.r2.dev/studio-files/public/platform-agent/install.sh'
-const PLATFORM_AGENT_INSTALL_COMMAND = `curl -fsSL ${PLATFORM_AGENT_INSTALL_URL} | bash`
 
 const APP_ICONS: Record<string, React.ReactNode> = {
   code: <Code2 size={ICON_SIZE} />,
@@ -87,7 +82,7 @@ interface SidebarProps {
 }
 
 type UserModal = 'profile' | 'settings' | 'platforms' | null
-type SettingsTabKey = 'general' | 'remote' | 'theme' | 'info'
+type SettingsTabKey = 'general' | 'theme' | 'info'
 type VpnPlatformPeer = {
   id: string
   hostName: string
@@ -424,7 +419,6 @@ function Sidebar({ apps, userName, userEmail, userRole, userCreatedAt, userLastL
           launcherUpdating={launcherUpdating}
           launcherUpdateMessage={launcherUpdateMessage}
           onLauncherUpdate={onLauncherUpdate}
-          onTailscaleRetry={onTailscaleRetry}
           onClose={() => setModal(null)}
         />
       )}
@@ -444,8 +438,6 @@ function PlatformManagementModal({ accessToken, onClose }: { accessToken: string
   const [registrationNow, setRegistrationNow] = useState(() => Date.now())
   const [registrationLoading, setRegistrationLoading] = useState(false)
   const [authorizationError, setAuthorizationError] = useState('')
-  const [registrationGuideOpen, setRegistrationGuideOpen] = useState(false)
-  const [registrationGuideCopied, setRegistrationGuideCopied] = useState(false)
 
   const loadPlatforms = useCallback(async (cancelledRef?: { current: boolean }): Promise<void> => {
     setLoading(true)
@@ -598,16 +590,6 @@ function PlatformManagementModal({ accessToken, onClose }: { accessToken: string
     }
   }
 
-  const copyRegistrationGuide = async (): Promise<void> => {
-    try {
-      await navigator.clipboard.writeText(PLATFORM_AGENT_INSTALL_COMMAND)
-      setRegistrationGuideCopied(true)
-      window.setTimeout(() => setRegistrationGuideCopied(false), 1600)
-    } catch {
-      setAuthorizationError('설치 명령을 복사하지 못했습니다.')
-    }
-  }
-
   return (
     <ModalShell
       title="플랫폼 관리"
@@ -656,16 +638,16 @@ function PlatformManagementModal({ accessToken, onClose }: { accessToken: string
                       key={platform.id}
                       type="button"
                       onClick={() => setSelectedId(platform.id)}
-                      className={`flex w-full min-w-0 overflow-hidden items-center gap-3 rounded-md border px-3 py-2.5 text-left transition-colors cursor-pointer ${
+                      className={`flex w-full items-center gap-3 rounded-md border px-3 py-2.5 text-left transition-colors cursor-pointer ${
                         active
                           ? 'border-[rgba(103,232,249,0.42)] bg-[rgba(103,232,249,0.12)]'
                           : 'border-transparent hover:border-white/10 hover:bg-white/[0.05]'
                       }`}
                     >
                       <span className={`h-2.5 w-2.5 shrink-0 rounded-full ${connected ? 'bg-[#35d27f]' : 'bg-[#ef4444]'}`} />
-                      <span className="min-w-0 flex-1 overflow-hidden">
-                        <span title={platform.hostName} className="block truncate text-[12px] font-bold text-white/86">{platform.hostName}</span>
-                        <span title={platform.dnsName || platform.loginName || '플랫폼 장비'} className="mt-0.5 block truncate text-[11px] font-medium text-white/42">{platform.dnsName || platform.loginName || '플랫폼 장비'}</span>
+                      <span className="min-w-0 flex-1">
+                        <span className="block truncate text-[12px] font-bold text-white/86">{platform.hostName}</span>
+                        <span className="mt-0.5 block truncate text-[11px] font-medium text-white/42">{platform.dnsName || platform.loginName || '플랫폼 장비'}</span>
                       </span>
                     </button>
                   )
@@ -682,42 +664,15 @@ function PlatformManagementModal({ accessToken, onClose }: { accessToken: string
                 <p className="text-[13px] font-bold text-white/86">플랫폼 등록</p>
                 <p className="mt-1 text-[11px] font-medium leading-5 text-white/48">에이전트 설치 화면에서 현재 계정 이메일과 등록 키를 입력하세요.</p>
               </div>
-              <div className="flex shrink-0 flex-col items-end gap-2">
-                <button
-                  type="button"
-                  onClick={() => void createAgentRegistrationCode()}
-                  disabled={registrationLoading}
-                  className="h-7 w-[72px] cursor-pointer rounded-md bg-[#5588ff] text-[11px] font-bold text-white transition-colors hover:bg-[#4778ea] disabled:cursor-default disabled:opacity-50"
-                >
-                  키 발급
-                </button>
-                <button
-                  type="button"
-                  aria-expanded={registrationGuideOpen}
-                  onClick={() => setRegistrationGuideOpen((open) => !open)}
-                  className="h-7 w-[72px] cursor-pointer rounded-md border border-white/14 text-[11px] font-bold text-white/65 transition-colors hover:border-white/24 hover:bg-white/[0.06] hover:text-white"
-                >
-                  등록 방법
-                </button>
-              </div>
+              <button
+                type="button"
+                onClick={() => void createAgentRegistrationCode()}
+                disabled={registrationLoading}
+                className="h-8 shrink-0 cursor-pointer rounded-md bg-[#5588ff] px-3.5 text-[12px] font-bold text-white transition-colors hover:bg-[#4778ea] disabled:cursor-default disabled:opacity-50"
+              >
+                키 발급
+              </button>
             </div>
-            {registrationGuideOpen && (
-              <div className="mt-3 rounded-md border border-white/10 bg-black/20 px-3 py-2.5">
-                <p className="text-[11px] font-medium leading-5 text-white/48">플랫폼 장비의 터미널에서 아래 명령을 실행하세요.</p>
-                <div className="mt-2 flex items-start gap-2">
-                  <code className="min-w-0 flex-1 select-all break-all font-mono text-[10px] font-medium leading-5 text-white/72">{PLATFORM_AGENT_INSTALL_COMMAND}</code>
-                  <button
-                    type="button"
-                    title="설치 명령 복사"
-                    aria-label="설치 명령 복사"
-                    onClick={() => void copyRegistrationGuide()}
-                    className="grid size-7 shrink-0 cursor-pointer place-items-center rounded-md border border-white/14 text-white/65 transition-colors hover:border-white/24 hover:bg-white/[0.06] hover:text-white"
-                  >
-                    {registrationGuideCopied ? <Check size={13} className="text-[#85efac]" /> : <Copy size={13} />}
-                  </button>
-                </div>
-              </div>
-            )}
             {registrationCode && (
               <div className="mt-3 flex items-center justify-between gap-3">
                 <div className="flex min-w-0 items-center gap-3">
@@ -1145,61 +1100,19 @@ function ProfileModal({ initial, userName, userEmail, createdAt, lastLoginAt, pr
   )
 }
 
-function SettingsModal({ launcherUpdateAvailable, launcherUpdating, launcherUpdateMessage, onLauncherUpdate, onTailscaleRetry, onClose }: {
+function SettingsModal({ launcherUpdateAvailable, launcherUpdating, launcherUpdateMessage, onLauncherUpdate, onClose }: {
   launcherUpdateAvailable: boolean
   launcherUpdating: boolean
   launcherUpdateMessage: string
   onLauncherUpdate: () => void
-  onTailscaleRetry?: () => void
   onClose: () => void
 }): React.JSX.Element {
   const [activeTab, setActiveTab] = useState<SettingsTabKey>('general')
   const [clearingCache, setClearingCache] = useState(false)
   const [cacheAvailable, setCacheAvailable] = useState(true)
   const [cacheMessage, setCacheMessage] = useState('')
-  const [tailscaleStatus, setTailscaleStatus] = useState<Awaited<ReturnType<NonNullable<typeof window.launcherTailscale>['status']>> | null>(null)
-  const [tailscaleLoading, setTailscaleLoading] = useState(false)
-  const [tailscaleRestarting, setTailscaleRestarting] = useState(false)
-  const [tailscaleMessage, setTailscaleMessage] = useState('')
   const version = import.meta.env.VITE_APP_VERSION
 
-  const loadTailscaleStatus = useCallback(async (): Promise<void> => {
-    if (!window.launcherTailscale) {
-      setTailscaleMessage('데스크톱 런처에서만 원격 연결 상태를 확인할 수 있습니다.')
-      return
-    }
-
-    setTailscaleLoading(true)
-    try {
-      const status = await window.launcherTailscale.status()
-      setTailscaleStatus(status)
-      setTailscaleMessage(status.error ?? '')
-    } catch {
-      setTailscaleMessage('원격 연결 상태를 확인하지 못했습니다.')
-    } finally {
-      setTailscaleLoading(false)
-    }
-  }, [])
-
-  useEffect(() => {
-    if (activeTab === 'remote') void loadTailscaleStatus()
-  }, [activeTab, loadTailscaleStatus])
-
-  const restartTailscaleService = async (): Promise<void> => {
-    if (!window.launcherTailscale?.restartService || tailscaleRestarting) return
-    setTailscaleRestarting(true)
-    setTailscaleMessage('')
-    try {
-      const result = await window.launcherTailscale.restartService()
-      setTailscaleMessage(result.message)
-      if (result.ok) await loadTailscaleStatus()
-    } catch {
-      setTailscaleMessage('원격 연결 서비스 재시작에 실패했습니다.')
-    } finally {
-      setTailscaleRestarting(false)
-    }
-  }
-
   const handleClearCache = async (): Promise<void> => {
     if (!cacheAvailable) return
 
@@ -1241,7 +1154,6 @@ function SettingsModal({ launcherUpdateAvailable, launcherUpdating, launcherUpda
       <div className="grid h-full grid-cols-[138px_1fr]">
         <aside className="border-r border-[rgba(255,255,255,0.08)] p-3">
           <SettingsTab icon={<MonitorCog size={15} />} label="일반" active={activeTab === 'general'} onClick={() => setActiveTab('general')} />
-          <SettingsTab icon={<Network size={15} />} label="원격 연결" active={activeTab === 'remote'} onClick={() => setActiveTab('remote')} />
           <SettingsTab icon={<Palette size={15} />} label="테마" active={activeTab === 'theme'} onClick={() => setActiveTab('theme')} />
           <SettingsTab icon={<Info size={15} />} label="정보" active={activeTab === 'info'} onClick={() => setActiveTab('info')} />
         </aside>
@@ -1307,55 +1219,6 @@ function SettingsModal({ launcherUpdateAvailable, launcherUpdating, launcherUpda
             </>
           )}
 
-          {activeTab === 'remote' && (
-            <>
-              <h3 className="mb-5 text-[15px] font-bold text-[var(--text-primary)]">원격 연결</h3>
-              <SettingBlock title="연결 상태" description="현재 연결 상태">
-                <div className="flex min-w-[150px] flex-col items-end gap-1.5">
-                  <span className={`text-[11px] font-bold ${tailscaleStatus?.connected ? 'text-[#58d68d]' : 'text-[#f3b44f]'}`}>
-                    {tailscaleLoading ? '확인 중' : tailscaleStatus?.connected ? '연결됨' : '연결 필요'}
-                  </span>
-                  {tailscaleStatus?.ip && <span className="text-[11px] text-[var(--text-muted)]">{tailscaleStatus.ip}</span>}
-                </div>
-              </SettingBlock>
-              <SettingBlock title="계정" description="로그인된 계정">
-                <span className="max-w-[220px] truncate text-right text-[12px] font-medium text-[var(--text-secondary)]">
-                  {tailscaleStatus?.loginName || tailscaleStatus?.userName || '-'}
-                </span>
-              </SettingBlock>
-              <SettingBlock title="연결 다시 시도" description="연결 정보를 다시 확인">
-                <button
-                  type="button"
-                  onClick={() => {
-                    onTailscaleRetry?.()
-                    void loadTailscaleStatus()
-                  }}
-                  disabled={!onTailscaleRetry || tailscaleLoading}
-                  className={`rounded-md border border-[rgba(255,255,255,0.14)] px-3 py-2 text-[12px] font-semibold transition-colors ${
-                    onTailscaleRetry && !tailscaleLoading ? 'cursor-pointer text-[var(--text-secondary)] hover:bg-white/[0.06] hover:text-white' : 'cursor-not-allowed text-white/35 opacity-60'
-                  }`}
-                >
-                  다시 연결
-                </button>
-              </SettingBlock>
-              <SettingBlock title="서비스 재시작" description="tailscaled 서비스 재시작" last>
-                <div className="flex flex-col items-end gap-1.5">
-                  <button
-                    type="button"
-                    onClick={() => void restartTailscaleService()}
-                    disabled={!window.launcherTailscale?.restartService || tailscaleRestarting}
-                    className={`rounded-md border border-[rgba(255,255,255,0.14)] px-3 py-2 text-[12px] font-semibold transition-colors ${
-                      window.launcherTailscale?.restartService && !tailscaleRestarting ? 'cursor-pointer text-[var(--text-secondary)] hover:bg-white/[0.06] hover:text-white' : 'cursor-not-allowed text-white/35 opacity-60'
-                    }`}
-                  >
-                    {tailscaleRestarting ? '재시작 중' : '서비스 재시작'}
-                  </button>
-                  {tailscaleMessage && <span className="max-w-[230px] text-right text-[11px] leading-4 text-[var(--text-muted)]">{tailscaleMessage}</span>}
-                </div>
-              </SettingBlock>
-            </>
-          )}
-
           {activeTab === 'info' && (
             <>
               <h3 className="mb-5 text-[15px] font-bold text-[var(--text-primary)]">정보</h3>

src/renderer/src/env.d.ts

@@ -40,10 +40,6 @@ declare global {
         ok: boolean
         message: string
       }>
-      ensureOperator: () => Promise<{
-        ok: boolean
-        message: string
-      }>
       login: (authKey: string, loginServer: string, hostname?: string, forceReset?: boolean) => Promise<{
         ok: boolean
         message: string
@@ -52,10 +48,6 @@ declare global {
         ok: boolean
         message: string
       }>
-      restartService: () => Promise<{
-        ok: boolean
-        message: string
-      }>
     }
     launcherSshKey?: {
       ensure: () => Promise<{
@@ -70,9 +62,6 @@ declare global {
         callback: (payload: { loginToken?: string; error?: string }) => void
       ) => () => void
     }
-    launcherSession?: {
-      endUserSession: () => Promise<{ ok: boolean }>
-    }
   }
 }
 

src/renderer/src/pages/Dashboard.tsx

@@ -5,7 +5,6 @@ import Tooltip from '../components/Tooltip'
 import AppView from './AppView'
 import type { LauncherApp } from '../config/apps'
 import type { AuthSession } from './LoginForm'
-import { refreshLauncherSession } from '../auth/sessionRefresh'
 
 const version = import.meta.env.VITE_APP_VERSION
 
@@ -17,14 +16,9 @@ interface DashboardProps {
 }
 
 const LAUNCHER_API_BASE_URL = (import.meta.env.VITE_ATNMY_STDO_API_BASE_URL || 'http://localhost:4200').replace(/\/+$/, '')
-const MANUAL_BASE_URL = (import.meta.env.VITE_MANUAL_BASE_URL || 'https://portal.autonomystudio.net/manual').replace(/\/+$/, '')
-const LMS_WEB_BASE_URL = `${(
-  import.meta.env.VITE_LMS_WEB_BASE_URL
-  || (import.meta.env.DEV ? 'http://localhost:5177' : 'https://workspace.autonomystudio.net/lms-web/')
-).replace(/\/+$/, '')}/`
+const MANUAL_BASE_URL = (import.meta.env.VITE_MANUAL_BASE_URL || 'http://localhost:5177').replace(/\/+$/, '')
 const NOTICE_READ_STORAGE_KEY = 'atnmy.notice.readSignatures'
 const LAST_LAUNCHED_APP_STORAGE_KEY = 'atnmy.launcher.lastLaunchedApp'
-const TAILSCALE_DEVICE_ID_STORAGE_KEY = 'atnmy.launcher.tailscale-device-id'
 const IS_DEV = import.meta.env.DEV
 const TAILSCALE_BACKGROUND_TIMEOUT_MS = 20_000
 
@@ -103,21 +97,6 @@ function isSameTailscaleAccount(statusAccount: string | undefined, loginAccount:
   return normalizeHeadscaleAccount(statusAccount) === normalizeHeadscaleAccount(loginAccount)
 }
 
-function getTailscaleDeviceId(): string {
-  try {
-    const stored = window.localStorage.getItem(TAILSCALE_DEVICE_ID_STORAGE_KEY)?.trim()
-    if (stored && /^[a-z0-9-]{6,24}$/i.test(stored)) return stored
-
-    const next = typeof crypto !== 'undefined' && 'randomUUID' in crypto
-      ? crypto.randomUUID().replace(/-/g, '').slice(0, 10)
-      : `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`
-    window.localStorage.setItem(TAILSCALE_DEVICE_ID_STORAGE_KEY, next)
-    return next
-  } catch {
-    return 'launcher-client'
-  }
-}
-
 function isTailscaleMissingStatus(status: Awaited<ReturnType<NonNullable<typeof window.launcherTailscale>['status']>> | null): boolean {
   return Boolean(
     status?.backendState === 'Unavailable' &&
@@ -178,11 +157,7 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
   const noticeRef = useRef<HTMLDivElement>(null)
   const appActionMenuRef = useRef<HTMLDivElement>(null)
   const initialAppSelectionDoneRef = useRef(false)
-  const authSessionRef = useRef(authSession)
-
-  useEffect(() => {
-    authSessionRef.current = authSession
-  }, [authSession])
+  const tailscaleProvisionUserRef = useRef('')
 
   const appConfig = apps.find((app) => app.appKey === activeApp) ?? null
   const hasNotices = appNotices.length > 0
@@ -211,15 +186,16 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
     : null
   const activeAppDisplayName = appStatus?.displayName || appConfig?.displayName || activeApp
   const refreshSession = useCallback(async (): Promise<AuthSession | null> => {
-    try {
-      const session = await refreshLauncherSession()
-      if (!session) return null
-      onSessionUpdate(session)
-      return session
-    } catch (error) {
-      console.warn('[launcher] session refresh temporarily failed', error)
-      return authSessionRef.current
-    }
+    const response = await fetch(`${LAUNCHER_API_BASE_URL}/api/auth/refresh`, {
+      method: 'POST',
+      credentials: 'include',
+    })
+
+    if (!response.ok) return null
+
+    const session = await response.json() as AuthSession
+    onSessionUpdate(session)
+    return session
   }, [onSessionUpdate])
 
   const fetchWithAuthRefresh = useCallback(async (url: string, options: RequestInit = {}): Promise<Response> => {
@@ -244,14 +220,14 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
     response = await request(refreshed.accessToken)
     return response
   }, [authSession.accessToken, onSessionExpired, refreshSession])
-  const fetchWithAuthRefreshRef = useRef(fetchWithAuthRefresh)
-  fetchWithAuthRefreshRef.current = fetchWithAuthRefresh
 
   useEffect(() => {
     const launcherTailscale = window.launcherTailscale
     if (!launcherTailscale) return
     const userEmail = authSession.user.email.trim().toLowerCase()
-    if (!userEmail) return
+    const provisionKey = `${userEmail}:${tailscaleRetryNonce}`
+    if (!userEmail || tailscaleProvisionUserRef.current === provisionKey) return
+    tailscaleProvisionUserRef.current = provisionKey
     let cancelled = false
 
     const connectTailscaleInBackground = async (): Promise<void> => {
@@ -273,9 +249,6 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
           return
         }
 
-        const hasAccountIdentity = Boolean(
-          status?.loginName?.trim() || status?.userName?.trim(),
-        )
         const isSameAccount = Boolean(
           status &&
           (
@@ -283,7 +256,7 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
             isSameTailscaleAccount(status.userName, userEmail)
           ),
         )
-        if (status?.connected && (!hasAccountIdentity || isSameAccount)) {
+        if (status?.connected && isSameAccount) {
           setTailscaleIssue(null)
           return
         }
@@ -291,13 +264,11 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
         const sshKey = await window.launcherSshKey?.ensure().catch(() => null)
         if (cancelled) return
 
-        const response = await fetchWithAuthRefreshRef.current(`${LAUNCHER_API_BASE_URL}/api/provision/session`, {
+        const response = await fetchWithAuthRefresh(`${LAUNCHER_API_BASE_URL}/api/provision/session`, {
           method: 'POST',
           headers: { 'Content-Type': 'application/json' },
           body: JSON.stringify({
-            hostname: window.navigator.userAgent.includes('Electron')
-              ? `launcher-client-${getTailscaleDeviceId()}`
-              : `client-${getTailscaleDeviceId()}`,
+            hostname: window.navigator.userAgent.includes('Electron') ? 'launcher-client' : 'client',
             usageType: 'launcher-client',
             publicSshKey: sshKey?.publicKey,
           }),
@@ -318,17 +289,11 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
           return
         }
 
-        const shouldResetSession = Boolean(
-          status &&
-          status.backendState !== 'Unavailable' &&
-          hasAccountIdentity &&
-          !isSameAccount,
-        )
         const result = await launcherTailscale.login(
           provision.tailscaleAuthKey,
           provision.tailscaleLoginServer ?? '',
           provision.tailscaleHostname,
-          shouldResetSession,
+          Boolean(status && status.backendState !== 'Unavailable' && !isSameAccount),
         )
         if (!result.ok) {
           setTailscaleIssue({
@@ -360,7 +325,6 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
         }
         })(), TAILSCALE_BACKGROUND_TIMEOUT_MS, '원격 연결 확인 시간이 초과되었습니다.')
       } catch (error) {
-        if (cancelled) return
         setTailscaleIssue({
           state: 'warning',
           title: '원격 연결 확인 필요',
@@ -375,7 +339,7 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
     return () => {
       cancelled = true
     }
-  }, [authSession.user.email, tailscaleRetryNonce])
+  }, [authSession.user.email, fetchWithAuthRefresh, tailscaleRetryNonce])
 
   useEffect(() => {
     let cancelled = false
@@ -758,8 +722,13 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
     let response = await requestHandoff(authSession.accessToken)
 
     if (response.status === 401) {
-      const nextSession = await refreshLauncherSession()
-      if (nextSession) {
+      const refreshResponse = await fetch(`${LAUNCHER_API_BASE_URL}/api/auth/refresh`, {
+        method: 'POST',
+        credentials: 'include',
+      })
+
+      if (refreshResponse.ok) {
+        const nextSession = await refreshResponse.json() as AuthSession
         onSessionUpdate(nextSession)
         response = await requestHandoff(nextSession.accessToken)
       } else {
@@ -787,11 +756,6 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
 
     let handoffCode: string | undefined
     try {
-      await window.electron.ipcRenderer.invoke('prepare-app-runtime', {
-        appName: activeApp,
-        execPath: appConfig.execPath,
-        devAppPath: appConfig.devAppPath,
-      })
       const handoffAudienceApp = resolveHandoffAudienceApp(activeApp)
       if (handoffAudienceApp) {
         const [handoffToken] = await Promise.all([
@@ -817,39 +781,11 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
       })
       window.localStorage.setItem(LAST_LAUNCHED_APP_STORAGE_KEY, activeApp)
       setRunningApps((prev) => new Set([...prev, activeApp]))
-    } catch (error) {
-      alert(error instanceof Error ? error.message : '앱 실행 준비에 실패했습니다.')
     } finally {
       setLaunchingApp(null)
     }
   }, [activeApp, appConfig, canLaunch, createHandoffToken, launchingApp])
 
-  const handleWebLaunch = useCallback(async () => {
-    if (activeApp.trim().toLowerCase() !== 'lms' || launchingApp) return
-
-    setAppActionMenuOpen(false)
-    setLaunchingApp(activeApp)
-    try {
-      const handoffToken = await createHandoffToken('LMS')
-      if (!handoffToken) return
-
-      const launchUrl = new URL(LMS_WEB_BASE_URL)
-      launchUrl.hash = new URLSearchParams({
-        handoffToken,
-        audienceApp: 'LMS',
-      }).toString()
-      await window.electron.ipcRenderer.invoke('launch-web-app', {
-        appName: activeApp,
-        url: launchUrl.toString(),
-      })
-      window.localStorage.setItem(LAST_LAUNCHED_APP_STORAGE_KEY, activeApp)
-    } catch (error) {
-      alert(`웹 실행에 실패했습니다. (${error instanceof Error ? error.message : '알 수 없는 오류'})`)
-    } finally {
-      setLaunchingApp(null)
-    }
-  }, [activeApp, createHandoffToken, launchingApp])
-
   const handleFocusApp = useCallback(() => {
     window.electron.ipcRenderer.send('focus-app-window', activeApp)
   }, [activeApp])
@@ -1005,9 +941,6 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
                   ) : canLaunch ? (
                     activeAppLaunching ? (
                       <button className="launch-pending-btn" disabled>
-                        <svg aria-hidden="true" className="spin" width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2.4" strokeLinecap="round">
-                          <path d="M12 2a10 10 0 1 0 10 10" />
-                        </svg>
                         실행중
                       </button>
                     ) : (
@@ -1035,17 +968,7 @@ function Dashboard({ authSession, onSessionUpdate, onLogout, onSessionExpired }:
                         </div>
                         {appActionMenuOpen && (
                           <div className="launch-action-dropdown">
-                            {activeApp.trim().toLowerCase() === 'lms' && (
-                              <button type="button" onClick={handleWebLaunch}>
-                                <svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
-                                  <rect width="20" height="14" x="2" y="3" rx="2" />
-                                  <path d="M8 21h8" />
-                                  <path d="M12 17v4" />
-                                </svg>
-                                <span>웹 실행</span>
-                              </button>
-                            )}
-                            <button type="button" className="launch-action-danger" onClick={openDeleteConfirm} disabled={activeAppDeleting}>
+                            <button type="button" onClick={openDeleteConfirm} disabled={activeAppDeleting}>
                               <svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
                                 <path d="M3 6h18" />
                                 <path d="M8 6V4a2 2 0 0 1 2-2h4a2 2 0 0 1 2 2v2" />

src/renderer/src/pages/LoginForm.tsx

@@ -182,9 +182,6 @@ function LoginForm({ onLogin, onGoSignup, onGoPasswordReset, onLoadingChange, in
         body: JSON.stringify({ email, password }),
       })
       if (!response.ok) {
-        if (response.status === 429) {
-          throw new Error('로그인 시도가 잠시 제한되었습니다. 잠시 후 다시 시도해주세요.')
-        }
         throw new Error('이메일 또는 비밀번호를 확인하세요.')
       }
       const session = await response.json() as AuthSession

tsconfig.node.json

@@ -2,9 +2,7 @@
   "extends": "@electron-toolkit/tsconfig/tsconfig.node.json",
   "include": ["electron.vite.config.*", "src/main/**/*", "src/preload/**/*"],
   "compilerOptions": {
-    "composite": false,
-    "incremental": false,
-    "noEmit": true,
+    "composite": true,
     "moduleResolution": "bundler",
     "types": ["electron-vite/node"]
   }

tsconfig.web.json

@@ -2,9 +2,7 @@
   "extends": "@electron-toolkit/tsconfig/tsconfig.web.json",
   "include": ["src/renderer/src/**/*"],
   "compilerOptions": {
-    "composite": false,
-    "incremental": false,
-    "noEmit": true,
+    "composite": true,
     "resolveJsonModule": true,
     "moduleResolution": "bundler",
     "paths": {