Update Fleet-maintained apps

[fleet-release]

Automated ingestion of latest Fleet-maintained app data.

Summary by CodeRabbit

• New Features
  • Added support for the latest releases of numerous maintained applications across macOS and Windows, including Advanced Installer, Akiflow, Brave, Firefox Developer Edition, Microsoft Teams, OBS Studio, Pritunl, Rider, Setapp, and others.
  • Updated download locations and integrity verification for new installation packages.
• Bug Fixes
  • Improved version detection so outdated installations are correctly identified for upgrade.
  • Refreshed uninstall handling for PowerShell, Rider, Setapp, and Snagit to provide more complete cleanup.

[github-actions]

Script Diff Results

ee/maintained-apps/outputs/advanced-installer/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/akiflow/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/beyond-compare/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/brave-browser/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/cleanmymac/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/clop/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/comet/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/cursor/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/dataflare/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/dataflare/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/firefox@developer-edition/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/firefox@nightly/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/granola/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/granola/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/lookaway/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/loom/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/loom/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/macwhisper/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/marsedit/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/megasync/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/microsoft-teams/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/microsoft-teams/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/nosql-workbench/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/nosql-workbench/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/obs/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/only-switch/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/popclip/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/powerphotos/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/powershell/windows.json

=== Install Script (no changes) ===
=== Uninstall // 0995d374 -> 06cf76b8 ===

--- /tmp/old.FtRcdf	2026-07-22 20:30:58.343812896 +0000
+++ /tmp/new.YW1TYa	2026-07-22 20:30:58.343812896 +0000
@@ -1,4 +1,4 @@
-$product_code = '{7B031DCF-BDCE-47D6-89B9-4C558D76E773}'
+$product_code = '{92D9A5DC-8C64-40D5-B1BC-98DB9C7FDB7F}'
 $timeoutSeconds = 300  # 5 minute timeout
 
 # Fleet uninstalls app using product code that's extracted on upload

ee/maintained-apps/outputs/prisma-browser/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/pritunl/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/pritunl/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/rider/darwin.json

=== Install Script (no changes) ===
=== Uninstall // c52dae57 -> 22db20ac ===

--- /tmp/old.cCqhw5	2026-07-22 20:30:58.504814215 +0000
+++ /tmp/new.98tOaC	2026-07-22 20:30:58.505814223 +0000
@@ -54,9 +54,9 @@
 
 sudo rm -rf "$APPDIR/Rider.app"
 sudo rm -rf 'rider'
-trash $LOGGED_IN_USER '~/Library/Application Support/Rider2026.1'
-trash $LOGGED_IN_USER '~/Library/Caches/Rider2026.1'
-trash $LOGGED_IN_USER '~/Library/Logs/Rider2026.1'
+trash $LOGGED_IN_USER '~/Library/Application Support/Rider2026.2'
+trash $LOGGED_IN_USER '~/Library/Caches/Rider2026.2'
+trash $LOGGED_IN_USER '~/Library/Logs/Rider2026.2'
 trash $LOGGED_IN_USER '~/Library/Preferences/jetbrains.rider.71e559ef.plist'
-trash $LOGGED_IN_USER '~/Library/Preferences/Rider2026.1'
+trash $LOGGED_IN_USER '~/Library/Preferences/Rider2026.2'
 trash $LOGGED_IN_USER '~/Library/Saved Application State/com.jetbrains.rider.savedState'

ee/maintained-apps/outputs/rustrover/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/setapp/darwin.json

=== Install Script (no changes) ===
=== Uninstall // e23bd29d -> 9ef05eb6 ===

--- /tmp/old.duHB6L	2026-07-22 20:30:58.599814993 +0000
+++ /tmp/new.GAYqaB	2026-07-22 20:30:58.599814993 +0000
@@ -5,6 +5,76 @@
 LOGGED_IN_USER=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ { print $3 }')
 # functions
 
+remove_launchctl_service() {
+  local service="$1"
+  local booleans=("true" "false")
+  local plist_status
+  local paths
+  local should_sudo
+
+  echo "Removing launchctl service ${service}"
+
+  # A wildcard label can't be used with launchctl or as a plist name, so expand
+  # it to the labels of currently loaded services that match the pattern.
+  local services=("$service")
+  if [[ "$service" == *"*"* ]]; then
+    local regex
+    # Escape regex metacharacters, turn '*' into '.*', and anchor the pattern so
+    # it matches a full label rather than a substring.
+    regex=$(printf '%s' "$service" | sed -e 's/[][(){}.^$+?|\\]/\\&/g' -e 's/\*/.*/g')
+    regex="^${regex}$"
+    services=()
+    local id
+    # Match every loaded job by label regardless of PID; launchctl list reports
+    # loaded-but-not-running jobs with a "-" in the PID column.
+    while read -r _ _ id; do
+      [[ "$id" =~ $regex ]] && services+=("$id")
+    done < <(launchctl list 2>/dev/null | tail -n +2)
+    if [[ ${#services[@]} -eq 0 ]]; then
+      echo "No loaded launchctl service matches ${service}"
+      return
+    fi
+  fi
+
+  local service_label
+  for service_label in "${services[@]}"; do
+    for should_sudo in "${booleans[@]}"; do
+      plist_status=$(launchctl list "${service_label}" 2>/dev/null)
+
+      if [[ $plist_status == \{* ]]; then
+        if [[ $should_sudo == "true" ]]; then
+          sudo launchctl remove "${service_label}"
+        else
+          launchctl remove "${service_label}"
+        fi
+        sleep 1
+      fi
+
+      paths=(
+        "/Library/LaunchAgents/${service_label}.plist"
+        "/Library/LaunchDaemons/${service_label}.plist"
+      )
+
+      # if not using sudo, prepend the home directory to the paths
+      if [[ $should_sudo == "false" ]]; then
+        for i in "${!paths[@]}"; do
+          paths[i]="${HOME}${paths[i]}"
+        done
+      fi
+
+      for path in "${paths[@]}"; do
+        if [[ -e "$path" ]]; then
+          if [[ $should_sudo == "true" ]]; then
+            sudo rm -f -- "$path"
+          else
+            rm -f -- "$path"
+          fi
+        fi
+      done
+    done
+  done
+}
+
 trash() {
   local logged_in_user="$1"
   local target_file="$2"
@@ -52,10 +122,19 @@
   fi
 }
 
+remove_launchctl_service 'com.setapp.DesktopClient.SetappAgent'
+remove_launchctl_service 'com.setapp.DesktopClient.SetappAssistant'
+remove_launchctl_service 'com.setapp.DesktopClient.SetappLauncher'
+remove_launchctl_service 'com.setapp.DesktopClient.SetappUpdater'
 sudo rm -rf "$APPDIR/Setapp.app"
 trash $LOGGED_IN_USER '~/Library/Application Scripts/com.setapp.DesktopClient.SetappAgent.FinderSyncExt'
+trash $LOGGED_IN_USER '~/Library/Application Support/Setapp*'
 trash $LOGGED_IN_USER '~/Library/Caches/com.setapp.DesktopClient'
 trash $LOGGED_IN_USER '~/Library/Caches/com.setapp.DesktopClient.SetappAgent'
+trash $LOGGED_IN_USER '~/Library/Containers/com.setapp.DesktopClient.SetappAgent.FinderSyncExt'
+trash $LOGGED_IN_USER '~/Library/HTTPStorages/com.setapp.DesktopClient*'
+trash $LOGGED_IN_USER '~/Library/LaunchAgents/com.setapp.DesktopClient.*plist'
 trash $LOGGED_IN_USER '~/Library/Logs/Setapp'
+trash $LOGGED_IN_USER '~/Library/Preferences/com.setapp.DesktopClient.plist'
 trash $LOGGED_IN_USER '~/Library/Preferences/com.setapp.DesktopClient.SetappAgent.plist'
 trash $LOGGED_IN_USER '~/Library/Saved Application State/com.setapp.DesktopClient.savedState'

ee/maintained-apps/outputs/snagit/darwin.json

=== Install Script (no changes) ===
=== Uninstall // b52ff2b2 -> 59bfdeae ===

--- /tmp/old.VtMUCH	2026-07-22 20:30:58.648815394 +0000
+++ /tmp/new.ce1hXx	2026-07-22 20:30:58.648815394 +0000
@@ -5,6 +5,46 @@
 LOGGED_IN_USER=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ { print $3 }')
 # functions
 
+quit_application() {
+  local bundle_id="$1"
+  local timeout_duration=10
+
+  # check if the application is running
+  local app_running
+  app_running=$(osascript -e "application id \"$bundle_id\" is running" 2>/dev/null)
+  if [[ "$app_running" != "true" ]]; then
+    return
+  fi
+
+  local console_user
+  console_user=$(stat -f "%Su" /dev/console)
+  if [[ -z "$console_user" || "$console_user" == "root" || "$console_user" == "loginwindow" ]]; then
+    echo "Not logged into a non-root GUI; skipping quitting application ID '$bundle_id'."
+    return
+  fi
+
+  echo "Quitting application '$bundle_id'..."
+
+  # try to quit the application within the timeout period
+  local quit_success=false
+  SECONDS=0
+  while (( SECONDS < timeout_duration )); do
+    if osascript -e "tell application id \"$bundle_id\" to quit" >/dev/null 2>&1; then
+      if ! pgrep -f "$bundle_id" >/dev/null 2>&1; then
+        echo "Application '$bundle_id' quit successfully."
+        quit_success=true
+        break
+      fi
+    fi
+    sleep 1
+  done
+
+  if [[ "$quit_success" = false ]]; then
+    echo "Application '$bundle_id' did not quit."
+  fi
+}
+
+
 trash() {
   local logged_in_user="$1"
   local target_file="$2"
@@ -52,9 +92,14 @@
   fi
 }
 
+quit_application 'com.TechSmith.Snagit'
 sudo rm -rf "$APPDIR/Snagit.app"
+trash $LOGGED_IN_USER '~/Library/Application Scripts/7TQL462TU8.com.techsmith.snagit'
+trash $LOGGED_IN_USER '~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.ApplicationRecentDocuments/com.techsmith.snagit.sfl*'
+trash $LOGGED_IN_USER '~/Library/Application Support/Snagit'
 trash $LOGGED_IN_USER '~/Library/Caches/com.TechSmith.Snagit*'
 trash $LOGGED_IN_USER '~/Library/Group Containers/*.com.techsmith.snagit'
+trash $LOGGED_IN_USER '~/Library/HTTPStorages/com.TechSmith.Snagit*'
 trash $LOGGED_IN_USER '~/Library/Preferences/com.TechSmith.Snagit*.plist'
 trash $LOGGED_IN_USER '~/Library/Preferences/com.techsmith.snagit.capturehelper*.plist'
 trash $LOGGED_IN_USER '~/Library/Saved Application State/com.TechSmith.Snagit*.savedState'

ee/maintained-apps/outputs/sourcetree/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/trezor-suite/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/typora/windows.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/vivaldi/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/wechat/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

ee/maintained-apps/outputs/whatsapp/darwin.json

=== Install Script (no changes) ===
=== Uninstall Script (no changes) ===

[coderabbitai]

Walkthrough

Updated maintained-app manifests for newer macOS and Windows releases. Changes synchronize version values, patched-query thresholds, installer URLs, and SHA-256 checksums across the affected entries. PowerShell, Rider, Setapp, and Snagit also received updated uninstall script references or script contents.

Possibly related PRs

• fleetdm/fleet#49743 — Updates the same Advanced Installer manifest from version 23.8 to 23.9.
• fleetdm/fleet#49759 — Updates overlapping maintained-app manifests, including Advanced Installer and Akiflow.
• fleetdm/fleet#49763 — Updates the same Advanced Installer version metadata and installer fields.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is too vague and omits the required template fields, related issue, checklist items, and testing details.	Expand the description to match the template, including the related issue, applicable checklist items, and testing notes.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title is concise and accurately summarizes the main change: updating Fleet-maintained apps.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fma-2607222022

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 Checkov (3.3.8)

ee/maintained-apps/outputs/advanced-installer/windows.json

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

ee/maintained-apps/outputs/akiflow/darwin.json

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

ee/maintained-apps/outputs/beyond-compare/darwin.json

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

• 39 others

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@ee/maintained-apps/outputs/setapp/darwin.json`:
- Line 20: Update remove_launchctl_service to resolve the console UID with id -u
"$(stat -f "%Su" /dev/console)" and target each service through the explicit
gui/<uid>/ domain. Use the GUI-domain label for launchctl list/remove and only
fall back to the system/ domain when the service is not loaded there, while
preserving wildcard matching and plist cleanup behavior for the
com.setapp.DesktopClient.* services.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: d3c6c6d1-4d9a-42df-8f41-64011674cacf

📥 Commits

Reviewing files that changed from the base of the PR and between 6d68bd6 and 9cc1e4c.

📒 Files selected for processing (42)

• ee/maintained-apps/outputs/advanced-installer/windows.json
• ee/maintained-apps/outputs/akiflow/darwin.json
• ee/maintained-apps/outputs/beyond-compare/darwin.json
• ee/maintained-apps/outputs/brave-browser/darwin.json
• ee/maintained-apps/outputs/cleanmymac/darwin.json
• ee/maintained-apps/outputs/clop/darwin.json
• ee/maintained-apps/outputs/comet/windows.json
• ee/maintained-apps/outputs/cursor/darwin.json
• ee/maintained-apps/outputs/dataflare/darwin.json
• ee/maintained-apps/outputs/dataflare/windows.json
• ee/maintained-apps/outputs/firefox@developer-edition/darwin.json
• ee/maintained-apps/outputs/firefox@nightly/darwin.json
• ee/maintained-apps/outputs/granola/darwin.json
• ee/maintained-apps/outputs/granola/windows.json
• ee/maintained-apps/outputs/lookaway/darwin.json
• ee/maintained-apps/outputs/loom/darwin.json
• ee/maintained-apps/outputs/loom/windows.json
• ee/maintained-apps/outputs/macwhisper/darwin.json
• ee/maintained-apps/outputs/marsedit/darwin.json
• ee/maintained-apps/outputs/megasync/windows.json
• ee/maintained-apps/outputs/microsoft-teams/darwin.json
• ee/maintained-apps/outputs/microsoft-teams/windows.json
• ee/maintained-apps/outputs/nosql-workbench/darwin.json
• ee/maintained-apps/outputs/nosql-workbench/windows.json
• ee/maintained-apps/outputs/obs/darwin.json
• ee/maintained-apps/outputs/only-switch/darwin.json
• ee/maintained-apps/outputs/popclip/darwin.json
• ee/maintained-apps/outputs/powerphotos/darwin.json
• ee/maintained-apps/outputs/powershell/windows.json
• ee/maintained-apps/outputs/prisma-browser/windows.json
• ee/maintained-apps/outputs/pritunl/darwin.json
• ee/maintained-apps/outputs/pritunl/windows.json
• ee/maintained-apps/outputs/rider/darwin.json
• ee/maintained-apps/outputs/rustrover/windows.json
• ee/maintained-apps/outputs/setapp/darwin.json
• ee/maintained-apps/outputs/snagit/darwin.json
• ee/maintained-apps/outputs/sourcetree/darwin.json
• ee/maintained-apps/outputs/trezor-suite/darwin.json
• ee/maintained-apps/outputs/typora/windows.json
• ee/maintained-apps/outputs/vivaldi/darwin.json
• ee/maintained-apps/outputs/wechat/darwin.json
• ee/maintained-apps/outputs/whatsapp/darwin.json

[coderabbitai]

🎯 Functional Correctness | 🟠 Major | 🏗️ Heavy lift

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== locate file =="
git ls-files | grep -F 'ee/maintained-apps/outputs/setapp/darwin.json' || true

echo "== relevant excerpt =="
if [ -f ee/maintained-apps/outputs/setapp/darwin.json ]; then
  wc -l ee/maintained-apps/outputs/setapp/darwin.json
  python3 - <<'PY'
import json
from pathlib import Path
p=Path('ee/maintained-apps/outputs/setapp/darwin.json')
data=json.loads(p.read_text())
for k,v in data.items():
    print(f"KEY={k!r} TYPE={type(v).__name__}")
    if isinstance(v, dict):
        for x,y in v.items():
            print(f"  {x!r}")
    elif isinstance(v, (str,list)):
        txt=str(v)
        if 'launchctl' in txt or 'LOGGED_IN_USER' in txt or 'Setapp' in txt:
            print(txt[:2000])
PY
fi

echo "== all launchd/domain related references in repository =="
rg -n "launchctl|gui/[0-9]|domain/|ConsoleUser|sudo rm -rf|SetappAgent|SetappAssistant|SetappLauncher|SetappUpdater" -S . || true

echo "== shell availability for pure behavioral probe =="
env | sed -n '1,80p'

Repository: fleetdm/fleet

Length of output: 50370

---

🌐 Web query:

Apple launchctl asuser man domain system launchctl list runs in current domain

💡 Result:

The launchctl asuser command is designed to execute a specified command in the execution context (Mach bootstrap namespace, exception server, and security audit session) of a target user's bootstrap [1][2][3]. This allows processes—typically launched by a system daemon—to run with the privileges and environment of a specific user [4][5]. Regarding your observations about launchctl list and domain contexts: 1. Domain Targeting: launchctl 2+ uses explicit domain specifiers (e.g., system/, gui//, user//) for most operations [6][7]. The legacy launchctl list command behaves differently depending on the context in which it is executed and often defaults to the system domain when run as root, or the current user's session domain otherwise [8][9]. 2. launchctl list Default Behavior: When you run launchctl list without a domain specifier, it does not necessarily run in the "current" domain in a universal sense; it historically relies on the caller's context [8]. Because modern launchctl subcommands like print are preferred over list, launchctl list is often considered legacy and may not provide the granular control over domain-specific queries that explicit target specifiers (e.g., print gui/501/...) do [9][7]. 3. Crucial Distinction: launchctl asuser changes the bootstrap context for the command being executed, but it does not implicitly change the target domain for subsequent launchctl subcommands unless those subcommands also use explicit domain targets [4][5]. If you need to list or manage services for a specific user, it is best practice to target the domain explicitly (e.g., launchctl print gui//) rather than relying on the implicit domain selection of the list command [10][11]. In summary, launchctl asuser effectively shifts the bootstrap context, but for querying service states, modern best practice is to explicitly specify the domain rather than relying on the default behavior of the legacy list command [11][7].

Citations:

• 1: https://leancrew.com/all-this/man/man1/launchctl.html
• 2: https://www.unix.com/man_page/mojave/1/launchctl/
• 3: https://www.manpagez.com/man/1/launchctl/osx-10.10.php
• 4: https://bartreardon.github.io/2019/09/18/sudo-u-vs-launchctl-asuser.html
• 5: https://mjtsai.com/blog/2016/11/12/launchctl-asuser/
• 6: https://gist.github.com/masklinn/a532dfe55bdeab3d60ab8e46ccc38a68
• 7: https://stackoverflow.com/questions/65772678/with-launchctl-2-how-can-i-infer-the-domain-from-a-service-that-is-already-runn
• 8: https://keith.github.io/xcode-man-pages/launchctl.1.html
• 9: https://ss64.com/mac/launchctl.html
• 10: https://stackoverflow.com/questions/70127661/running-launchd-services-with-non-root-user-on-macos
• 11: https://www.launchd.info/

---

Target the Setapp services in the logged-in GUI domain.

launchctl list/remove without a domain prefix uses the caller’s bootstrap domain, so running under root hits root’s domain ($HOME becomes /var/root) while missing the actual GUI sessions, and running as a non-root user can miss system-owned services. Resolve the console UID with id -u "$(stat -f "%Su" /dev/console)" and use the explicit gui/<uid>/ target for each com.setapp.DesktopClient.* service, falling back to system/ only when the GUI domain doesn’t load them.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@ee/maintained-apps/outputs/setapp/darwin.json` at line 20, Update
remove_launchctl_service to resolve the console UID with id -u "$(stat -f "%Su"
/dev/console)" and target each service through the explicit gui/<uid>/ domain.
Use the GUI-domain label for launchctl list/remove and only fall back to the
system/ domain when the service is not loaded there, while preserving wildcard
matching and plist cleanup behavior for the com.setapp.DesktopClient.* services.

[github-actions]

Closing in favor of #49786.