@1agh/maude 0.21.0 → 0.22.0

package/cli/commands/doctor.mjs

@@ -252,96 +252,107 @@ function printReport({ depsByPlugin, configReport, summary }) {
 async function applyFixes({ repoRoot, configFsPath, depsByPlugin, configReport }) {
   let configChanged = false;
 
-  // ── Dependency installs ────────────────────────────────────────────────
-  const installable = [];
-  for (const env of Object.values(depsByPlugin)) {
-    if (!env.results) continue;
-    for (const r of env.results) {
-      if (r.status !== 'missing') continue;
-      // Find the original dep entry to read autoInstall + install commands.
-      // checkAll dropped the manifest entry but kept r.install — we use that.
-      installable.push(r);
-    }
-  }
-  // Per-dep prompt — no silent installs.
-  if (installable.length > 0) {
-    process.stdout.write('\n--- Dependency installs (per-dep prompt) ---\n');
-    const rl = createInterface({ input: stdin, output: stdout });
-    for (const r of installable) {
-      const cmd = (r.install && (r.install[process.platform] || r.install.preferred)) || null;
-      if (!cmd) {
-        process.stdout.write(`  skip ${r.id} — no install command declared\n`);
-        continue;
-      }
-      // eslint-disable-next-line no-await-in-loop
-      const ans = await rl.question(`  Install ${r.id} via \`${cmd}\`? [y/N] `);
-      if (ans.trim().toLowerCase() === 'y' || ans.trim().toLowerCase() === 'yes') {
-        process.stdout.write(`  running: ${cmd}\n`);
-        const res = spawnSync('bash', ['-c', cmd], { stdio: 'inherit' });
-        if (res.status !== 0) process.stdout.write(`  ✗ install failed (exit ${res.status})\n`);
-      } else {
-        process.stdout.write(`  skipped ${r.id}\n`);
+  // ── Config edits ───────────────────────────────────────────────────────
+  // Run FIRST — deterministic (filesystem only) and must not be blocked by
+  // an interactive prompt that may never resolve on a non-TTY stdin (CI,
+  // scripted spawns with empty input). Dep prompts come AFTER.
+  if (configReport.exists) {
+    const config = JSON.parse(readFileSync(configFsPath, 'utf8'));
+
+    // Drop unknown additionalProperties errors.
+    for (const e of configReport.schema.errors) {
+      if (e.message.startsWith('unknown property')) {
+        const parts = e.path.split('/').filter(Boolean);
+        let cur = config;
+        for (let i = 0; i < parts.length - 1; i++) cur = cur?.[parts[i]];
+        if (cur && parts.length > 0) {
+          delete cur[parts[parts.length - 1]];
+          configChanged = true;
+        }
       }
     }
-    rl.close();
-  }
 
-  // ── Config edits ────────────────────────────────────────────────────────
-  if (!configReport.exists) return;
-  const config = JSON.parse(readFileSync(configFsPath, 'utf8'));
-
-  // Drop unknown additionalProperties errors.
-  for (const e of configReport.schema.errors) {
-    if (e.message.startsWith('unknown property')) {
-      const parts = e.path.split('/').filter(Boolean);
-      let cur = config;
-      for (let i = 0; i < parts.length - 1; i++) cur = cur?.[parts[i]];
-      if (cur && parts.length > 0) {
-        delete cur[parts[parts.length - 1]];
+    // Apply drift — silent (detector returned a concrete value, so we know
+    // declared is wrong or stale).
+    if (configReport.drift.length > 0) {
+      if (!config.stack) config.stack = {};
+      for (const d of configReport.drift) {
+        config.stack[d.key] = d.detected;
         configChanged = true;
       }
     }
-  }
 
-  // Apply drift — silent (detector returned a concrete value, so we know
-  // declared is wrong or stale).
-  if (configReport.drift.length > 0) {
-    if (!config.stack) config.stack = {};
-    for (const d of configReport.drift) {
-      config.stack[d.key] = d.detected;
-      configChanged = true;
+    // Add missing quality gates — silent additive merge.
+    if (configReport.qualityAdditions.length > 0) {
+      if (!config.quality) config.quality = {};
+      for (const a of configReport.qualityAdditions) {
+        if (!config.quality[a.gate]) {
+          config.quality[a.gate] = a.command;
+          configChanged = true;
+        }
+      }
     }
-  }
 
-  // Add missing quality gates — silent additive merge.
-  if (configReport.qualityAdditions.length > 0) {
-    if (!config.quality) config.quality = {};
-    for (const a of configReport.qualityAdditions) {
-      if (!config.quality[a.gate]) {
-        config.quality[a.gate] = a.command;
-        configChanged = true;
+    if (configChanged) {
+      writeFileSync(configFsPath, `${JSON.stringify(config, null, 2)}\n`);
+      process.stdout.write(`\n  ✓ wrote ${CONFIG_PATH}\n`);
+    } else {
+      process.stdout.write('\n  (no config edits applied)\n');
+    }
+
+    // Note: invalid-enum errors (e.g. tests: "node-test") are NEVER auto-
+    // fixed — the user picks the migration target. Surface the leftover.
+    const remaining = configReport.schema.errors.filter(
+      (e) => !e.message.startsWith('unknown property')
+    );
+    if (remaining.length > 0) {
+      process.stdout.write(
+        `\n  ⚠ ${remaining.length} schema error${remaining.length === 1 ? '' : 's'} not auto-fixed — user decision required:\n`
+      );
+      for (const e of remaining) {
+        process.stdout.write(`    ${e.path}: ${e.message}\n`);
       }
     }
   }
 
-  if (configChanged) {
-    writeFileSync(configFsPath, `${JSON.stringify(config, null, 2)}\n`);
-    process.stdout.write(`\n  ✓ wrote ${CONFIG_PATH}\n`);
-  } else {
-    process.stdout.write('\n  (no config edits applied)\n');
+  // ── Dependency installs ────────────────────────────────────────────────
+  const installable = [];
+  for (const env of Object.values(depsByPlugin)) {
+    if (!env.results) continue;
+    for (const r of env.results) {
+      if (r.status !== 'missing') continue;
+      installable.push(r);
+    }
   }
-
-  // Note: invalid-enum errors (e.g. tests: "node-test") are NEVER auto-
-  // fixed — the user picks the migration target. Surface the leftover.
-  const remaining = configReport.schema.errors.filter(
-    (e) => !e.message.startsWith('unknown property')
-  );
-  if (remaining.length > 0) {
-    process.stdout.write(
-      `\n  ⚠ ${remaining.length} schema error${remaining.length === 1 ? '' : 's'} not auto-fixed — user decision required:\n`
-    );
-    for (const e of remaining) {
-      process.stdout.write(`    ${e.path}: ${e.message}\n`);
+  // Per-dep prompt — no silent installs. Skip when stdin is not a TTY
+  // (CI runners, scripted spawns) so config edits above are never bypassed
+  // by a never-resolving readline prompt against closed stdin.
+  if (installable.length > 0) {
+    if (!stdin.isTTY) {
+      process.stdout.write(
+        `\n--- Dependency installs skipped (non-interactive stdin; ${installable.length} missing) ---\n`
+      );
+    } else {
+      process.stdout.write('\n--- Dependency installs (per-dep prompt) ---\n');
+      const rl = createInterface({ input: stdin, output: stdout });
+      for (const r of installable) {
+        const cmd = (r.install && (r.install[process.platform] || r.install.preferred)) || null;
+        if (!cmd) {
+          process.stdout.write(`  skip ${r.id} — no install command declared\n`);
+          continue;
+        }
+        // eslint-disable-next-line no-await-in-loop
+        const ans = await rl.question(`  Install ${r.id} via \`${cmd}\`? [y/N] `);
+        const norm = (ans || '').trim().toLowerCase();
+        if (norm === 'y' || norm === 'yes') {
+          process.stdout.write(`  running: ${cmd}\n`);
+          const res = spawnSync('bash', ['-c', cmd], { stdio: 'inherit' });
+          if (res.status !== 0) process.stdout.write(`  ✗ install failed (exit ${res.status})\n`);
+        } else {
+          process.stdout.write(`  skipped ${r.id}\n`);
+        }
+      }
+      rl.close();
     }
   }
 

package/cli/commands/hub.mjs

@@ -37,13 +37,18 @@ function usage() {
         Start the self-hostable Yjs sync hub in the current process tree.
         --port           listen port (default 1234, env PORT)
         --data           hub.db + tokens.json dir (default ./data, env DATA_DIR)
-        --secret         HUB_SECRET escape-hatch token (env HUB_SECRET)
+        --secret         HUB_SECRET escape-hatch token (env HUB_SECRET).
+                         If unset on an empty hub, a one-time bootstrap link is
+                         printed to logs — open it in a browser to claim admin.
         --insecure-http  cosmetic log-only flag for non-TLS dev
         --dev            generate a one-shot mau_dev_<hex> token, print the
                          connect command, then run the hub. Convenience for
                          contributor onboarding — drops tokens.json on exit
                          is NOT performed (tokens persist; clean by hand).
 
+        On boot the hub prints its /admin URL. The admin UI generates invite
+        tokens, lists peers, and rotates tokens without shelling into the host.
+
   token generate --label NAME [--data PATH] [--dev]
         Generate a new mau_<32hex> token and append it to
         <data>/tokens.json with the given label. Prints the raw token ONCE,
@@ -51,9 +56,12 @@ function usage() {
 
         --dev produces a mau_dev_<hex> token (convention only — same auth).
 
+        Equivalent to the "Generate invite" button in the /admin UI — use
+        whichever is more convenient for the deploy.
+
   status [URL] [--json]
-        HTTP GET <url>/health, print uptime/version/token-count. URL defaults
-        to http://localhost:1234. --json emits the raw response.
+        HTTP GET <url>/health, print uptime/version/token-count/peers. URL
+        defaults to http://localhost:1234. --json emits the raw response.
 
 NOTES
   Local dev only in v1.1 Task 2 slice — production-install packaging
@@ -64,6 +72,12 @@ EXAMPLES
   maude hub serve --port 4400
   maude hub token generate --label alice
   maude hub status http://localhost:4400
+
+  # Recommended flow on a fresh deploy:
+  #   1. maude hub serve            → copy bootstrap link from logs
+  #   2. open the link in browser   → first-run wizard, mint admin secret
+  #   3. click "Generate invite"    → copy 'maude design link …' command
+  #   4. paste on the peer machine  → linked
 `;
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1agh/maude",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "description": "Marketplace of Claude Code plugins by Michal Dovrtěl: `design` (canvas-first design iteration) + `flow` (generic agentic workflow loop with .ai second brain). Ships the `maude` CLI (with `mdcc` legacy alias) to scaffold workspace, run the design dev server, and manage configs.",
   "type": "module",
   "engines": {
@@ -41,13 +41,13 @@
     "prepublishOnly": "bash scripts/check-version-parity.sh"
   },
   "optionalDependencies": {
-    "@1agh/maude-darwin-arm64": "0.21.0",
-    "@1agh/maude-darwin-x64": "0.21.0",
-    "@1agh/maude-linux-arm64": "0.21.0",
-    "@1agh/maude-linux-arm64-musl": "0.21.0",
-    "@1agh/maude-linux-x64": "0.21.0",
-    "@1agh/maude-linux-x64-musl": "0.21.0",
-    "@1agh/maude-win32-x64": "0.21.0"
+    "@1agh/maude-darwin-arm64": "0.22.0",
+    "@1agh/maude-darwin-x64": "0.22.0",
+    "@1agh/maude-linux-arm64": "0.22.0",
+    "@1agh/maude-linux-arm64-musl": "0.22.0",
+    "@1agh/maude-linux-x64": "0.22.0",
+    "@1agh/maude-linux-x64-musl": "0.22.0",
+    "@1agh/maude-win32-x64": "0.22.0"
   },
   "files": [
     "cli",