@agent-webui/ai-desk-daemon 1.0.61-beta5 → 1.0.61-beta7

package/bin/cli.js

@@ -12,7 +12,12 @@ const { start, stop, restart, status } = require('../lib/daemon-manager');
 const { getLogPath } = require('../lib/platform');
 const { VERSION } = require('../lib/platform');
 const { getPort } = require('../lib/config');
-const { reportLifecycle } = require('../lib/daemon-registry');
+const {
+  configureRegistryUrl,
+  getRegistryConfig,
+  reportLifecycle,
+  syncRegistryConfigToDaemonConfig,
+} = require('../lib/daemon-registry');
 const { upgradePackage } = require('../lib/self-upgrade');
 
 function wait(ms) {
@@ -141,11 +146,63 @@ async function reportRegistryLifecycle(event) {
   }
 }
 
+function syncRegistryConfigForDaemonStart() {
+  try {
+    syncRegistryConfigToDaemonConfig();
+  } catch (error) {
+    console.warn(chalk.yellow(`[registry] Failed to sync daemon registry config: ${error.message || error}`));
+  }
+}
+
 program
   .name('aidesk')
   .description('AI Desk Daemon - CLI tool for managing the AI Desk daemon service')
   .version(VERSION);
 
+const registryCommand = program
+  .command('registry')
+  .description('Manage shared runtime registry backend settings');
+
+registryCommand
+  .command('set-url <url>')
+  .description('Persist the AI Desk backend URL used for daemon registry reporting')
+  .option('--insecure-skip-tls-verify', 'Skip TLS certificate verification for this registry URL')
+  .option('--strict-tls', 'Require strict TLS certificate verification for this registry URL')
+  .action((url, options) => {
+    try {
+      if (options.insecureSkipTlsVerify && options.strictTls) {
+        throw new Error('Use either --insecure-skip-tls-verify or --strict-tls, not both');
+      }
+      const tlsInsecureSkipVerify = options.insecureSkipTlsVerify
+        ? true
+        : (options.strictTls ? false : undefined);
+      const config = configureRegistryUrl(url, { tlsInsecureSkipVerify });
+      console.log(chalk.green('✓ Registry URL updated'));
+      console.log(`API base URL: ${config.apiBaseUrl}`);
+      console.log(`TLS verification: ${config.tlsInsecureSkipVerify ? 'skip for this URL' : 'strict'}`);
+      console.log(chalk.cyan('Restart the daemon for the new registry URL to be used by background heartbeats.'));
+    } catch (error) {
+      console.error(chalk.red('Failed to update registry URL:'), error.message);
+      process.exit(1);
+    }
+  });
+
+registryCommand
+  .command('status')
+  .description('Show the effective daemon registry backend settings')
+  .action(() => {
+    const config = getRegistryConfig();
+    if (!config) {
+      console.log(chalk.yellow('Registry reporting is disabled'));
+      return;
+    }
+    console.log(`API base URL: ${config.apiBaseUrl}`);
+    console.log(`RC account ID: ${config.rcAccountId || '(empty)'}`);
+    console.log(`RC extension ID: ${config.rcExtensionId || '(empty)'}`);
+    console.log(`RC username: ${config.rcUsername || '(empty)'}`);
+    console.log(`TLS verification: ${config.tlsInsecureSkipVerify ? 'skip for this URL' : 'strict'}`);
+  });
+
 // Start command
 program
   .command('start')
@@ -158,6 +215,7 @@ program
     try {
       const mode = resolveRequestedMode(options) || 'native';
       const modeResult = configureRequestedMode(mode);
+      syncRegistryConfigForDaemonStart();
       start();
       await reportRegistryLifecycle('start');
       if (mode === 'cli-anything' && modeResult?.runtimeInfo?.cliAnythingPath) {
@@ -257,6 +315,7 @@ program
     try {
       const mode = resolveRequestedMode(options);
       const modeResult = configureRequestedMode(mode);
+      syncRegistryConfigForDaemonStart();
       restart();
       await reportRegistryLifecycle('restart');
       if (mode === 'cli-anything' && modeResult?.runtimeInfo?.cliAnythingPath) {

package/lib/daemon-registry.js

@@ -25,16 +25,44 @@ function parseTruthyEnv(value) {
   return raw === '1' || raw === 'true' || raw === 'yes' || raw === 'on';
 }
 
+function isPrivateRegistryHost(hostname) {
+  const host = trim(hostname).toLowerCase();
+  return (
+    host === 'localhost' ||
+    host === '127.0.0.1' ||
+    host.endsWith('.local') ||
+    /^10\./.test(host) ||
+    /^192\.168\./.test(host) ||
+    /^172\.(1[6-9]|2\d|3[0-1])\./.test(host)
+  );
+}
+
+function inferTLSInsecureSkipVerify(apiBaseUrl) {
+  try {
+    const url = new URL(normalizeApiBaseUrl(apiBaseUrl));
+    if (url.protocol !== 'https:') return false;
+    if (url.hostname === 'desk.int.rclabenv.com') return false;
+    return isPrivateRegistryHost(url.hostname);
+  } catch {
+    return false;
+  }
+}
+
 function readRegistrySessionIdentity(homeDir = os.homedir()) {
   const sessionPath = path.join(homeDir, '.aidesktop', 'session.json');
   try {
     if (!fs.existsSync(sessionPath)) return null;
     const session = JSON.parse(fs.readFileSync(sessionPath, 'utf8'));
     if (!session || typeof session !== 'object') return null;
+    const apiBaseUrl = normalizeApiBaseUrl(session.api_base_url || session.apiBaseUrl);
     const rcAccountId = trim(session.account_id || session.accountId);
     const rcExtensionId = trim(session.extension_id || session.extensionId);
-    if (!rcAccountId || !rcExtensionId) return null;
-    return { rcAccountId, rcExtensionId };
+    const rcUsername = trim(session.rc_username || session.rcUsername);
+    const tlsInsecureSkipVerify = Boolean(
+      session.tls_insecure_skip_verify || session.tlsInsecureSkipVerify,
+    );
+    if (!apiBaseUrl && !rcAccountId && !rcExtensionId && !rcUsername) return null;
+    return { apiBaseUrl, rcAccountId, rcExtensionId, rcUsername, tlsInsecureSkipVerify };
   } catch {
     return null;
   }
@@ -55,12 +83,12 @@ function readRegistryConfigFromDaemonConfig(homeDir = os.homedir()) {
       sessionIdentity?.rcAccountId || '';
     const rcExtensionId = trim(registry.rc_extension_id || registry.rcExtensionId) ||
       sessionIdentity?.rcExtensionId || '';
-    if (!apiBaseUrl || !rcAccountId || !rcExtensionId) return null;
+    if (!apiBaseUrl) return null;
     return {
       apiBaseUrl,
       rcAccountId,
       rcExtensionId,
-      rcUsername: trim(registry.rc_username || registry.rcUsername),
+      rcUsername: trim(registry.rc_username || registry.rcUsername) || sessionIdentity?.rcUsername || '',
       tlsInsecureSkipVerify: Boolean(registry.tls_insecure_skip_verify || registry.tlsInsecureSkipVerify),
     };
   } catch {
@@ -71,32 +99,121 @@ function readRegistryConfigFromDaemonConfig(homeDir = os.homedir()) {
 function getRegistryConfig(env = process.env, homeDir = os.homedir()) {
   const daemonConfig = readRegistryConfigFromDaemonConfig(homeDir);
   const sessionIdentity = readRegistrySessionIdentity(homeDir);
-  const apiBaseUrl = normalizeApiBaseUrl(
+  const envApiBaseUrl = normalizeApiBaseUrl(
     env.AI_DESK_API_BASE_URL || env.AI_DESK_BACKEND_API_URL || env.AI_DESK_BACKEND_URL,
-  ) || daemonConfig?.apiBaseUrl || normalizeApiBaseUrl(DEFAULT_REGISTRY_API_BASE_URL);
+  );
+  const apiBaseUrl = normalizeApiBaseUrl(
+    envApiBaseUrl ||
+    daemonConfig?.apiBaseUrl ||
+    sessionIdentity?.apiBaseUrl ||
+    DEFAULT_REGISTRY_API_BASE_URL,
+  );
   const rcAccountId = trim(env.AI_DESK_RC_ACCOUNT_ID || env.rcAccountId) ||
-    daemonConfig?.rcAccountId ||
     sessionIdentity?.rcAccountId ||
+    daemonConfig?.rcAccountId ||
     '';
   const rcExtensionId = trim(env.AI_DESK_RC_EXTENSION_ID || env.rcExtensionId) ||
-    daemonConfig?.rcExtensionId ||
     sessionIdentity?.rcExtensionId ||
+    daemonConfig?.rcExtensionId ||
     '';
-  if (apiBaseUrl && rcAccountId && rcExtensionId) {
+  if (apiBaseUrl) {
     const tlsEnvValue = parseTruthyEnv(env.AI_DESK_TLS_INSECURE_SKIP_VERIFY);
     return {
       apiBaseUrl,
       rcAccountId,
       rcExtensionId,
-      rcUsername: trim(env.AI_DESK_RC_USERNAME || env.rcUsername) || daemonConfig?.rcUsername || '',
+      rcUsername: trim(env.AI_DESK_RC_USERNAME || env.rcUsername) ||
+        sessionIdentity?.rcUsername ||
+        daemonConfig?.rcUsername ||
+        '',
       tlsInsecureSkipVerify: tlsEnvValue === null
-        ? Boolean(daemonConfig?.tlsInsecureSkipVerify)
+        ? Boolean(daemonConfig?.tlsInsecureSkipVerify ?? sessionIdentity?.tlsInsecureSkipVerify ?? inferTLSInsecureSkipVerify(apiBaseUrl))
         : tlsEnvValue,
     };
   }
   return null;
 }
 
+function daemonConfigPath(homeDir = os.homedir()) {
+  return path.join(homeDir, '.aidesktop', 'daemon-config.json');
+}
+
+function syncRegistryConfigToDaemonConfig(env = process.env, homeDir = os.homedir()) {
+  const config = getRegistryConfig(env, homeDir);
+  if (!config) return null;
+
+  const configPath = daemonConfigPath(homeDir);
+  let daemonConfig = {};
+  try {
+    if (fs.existsSync(configPath)) {
+      const parsed = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+      if (parsed && typeof parsed === 'object') daemonConfig = parsed;
+    }
+  } catch {
+    daemonConfig = {};
+  }
+
+  daemonConfig.registry = {
+    ...(daemonConfig.registry && typeof daemonConfig.registry === 'object' ? daemonConfig.registry : {}),
+    api_base_url: config.apiBaseUrl,
+    rc_account_id: config.rcAccountId,
+    rc_extension_id: config.rcExtensionId,
+    rc_username: config.rcUsername,
+    tls_insecure_skip_verify: Boolean(config.tlsInsecureSkipVerify),
+  };
+
+  fs.mkdirSync(path.dirname(configPath), { recursive: true });
+  fs.writeFileSync(configPath, `${JSON.stringify(daemonConfig, null, 2)}\n`, 'utf8');
+  return config;
+}
+
+function configureRegistryUrl(apiBaseUrl, options = {}) {
+  const homeDir = options.homeDir || os.homedir();
+  const normalizedApiBaseUrl = normalizeApiBaseUrl(apiBaseUrl);
+  if (!normalizedApiBaseUrl) {
+    throw new Error('Registry URL is required');
+  }
+
+  let parsedUrl;
+  try {
+    parsedUrl = new URL(normalizedApiBaseUrl);
+  } catch {
+    throw new Error(`Invalid registry URL: ${apiBaseUrl}`);
+  }
+  if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
+    throw new Error(`Registry URL must use http or https: ${apiBaseUrl}`);
+  }
+
+  const configPath = daemonConfigPath(homeDir);
+  let daemonConfig = {};
+  try {
+    if (fs.existsSync(configPath)) {
+      const parsedConfig = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+      if (parsedConfig && typeof parsedConfig === 'object') daemonConfig = parsedConfig;
+    }
+  } catch {
+    daemonConfig = {};
+  }
+
+  const tlsInsecureSkipVerify = typeof options.tlsInsecureSkipVerify === 'boolean'
+    ? options.tlsInsecureSkipVerify
+    : inferTLSInsecureSkipVerify(normalizedApiBaseUrl);
+
+  daemonConfig.registry = {
+    ...(daemonConfig.registry && typeof daemonConfig.registry === 'object' ? daemonConfig.registry : {}),
+    api_base_url: normalizedApiBaseUrl,
+    tls_insecure_skip_verify: tlsInsecureSkipVerify,
+  };
+
+  fs.mkdirSync(path.dirname(configPath), { recursive: true });
+  fs.writeFileSync(configPath, `${JSON.stringify(daemonConfig, null, 2)}\n`, 'utf8');
+
+  return {
+    apiBaseUrl: normalizedApiBaseUrl,
+    tlsInsecureSkipVerify,
+  };
+}
+
 function registryStatePaths(homeDir = os.homedir()) {
   const root = path.join(homeDir, '.aidesktop');
   return {
@@ -206,8 +323,8 @@ function postJSON(urlString, payload, config) {
         headers: {
           'Content-Type': 'application/json',
           'Content-Length': Buffer.byteLength(body),
-          rcAccountId: config.rcAccountId,
-          rcExtensionId: config.rcExtensionId,
+          ...(config.rcAccountId ? { rcAccountId: config.rcAccountId } : {}),
+          ...(config.rcExtensionId ? { rcExtensionId: config.rcExtensionId } : {}),
           ...(config.rcUsername ? { rcUsername: config.rcUsername } : {}),
         },
         timeout: 3000,
@@ -259,8 +376,11 @@ async function reportLifecycle(event, { port, version, seq = 1 } = {}) {
 
 module.exports = {
   buildLifecyclePayload,
+  configureRegistryUrl,
   DEFAULT_REGISTRY_API_BASE_URL,
+  inferTLSInsecureSkipVerify,
   getRegistryConfig,
+  syncRegistryConfigToDaemonConfig,
   readRegistrySessionIdentity,
   readRegistryConfigFromDaemonConfig,
   registryStatePaths,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-webui/ai-desk-daemon",
-  "version": "1.0.61-beta5",
+  "version": "1.0.61-beta7",
   "description": "AI Desk Daemon - CLI tool for managing the AI Desk daemon service",
   "workspaces": [
     "packages/*"
@@ -39,16 +39,16 @@
     "chalk": "^4.1.2"
   },
   "optionalDependencies": {
-    "@agent-webui/ai-desk-daemon-darwin-arm64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-daemon-darwin-x64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-daemon-linux-arm64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-daemon-linux-x64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-daemon-win32-x64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-python-darwin-arm64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-python-darwin-x64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-python-linux-arm64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-python-linux-x64": "1.0.61-beta5",
-    "@agent-webui/ai-desk-python-win32-x64": "1.0.61-beta5"
+    "@agent-webui/ai-desk-daemon-darwin-arm64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-daemon-darwin-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-daemon-linux-arm64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-daemon-linux-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-daemon-win32-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-darwin-arm64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-darwin-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-linux-arm64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-linux-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-win32-x64": "1.0.61-beta7"
   },
   "repository": {
     "type": "git",