@agent-webui/ai-desk-daemon 1.0.61-beta6 → 1.0.61-beta7

package/bin/cli.js

@@ -12,7 +12,12 @@ const { start, stop, restart, status } = require('../lib/daemon-manager');
 const { getLogPath } = require('../lib/platform');
 const { VERSION } = require('../lib/platform');
 const { getPort } = require('../lib/config');
-const { reportLifecycle, syncRegistryConfigToDaemonConfig } = require('../lib/daemon-registry');
+const {
+  configureRegistryUrl,
+  getRegistryConfig,
+  reportLifecycle,
+  syncRegistryConfigToDaemonConfig,
+} = require('../lib/daemon-registry');
 const { upgradePackage } = require('../lib/self-upgrade');
 
 function wait(ms) {
@@ -154,6 +159,50 @@ program
   .description('AI Desk Daemon - CLI tool for managing the AI Desk daemon service')
   .version(VERSION);
 
+const registryCommand = program
+  .command('registry')
+  .description('Manage shared runtime registry backend settings');
+
+registryCommand
+  .command('set-url <url>')
+  .description('Persist the AI Desk backend URL used for daemon registry reporting')
+  .option('--insecure-skip-tls-verify', 'Skip TLS certificate verification for this registry URL')
+  .option('--strict-tls', 'Require strict TLS certificate verification for this registry URL')
+  .action((url, options) => {
+    try {
+      if (options.insecureSkipTlsVerify && options.strictTls) {
+        throw new Error('Use either --insecure-skip-tls-verify or --strict-tls, not both');
+      }
+      const tlsInsecureSkipVerify = options.insecureSkipTlsVerify
+        ? true
+        : (options.strictTls ? false : undefined);
+      const config = configureRegistryUrl(url, { tlsInsecureSkipVerify });
+      console.log(chalk.green('✓ Registry URL updated'));
+      console.log(`API base URL: ${config.apiBaseUrl}`);
+      console.log(`TLS verification: ${config.tlsInsecureSkipVerify ? 'skip for this URL' : 'strict'}`);
+      console.log(chalk.cyan('Restart the daemon for the new registry URL to be used by background heartbeats.'));
+    } catch (error) {
+      console.error(chalk.red('Failed to update registry URL:'), error.message);
+      process.exit(1);
+    }
+  });
+
+registryCommand
+  .command('status')
+  .description('Show the effective daemon registry backend settings')
+  .action(() => {
+    const config = getRegistryConfig();
+    if (!config) {
+      console.log(chalk.yellow('Registry reporting is disabled'));
+      return;
+    }
+    console.log(`API base URL: ${config.apiBaseUrl}`);
+    console.log(`RC account ID: ${config.rcAccountId || '(empty)'}`);
+    console.log(`RC extension ID: ${config.rcExtensionId || '(empty)'}`);
+    console.log(`RC username: ${config.rcUsername || '(empty)'}`);
+    console.log(`TLS verification: ${config.tlsInsecureSkipVerify ? 'skip for this URL' : 'strict'}`);
+  });
+
 // Start command
 program
   .command('start')

package/lib/daemon-registry.js

@@ -25,6 +25,29 @@ function parseTruthyEnv(value) {
   return raw === '1' || raw === 'true' || raw === 'yes' || raw === 'on';
 }
 
+function isPrivateRegistryHost(hostname) {
+  const host = trim(hostname).toLowerCase();
+  return (
+    host === 'localhost' ||
+    host === '127.0.0.1' ||
+    host.endsWith('.local') ||
+    /^10\./.test(host) ||
+    /^192\.168\./.test(host) ||
+    /^172\.(1[6-9]|2\d|3[0-1])\./.test(host)
+  );
+}
+
+function inferTLSInsecureSkipVerify(apiBaseUrl) {
+  try {
+    const url = new URL(normalizeApiBaseUrl(apiBaseUrl));
+    if (url.protocol !== 'https:') return false;
+    if (url.hostname === 'desk.int.rclabenv.com') return false;
+    return isPrivateRegistryHost(url.hostname);
+  } catch {
+    return false;
+  }
+}
+
 function readRegistrySessionIdentity(homeDir = os.homedir()) {
   const sessionPath = path.join(homeDir, '.aidesktop', 'session.json');
   try {
@@ -79,12 +102,11 @@ function getRegistryConfig(env = process.env, homeDir = os.homedir()) {
   const envApiBaseUrl = normalizeApiBaseUrl(
     env.AI_DESK_API_BASE_URL || env.AI_DESK_BACKEND_API_URL || env.AI_DESK_BACKEND_URL,
   );
-  const hasSessionUserIdentity = Boolean(sessionIdentity?.rcAccountId || sessionIdentity?.rcExtensionId);
   const apiBaseUrl = normalizeApiBaseUrl(
     envApiBaseUrl ||
-    sessionIdentity?.apiBaseUrl ||
     daemonConfig?.apiBaseUrl ||
-    (hasSessionUserIdentity ? DEFAULT_REGISTRY_API_BASE_URL : ''),
+    sessionIdentity?.apiBaseUrl ||
+    DEFAULT_REGISTRY_API_BASE_URL,
   );
   const rcAccountId = trim(env.AI_DESK_RC_ACCOUNT_ID || env.rcAccountId) ||
     sessionIdentity?.rcAccountId ||
@@ -105,7 +127,7 @@ function getRegistryConfig(env = process.env, homeDir = os.homedir()) {
         daemonConfig?.rcUsername ||
         '',
       tlsInsecureSkipVerify: tlsEnvValue === null
-        ? Boolean(sessionIdentity?.tlsInsecureSkipVerify ?? daemonConfig?.tlsInsecureSkipVerify)
+        ? Boolean(daemonConfig?.tlsInsecureSkipVerify ?? sessionIdentity?.tlsInsecureSkipVerify ?? inferTLSInsecureSkipVerify(apiBaseUrl))
         : tlsEnvValue,
     };
   }
@@ -145,6 +167,53 @@ function syncRegistryConfigToDaemonConfig(env = process.env, homeDir = os.homedi
   return config;
 }
 
+function configureRegistryUrl(apiBaseUrl, options = {}) {
+  const homeDir = options.homeDir || os.homedir();
+  const normalizedApiBaseUrl = normalizeApiBaseUrl(apiBaseUrl);
+  if (!normalizedApiBaseUrl) {
+    throw new Error('Registry URL is required');
+  }
+
+  let parsedUrl;
+  try {
+    parsedUrl = new URL(normalizedApiBaseUrl);
+  } catch {
+    throw new Error(`Invalid registry URL: ${apiBaseUrl}`);
+  }
+  if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
+    throw new Error(`Registry URL must use http or https: ${apiBaseUrl}`);
+  }
+
+  const configPath = daemonConfigPath(homeDir);
+  let daemonConfig = {};
+  try {
+    if (fs.existsSync(configPath)) {
+      const parsedConfig = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+      if (parsedConfig && typeof parsedConfig === 'object') daemonConfig = parsedConfig;
+    }
+  } catch {
+    daemonConfig = {};
+  }
+
+  const tlsInsecureSkipVerify = typeof options.tlsInsecureSkipVerify === 'boolean'
+    ? options.tlsInsecureSkipVerify
+    : inferTLSInsecureSkipVerify(normalizedApiBaseUrl);
+
+  daemonConfig.registry = {
+    ...(daemonConfig.registry && typeof daemonConfig.registry === 'object' ? daemonConfig.registry : {}),
+    api_base_url: normalizedApiBaseUrl,
+    tls_insecure_skip_verify: tlsInsecureSkipVerify,
+  };
+
+  fs.mkdirSync(path.dirname(configPath), { recursive: true });
+  fs.writeFileSync(configPath, `${JSON.stringify(daemonConfig, null, 2)}\n`, 'utf8');
+
+  return {
+    apiBaseUrl: normalizedApiBaseUrl,
+    tlsInsecureSkipVerify,
+  };
+}
+
 function registryStatePaths(homeDir = os.homedir()) {
   const root = path.join(homeDir, '.aidesktop');
   return {
@@ -307,7 +376,9 @@ async function reportLifecycle(event, { port, version, seq = 1 } = {}) {
 
 module.exports = {
   buildLifecyclePayload,
+  configureRegistryUrl,
   DEFAULT_REGISTRY_API_BASE_URL,
+  inferTLSInsecureSkipVerify,
   getRegistryConfig,
   syncRegistryConfigToDaemonConfig,
   readRegistrySessionIdentity,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-webui/ai-desk-daemon",
-  "version": "1.0.61-beta6",
+  "version": "1.0.61-beta7",
   "description": "AI Desk Daemon - CLI tool for managing the AI Desk daemon service",
   "workspaces": [
     "packages/*"
@@ -39,16 +39,16 @@
     "chalk": "^4.1.2"
   },
   "optionalDependencies": {
-    "@agent-webui/ai-desk-daemon-darwin-arm64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-daemon-darwin-x64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-daemon-linux-arm64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-daemon-linux-x64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-daemon-win32-x64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-python-darwin-arm64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-python-darwin-x64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-python-linux-arm64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-python-linux-x64": "1.0.61-beta6",
-    "@agent-webui/ai-desk-python-win32-x64": "1.0.61-beta6"
+    "@agent-webui/ai-desk-daemon-darwin-arm64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-daemon-darwin-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-daemon-linux-arm64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-daemon-linux-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-daemon-win32-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-darwin-arm64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-darwin-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-linux-arm64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-linux-x64": "1.0.61-beta7",
+    "@agent-webui/ai-desk-python-win32-x64": "1.0.61-beta7"
   },
   "repository": {
     "type": "git",