@boxes-dev/dvb-runtime 1.0.297 → 1.0.299

package/dist/devbox/commands/setup.js

@@ -1,816 +0,0 @@
-import { spawn } from "node:child_process";
-import { randomUUID } from "node:crypto";
-import { createWriteStream, constants as fsConstants } from "node:fs";
-import { access, mkdtemp, mkdir, rm } from "node:fs/promises";
-import os from "node:os";
-import path from "node:path";
-import { Readable } from "node:stream";
-import { pipeline } from "node:stream/promises";
-import { isCancel, select as clackSelect, spinner as clackSpinner, } from "@clack/prompts";
-import { addDevboxClientVersionHeader, parseUpgradeRequiredResponseBody, resolveSocketInfo, DEFAULT_RELAY_BASE_URL, createSecretStore, loadConfig, resolveConfigPath, resolveCodexAuthMode, resolveDevboxDir, resolveDevboxProfile, resolveRemoteRelayBaseUrl, resolveSecretsPath, resolveRelayBaseUrl, saveConfig, } from "@boxes-dev/core";
-import { CONTROL_PLANE_INTERACTIVE_SIGNIN_STAGE, ensureSpritesToken, } from "../auth.js";
-import { parseCommandArgs, readBooleanFlag, readStringFlag, } from "../commandRegistry/args.js";
-import { usageError } from "../commandRegistry/errors.js";
-import { clearModalCredentials, fetchClaudeTokenStatus, clearSpriteToken, fetchResolvedE2bCredentials, fetchResolvedModalCredentials, fetchSpriteTokenStatus, getControlPlaneUrl, storeClaudeCodeOauthToken, storeModalCredentials, storeSpriteToken, } from "../controlPlane.js";
-import { ensureDaemonRunning, stopDaemon } from "../daemonClient.js";
-import { logger } from "../logger.js";
-import { colors } from "../ui/colors.js";
-import { renderTerminalQr } from "../ui/qr.js";
-import { createStatusLine } from "../ui/statusLine.js";
-import { maybeOfferCompletionsInstall } from "../completions/index.js";
-import { collectClaudeCodeOauthTokenInteractively, formatClaudeSetupState, resolveClaudeSetupState, } from "./setupClaude.js";
-import { ensureCodexCliForSetup, probeLocalCli } from "./setupTooling.js";
-const trim = (value) => value.trim().replace(/\r/g, "");
-const normalizeOrgSlug = (value) => {
-    const trimmed = value.trim();
-    if (!trimmed)
-        return undefined;
-    if (!/^[a-z0-9][a-z0-9-]*$/i.test(trimmed))
-        return undefined;
-    return trimmed;
-};
-export const extractOrgFromSpriteToken = (token) => {
-    const trimmed = token.trim();
-    if (!trimmed)
-        return undefined;
-    const normalized = trimmed.toLowerCase().startsWith("bearer ")
-        ? trimmed.slice("bearer ".length).trim()
-        : trimmed;
-    const slashIndex = normalized.indexOf("/");
-    if (slashIndex <= 0)
-        return undefined;
-    return normalizeOrgSlug(normalized.slice(0, slashIndex));
-};
-const parseCodexAuthMode = (value) => {
-    const normalized = value.trim().toLowerCase();
-    if (normalized === "proxy" || normalized === "byo") {
-        return normalized;
-    }
-    throw new Error(`Invalid value for --codex-auth: ${value}. Expected "proxy" or "byo".`);
-};
-const parseSpriteAuthMode = (value) => {
-    const normalized = value.trim().toLowerCase();
-    if (normalized === "default" || normalized === "byo") {
-        return normalized;
-    }
-    throw new Error(`Invalid value for --sprite-auth: ${value}. Expected "default" or "byo".`);
-};
-const parseModalAuthMode = (value) => {
-    const normalized = value.trim().toLowerCase();
-    if (normalized === "default" || normalized === "byo") {
-        return normalized;
-    }
-    throw new Error(`Invalid value for --modal-auth: ${value}. Expected "default" or "byo".`);
-};
-const resolveSpriteAuthMode = (tokenSource) => {
-    return tokenSource === "user" ? "byo" : "default";
-};
-const resolveModalAuthMode = (source) => {
-    return source === "user" ? "byo" : "default";
-};
-const resolveE2bAuthMode = (source) => {
-    return source === "shared" ? "shared" : "unconfigured";
-};
-const normalizeSiteUrl = (raw) => {
-    const trimmed = trim(raw);
-    if (!trimmed)
-        return null;
-    const candidate = /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed)
-        ? trimmed
-        : `https://${trimmed}`;
-    try {
-        const url = new URL(candidate);
-        if (url.protocol !== "https:" && url.protocol !== "http:") {
-            return null;
-        }
-        return `${url.protocol}//${url.host}`;
-    }
-    catch {
-        return null;
-    }
-};
-const resolveSiteUrl = () => {
-    const runtimeSiteUrl = normalizeSiteUrl(process.env.SITE_URL ?? "");
-    if (runtimeSiteUrl)
-        return runtimeSiteUrl;
-    const embeddedSiteUrl = typeof __DEVBOX_SITE_URL__ === "string"
-        ? normalizeSiteUrl(__DEVBOX_SITE_URL__)
-        : null;
-    if (embeddedSiteUrl)
-        return embeddedSiteUrl;
-    return "https://boxes.dev";
-};
-const MOBILE_DOWNLOAD_LINK = {
-    label: "Mobile",
-    url: new URL("/m", resolveSiteUrl()).toString(),
-};
-const DESKTOP_APP_BUNDLE_NAME = "Boxes.dev.app";
-const DESKTOP_APP_TARGET_PATH = path.join("/Applications", DESKTOP_APP_BUNDLE_NAME);
-const MAC_DESKTOP_DOWNLOAD_LINK = {
-    label: "Desktop (macOS)",
-    url: "https://deploy.boxes.dev/desktop/boxes-dev-latest.dmg",
-};
-const parseSetupArgs = (args) => {
-    const { flags, positionals } = parseCommandArgs({
-        args,
-        commandPath: ["setup"],
-        flagLabel: "setup",
-        boolean: ["json", "no-claude-auth", "no-verify"],
-        string: [
-            "token",
-            "sprite-token",
-            "claude-code-oauth-token",
-            "codex-auth",
-            "sprite-auth",
-            "modal-auth",
-            "e2b-auth",
-            "modal-token-id",
-            "modal-token-secret",
-            "e2b-api-key",
-            "org",
-        ],
-    });
-    if (positionals.length > 0) {
-        throw usageError(["setup"], `Unknown setup flag: ${positionals[0]}`);
-    }
-    const token = readStringFlag(flags, "token") ?? readStringFlag(flags, "sprite-token");
-    const claudeCodeOauthToken = readStringFlag(flags, "claude-code-oauth-token");
-    const codexAuth = readStringFlag(flags, "codex-auth");
-    const spriteAuth = readStringFlag(flags, "sprite-auth");
-    const modalAuth = readStringFlag(flags, "modal-auth");
-    const e2bAuth = readStringFlag(flags, "e2b-auth");
-    const modalTokenId = readStringFlag(flags, "modal-token-id");
-    const modalTokenSecret = readStringFlag(flags, "modal-token-secret");
-    const e2bApiKey = readStringFlag(flags, "e2b-api-key");
-    const org = readStringFlag(flags, "org");
-    const parsed = {
-        verify: !readBooleanFlag(flags, "no-verify"),
-        ...(token ? { token } : {}),
-        ...(claudeCodeOauthToken ? { claudeCodeOauthToken } : {}),
-        ...(codexAuth ? { codexAuthMode: parseCodexAuthMode(codexAuth) } : {}),
-        ...(spriteAuth ? { spriteAuthMode: parseSpriteAuthMode(spriteAuth) } : {}),
-        ...(modalAuth ? { modalAuthMode: parseModalAuthMode(modalAuth) } : {}),
-        ...(modalTokenId ? { modalTokenId } : {}),
-        ...(modalTokenSecret ? { modalTokenSecret } : {}),
-        ...(org ? { org } : {}),
-        ...(readBooleanFlag(flags, "no-claude-auth") ? { noClaudeAuth: true } : {}),
-        ...(readBooleanFlag(flags, "json") ? { json: true } : {}),
-    };
-    if (parsed.claudeCodeOauthToken && parsed.noClaudeAuth) {
-        throw usageError(["setup"], "--claude-code-oauth-token cannot be used with --no-claude-auth.");
-    }
-    if (parsed.org && !parsed.token) {
-        throw usageError(["setup"], "--org requires --token or --sprite-token");
-    }
-    if (parsed.spriteAuthMode === "default" && parsed.token) {
-        throw usageError(["setup"], "--sprite-auth default cannot be used with --token or --sprite-token");
-    }
-    if (parsed.spriteAuthMode === "byo" && !parsed.token) {
-        throw usageError(["setup"], "--sprite-auth byo requires --token or --sprite-token");
-    }
-    if ((parsed.modalTokenId && !parsed.modalTokenSecret) ||
-        (!parsed.modalTokenId && parsed.modalTokenSecret)) {
-        throw usageError(["setup"], "--modal-token-id and --modal-token-secret must be provided together.");
-    }
-    if (parsed.modalAuthMode === "default" &&
-        (parsed.modalTokenId || parsed.modalTokenSecret)) {
-        throw usageError(["setup"], "--modal-auth default cannot be used with --modal-token-id/--modal-token-secret.");
-    }
-    if (parsed.modalAuthMode === "byo" &&
-        (!parsed.modalTokenId || !parsed.modalTokenSecret)) {
-        throw usageError(["setup"], "--modal-auth byo requires --modal-token-id and --modal-token-secret.");
-    }
-    if (e2bAuth) {
-        throw usageError(["setup"], "Managed compute uses the shared boxes.dev account only. Remove --e2b-auth.");
-    }
-    if (e2bApiKey) {
-        throw usageError(["setup"], "Managed compute uses the shared boxes.dev account only. Remove --e2b-api-key.");
-    }
-    return parsed;
-};
-const splitQrLines = (qr) => qr ? qr.trimEnd().split("\n") : [];
-const printMobileDownloadQr = () => {
-    const link = MOBILE_DOWNLOAD_LINK;
-    const qrLines = splitQrLines(renderTerminalQr(link.url));
-    console.log("");
-    console.log(colors.boldWhite("Install the boxes.dev mobile app:"));
-    console.log(`${colors.style(link.label, ["bold", "cyan"])}: ${link.url}`);
-    for (const line of qrLines) {
-        console.log(line);
-    }
-    console.log("");
-};
-export const resolveDesktopAppInstallPaths = (homeDir = process.env.HOME ?? os.homedir()) => {
-    const installedPaths = [DESKTOP_APP_TARGET_PATH];
-    const normalizedHomeDir = trim(homeDir);
-    if (normalizedHomeDir) {
-        installedPaths.push(path.join(normalizedHomeDir, "Applications", DESKTOP_APP_BUNDLE_NAME));
-    }
-    return installedPaths;
-};
-const pathExists = async (candidate) => {
-    try {
-        await access(candidate, fsConstants.F_OK);
-        return true;
-    }
-    catch {
-        return false;
-    }
-};
-export const findInstalledDesktopAppPath = async ({ homeDir = process.env.HOME ?? os.homedir(), pathExistsFn = pathExists, } = {}) => {
-    for (const candidate of resolveDesktopAppInstallPaths(homeDir)) {
-        if (await pathExistsFn(candidate))
-            return candidate;
-    }
-    return null;
-};
-export const shouldOfferDesktopAppInstall = ({ platform = process.platform, stdinIsTTY = Boolean(process.stdin.isTTY), stdoutIsTTY = Boolean(process.stdout.isTTY), installedAppPath, }) => platform === "darwin" &&
-    stdinIsTTY &&
-    stdoutIsTTY &&
-    installedAppPath === null;
-const shellEscape = (value) => `'${value.replace(/'/g, `'\\''`)}'`;
-const appleScriptEscape = (value) => value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
-const formatCommandFailure = ({ command, args, code, stderr, }) => {
-    const detail = trim(stderr);
-    if (detail) {
-        return `${command} ${args.join(" ")} failed: ${detail}`;
-    }
-    return `${command} exited with code ${code ?? "unknown"}.`;
-};
-const runCommand = async (command, args) => await new Promise((resolve, reject) => {
-    const child = spawn(command, args, {
-        stdio: ["ignore", "ignore", "pipe"],
-    });
-    let stderr = "";
-    child.stderr?.on("data", (chunk) => {
-        stderr += chunk.toString();
-    });
-    child.on("error", (error) => reject(error));
-    child.on("close", (code) => {
-        if (code === 0) {
-            resolve();
-            return;
-        }
-        reject(new Error(formatCommandFailure({ command, args, code, stderr })));
-    });
-});
-const downloadFile = async ({ url, destinationPath, }) => {
-    const response = await fetch(url);
-    if (!response.ok) {
-        throw new Error(`Download failed with HTTP ${response.status}.`);
-    }
-    if (!response.body) {
-        throw new Error("Download failed: empty response body.");
-    }
-    await pipeline(Readable.fromWeb(response.body), createWriteStream(destinationPath));
-};
-const attachDmg = async ({ dmgPath, mountPath, }) => {
-    await mkdir(mountPath, { recursive: true });
-    await runCommand("/usr/bin/hdiutil", [
-        "attach",
-        "-nobrowse",
-        "-quiet",
-        "-mountpoint",
-        mountPath,
-        dmgPath,
-    ]);
-};
-const detachDmg = async (mountPath) => {
-    await runCommand("/usr/bin/hdiutil", ["detach", mountPath, "-quiet"]);
-};
-const isWritable = async (candidate) => {
-    try {
-        await access(candidate, fsConstants.W_OK);
-        return true;
-    }
-    catch {
-        return false;
-    }
-};
-const buildInstallScript = ({ sourceAppPath, targetAppPath, }) => [
-    "set -eu",
-    `/bin/rm -rf ${shellEscape(targetAppPath)}`,
-    `/usr/bin/ditto ${shellEscape(sourceAppPath)} ${shellEscape(targetAppPath)}`,
-].join(" && ");
-const installDesktopAppToApplications = async ({ sourceAppPath, targetAppPath, }) => {
-    const installScript = buildInstallScript({ sourceAppPath, targetAppPath });
-    if (await isWritable(path.dirname(targetAppPath))) {
-        await runCommand("/bin/sh", ["-c", installScript]);
-        return;
-    }
-    await runCommand("/usr/bin/osascript", [
-        "-e",
-        `do shell script "${appleScriptEscape(installScript)}" with administrator privileges`,
-    ]);
-};
-const printDesktopDownloadOffer = () => {
-    console.log(colors.boldWhite("Install the boxes.dev desktop app for macOS:"));
-    console.log(`${colors.style(MAC_DESKTOP_DOWNLOAD_LINK.label, ["bold", "cyan"])}: ${MAC_DESKTOP_DOWNLOAD_LINK.url}`);
-};
-export const firstSetupCompleteMessage = {
-    heading: "boxes.dev setup complete!",
-    nextStep: "Next step: from your project's git repo, run `dvb init`.",
-    exampleLabel: "Example:",
-    exampleCommands: ["  cd /path/to/repo", "  dvb init"],
-};
-export const desktopAppInstallPrompt = {
-    message: `Download and install ${DESKTOP_APP_BUNDLE_NAME} to /Applications now?`,
-    options: [
-        { value: "install", label: "Install desktop app (Recommended)" },
-        { value: "skip", label: "Skip for now" },
-    ],
-    initialValue: "install",
-};
-const maybeOfferDesktopAppInstall = async () => {
-    const installedAppPath = await findInstalledDesktopAppPath();
-    if (!shouldOfferDesktopAppInstall({ installedAppPath }))
-        return;
-    printDesktopDownloadOffer();
-    const decision = await clackSelect(desktopAppInstallPrompt);
-    if (isCancel(decision) || decision === "skip") {
-        console.log("");
-        return;
-    }
-    const spinner = clackSpinner();
-    let tempDir = null;
-    let mounted = false;
-    let spinnerStarted = false;
-    const mountPath = () => path.join(tempDir ?? "", "mount");
-    try {
-        tempDir = await mkdtemp(path.join(os.tmpdir(), "devbox-desktop-app-"));
-        const dmgPath = path.join(tempDir, "Boxes.dev.dmg");
-        logger.info("setup_desktop_install_start", {
-            url: MAC_DESKTOP_DOWNLOAD_LINK.url,
-            targetPath: DESKTOP_APP_TARGET_PATH,
-        });
-        spinner.start("Downloading Boxes.dev desktop app");
-        spinnerStarted = true;
-        await downloadFile({
-            url: MAC_DESKTOP_DOWNLOAD_LINK.url,
-            destinationPath: dmgPath,
-        });
-        spinner.message("Mounting Boxes.dev installer");
-        await attachDmg({ dmgPath, mountPath: mountPath() });
-        mounted = true;
-        const sourceAppPath = path.join(mountPath(), DESKTOP_APP_BUNDLE_NAME);
-        if (!(await pathExists(sourceAppPath))) {
-            throw new Error(`Mounted installer did not contain ${DESKTOP_APP_BUNDLE_NAME}.`);
-        }
-        spinner.message(`Installing ${DESKTOP_APP_BUNDLE_NAME} to /Applications`);
-        await installDesktopAppToApplications({
-            sourceAppPath,
-            targetAppPath: DESKTOP_APP_TARGET_PATH,
-        });
-        spinner.stop(`Installed ${DESKTOP_APP_BUNDLE_NAME} to ${DESKTOP_APP_TARGET_PATH}.`);
-        console.log(`Run it with: open "${DESKTOP_APP_TARGET_PATH}"`);
-        console.log("");
-        logger.info("setup_desktop_install_complete", {
-            targetPath: DESKTOP_APP_TARGET_PATH,
-        });
-    }
-    catch (error) {
-        if (spinnerStarted) {
-            spinner.stop("Desktop install failed.");
-        }
-        const detail = error instanceof Error && error.message.trim().length > 0
-            ? error.message.trim()
-            : String(error);
-        logger.warn("setup_desktop_install_failed", { error: detail });
-        console.error(`Failed to install ${DESKTOP_APP_BUNDLE_NAME} automatically: ${detail}`);
-        console.error(`Download it manually: ${MAC_DESKTOP_DOWNLOAD_LINK.url}`);
-        console.log("");
-    }
-    finally {
-        if (mounted && tempDir) {
-            await detachDmg(mountPath()).catch((error) => {
-                logger.warn("setup_desktop_install_detach_failed", {
-                    mountPath: mountPath(),
-                    error: String(error),
-                });
-            });
-        }
-        if (tempDir) {
-            await rm(tempDir, { recursive: true, force: true }).catch((error) => {
-                logger.warn("setup_desktop_install_cleanup_failed", {
-                    tempDir,
-                    error: String(error),
-                });
-            });
-        }
-    }
-};
-const printFirstSetupCompleteMessage = () => {
-    const isTty = process.stdout.isTTY;
-    const heading = isTty
-        ? `${colors.style("boxes.dev", ["bold", "cyan"])} ${colors.style("setup complete!", ["bold", "green"])}`
-        : firstSetupCompleteMessage.heading;
-    const nextStep = isTty
-        ? `Next step: from your project's git repo, run ${colors.style("`dvb init`", ["bold", "cyan"])}.`
-        : firstSetupCompleteMessage.nextStep;
-    console.log("");
-    console.log(heading);
-    console.log("");
-    console.log(nextStep);
-    console.log("");
-    console.log(firstSetupCompleteMessage.exampleLabel);
-    for (const line of firstSetupCompleteMessage.exampleCommands) {
-        console.log(line);
-    }
-};
-const normalizeUrlForCompare = (value) => {
-    const trimmed = value.trim();
-    if (!trimmed)
-        return "";
-    try {
-        const parsed = new URL(trimmed);
-        const pathname = parsed.pathname.replace(/\/+$/, "");
-        return `${parsed.protocol}//${parsed.host}${pathname}`;
-    }
-    catch {
-        return trimmed.replace(/\/+$/, "");
-    }
-};
-const resolveHostForCompare = (value) => {
-    const trimmed = value.trim();
-    if (!trimmed)
-        return "";
-    try {
-        const url = new URL(trimmed);
-        return url.host.toLowerCase();
-    }
-    catch {
-        return "";
-    }
-};
-const resolveCliName = () => {
-    const raw = process.env.DEVBOX_CLI_NAME?.trim();
-    if (!raw)
-        return "dvb";
-    return raw.length > 0 ? raw : "dvb";
-};
-export const formatSpritesApiError = ({ status, requestUrl, relayBaseUrl, responseBody, }) => {
-    const requestHost = resolveHostForCompare(requestUrl);
-    const relayHost = resolveHostForCompare(relayBaseUrl);
-    const viaRelay = requestHost.length > 0 && requestHost === relayHost;
-    const lines = [
-        viaRelay ? `Relay proxy error: ${status}` : `Runtime API error: ${status}`,
-        `request: GET ${requestUrl}`,
-    ];
-    const detail = responseBody?.trim();
-    if (detail) {
-        lines.push(`response: ${detail.slice(0, 200)}`);
-    }
-    if (status === 403 && viaRelay) {
-        lines.push("Hint: relay auth failed before reaching Sprites upstream. Refresh control-plane auth by running `dvb setup` in a TTY.");
-    }
-    const isDevProfile = resolveDevboxProfile() === "dev";
-    const usingDefaultRelay = normalizeUrlForCompare(relayBaseUrl) ===
-        normalizeUrlForCompare(DEFAULT_RELAY_BASE_URL);
-    if (status === 403 && isDevProfile && usingDefaultRelay) {
-        lines.push("Hint: the dev CLI is usually expected to talk to a local relay, not https://relay.boxes.dev.");
-        const controlPlaneUrl = getControlPlaneUrl();
-        if (controlPlaneUrl) {
-            lines.push(`control plane: ${controlPlaneUrl}`);
-        }
-        const cliName = resolveCliName();
-        lines.push(`Start it with \`just dev\`, rebuild \`${cliName}\` with \`DEVBOX_RELAY_BASE_URL=http://127.0.0.1:8787 just cli build\`, then rerun setup.`);
-    }
-    return lines.join("\n");
-};
-const probeSpritesAccess = async (relayBaseUrl, token) => {
-    const requestId = randomUUID();
-    const url = new URL("/v1/sprites", relayBaseUrl);
-    url.searchParams.set("max_results", "1");
-    logger.info("sprites_request", {
-        requestId,
-        path: url.pathname,
-        method: "GET",
-    });
-    const headers = {
-        authorization: `Bearer ${token}`,
-    };
-    addDevboxClientVersionHeader(headers);
-    const response = await fetch(url, {
-        headers,
-    });
-    logger.info("sprites_response", {
-        requestId,
-        path: url.pathname,
-        status: response.status,
-    });
-    if (!response.ok) {
-        const errorBody = await response.text().catch(() => "");
-        const upgradeRequired = parseUpgradeRequiredResponseBody(errorBody, {
-            source: "relay",
-            statusCode: response.status,
-        });
-        if (upgradeRequired) {
-            throw upgradeRequired;
-        }
-        throw new Error(formatSpritesApiError({
-            status: response.status,
-            requestUrl: url.toString(),
-            relayBaseUrl,
-            responseBody: errorBody,
-        }));
-    }
-    const payload = (await response.json());
-    const orgs = new Set();
-    for (const sprite of payload.sprites ?? []) {
-        const org = normalizeOrgSlug(sprite.org_slug ?? sprite.organization ?? "");
-        if (org)
-            orgs.add(org);
-    }
-    return { orgs: [...orgs] };
-};
-export const runSetup = async (args) => {
-    const parsed = parseSetupArgs(args);
-    const canPromptInteractively = process.stdin.isTTY && process.stdout.isTTY && !parsed.json;
-    const statusEnabled = process.stderr.isTTY && !parsed.json;
-    const status = createStatusLine({ enabled: statusEnabled });
-    const run = async () => {
-        const homeDir = process.env.HOME;
-        status.stage("Checking local tooling");
-        await ensureCodexCliForSetup({
-            canPrompt: canPromptInteractively,
-            onPromptStart: () => {
-                status.stop();
-            },
-        });
-        const localClaudeCli = await probeLocalCli("claude");
-        status.stage("Loading devbox config");
-        const configOptions = homeDir ? { homeDir } : undefined;
-        const existingConfig = await loadConfig(configOptions);
-        const isFirstSetup = existingConfig === null;
-        const storeOptions = homeDir ? { homeDir } : undefined;
-        const store = await createSecretStore(undefined, storeOptions);
-        const relayBaseUrl = resolveRelayBaseUrl(existingConfig);
-        const didProvideModalTokenPair = Boolean(parsed.modalTokenId && parsed.modalTokenSecret);
-        const didUpdateModalAuthMode = parsed.modalAuthMode !== undefined || didProvideModalTokenPair;
-        const didProvideClaudeCodeOauthToken = Boolean(parsed.claudeCodeOauthToken);
-        const shouldOfferInteractiveClaudeSetup = canPromptInteractively &&
-            !parsed.noClaudeAuth &&
-            localClaudeCli.available;
-        const requireControlPlaneToken = parsed.spriteAuthMode ||
-            didUpdateModalAuthMode ||
-            didProvideClaudeCodeOauthToken ||
-            shouldOfferInteractiveClaudeSetup
-            ? true
-            : parsed.verify;
-        const authStage = (message) => {
-            if (message === CONTROL_PLANE_INTERACTIVE_SIGNIN_STAGE) {
-                // Pause the generic status spinner while clack renders the
-                // interactive browser-login flow.
-                status.stop();
-                return;
-            }
-            status.stage(message);
-        };
-        const tokenResult = await ensureSpritesToken(store, authStage, parsed.token
-            ? {
-                tokenOverride: parsed.token,
-                requireControlPlaneToken,
-            }
-            : undefined);
-        const token = tokenResult.token;
-        const tokenSource = tokenResult.source;
-        const controlPlaneToken = tokenResult.controlPlaneToken;
-        const remoteRelayBaseUrl = resolveRemoteRelayBaseUrl(existingConfig);
-        const codexAuthMode = parsed.codexAuthMode ?? resolveCodexAuthMode(existingConfig);
-        const didUpdateSpriteAuthMode = parsed.spriteAuthMode !== undefined;
-        if (parsed.spriteAuthMode === "default") {
-            if (!controlPlaneToken) {
-                throw new Error("Missing control plane session. Run `dvb setup` in a TTY first.");
-            }
-            status.stage("Updating sprite auth mode");
-            await clearSpriteToken(controlPlaneToken);
-        }
-        if (parsed.spriteAuthMode === "byo") {
-            if (!controlPlaneToken || !parsed.token) {
-                throw new Error("Missing control plane session. Run `dvb setup` in a TTY first.");
-            }
-            status.stage("Updating sprite auth mode");
-            await storeSpriteToken(controlPlaneToken, parsed.token);
-        }
-        if (parsed.modalAuthMode === "default") {
-            if (!controlPlaneToken) {
-                throw new Error("Missing control plane session. Run `dvb setup` in a TTY first.");
-            }
-            status.stage("Updating modal auth mode");
-            await clearModalCredentials(controlPlaneToken);
-        }
-        const shouldStoreModalCredentials = parsed.modalAuthMode === "byo" ||
-            (parsed.modalAuthMode === undefined && didProvideModalTokenPair);
-        if (shouldStoreModalCredentials) {
-            if (!controlPlaneToken ||
-                !parsed.modalTokenId ||
-                !parsed.modalTokenSecret) {
-                throw new Error("Missing control plane session. Run `dvb setup` in a TTY first.");
-            }
-            status.stage("Updating modal auth mode");
-            await storeModalCredentials(controlPlaneToken, parsed.modalTokenId, parsed.modalTokenSecret);
-        }
-        let spriteAuthMode;
-        if (controlPlaneToken) {
-            status.stage("Checking sprite auth mode");
-            try {
-                const tokenStatus = await fetchSpriteTokenStatus(controlPlaneToken);
-                spriteAuthMode = resolveSpriteAuthMode(tokenStatus.tokenSource);
-            }
-            catch (error) {
-                logger.warn("sprite_token_status_failed", { error: String(error) });
-                spriteAuthMode =
-                    parsed.spriteAuthMode ?? (tokenSource === "flag" ? "byo" : "default");
-            }
-        }
-        else {
-            spriteAuthMode = tokenSource === "flag" ? "byo" : "default";
-        }
-        let modalAuthMode = "default";
-        if (controlPlaneToken) {
-            status.stage("Checking modal auth mode");
-            try {
-                const modalCredentialStatus = await fetchResolvedModalCredentials(controlPlaneToken);
-                modalAuthMode = resolveModalAuthMode(modalCredentialStatus.source);
-            }
-            catch (error) {
-                logger.warn("modal_credential_status_failed", { error: String(error) });
-                modalAuthMode = shouldStoreModalCredentials ? "byo" : "default";
-            }
-        }
-        else {
-            modalAuthMode = shouldStoreModalCredentials ? "byo" : "default";
-        }
-        let e2bAuthMode = "shared";
-        if (controlPlaneToken) {
-            status.stage("Checking managed auth mode");
-            try {
-                const e2bCredentialStatus = await fetchResolvedE2bCredentials(controlPlaneToken);
-                e2bAuthMode = resolveE2bAuthMode(e2bCredentialStatus.source);
-            }
-            catch (error) {
-                logger.warn("e2b_credential_status_failed", { error: String(error) });
-                e2bAuthMode = "shared";
-            }
-        }
-        let claudeTokenStatus = {
-            hasToken: false,
-            expiresAt: null,
-            updatedAt: null,
-            lastValidatedAt: null,
-            lastRuntimeAuthFailureAt: null,
-            lastRuntimeAuthFailureReason: null,
-        };
-        let claudeAuthState = parsed.noClaudeAuth
-            ? "skipped"
-            : controlPlaneToken
-                ? "missing"
-                : "unknown";
-        let didUpdateClaudeAuth = false;
-        if (!parsed.noClaudeAuth && controlPlaneToken) {
-            status.stage("Checking Claude auth");
-            try {
-                claudeTokenStatus = await fetchClaudeTokenStatus(controlPlaneToken);
-            }
-            catch (error) {
-                logger.warn("claude_token_status_failed", { error: String(error) });
-            }
-            claudeAuthState = resolveClaudeSetupState({
-                hasToken: claudeTokenStatus.hasToken,
-                expiresAt: claudeTokenStatus.expiresAt,
-            });
-            const storeClaudeToken = async (claudeCodeOauthToken) => {
-                status.stage("Updating Claude auth");
-                await storeClaudeCodeOauthToken(controlPlaneToken, claudeCodeOauthToken);
-                didUpdateClaudeAuth = true;
-                status.stage("Checking Claude auth");
-                claudeTokenStatus = await fetchClaudeTokenStatus(controlPlaneToken);
-                claudeAuthState = resolveClaudeSetupState({
-                    hasToken: claudeTokenStatus.hasToken,
-                    expiresAt: claudeTokenStatus.expiresAt,
-                });
-            };
-            if (parsed.claudeCodeOauthToken) {
-                await storeClaudeToken(parsed.claudeCodeOauthToken);
-            }
-            else if (shouldOfferInteractiveClaudeSetup &&
-                (claudeAuthState === "missing" ||
-                    claudeAuthState === "renewal_recommended" ||
-                    claudeAuthState === "expired")) {
-                status.stop();
-                const collectedToken = await collectClaudeCodeOauthTokenInteractively({
-                    state: claudeAuthState,
-                });
-                if (collectedToken) {
-                    await storeClaudeToken(collectedToken);
-                }
-                else {
-                    claudeAuthState = "skipped";
-                }
-            }
-        }
-        else if (didProvideClaudeCodeOauthToken && !controlPlaneToken) {
-            throw new Error("Missing control plane session. Run `dvb setup` in a TTY first before storing Claude auth.");
-        }
-        let org = tokenSource === "flag" ? (parsed.org ?? existingConfig?.org) : undefined;
-        if (!org && tokenSource === "flag" && parsed.token) {
-            org = extractOrgFromSpriteToken(parsed.token);
-        }
-        if (parsed.verify) {
-            status.stage("Verifying token");
-            const { orgs } = await probeSpritesAccess(relayBaseUrl, token);
-            if (tokenSource === "flag") {
-                if (!org && orgs.length > 0) {
-                    org = orgs[0];
-                }
-            }
-        }
-        status.stage("Saving config");
-        const config = {
-            version: 1,
-            codexAuthMode,
-            relayBaseUrl,
-            remoteRelayBaseUrl,
-            tokenStore: store.kind,
-            tokenUpdatedAt: new Date().toISOString(),
-            lastSetupAt: new Date().toISOString(),
-            ...(tokenSource === "flag" && org ? { org } : {}),
-        };
-        await saveConfig(config, configOptions);
-        status.stage("Starting dvbd");
-        const socketInfo = resolveSocketInfo();
-        // Setup can change the control-plane session. Restart dvbd so it doesn't
-        // keep running with a stale auth token.
-        await stopDaemon(socketInfo.socketPath);
-        const daemon = await ensureDaemonRunning(socketInfo.socketPath);
-        status.stop();
-        if (parsed.json) {
-            const payload = {
-                config,
-                configPath: resolveConfigPath(homeDir),
-                devboxDir: resolveDevboxDir(homeDir),
-                secretsPath: resolveSecretsPath(homeDir),
-                tokenStore: store.kind,
-                tokenSource,
-                spriteAuthMode,
-                modalAuthMode,
-                e2bAuthMode,
-                claudeAuthState,
-                claudeTokenExpiresAt: claudeTokenStatus.expiresAt,
-                claudeTokenUpdatedAt: claudeTokenStatus.updatedAt,
-                claudeLastRuntimeAuthFailureAt: claudeTokenStatus.lastRuntimeAuthFailureAt,
-                claudeLastRuntimeAuthFailureReason: claudeTokenStatus.lastRuntimeAuthFailureReason,
-                daemon,
-            };
-            console.log(JSON.stringify(payload, null, 2));
-            return;
-        }
-        const claudeNeedsAttention = claudeAuthState === "missing" ||
-            claudeAuthState === "renewal_recommended" ||
-            claudeAuthState === "expired";
-        if (existingConfig &&
-            tokenSource === "control_plane" &&
-            !didUpdateSpriteAuthMode &&
-            !didUpdateModalAuthMode &&
-            !didUpdateClaudeAuth &&
-            !claudeNeedsAttention) {
-            console.log("dvb already set up");
-        }
-        else {
-            console.log("dvb setup complete");
-        }
-        console.log(`config: ${resolveConfigPath(homeDir)}`);
-        console.log(`secrets: ${resolveSecretsPath(homeDir)}`);
-        if (tokenSource === "flag" && org) {
-            console.log(`org: ${org}`);
-        }
-        console.log(`codex auth mode: ${codexAuthMode}`);
-        console.log(`sprite auth mode: ${spriteAuthMode}`);
-        console.log(`modal auth mode: ${modalAuthMode}`);
-        console.log(`managed auth mode: ${e2bAuthMode}`);
-        console.log(`claude auth: ${formatClaudeSetupState(claudeAuthState, claudeTokenStatus)}`);
-        console.log(`token store: ${store.kind}`);
-        console.log(`token source: ${tokenSource}`);
-        console.log(`daemon: pid ${daemon.pid}`);
-        console.log(`socket: ${daemon.socketPath}`);
-        if (process.stdout.isTTY) {
-            printMobileDownloadQr();
-        }
-        await maybeOfferDesktopAppInstall();
-        await maybeOfferCompletionsInstall();
-        if (isFirstSetup) {
-            printFirstSetupCompleteMessage();
-        }
-    };
-    try {
-        await run();
-    }
-    catch (error) {
-        status.fail("Setup failed");
-        throw error;
-    }
-    finally {
-        status.stop();
-    }
-};
-//# sourceMappingURL=setup.js.map