@claw-link/gateway-host 0.2.5 → 0.2.6

package/README.md

@@ -81,6 +81,7 @@ After install the `clhost` command is available (aliases: `gateway-host`, `claw-
 clhost install      # install the background service (one-time)
 clhost add-agent    # add an agent by pasting its Host Token
 clhost rm-agent <id># remove a mapped agent
+clhost retoken <id> # re-enter a new token after rotating (keeps workspace/binary)
 clhost agents       # list mapped agents
 clhost status       # bridge + service state + mapped agents
 clhost start        # start the background service

package/bin/cli.js

@@ -27,6 +27,11 @@ async function main() {
     case 'rm':
       return require('../scripts/install').removeAgentCmd();
 
+    case 'retoken':
+    case 're-token':
+    case 'update-token':
+      return require('../scripts/install').retokenCmd();
+
     case 'agents':
     case 'list':
       return require('../scripts/install').listAgents();
@@ -48,7 +53,8 @@ async function main() {
         'To rotate a Host Token (also how you move an agent to a new machine):',
         '  1. ClawLink → Agents → your agent → Host Gateway → "Rotate token"',
         '     (this clears the machine binding so a new host can claim it).',
-        '  2. Copy the new token, then run: clhost add-agent',
+        '  2. Copy the new token, then run: clhost retoken <id>',
+        '     (keeps the agent\'s workspace/binary; or `clhost add-agent` for a new one).',
         '     The old token + old machine stop working immediately.',
       ].join('\n'));
       return;
@@ -63,6 +69,7 @@ async function main() {
         '  install     Install the background service (one-time)',
         '  add-agent   Add an agent by pasting its Host Token (pulls runtime from ClawLink)',
         '  rm-agent    Remove a mapped agent (clhost rm-agent <id>)',
+        '  retoken     Re-enter a new Host Token for an existing agent (clhost retoken <id>)',
         '  agents      List mapped agents',
         '  status      Show bridge, service state, and mapped agents',
         '  start       Start the background service',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claw-link/gateway-host",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "ClawLink Host Gateway — a secure, outbound-only worker that bridges a local agent CLI (OpenClaw, Hermes, Claude, Codex, Cursor) to your ClawLink agents. No inbound ports; authenticated per-agent by a Host Token.",
   "homepage": "https://claw-link.co",
   "bin": {

package/scripts/install.js

@@ -175,11 +175,54 @@ function printAgents(cfg) {
     const tok = a.host_token ? `…${String(a.host_token).slice(-4)}` : '—';
     console.log(`    • ${id}…  runtime=${a.runtime || 'pull'}  token=${tok}` + (a.work_dir ? `  work=${a.work_dir}` : ''));
   }
+  console.log('\n  Update a token after rotating it:  clhost retoken <id>');
 }
 
 // `agents` — list mapped agents.
 function listAgents() { printAgents(config.load() || {}); }
 
+// `retoken [id-or-prefix]` — re-enter a new Host Token for an EXISTING agent after
+// rotating it in the dashboard, keeping the same work_dir/binary/runtime. The new
+// token must resolve to the same agent_id; re-binds this machine on verify.
+async function retokenCmd() {
+  const cfg = config.load();
+  if (!cfg || !(cfg.agents || []).length) { console.log('No agents configured. Run: clhost add-agent'); return; }
+  ensureBridgeUrl(cfg);
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    let target = (process.argv[3] || '').trim();
+    if (!target && cfg.agents.length === 1) target = cfg.agents[0].agent_id || '';
+    if (!target) { printAgents(cfg); target = await ask(rl, '\n  Agent ID (or prefix) to re-token'); }
+    if (!target) { console.log('  (cancelled)'); return; }
+    const agent = cfg.agents.find((a) => a.agent_id && (a.agent_id === target || a.agent_id.startsWith(target)));
+    if (!agent) { console.log(`  No agent matched '${target}'.`); return; }
+
+    const token = await ask(rl, `  New Host Token for ${String(agent.agent_id).slice(0, 8)}… (clk_host_…)`);
+    if (!token) { console.log('  (cancelled)'); return; }
+
+    console.log('  Verifying new token + binding this machine…');
+    let resp;
+    try {
+      resp = await new Bridge(cfg.bridge_url, { host_token: token }, cfg.instance_id).register(null, VERSION);
+    } catch (e) { console.log(`  ✗ Could not verify: ${e.message}`); return; }
+
+    if (resp.agent_id && resp.agent_id !== agent.agent_id) {
+      console.log(`  ✗ That token belongs to a different agent (${String(resp.agent_id).slice(0, 8)}…), not ${String(agent.agent_id).slice(0, 8)}….`);
+      console.log('    To map a different agent, use:  clhost add-agent');
+      return;
+    }
+    agent.host_token = token;
+    if (resp.runtime && resp.runtime !== agent.runtime) {
+      console.log(`  ℹ runtime changed: ${agent.runtime} → ${resp.runtime}`);
+      agent.runtime = resp.runtime;
+    }
+    config.save(cfg);
+    const restarted = serviceControl('restart');
+    console.log(`\n  ✓ Updated token for ${agent.agent_id} (…${token.slice(-4)}).` +
+      (restarted ? ' Service restarted.' : ' Run `clhost restart` to apply.') + '\n');
+  } finally { rl.close(); }
+}
+
 // `start | stop | restart` — control the installed background service.
 function serviceControl(action) {
   const platform = process.platform;
@@ -339,6 +382,6 @@ function status() {
 }
 
 module.exports = {
-  run, installOnly, addAgentCmd, removeAgentCmd, listAgents, status,
+  run, installOnly, addAgentCmd, removeAgentCmd, retokenCmd, listAgents, status,
   serviceControl, serviceControlCmd, installService, SERVICE_LABEL,
 };