@cocorograph/hub-agent 0.6.71 → 0.6.73

package/README.md

@@ -22,6 +22,26 @@ curl -fsSL https://api.hub.cocorograph.com/api/cockpit/agents/install-script | b
 - `hub-agent enroll <token>` (token は Hub session 経由で埋め込み済、5 分有効)
 - `hub-agent install-service` で OS サービス登録
 
+### Windows (WSL2 方式)
+
+Windows では WSL2 (Ubuntu) の中で hub-agent を動かします。Cockpit Agents ページで
+OS を Windows に切り替えると **管理者 PowerShell 用ワンライナー**が表示されるので、
+**管理者として実行した PowerShell** にコピペします:
+
+```powershell
+$env:HUB_AGENT_TOKEN="<tok>"; $env:HUB_AGENT_URL="https://api.hub.cocorograph.com"; `
+  irm https://unpkg.com/@cocorograph/hub-agent@latest/scripts/install.ps1 | iex
+```
+
+このスクリプトは WSL2 (`Ubuntu-24.04`) を導入 (要再起動 1 回・再起動後に自動再開)、
+Ubuntu 初回ユーザーを無人作成 (Windows と同名 / パスワードなし / NOPASSWD sudo)、
+WSL 内で既存 `install.sh` を実行、Task Scheduler でログオン時の常駐起動を登録します。
+
+> ⚠️ 作業リポジトリは **WSL 内 FS** (`/home/<user>/...`) に置いてください。Windows ドライブ
+> (`/mnt/c/...`) はファイル監視 (inotify) が WSL 跨ぎで不安定です。
+
+詳細・設計判断は `scripts/install.ps1` と `docs/windows-installer-design.md` を参照。
+
 ### 手動インストール (デバッグ用)
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cocorograph/hub-agent",
-  "version": "0.6.71",
+  "version": "0.6.73",
   "description": "Hub Hosted Cockpit のローカル常駐 agent。Hub と outbound WSS で接続し、ローカルの tmux/pty を中継する。",
   "type": "module",
   "license": "UNLICENSED",

package/scripts/install.ps1

@@ -0,0 +1,325 @@
+# =============================================================================
+# hub-agent Windows one-liner installer (WSL2 method)
+#
+# The Hub UI shows a PowerShell one-liner with the enrollment token + hub url
+# embedded. The user pastes it into an ADMINISTRATOR PowerShell. This is the
+# Windows counterpart of the bash install.sh.
+#
+# IMPORTANT: This script is intentionally ASCII-only. Windows PowerShell 5.1
+# fetches the script with `irm` and runs it with `iex`; when the HTTP response
+# has no charset, 5.1 decodes UTF-8 bytes using the legacy code page (e.g.
+# CP932 on Japanese Windows), which turns any non-ASCII text into mojibake and
+# can break parsing. Keeping everything ASCII avoids that entirely.
+#
+# Design doc: D00000_hub-agent/docs/windows-installer-design.md
+#
+# Standalone (no token):
+#   irm https://unpkg.com/@cocorograph/hub-agent@latest/scripts/install.ps1 | iex
+#
+# Form generated by the Hub UI (token/url embedded):
+#   $env:HUB_AGENT_TOKEN="<tok>"; $env:HUB_AGENT_URL="https://api.hub.cocorograph.com"; `
+#     irm https://unpkg.com/@cocorograph/hub-agent@latest/scripts/install.ps1 | iex
+#
+# Flow:
+#   Phase 1: install WSL2 (admin required; reboot bridged via RunOnce)
+#   After reboot: create the first Ubuntu user unattended
+#               (cloud-init first, root-install + useradd as fallback)
+#   Phase 2: run the existing install.sh inside WSL
+#               (tmux/node/hub-agent/claude/enroll/install-service)
+#   Autostart: a Task Scheduler logon task wakes the distro so its systemd
+#              brings hub-agent up.
+# =============================================================================
+
+#Requires -Version 5.1
+$ErrorActionPreference = "Stop"
+
+# --- constants --------------------------------------------------------------
+# Preferred distro is the LTS. We try this first, then a couple of fallbacks
+# (older Windows 10 WSL catalogs may not know "Ubuntu-24.04").
+$PREFERRED_DISTRO = "Ubuntu-24.04"
+$DISTRO_CANDIDATES = @("Ubuntu-24.04", "Ubuntu")
+$INSTALL_SH   = "https://unpkg.com/@cocorograph/hub-agent@latest/scripts/install.sh"
+$PS1_URL      = "https://unpkg.com/@cocorograph/hub-agent@latest/scripts/install.ps1"
+$RUNONCE_NAME = "HubAgentSetup"
+$TASK_NAME    = "HubAgentWSLBoot"
+$DEFAULT_HUB  = "https://api.hub.cocorograph.com"
+
+# --- params from env --------------------------------------------------------
+$Token    = $env:HUB_AGENT_TOKEN
+$HubUrl   = if ($env:HUB_AGENT_URL) { $env:HUB_AGENT_URL } else { $DEFAULT_HUB }
+$IsResume = ($env:HUB_AGENT_RESUME -eq "1")   # set by RunOnce after reboot
+
+# --- colored logging (ASCII only) ------------------------------------------
+function Write-Step($m) { Write-Host "==> $m" -ForegroundColor Cyan }
+function Write-Ok($m)   { Write-Host "[OK] $m" -ForegroundColor Green }
+function Write-Warn($m) { Write-Host "[!] $m"  -ForegroundColor Yellow }
+function Write-Err($m)  { Write-Host "[x] $m"  -ForegroundColor Red }
+
+# --- helpers ----------------------------------------------------------------
+function Test-IsAdmin {
+  $id = [Security.Principal.WindowsIdentity]::GetCurrent()
+  $pr = New-Object Security.Principal.WindowsPrincipal($id)
+  return $pr.IsInRole([Security.Principal.WindowsBuiltinRole]::Administrator)
+}
+
+# `wsl -l -q` prints UTF-16LE with stray NULs; sanitize and split to an array.
+function Get-WslDistros {
+  try {
+    $raw = (wsl.exe -l -q) 2>$null
+    if (-not $raw) { return @() }
+    return ($raw -replace "`0", "") -split "`r?`n" |
+      ForEach-Object { $_.Trim() } | Where-Object { $_ -ne "" }
+  } catch { return @() }
+}
+
+# Return the name of an installed Ubuntu distro (prefer 24.04), or $null.
+function Resolve-InstalledUbuntu {
+  $installed = Get-WslDistros
+  foreach ($cand in $DISTRO_CANDIDATES) {
+    if ($installed -contains $cand) { return $cand }
+  }
+  # any distro whose name starts with "Ubuntu"
+  $u = $installed | Where-Object { $_ -like "Ubuntu*" } | Select-Object -First 1
+  if ($u) { return $u }
+  return $null
+}
+
+# Is the WSL engine (kernel + platform) usable at all?
+function Test-WslReady {
+  try { wsl.exe --status *> $null; return ($LASTEXITCODE -eq 0) } catch { return $false }
+}
+
+# Does user exist inside the given distro? (idempotency check)
+function Test-WslUserReady($distro, $user) {
+  if (-not $distro -or -not $user) { return $false }
+  try { wsl.exe -d $distro -u root -- id $user *> $null; return ($LASTEXITCODE -eq 0) }
+  catch { return $false }
+}
+
+# Sanitize Windows username to a valid Linux name ([a-z_][a-z0-9_-]*).
+function Get-LinuxUserName {
+  $u = ($env:USERNAME).ToLower() -replace '[^a-z0-9_-]', ''
+  if ($u -eq '' -or $u -match '^[0-9]') { $u = "hub$u" }
+  return $u
+}
+
+# Register "re-run myself with RESUME=1 after reboot", carrying token/url.
+function Set-ResumeOnReboot {
+  $cmd = "powershell -NoProfile -ExecutionPolicy Bypass -Command " +
+         "`"`$env:HUB_AGENT_TOKEN='$Token'; `$env:HUB_AGENT_URL='$HubUrl'; " +
+         "`$env:HUB_AGENT_RESUME='1'; irm $PS1_URL | iex`""
+  Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\RunOnce" `
+    -Name $RUNONCE_NAME -Value $cmd
+}
+
+# Leave the reboot decision to the user (auto-reboot risks unsaved work).
+# RunOnce is already registered, so "later" still auto-resumes on next boot.
+function Invoke-RebootPrompt {
+  Write-Host ""
+  Write-Step "WSL2 is installed. A Windows reboot is required to continue."
+  Write-Host "  After reboot, setup resumes automatically (no manual steps)." -ForegroundColor Cyan
+  $ans = Read-Host "Reboot now? [Y = reboot now / N = I'll reboot later]"
+  if ($ans -match '^[Yy]') { Restart-Computer }
+  else { Write-Warn "Reboot Windows later and setup will continue automatically." }
+}
+
+# Place cloud-init user-data BEFORE first boot. WSL applies it on first launch,
+# skipping the interactive OOBE. The file name must match the registered distro
+# name, so we write one file per candidate name to be safe.
+function Write-CloudInit($user) {
+  $ciDir = Join-Path $env:USERPROFILE ".cloud-init"
+  New-Item -ItemType Directory -Force -Path $ciDir | Out-Null
+  $yaml = @"
+#cloud-config
+users:
+  - name: $user
+    groups: [sudo]
+    shell: /bin/bash
+    sudo: ['ALL=(ALL) NOPASSWD:ALL']
+    lock_passwd: true
+write_files:
+  - path: /etc/wsl.conf
+    content: |
+      [user]
+      default=$user
+      [boot]
+      systemd=true
+"@
+  $yaml = $yaml -replace "`r`n", "`n"   # cloud-init wants LF + UTF-8 (no BOM)
+  $enc = New-Object System.Text.UTF8Encoding($false)
+  foreach ($name in $DISTRO_CANDIDATES) {
+    $path = Join-Path $ciDir "$name.user-data"
+    [System.IO.File]::WriteAllText($path, $yaml, $enc)
+  }
+  Write-Ok "cloud-init user-data placed in $ciDir"
+}
+
+# Update the WSL engine + online distro catalog. On Windows 10 the inbox WSL
+# catalog is often stale and does not know Ubuntu-24.04; `wsl --update` pulls
+# the Store WSL which refreshes the catalog. Failures are non-fatal (warn).
+function Update-WslEngine {
+  Write-Step "Updating WSL engine (wsl --update)"
+  try {
+    wsl.exe --update *> $null
+    if ($LASTEXITCODE -ne 0) { Write-Warn "wsl --update returned $LASTEXITCODE (continuing)" }
+    else { Write-Ok "WSL engine updated" }
+  } catch { Write-Warn "wsl --update failed (continuing)" }
+}
+
+# Install a distro without launching it. Tries candidate names and a no-flag
+# fallback (older WSL may not support --no-launch). Returns the installed name
+# or throws with actionable guidance.
+function Install-Distro {
+  $existing = Resolve-InstalledUbuntu
+  if ($existing) { Write-Ok "Ubuntu distro already installed: $existing"; return $existing }
+
+  Update-WslEngine
+
+  foreach ($name in $DISTRO_CANDIDATES) {
+    Write-Step "Installing distro: $name"
+    # 1) modern: --no-launch
+    wsl.exe --install -d $name --no-launch *> $null
+    if ($LASTEXITCODE -eq 0 -and (Get-WslDistros) -contains $name) { return $name }
+    # 2) older WSL may reject --no-launch; retry without it (still no OOBE
+    #    because cloud-init is already staged).
+    wsl.exe --install -d $name *> $null
+    if ($LASTEXITCODE -eq 0 -and (Get-WslDistros) -contains $name) { return $name }
+    Write-Warn "Could not install '$name', trying next candidate..."
+  }
+
+  # If we get here every candidate failed.
+  Write-Err "Failed to install a WSL Ubuntu distro automatically."
+  Write-Host ""
+  Write-Host "Please run these in an ADMINISTRATOR PowerShell, then re-run this installer:" -ForegroundColor Yellow
+  Write-Host "  wsl --update" -ForegroundColor Yellow
+  Write-Host "  wsl --list --online        # confirm an Ubuntu name is listed" -ForegroundColor Yellow
+  Write-Host "  wsl --install -d Ubuntu-24.04   # or the Ubuntu name shown above" -ForegroundColor Yellow
+  Write-Host ""
+  Write-Host "Note: Windows 10 needs version 21H2+ and an up-to-date WSL." -ForegroundColor Yellow
+  throw "distro install failed"
+}
+
+# cloud-init path: wait for completion, return $true if the user got created.
+function Invoke-CloudInitProvision($distro, $user) {
+  Write-Step "Creating first Ubuntu user unattended (cloud-init)"
+  try { wsl.exe -d $distro -u root -- cloud-init status --wait *> $null }
+  catch { Write-Warn "cloud-init status --wait failed (cloud-init may be unsupported)"; return $false }
+  return (Test-WslUserReady $distro $user)
+}
+
+# Fallback: launcher `install --root` then useradd. Launcher exe name depends
+# on the distro (ubuntu2404.exe etc.); resolve it from the distro name.
+function Invoke-RootInstallProvision($distro, $user) {
+  Write-Step "Creating first Ubuntu user unattended (root-install fallback)"
+  $launcher = ($distro.ToLower() -replace '[^a-z0-9]', '') + ".exe"   # Ubuntu-24.04 -> ubuntu2404.exe
+  try { & $launcher install --root *> $null }
+  catch { Write-Warn "$launcher install --root failed (continuing to useradd)" }
+  $script = @"
+set -e
+useradd -m -s /bin/bash -G sudo '$user' 2>/dev/null || true
+passwd -d '$user'
+echo '$user ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/90-hub-$user
+chmod 0440 /etc/sudoers.d/90-hub-$user
+printf '[user]\ndefault=$user\n[boot]\nsystemd=true\n' > /etc/wsl.conf
+"@
+  $script = $script -replace "`r`n", "`n"
+  wsl.exe -d $distro -u root -- bash -lc $script
+  wsl.exe --shutdown
+  return (Test-WslUserReady $distro $user)
+}
+
+# Ensure systemd=true in the distro's /etc/wsl.conf (idempotent).
+function Set-Systemd($distro) {
+  $has = (wsl.exe -d $distro -u root -- bash -lc "grep -q 'systemd=true' /etc/wsl.conf 2>/dev/null && echo yes || echo no")
+  if (($has -replace "`0","").Trim() -ne "yes") {
+    wsl.exe -d $distro -u root -- bash -lc "printf '[boot]\nsystemd=true\n' >> /etc/wsl.conf"
+    wsl.exe --shutdown
+  }
+}
+
+# Register a logon task that wakes the distro (its systemd starts hub-agent).
+function Register-BootTask($distro, $user) {
+  Write-Step "Registering autostart on logon (Task Scheduler)"
+  $action  = New-ScheduledTaskAction -Execute "wsl.exe" -Argument "-d $distro -u $user -- /bin/true"
+  $trigger = New-ScheduledTaskTrigger -AtLogOn
+  $set     = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable
+  Register-ScheduledTask -TaskName $TASK_NAME -Action $action -Trigger $trigger -Settings $set `
+    -RunLevel Limited -Force | Out-Null
+  Write-Ok "Logon task '$TASK_NAME' registered"
+}
+
+# Run the existing install.sh inside WSL.
+function Invoke-WslInstaller($distro, $user) {
+  Write-Step "Setting up hub-agent inside WSL (existing install.sh)"
+  $tok = if ($Token) { $Token } else { "" }
+  $inner = "curl -fsSL '$INSTALL_SH' | HUB_AGENT_TOKEN='$tok' HUB_AGENT_URL='$HubUrl' bash"
+  wsl.exe -d $distro -u $user -- bash -lc $inner
+  if ($LASTEXITCODE -ne 0) { throw "install.sh inside WSL failed (exit $LASTEXITCODE)" }
+}
+
+# =============================================================================
+# main
+# =============================================================================
+function Main {
+  Write-Step "Starting hub-agent Windows setup (WSL2 method)"
+
+  if (-not (Test-IsAdmin)) {
+    Write-Err "Administrator privileges are required. Reopen PowerShell as Administrator."
+    exit 1
+  }
+
+  $user = Get-LinuxUserName
+
+  # --- Phase 1: install WSL2 + distro (only when none present; bridges reboot) ---
+  if (-not $IsResume -and -not (Resolve-InstalledUbuntu)) {
+    Write-Step "Installing WSL2 + Ubuntu"
+    Set-ResumeOnReboot          # arm auto-resume first
+    Write-CloudInit $user       # stage cloud-init before first boot
+    $installed = Install-Distro # robust: update + candidate names + fallbacks
+    Write-Ok "Distro installed: $installed"
+    Invoke-RebootPrompt         # reboot is the user's choice
+    return
+  }
+
+  # --- after reboot, or WSL already present: resolve the real distro name ---
+  $distro = Resolve-InstalledUbuntu
+  if (-not $distro) {
+    # RESUME but distro not visible yet: the deployment may still be unpacking.
+    Write-Warn "Ubuntu distro not found yet; attempting install..."
+    Write-CloudInit $user
+    $distro = Install-Distro
+  }
+  Write-Ok "Using distro: $distro"
+
+  # --- create the first Ubuntu user unattended ---
+  if (-not (Test-WslUserReady $distro $user)) {
+    if (-not (Test-Path (Join-Path $env:USERPROFILE ".cloud-init\$distro.user-data"))) {
+      Write-CloudInit $user
+    }
+    $ok = Invoke-CloudInitProvision $distro $user
+    if (-not $ok) {
+      Write-Warn "cloud-init did not create the user; switching to root-install method."
+      $ok = Invoke-RootInstallProvision $distro $user
+    }
+    if (-not $ok) { throw "Failed to create Ubuntu user '$user' unattended" }
+    Write-Ok "Created Ubuntu user '$user' (no password / NOPASSWD sudo)"
+  } else {
+    Write-Ok "Ubuntu user '$user' already exists"
+  }
+
+  Set-Systemd $distro
+
+  # --- Phase 2: run install.sh inside WSL ---
+  Invoke-WslInstaller $distro $user
+
+  # --- autostart ---
+  Register-BootTask $distro $user
+
+  Write-Host ""
+  Write-Ok "Setup complete. Check the online status in the Hub UI:"
+  Write-Host "    https://hub.cocorograph.com/user/cockpit/agents" -ForegroundColor Cyan
+  Write-Warn "Keep your working repos INSIDE WSL (e.g. /home/$user/...)."
+  Write-Warn "Windows drives (/mnt/c/...) have unreliable file watching."
+}
+
+Main