@conversionpros/aiva 1.0.0

package/scripts/onboard-device.sh

@@ -0,0 +1,466 @@
+#!/usr/bin/env bash
+# ============================================================================
+# AIVA Device Onboarding Script
+# Fully provisions a fresh Mac Mini as an AIVA client device.
+# Idempotent — safe to run multiple times.
+#
+# Usage:
+#   ./onboard-device.sh \
+#     --client-name "Kurt Burgan" \
+#     --device-id "kurt-mac-mini" \
+#     --dashboard-url "http://100.x.x.x:3851" \
+#     --tailscale-key "tskey-auth-xxx"
+#
+# Optional:
+#     --webhook-secret "xxx"     GitHub webhook secret for auto-deploy
+#     --skip-tailscale           Skip Tailscale join (already on tailnet)
+#     --app-port 3847            AIVA app port (default: 3847)
+#     --deploy-port 3849         Auto-deploy port (default: 3849)
+# ============================================================================
+
+set -euo pipefail
+
+# ── Colors & helpers ────────────────────────────────────────────────────────
+RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; BLUE='\033[0;34m'
+CYAN='\033[0;36m'; BOLD='\033[1m'; NC='\033[0m'
+
+step_num=0
+step_results=()
+
+log()  { echo -e "${BLUE}[INFO]${NC} $*"; }
+ok()   { echo -e "${GREEN}[  OK]${NC} $*"; step_results+=("✅ $*"); }
+warn() { echo -e "${YELLOW}[WARN]${NC} $*"; step_results+=("⚠️  $*"); }
+fail() { echo -e "${RED}[FAIL]${NC} $*"; step_results+=("❌ $*"); }
+die()  { fail "$*"; print_summary; exit 1; }
+
+step() {
+  step_num=$((step_num + 1))
+  echo ""
+  echo -e "${CYAN}${BOLD}━━━ Step ${step_num}: $* ━━━${NC}"
+}
+
+# ── Parse arguments ─────────────────────────────────────────────────────────
+CLIENT_NAME=""
+DEVICE_ID=""
+DASHBOARD_URL=""
+TAILSCALE_KEY=""
+WEBHOOK_SECRET=""
+SKIP_TAILSCALE=false
+APP_PORT=3847
+DEPLOY_PORT=3849
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --client-name)     CLIENT_NAME="$2"; shift 2 ;;
+    --device-id)       DEVICE_ID="$2"; shift 2 ;;
+    --dashboard-url)   DASHBOARD_URL="$2"; shift 2 ;;
+    --tailscale-key)   TAILSCALE_KEY="$2"; shift 2 ;;
+    --webhook-secret)  WEBHOOK_SECRET="$2"; shift 2 ;;
+    --skip-tailscale)  SKIP_TAILSCALE=true; shift ;;
+    --app-port)        APP_PORT="$2"; shift 2 ;;
+    --deploy-port)     DEPLOY_PORT="$2"; shift 2 ;;
+    -h|--help)
+      echo "Usage: $0 --client-name NAME --device-id ID --dashboard-url URL [--tailscale-key KEY] [--webhook-secret SECRET] [--skip-tailscale] [--app-port PORT] [--deploy-port PORT]"
+      exit 0 ;;
+    *) echo "Unknown option: $1"; exit 1 ;;
+  esac
+done
+
+# Validate required args
+[[ -z "$CLIENT_NAME" ]] && die "Missing --client-name"
+[[ -z "$DEVICE_ID" ]]   && die "Missing --device-id"
+[[ -z "$DASHBOARD_URL" ]] && die "Missing --dashboard-url"
+
+REPO_URL="git@github.com:mistermakeithappen/aiva-app.git"
+APP_DIR="$HOME/aiva-tasks"
+CURRENT_USER=$(whoami)
+
+echo ""
+echo -e "${BOLD}${CYAN}╔══════════════════════════════════════════════╗${NC}"
+echo -e "${BOLD}${CYAN}║     AIVA Device Onboarding                   ║${NC}"
+echo -e "${BOLD}${CYAN}╚══════════════════════════════════════════════╝${NC}"
+echo ""
+echo -e "  Client:      ${BOLD}${CLIENT_NAME}${NC}"
+echo -e "  Device ID:   ${BOLD}${DEVICE_ID}${NC}"
+echo -e "  Dashboard:   ${BOLD}${DASHBOARD_URL}${NC}"
+echo -e "  User:        ${BOLD}${CURRENT_USER}${NC}"
+echo -e "  App Dir:     ${BOLD}${APP_DIR}${NC}"
+echo ""
+
+# ── Step 1: Validate prerequisites ──────────────────────────────────────────
+step "Validate prerequisites"
+
+# macOS check
+if [[ "$(uname)" != "Darwin" ]]; then
+  die "This script only runs on macOS. Detected: $(uname)"
+fi
+MACOS_VERSION=$(sw_vers -productVersion)
+log "macOS version: $MACOS_VERSION"
+ok "macOS $MACOS_VERSION detected"
+
+# Xcode CLI tools (needed for git)
+if ! xcode-select -p &>/dev/null; then
+  log "Installing Xcode Command Line Tools..."
+  xcode-select --install 2>/dev/null || true
+  warn "Xcode CLI tools installing — you may need to accept the dialog and re-run this script"
+fi
+
+# Homebrew
+if ! command -v brew &>/dev/null; then
+  log "Installing Homebrew..."
+  /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
+  # Add to path for Apple Silicon
+  if [[ -f /opt/homebrew/bin/brew ]]; then
+    eval "$(/opt/homebrew/bin/brew shellenv)"
+    # Persist for future shells
+    echo 'eval "$(/opt/homebrew/bin/brew shellenv)"' >> "$HOME/.zprofile" 2>/dev/null || true
+  fi
+  ok "Homebrew installed"
+else
+  ok "Homebrew present ($(brew --version | head -1))"
+fi
+
+# Git
+if ! command -v git &>/dev/null; then
+  log "Installing git via Homebrew..."
+  brew install git
+  ok "Git installed"
+else
+  ok "Git present ($(git --version))"
+fi
+
+# Node.js
+if ! command -v node &>/dev/null; then
+  log "Installing Node.js via Homebrew..."
+  brew install node
+  ok "Node.js installed ($(node --version))"
+else
+  NODE_VERSION=$(node --version)
+  ok "Node.js present ($NODE_VERSION)"
+fi
+
+# npm
+if ! command -v npm &>/dev/null; then
+  die "npm not found even though Node.js is installed"
+fi
+ok "npm present ($(npm --version))"
+
+# ── Step 2: Join Tailscale ───────────────────────────────────────────────────
+step "Join Tailscale network"
+
+if [[ "$SKIP_TAILSCALE" == "true" ]]; then
+  log "Skipping Tailscale (--skip-tailscale flag)"
+  ok "Tailscale skipped by request"
+elif [[ -z "$TAILSCALE_KEY" ]]; then
+  warn "No --tailscale-key provided — skipping Tailscale join. Device must already be on tailnet."
+else
+  if ! command -v tailscale &>/dev/null; then
+    log "Tailscale CLI not found. Install Tailscale from https://tailscale.com/download/mac"
+    warn "Tailscale not installed — install manually and re-run"
+  else
+    # Check if already connected
+    TS_STATUS=$(tailscale status --json 2>/dev/null | grep -o '"BackendState":"[^"]*"' | cut -d'"' -f4 || echo "unknown")
+    if [[ "$TS_STATUS" == "Running" ]]; then
+      ok "Tailscale already connected"
+    else
+      log "Joining Tailscale with auth key..."
+      sudo tailscale up --authkey="$TAILSCALE_KEY" --hostname="$DEVICE_ID"
+      ok "Tailscale joined as $DEVICE_ID"
+    fi
+  fi
+fi
+
+# Get Tailscale IP
+TAILSCALE_IP=""
+if command -v tailscale &>/dev/null; then
+  TAILSCALE_IP=$(tailscale ip -4 2>/dev/null || echo "")
+fi
+if [[ -z "$TAILSCALE_IP" ]]; then
+  TAILSCALE_IP=$(ifconfig | grep "inet " | grep -v 127.0.0.1 | head -1 | awk '{print $2}')
+  warn "Could not get Tailscale IP — using local IP: $TAILSCALE_IP"
+else
+  ok "Tailscale IP: $TAILSCALE_IP"
+fi
+
+# ── Step 3: Create directory structure ───────────────────────────────────────
+step "Create directory structure"
+
+mkdir -p "$APP_DIR"
+mkdir -p "$APP_DIR/data"
+ok "Directory structure ready: $APP_DIR"
+
+# ── Step 4: Clone or update repo ────────────────────────────────────────────
+step "Clone/update AIVA app repository"
+
+if [[ -d "$APP_DIR/.git" ]]; then
+  log "Repository already exists — pulling latest..."
+  cd "$APP_DIR"
+  git fetch origin
+  git reset --hard origin/main
+  ok "Repository updated (git pull)"
+else
+  # Check if directory has files (avoid clobbering)
+  if [[ -n "$(ls -A "$APP_DIR" 2>/dev/null)" ]]; then
+    log "Directory not empty but no git repo — backing up and cloning fresh"
+    mv "$APP_DIR" "${APP_DIR}.bak.$(date +%s)"
+    mkdir -p "$APP_DIR"
+  fi
+  log "Cloning repository..."
+  git clone "$REPO_URL" "$APP_DIR"
+  ok "Repository cloned"
+fi
+
+cd "$APP_DIR"
+
+# ── Step 5: Install dependencies ────────────────────────────────────────────
+step "Install Node.js dependencies"
+
+cd "$APP_DIR"
+npm install --production 2>&1 | tail -3
+ok "Dependencies installed"
+
+# ── Step 6: Configure environment ────────────────────────────────────────────
+step "Configure environment (.env)"
+
+ENV_FILE="$APP_DIR/.env"
+
+# Only create/update if needed — preserve existing keys
+if [[ -f "$ENV_FILE" ]]; then
+  log "Existing .env found — merging configuration"
+  # Helper: set a key in .env (update if exists, append if not)
+  set_env() {
+    local key="$1" val="$2"
+    if grep -q "^${key}=" "$ENV_FILE" 2>/dev/null; then
+      sed -i '' "s|^${key}=.*|${key}=${val}|" "$ENV_FILE"
+    else
+      echo "${key}=${val}" >> "$ENV_FILE"
+    fi
+  }
+else
+  log "Creating new .env file"
+  touch "$ENV_FILE"
+  set_env() {
+    echo "$1=$2" >> "$ENV_FILE"
+  }
+fi
+
+set_env "DEVICE_ID" "$DEVICE_ID"
+set_env "CLIENT_NAME" "$CLIENT_NAME"
+set_env "DASHBOARD_URL" "$DASHBOARD_URL"
+set_env "APP_PORT" "$APP_PORT"
+set_env "AUTO_DEPLOY_PORT" "$DEPLOY_PORT"
+
+if [[ -n "$WEBHOOK_SECRET" ]]; then
+  set_env "GITHUB_WEBHOOK_SECRET" "$WEBHOOK_SECRET"
+fi
+
+# Ensure CODING_ENABLED defaults to false for client devices
+if ! grep -q "^CODING_ENABLED=" "$ENV_FILE" 2>/dev/null; then
+  set_env "CODING_ENABLED" "false"
+fi
+
+ok "Environment configured"
+
+# ── Step 7: Start AIVA app ──────────────────────────────────────────────────
+step "Start AIVA app service"
+
+PLIST_DIR="$HOME/Library/LaunchAgents"
+AIVA_PLIST="$PLIST_DIR/com.aiva.app.plist"
+DEPLOY_PLIST="$PLIST_DIR/com.aiva.auto-deploy.plist"
+
+# Prefer PM2 if available, otherwise LaunchAgent
+if command -v pm2 &>/dev/null; then
+  log "PM2 detected — using PM2 for process management"
+
+  # Stop existing if running
+  pm2 delete aiva-app 2>/dev/null || true
+  pm2 delete aiva-auto-deploy 2>/dev/null || true
+
+  cd "$APP_DIR"
+  pm2 start server.js --name aiva-app --cwd "$APP_DIR"
+  pm2 start auto-deploy.js --name aiva-auto-deploy --cwd "$APP_DIR"
+  pm2 save
+
+  # Ensure PM2 starts on boot
+  pm2 startup 2>/dev/null || true
+
+  ok "AIVA app started via PM2"
+else
+  log "PM2 not found — using macOS LaunchAgent"
+  mkdir -p "$PLIST_DIR"
+
+  # AIVA App LaunchAgent
+  cat > "$AIVA_PLIST" << PLIST
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>com.aiva.app</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>$(which node)</string>
+    <string>${APP_DIR}/server.js</string>
+  </array>
+  <key>WorkingDirectory</key>
+  <string>${APP_DIR}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
+    <key>HOME</key>
+    <string>${HOME}</string>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${APP_DIR}/data/aiva-app.log</string>
+  <key>StandardErrorPath</key>
+  <string>${APP_DIR}/data/aiva-app-error.log</string>
+</dict>
+</plist>
+PLIST
+
+  # Auto-Deploy LaunchAgent
+  cat > "$DEPLOY_PLIST" << PLIST
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>com.aiva.auto-deploy</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>$(which node)</string>
+    <string>${APP_DIR}/auto-deploy.js</string>
+  </array>
+  <key>WorkingDirectory</key>
+  <string>${APP_DIR}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key>
+    <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
+    <key>HOME</key>
+    <string>${HOME}</string>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${APP_DIR}/data/auto-deploy.log</string>
+  <key>StandardErrorPath</key>
+  <string>${APP_DIR}/data/auto-deploy-error.log</string>
+</dict>
+</plist>
+PLIST
+
+  # Unload then load (idempotent)
+  launchctl unload "$AIVA_PLIST" 2>/dev/null || true
+  launchctl load "$AIVA_PLIST"
+  launchctl unload "$DEPLOY_PLIST" 2>/dev/null || true
+  launchctl load "$DEPLOY_PLIST"
+
+  ok "AIVA app started via LaunchAgent"
+fi
+
+# ── Step 8: Disable sleep ───────────────────────────────────────────────────
+step "Configure power management (prevent sleep)"
+
+sudo pmset -a sleep 0 displaysleep 0 disksleep 0 2>/dev/null && \
+  ok "Sleep disabled (pmset)" || \
+  warn "Could not set pmset — may need sudo password"
+
+# ── Step 9: Register with dashboard ─────────────────────────────────────────
+step "Register with dashboard"
+
+# Wait a moment for the app to start
+sleep 3
+
+# Get macOS version and Node version for registration
+OS_VERSION=$(sw_vers -productVersion)
+NODE_VER=$(node --version)
+MAC_ADDR=$(ifconfig en0 2>/dev/null | grep ether | awk '{print $2}' || echo "unknown")
+
+REGISTER_BODY=$(cat << EOF
+{
+  "deviceId": "${DEVICE_ID}",
+  "clientName": "${CLIENT_NAME}",
+  "tailscaleIp": "${TAILSCALE_IP}",
+  "macAddress": "${MAC_ADDR}",
+  "osVersion": "${OS_VERSION}",
+  "nodeVersion": "${NODE_VER}",
+  "appPath": "${APP_DIR}",
+  "sshUser": "${CURRENT_USER}"
+}
+EOF
+)
+
+REGISTER_RESPONSE=$(curl -s -w "\n%{http_code}" -X POST \
+  "${DASHBOARD_URL}/api/devices/register" \
+  -H "Content-Type: application/json" \
+  -d "$REGISTER_BODY" 2>/dev/null || echo -e "\n000")
+
+HTTP_CODE=$(echo "$REGISTER_RESPONSE" | tail -1)
+RESPONSE_BODY=$(echo "$REGISTER_RESPONSE" | sed '$d')
+
+if [[ "$HTTP_CODE" == "200" || "$HTTP_CODE" == "201" ]]; then
+  ok "Registered with dashboard (HTTP $HTTP_CODE)"
+  log "Response: $RESPONSE_BODY"
+else
+  warn "Dashboard registration returned HTTP $HTTP_CODE — device may need manual registration"
+  [[ -n "$RESPONSE_BODY" ]] && log "Response: $RESPONSE_BODY"
+fi
+
+# ── Step 10: Self-test ───────────────────────────────────────────────────────
+step "Run self-test"
+
+sleep 2
+
+# Test AIVA app
+APP_CHECK=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${APP_PORT}" 2>/dev/null || echo "000")
+if [[ "$APP_CHECK" == "200" ]]; then
+  ok "AIVA app responding on port $APP_PORT"
+else
+  warn "AIVA app returned HTTP $APP_CHECK on port $APP_PORT (may still be starting)"
+fi
+
+# Test auto-deploy
+DEPLOY_CHECK=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${DEPLOY_PORT}" 2>/dev/null || echo "000")
+if [[ "$DEPLOY_CHECK" == "200" || "$DEPLOY_CHECK" == "404" ]]; then
+  ok "Auto-deploy service responding on port $DEPLOY_PORT"
+else
+  warn "Auto-deploy returned HTTP $DEPLOY_CHECK on port $DEPLOY_PORT"
+fi
+
+# Test git status
+cd "$APP_DIR"
+GIT_BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "unknown")
+GIT_HASH=$(git rev-parse --short HEAD 2>/dev/null || echo "unknown")
+ok "Git: branch=$GIT_BRANCH commit=$GIT_HASH"
+
+# ── Summary ──────────────────────────────────────────────────────────────────
+print_summary() {
+  echo ""
+  echo -e "${BOLD}${CYAN}╔══════════════════════════════════════════════╗${NC}"
+  echo -e "${BOLD}${CYAN}║     Onboarding Summary                       ║${NC}"
+  echo -e "${BOLD}${CYAN}╚══════════════════════════════════════════════╝${NC}"
+  echo ""
+  for result in "${step_results[@]}"; do
+    echo -e "  $result"
+  done
+  echo ""
+  echo -e "  ${BOLD}Device ID:${NC}     $DEVICE_ID"
+  echo -e "  ${BOLD}Client:${NC}        $CLIENT_NAME"
+  echo -e "  ${BOLD}Tailscale IP:${NC}  $TAILSCALE_IP"
+  echo -e "  ${BOLD}App URL:${NC}       http://${TAILSCALE_IP}:${APP_PORT}"
+  echo -e "  ${BOLD}App Dir:${NC}       $APP_DIR"
+  echo -e "  ${BOLD}Git:${NC}           $GIT_BRANCH @ $GIT_HASH"
+  echo ""
+  echo -e "  ${GREEN}${BOLD}Onboarding complete!${NC}"
+  echo ""
+}
+
+print_summary