@conversionpros/aiva 1.0.1 → 2.0.0

package/scripts/onboard-device.sh

@@ -1,466 +0,0 @@
-#!/usr/bin/env bash
-# ============================================================================
-# AIVA Device Onboarding Script
-# Fully provisions a fresh Mac Mini as an AIVA client device.
-# Idempotent — safe to run multiple times.
-#
-# Usage:
-#   ./onboard-device.sh \
-#     --client-name "Kurt Burgan" \
-#     --device-id "kurt-mac-mini" \
-#     --dashboard-url "http://100.x.x.x:3851" \
-#     --tailscale-key "tskey-auth-xxx"
-#
-# Optional:
-#     --webhook-secret "xxx"     GitHub webhook secret for auto-deploy
-#     --skip-tailscale           Skip Tailscale join (already on tailnet)
-#     --app-port 3847            AIVA app port (default: 3847)
-#     --deploy-port 3849         Auto-deploy port (default: 3849)
-# ============================================================================
-
-set -euo pipefail
-
-# ── Colors & helpers ────────────────────────────────────────────────────────
-RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; BLUE='\033[0;34m'
-CYAN='\033[0;36m'; BOLD='\033[1m'; NC='\033[0m'
-
-step_num=0
-step_results=()
-
-log()  { echo -e "${BLUE}[INFO]${NC} $*"; }
-ok()   { echo -e "${GREEN}[  OK]${NC} $*"; step_results+=("✅ $*"); }
-warn() { echo -e "${YELLOW}[WARN]${NC} $*"; step_results+=("⚠️  $*"); }
-fail() { echo -e "${RED}[FAIL]${NC} $*"; step_results+=("❌ $*"); }
-die()  { fail "$*"; print_summary; exit 1; }
-
-step() {
-  step_num=$((step_num + 1))
-  echo ""
-  echo -e "${CYAN}${BOLD}━━━ Step ${step_num}: $* ━━━${NC}"
-}
-
-# ── Parse arguments ─────────────────────────────────────────────────────────
-CLIENT_NAME=""
-DEVICE_ID=""
-DASHBOARD_URL=""
-TAILSCALE_KEY=""
-WEBHOOK_SECRET=""
-SKIP_TAILSCALE=false
-APP_PORT=3847
-DEPLOY_PORT=3849
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --client-name)     CLIENT_NAME="$2"; shift 2 ;;
-    --device-id)       DEVICE_ID="$2"; shift 2 ;;
-    --dashboard-url)   DASHBOARD_URL="$2"; shift 2 ;;
-    --tailscale-key)   TAILSCALE_KEY="$2"; shift 2 ;;
-    --webhook-secret)  WEBHOOK_SECRET="$2"; shift 2 ;;
-    --skip-tailscale)  SKIP_TAILSCALE=true; shift ;;
-    --app-port)        APP_PORT="$2"; shift 2 ;;
-    --deploy-port)     DEPLOY_PORT="$2"; shift 2 ;;
-    -h|--help)
-      echo "Usage: $0 --client-name NAME --device-id ID --dashboard-url URL [--tailscale-key KEY] [--webhook-secret SECRET] [--skip-tailscale] [--app-port PORT] [--deploy-port PORT]"
-      exit 0 ;;
-    *) echo "Unknown option: $1"; exit 1 ;;
-  esac
-done
-
-# Validate required args
-[[ -z "$CLIENT_NAME" ]] && die "Missing --client-name"
-[[ -z "$DEVICE_ID" ]]   && die "Missing --device-id"
-[[ -z "$DASHBOARD_URL" ]] && die "Missing --dashboard-url"
-
-REPO_URL="git@github.com:mistermakeithappen/aiva-app.git"
-APP_DIR="$HOME/aiva-tasks"
-CURRENT_USER=$(whoami)
-
-echo ""
-echo -e "${BOLD}${CYAN}╔══════════════════════════════════════════════╗${NC}"
-echo -e "${BOLD}${CYAN}║     AIVA Device Onboarding                   ║${NC}"
-echo -e "${BOLD}${CYAN}╚══════════════════════════════════════════════╝${NC}"
-echo ""
-echo -e "  Client:      ${BOLD}${CLIENT_NAME}${NC}"
-echo -e "  Device ID:   ${BOLD}${DEVICE_ID}${NC}"
-echo -e "  Dashboard:   ${BOLD}${DASHBOARD_URL}${NC}"
-echo -e "  User:        ${BOLD}${CURRENT_USER}${NC}"
-echo -e "  App Dir:     ${BOLD}${APP_DIR}${NC}"
-echo ""
-
-# ── Step 1: Validate prerequisites ──────────────────────────────────────────
-step "Validate prerequisites"
-
-# macOS check
-if [[ "$(uname)" != "Darwin" ]]; then
-  die "This script only runs on macOS. Detected: $(uname)"
-fi
-MACOS_VERSION=$(sw_vers -productVersion)
-log "macOS version: $MACOS_VERSION"
-ok "macOS $MACOS_VERSION detected"
-
-# Xcode CLI tools (needed for git)
-if ! xcode-select -p &>/dev/null; then
-  log "Installing Xcode Command Line Tools..."
-  xcode-select --install 2>/dev/null || true
-  warn "Xcode CLI tools installing — you may need to accept the dialog and re-run this script"
-fi
-
-# Homebrew
-if ! command -v brew &>/dev/null; then
-  log "Installing Homebrew..."
-  /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
-  # Add to path for Apple Silicon
-  if [[ -f /opt/homebrew/bin/brew ]]; then
-    eval "$(/opt/homebrew/bin/brew shellenv)"
-    # Persist for future shells
-    echo 'eval "$(/opt/homebrew/bin/brew shellenv)"' >> "$HOME/.zprofile" 2>/dev/null || true
-  fi
-  ok "Homebrew installed"
-else
-  ok "Homebrew present ($(brew --version | head -1))"
-fi
-
-# Git
-if ! command -v git &>/dev/null; then
-  log "Installing git via Homebrew..."
-  brew install git
-  ok "Git installed"
-else
-  ok "Git present ($(git --version))"
-fi
-
-# Node.js
-if ! command -v node &>/dev/null; then
-  log "Installing Node.js via Homebrew..."
-  brew install node
-  ok "Node.js installed ($(node --version))"
-else
-  NODE_VERSION=$(node --version)
-  ok "Node.js present ($NODE_VERSION)"
-fi
-
-# npm
-if ! command -v npm &>/dev/null; then
-  die "npm not found even though Node.js is installed"
-fi
-ok "npm present ($(npm --version))"
-
-# ── Step 2: Join Tailscale ───────────────────────────────────────────────────
-step "Join Tailscale network"
-
-if [[ "$SKIP_TAILSCALE" == "true" ]]; then
-  log "Skipping Tailscale (--skip-tailscale flag)"
-  ok "Tailscale skipped by request"
-elif [[ -z "$TAILSCALE_KEY" ]]; then
-  warn "No --tailscale-key provided — skipping Tailscale join. Device must already be on tailnet."
-else
-  if ! command -v tailscale &>/dev/null; then
-    log "Tailscale CLI not found. Install Tailscale from https://tailscale.com/download/mac"
-    warn "Tailscale not installed — install manually and re-run"
-  else
-    # Check if already connected
-    TS_STATUS=$(tailscale status --json 2>/dev/null | grep -o '"BackendState":"[^"]*"' | cut -d'"' -f4 || echo "unknown")
-    if [[ "$TS_STATUS" == "Running" ]]; then
-      ok "Tailscale already connected"
-    else
-      log "Joining Tailscale with auth key..."
-      sudo tailscale up --authkey="$TAILSCALE_KEY" --hostname="$DEVICE_ID"
-      ok "Tailscale joined as $DEVICE_ID"
-    fi
-  fi
-fi
-
-# Get Tailscale IP
-TAILSCALE_IP=""
-if command -v tailscale &>/dev/null; then
-  TAILSCALE_IP=$(tailscale ip -4 2>/dev/null || echo "")
-fi
-if [[ -z "$TAILSCALE_IP" ]]; then
-  TAILSCALE_IP=$(ifconfig | grep "inet " | grep -v 127.0.0.1 | head -1 | awk '{print $2}')
-  warn "Could not get Tailscale IP — using local IP: $TAILSCALE_IP"
-else
-  ok "Tailscale IP: $TAILSCALE_IP"
-fi
-
-# ── Step 3: Create directory structure ───────────────────────────────────────
-step "Create directory structure"
-
-mkdir -p "$APP_DIR"
-mkdir -p "$APP_DIR/data"
-ok "Directory structure ready: $APP_DIR"
-
-# ── Step 4: Clone or update repo ────────────────────────────────────────────
-step "Clone/update AIVA app repository"
-
-if [[ -d "$APP_DIR/.git" ]]; then
-  log "Repository already exists — pulling latest..."
-  cd "$APP_DIR"
-  git fetch origin
-  git reset --hard origin/main
-  ok "Repository updated (git pull)"
-else
-  # Check if directory has files (avoid clobbering)
-  if [[ -n "$(ls -A "$APP_DIR" 2>/dev/null)" ]]; then
-    log "Directory not empty but no git repo — backing up and cloning fresh"
-    mv "$APP_DIR" "${APP_DIR}.bak.$(date +%s)"
-    mkdir -p "$APP_DIR"
-  fi
-  log "Cloning repository..."
-  git clone "$REPO_URL" "$APP_DIR"
-  ok "Repository cloned"
-fi
-
-cd "$APP_DIR"
-
-# ── Step 5: Install dependencies ────────────────────────────────────────────
-step "Install Node.js dependencies"
-
-cd "$APP_DIR"
-npm install --production 2>&1 | tail -3
-ok "Dependencies installed"
-
-# ── Step 6: Configure environment ────────────────────────────────────────────
-step "Configure environment (.env)"
-
-ENV_FILE="$APP_DIR/.env"
-
-# Only create/update if needed — preserve existing keys
-if [[ -f "$ENV_FILE" ]]; then
-  log "Existing .env found — merging configuration"
-  # Helper: set a key in .env (update if exists, append if not)
-  set_env() {
-    local key="$1" val="$2"
-    if grep -q "^${key}=" "$ENV_FILE" 2>/dev/null; then
-      sed -i '' "s|^${key}=.*|${key}=${val}|" "$ENV_FILE"
-    else
-      echo "${key}=${val}" >> "$ENV_FILE"
-    fi
-  }
-else
-  log "Creating new .env file"
-  touch "$ENV_FILE"
-  set_env() {
-    echo "$1=$2" >> "$ENV_FILE"
-  }
-fi
-
-set_env "DEVICE_ID" "$DEVICE_ID"
-set_env "CLIENT_NAME" "$CLIENT_NAME"
-set_env "DASHBOARD_URL" "$DASHBOARD_URL"
-set_env "APP_PORT" "$APP_PORT"
-set_env "AUTO_DEPLOY_PORT" "$DEPLOY_PORT"
-
-if [[ -n "$WEBHOOK_SECRET" ]]; then
-  set_env "GITHUB_WEBHOOK_SECRET" "$WEBHOOK_SECRET"
-fi
-
-# Ensure CODING_ENABLED defaults to false for client devices
-if ! grep -q "^CODING_ENABLED=" "$ENV_FILE" 2>/dev/null; then
-  set_env "CODING_ENABLED" "false"
-fi
-
-ok "Environment configured"
-
-# ── Step 7: Start AIVA app ──────────────────────────────────────────────────
-step "Start AIVA app service"
-
-PLIST_DIR="$HOME/Library/LaunchAgents"
-AIVA_PLIST="$PLIST_DIR/com.aiva.app.plist"
-DEPLOY_PLIST="$PLIST_DIR/com.aiva.auto-deploy.plist"
-
-# Prefer PM2 if available, otherwise LaunchAgent
-if command -v pm2 &>/dev/null; then
-  log "PM2 detected — using PM2 for process management"
-
-  # Stop existing if running
-  pm2 delete aiva-app 2>/dev/null || true
-  pm2 delete aiva-auto-deploy 2>/dev/null || true
-
-  cd "$APP_DIR"
-  pm2 start server.js --name aiva-app --cwd "$APP_DIR"
-  pm2 start auto-deploy.js --name aiva-auto-deploy --cwd "$APP_DIR"
-  pm2 save
-
-  # Ensure PM2 starts on boot
-  pm2 startup 2>/dev/null || true
-
-  ok "AIVA app started via PM2"
-else
-  log "PM2 not found — using macOS LaunchAgent"
-  mkdir -p "$PLIST_DIR"
-
-  # AIVA App LaunchAgent
-  cat > "$AIVA_PLIST" << PLIST
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>Label</key>
-  <string>com.aiva.app</string>
-  <key>ProgramArguments</key>
-  <array>
-    <string>$(which node)</string>
-    <string>${APP_DIR}/server.js</string>
-  </array>
-  <key>WorkingDirectory</key>
-  <string>${APP_DIR}</string>
-  <key>EnvironmentVariables</key>
-  <dict>
-    <key>PATH</key>
-    <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
-    <key>HOME</key>
-    <string>${HOME}</string>
-  </dict>
-  <key>RunAtLoad</key>
-  <true/>
-  <key>KeepAlive</key>
-  <true/>
-  <key>StandardOutPath</key>
-  <string>${APP_DIR}/data/aiva-app.log</string>
-  <key>StandardErrorPath</key>
-  <string>${APP_DIR}/data/aiva-app-error.log</string>
-</dict>
-</plist>
-PLIST
-
-  # Auto-Deploy LaunchAgent
-  cat > "$DEPLOY_PLIST" << PLIST
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>Label</key>
-  <string>com.aiva.auto-deploy</string>
-  <key>ProgramArguments</key>
-  <array>
-    <string>$(which node)</string>
-    <string>${APP_DIR}/auto-deploy.js</string>
-  </array>
-  <key>WorkingDirectory</key>
-  <string>${APP_DIR}</string>
-  <key>EnvironmentVariables</key>
-  <dict>
-    <key>PATH</key>
-    <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
-    <key>HOME</key>
-    <string>${HOME}</string>
-  </dict>
-  <key>RunAtLoad</key>
-  <true/>
-  <key>KeepAlive</key>
-  <true/>
-  <key>StandardOutPath</key>
-  <string>${APP_DIR}/data/auto-deploy.log</string>
-  <key>StandardErrorPath</key>
-  <string>${APP_DIR}/data/auto-deploy-error.log</string>
-</dict>
-</plist>
-PLIST
-
-  # Unload then load (idempotent)
-  launchctl unload "$AIVA_PLIST" 2>/dev/null || true
-  launchctl load "$AIVA_PLIST"
-  launchctl unload "$DEPLOY_PLIST" 2>/dev/null || true
-  launchctl load "$DEPLOY_PLIST"
-
-  ok "AIVA app started via LaunchAgent"
-fi
-
-# ── Step 8: Disable sleep ───────────────────────────────────────────────────
-step "Configure power management (prevent sleep)"
-
-sudo pmset -a sleep 0 displaysleep 0 disksleep 0 2>/dev/null && \
-  ok "Sleep disabled (pmset)" || \
-  warn "Could not set pmset — may need sudo password"
-
-# ── Step 9: Register with dashboard ─────────────────────────────────────────
-step "Register with dashboard"
-
-# Wait a moment for the app to start
-sleep 3
-
-# Get macOS version and Node version for registration
-OS_VERSION=$(sw_vers -productVersion)
-NODE_VER=$(node --version)
-MAC_ADDR=$(ifconfig en0 2>/dev/null | grep ether | awk '{print $2}' || echo "unknown")
-
-REGISTER_BODY=$(cat << EOF
-{
-  "deviceId": "${DEVICE_ID}",
-  "clientName": "${CLIENT_NAME}",
-  "tailscaleIp": "${TAILSCALE_IP}",
-  "macAddress": "${MAC_ADDR}",
-  "osVersion": "${OS_VERSION}",
-  "nodeVersion": "${NODE_VER}",
-  "appPath": "${APP_DIR}",
-  "sshUser": "${CURRENT_USER}"
-}
-EOF
-)
-
-REGISTER_RESPONSE=$(curl -s -w "\n%{http_code}" -X POST \
-  "${DASHBOARD_URL}/api/devices/register" \
-  -H "Content-Type: application/json" \
-  -d "$REGISTER_BODY" 2>/dev/null || echo -e "\n000")
-
-HTTP_CODE=$(echo "$REGISTER_RESPONSE" | tail -1)
-RESPONSE_BODY=$(echo "$REGISTER_RESPONSE" | sed '$d')
-
-if [[ "$HTTP_CODE" == "200" || "$HTTP_CODE" == "201" ]]; then
-  ok "Registered with dashboard (HTTP $HTTP_CODE)"
-  log "Response: $RESPONSE_BODY"
-else
-  warn "Dashboard registration returned HTTP $HTTP_CODE — device may need manual registration"
-  [[ -n "$RESPONSE_BODY" ]] && log "Response: $RESPONSE_BODY"
-fi
-
-# ── Step 10: Self-test ───────────────────────────────────────────────────────
-step "Run self-test"
-
-sleep 2
-
-# Test AIVA app
-APP_CHECK=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${APP_PORT}" 2>/dev/null || echo "000")
-if [[ "$APP_CHECK" == "200" ]]; then
-  ok "AIVA app responding on port $APP_PORT"
-else
-  warn "AIVA app returned HTTP $APP_CHECK on port $APP_PORT (may still be starting)"
-fi
-
-# Test auto-deploy
-DEPLOY_CHECK=$(curl -s -o /dev/null -w "%{http_code}" "http://localhost:${DEPLOY_PORT}" 2>/dev/null || echo "000")
-if [[ "$DEPLOY_CHECK" == "200" || "$DEPLOY_CHECK" == "404" ]]; then
-  ok "Auto-deploy service responding on port $DEPLOY_PORT"
-else
-  warn "Auto-deploy returned HTTP $DEPLOY_CHECK on port $DEPLOY_PORT"
-fi
-
-# Test git status
-cd "$APP_DIR"
-GIT_BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || echo "unknown")
-GIT_HASH=$(git rev-parse --short HEAD 2>/dev/null || echo "unknown")
-ok "Git: branch=$GIT_BRANCH commit=$GIT_HASH"
-
-# ── Summary ──────────────────────────────────────────────────────────────────
-print_summary() {
-  echo ""
-  echo -e "${BOLD}${CYAN}╔══════════════════════════════════════════════╗${NC}"
-  echo -e "${BOLD}${CYAN}║     Onboarding Summary                       ║${NC}"
-  echo -e "${BOLD}${CYAN}╚══════════════════════════════════════════════╝${NC}"
-  echo ""
-  for result in "${step_results[@]}"; do
-    echo -e "  $result"
-  done
-  echo ""
-  echo -e "  ${BOLD}Device ID:${NC}     $DEVICE_ID"
-  echo -e "  ${BOLD}Client:${NC}        $CLIENT_NAME"
-  echo -e "  ${BOLD}Tailscale IP:${NC}  $TAILSCALE_IP"
-  echo -e "  ${BOLD}App URL:${NC}       http://${TAILSCALE_IP}:${APP_PORT}"
-  echo -e "  ${BOLD}App Dir:${NC}       $APP_DIR"
-  echo -e "  ${BOLD}Git:${NC}           $GIT_BRANCH @ $GIT_HASH"
-  echo ""
-  echo -e "  ${GREEN}${BOLD}Onboarding complete!${NC}"
-  echo ""
-}
-
-print_summary