@knowsuchagency/fulcrum 5.5.1 → 5.6.0

package/bin/fulcrum.js

@@ -1136,6 +1136,19 @@ class FulcrumClient {
       body: JSON.stringify({ title, message })
     });
   }
+  async getServerExpose() {
+    return this.fetch("/api/server/expose");
+  }
+  async createServerExpose(input) {
+    return this.fetch("/api/server/expose", {
+      method: "POST",
+      body: JSON.stringify(input)
+    });
+  }
+  async deleteServerExpose(removeTunnel) {
+    const query = removeTunnel ? "?removeTunnel=true" : "";
+    return this.fetch(`/api/server/expose${query}`, { method: "DELETE" });
+  }
   async getDeveloperMode() {
     return this.fetch("/api/config/developer-mode");
   }
@@ -31923,7 +31936,7 @@ __export(exports_regexes2, {
   integer: () => integer2,
   idnEmail: () => idnEmail,
   html5Email: () => html5Email,
-  hostname: () => hostname,
+  hostname: () => hostname2,
   hex: () => hex,
   guid: () => guid2,
   extendedDuration: () => extendedDuration,
@@ -31975,7 +31988,7 @@ var cuid3, cuid22, ulid2, xid2, ksuid2, nanoid2, duration3, extendedDuration, gu
   if (!version2)
     return /^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/;
   return new RegExp(`^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-${version2}[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12})$`);
-}, uuid4, uuid6, uuid7, email2, html5Email, rfc5322Email, unicodeEmail, idnEmail, browserEmail, _emoji3 = `^(\\p{Extended_Pictographic}|\\p{Emoji_Component})+$`, ipv42, ipv62, cidrv42, cidrv62, base642, base64url2, hostname, domain, e1642, dateSource2 = `(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))`, date4, string4 = (params) => {
+}, uuid4, uuid6, uuid7, email2, html5Email, rfc5322Email, unicodeEmail, idnEmail, browserEmail, _emoji3 = `^(\\p{Extended_Pictographic}|\\p{Emoji_Component})+$`, ipv42, ipv62, cidrv42, cidrv62, base642, base64url2, hostname2, domain, e1642, dateSource2 = `(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))`, date4, string4 = (params) => {
   const regex2 = params ? `[\\s\\S]{${params?.minimum ?? 0},${params?.maximum ?? ""}}` : `[\\s\\S]*`;
   return new RegExp(`^${regex2}$`);
 }, bigint3, integer2, number4, boolean4, _null4, _undefined3, lowercase2, uppercase2, hex, md5_hex, md5_base64, md5_base64url, sha1_hex, sha1_base64, sha1_base64url, sha256_hex, sha256_base64, sha256_base64url, sha384_hex, sha384_base64, sha384_base64url, sha512_hex, sha512_base64, sha512_base64url;
@@ -32004,7 +32017,7 @@ var init_regexes2 = __esm(() => {
   cidrv62 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|::|([0-9a-fA-F]{1,4})?::([0-9a-fA-F]{1,4}:?){0,6})\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/;
   base642 = /^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$/;
   base64url2 = /^[A-Za-z0-9_-]*$/;
-  hostname = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
+  hostname2 = /^(?=.{1,253}\.?$)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[-0-9a-zA-Z]{0,61}[0-9a-zA-Z])?)*\.?$/;
   domain = /^([a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]{2,}$/;
   e1642 = /^\+(?:[0-9]){6,14}[0-9]$/;
   date4 = /* @__PURE__ */ new RegExp(`^${dateSource2}$`);
@@ -33115,7 +33128,7 @@ var init_schemas4 = __esm(() => {
               code: "invalid_format",
               format: "url",
               note: "Invalid hostname",
-              pattern: hostname.source,
+              pattern: hostname2.source,
               input: payload.value,
               inst,
               continue: !def.abort
@@ -42389,7 +42402,7 @@ function jwt(params) {
 function stringFormat(format, fnOrRegex, _params = {}) {
   return _stringFormat2(ZodCustomStringFormat, format, fnOrRegex, _params);
 }
-function hostname2(_params) {
+function hostname3(_params) {
   return _stringFormat2(ZodCustomStringFormat, "hostname", exports_regexes2.hostname, _params);
 }
 function hex2(_params) {
@@ -43453,7 +43466,7 @@ __export(exports_external, {
   instanceof: () => _instanceof,
   includes: () => _includes2,
   httpUrl: () => httpUrl,
-  hostname: () => hostname2,
+  hostname: () => hostname3,
   hex: () => hex2,
   hash: () => hash,
   guid: () => guid3,
@@ -46838,7 +46851,7 @@ async function runMcpServer(urlOverride, portOverride) {
   const client = new FulcrumClient(urlOverride, portOverride);
   const server = new McpServer({
     name: "fulcrum",
-    version: "5.5.1"
+    version: "5.6.0"
   });
   registerTools(server, client);
   const transport = new StdioServerTransport;
@@ -49187,7 +49200,7 @@ var marketplace_default = `{
       "name": "fulcrum",
       "source": "./",
       "description": "Task orchestration for Claude Code",
-      "version": "5.5.1",
+      "version": "5.6.0",
       "skills": [
         "./skills/fulcrum"
       ],
@@ -49210,7 +49223,7 @@ var marketplace_default = `{
 var plugin_default = `{
   "name": "fulcrum",
   "description": "Fulcrum task orchestration for Claude Code",
-  "version": "5.5.1",
+  "version": "5.6.0",
   "author": {
     "name": "Fulcrum"
   },
@@ -50227,7 +50240,7 @@ function compareVersions(v1, v2) {
 var package_default = {
   name: "@knowsuchagency/fulcrum",
   private: true,
-  version: "5.5.1",
+  version: "5.6.0",
   description: "Harness Attention. Orchestrate Agents. Ship.",
   license: "PolyForm-Perimeter-1.0.0",
   type: "module",
@@ -50768,6 +50781,267 @@ var downCommand = defineCommand({
   }
 });
 
+// cli/src/commands/expose.ts
+init_client();
+init_errors();
+import { execSync as execSync4, spawnSync as spawnSync4 } from "child_process";
+import { existsSync as existsSync7, mkdirSync as mkdirSync6, writeFileSync as writeFileSync5, chmodSync as chmodSync2, unlinkSync as unlinkSync3 } from "fs";
+import { homedir as homedir4, hostname, platform as platform2 } from "os";
+import { dirname as dirname5, join as join7 } from "path";
+var SYSTEMD_SERVICE_TEMPLATE = `[Unit]
+Description=Fulcrum Cloudflare Tunnel
+Documentation=https://github.com/knowsuchagency/fulcrum
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=notify
+ExecStart=/usr/bin/env cloudflared --no-autoupdate tunnel --token __TUNNEL_TOKEN__ run
+Restart=on-failure
+RestartSec=5s
+TimeoutStopSec=20
+
+[Install]
+WantedBy=default.target
+`;
+var LAUNCHD_PLIST_TEMPLATE = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>com.fulcrum.tunnel</string>
+    <key>ProgramArguments</key>
+    <array>
+        <string>__CLOUDFLARED_PATH__</string>
+        <string>--no-autoupdate</string>
+        <string>tunnel</string>
+        <string>--token</string>
+        <string>__TUNNEL_TOKEN__</string>
+        <string>run</string>
+    </array>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+    <key>StandardErrorPath</key>
+    <string>__LOG_PATH__</string>
+    <key>StandardOutPath</key>
+    <string>__LOG_PATH__</string>
+</dict>
+</plist>
+`;
+function isCloudflaredInstalled() {
+  try {
+    execSync4("which cloudflared", { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function whichCloudflared() {
+  return execSync4("which cloudflared", { encoding: "utf-8" }).trim();
+}
+var LINUX_SERVICE_NAME = "fulcrum-tunnel";
+var MACOS_LABEL = "com.fulcrum.tunnel";
+function linuxUnitPath() {
+  return join7(homedir4(), ".config", "systemd", "user", `${LINUX_SERVICE_NAME}.service`);
+}
+function macosPlistPath() {
+  return join7(homedir4(), "Library", "LaunchAgents", `${MACOS_LABEL}.plist`);
+}
+function macosLogPath() {
+  return join7(homedir4(), "Library", "Logs", "fulcrum-tunnel.log");
+}
+function installService(tunnelToken) {
+  if (platform2() === "darwin") {
+    const cloudflaredPath = whichCloudflared();
+    const plist = LAUNCHD_PLIST_TEMPLATE.replace("__CLOUDFLARED_PATH__", cloudflaredPath).replace("__TUNNEL_TOKEN__", tunnelToken).replace(/__LOG_PATH__/g, macosLogPath());
+    const dest2 = macosPlistPath();
+    mkdirSync6(dirname5(dest2), { recursive: true });
+    writeFileSync5(dest2, plist, "utf-8");
+    chmodSync2(dest2, 420);
+    spawnSync4("launchctl", ["unload", dest2], { stdio: "ignore" });
+    const load = spawnSync4("launchctl", ["load", dest2], { stdio: "inherit" });
+    if (load.status !== 0) {
+      throw new CliError("LAUNCHCTL_LOAD_FAILED", "launchctl load failed", ExitCodes.ERROR);
+    }
+    return { path: dest2, how: "launchd" };
+  }
+  const unit = SYSTEMD_SERVICE_TEMPLATE.replace("__TUNNEL_TOKEN__", tunnelToken);
+  const dest = linuxUnitPath();
+  mkdirSync6(dirname5(dest), { recursive: true });
+  writeFileSync5(dest, unit, "utf-8");
+  chmodSync2(dest, 420);
+  for (const args of [
+    ["--user", "daemon-reload"],
+    ["--user", "enable", LINUX_SERVICE_NAME],
+    ["--user", "restart", LINUX_SERVICE_NAME]
+  ]) {
+    const r3 = spawnSync4("systemctl", args, { stdio: "inherit" });
+    if (r3.status !== 0) {
+      throw new CliError("SYSTEMCTL_FAILED", `systemctl ${args.join(" ")} failed (exit ${r3.status})`, ExitCodes.ERROR);
+    }
+  }
+  return { path: dest, how: "systemd" };
+}
+function uninstallService() {
+  if (platform2() === "darwin") {
+    const dest2 = macosPlistPath();
+    if (!existsSync7(dest2))
+      return { stopped: false, removed: false };
+    spawnSync4("launchctl", ["unload", dest2], { stdio: "ignore" });
+    unlinkSync3(dest2);
+    return { stopped: true, removed: true };
+  }
+  const dest = linuxUnitPath();
+  if (!existsSync7(dest))
+    return { stopped: false, removed: false };
+  spawnSync4("systemctl", ["--user", "stop", LINUX_SERVICE_NAME], { stdio: "ignore" });
+  spawnSync4("systemctl", ["--user", "disable", LINUX_SERVICE_NAME], { stdio: "ignore" });
+  unlinkSync3(dest);
+  spawnSync4("systemctl", ["--user", "daemon-reload"], { stdio: "ignore" });
+  return { stopped: true, removed: true };
+}
+function serviceStatus() {
+  if (platform2() === "darwin") {
+    const r4 = spawnSync4("launchctl", ["list", MACOS_LABEL], { encoding: "utf-8" });
+    if (r4.status === 0) {
+      const match = r4.stdout.match(/"PID"\s*=\s*(\d+);/);
+      return match ? `running (pid ${match[1]})` : "loaded";
+    }
+    return "not loaded";
+  }
+  const r3 = spawnSync4("systemctl", ["--user", "is-active", LINUX_SERVICE_NAME], { encoding: "utf-8" });
+  return (r3.stdout || r3.stderr).trim() || "unknown";
+}
+async function handleExpose(args) {
+  const { positional, flags } = args;
+  const subdomain = positional[0]?.trim() || hostname().split(".")[0];
+  const domain = flags.domain?.trim();
+  if (!domain) {
+    throw new CliError("MISSING_DOMAIN", "Required: --domain <zone> (e.g. --domain fulcrum.example.com)", ExitCodes.INVALID_ARGS);
+  }
+  const skipService = flags["no-service"] === "true";
+  const autoYes = flags.yes === "true" || flags.y === "true";
+  if (!skipService && !isCloudflaredInstalled()) {
+    console.error("cloudflared is not installed.");
+    console.error("Install it from https://github.com/cloudflare/cloudflared/releases or via your package manager.");
+    if (!autoYes) {
+      const proceed = await confirm("Continue without installing the system service? (the tunnel will be created but not running)");
+      if (!proceed)
+        throw new CliError("CLOUDFLARED_MISSING", "cloudflared required to start tunnel", ExitCodes.ERROR);
+    }
+  }
+  const client = new FulcrumClient(flags.url, flags.port);
+  const result = await client.createServerExpose({ subdomain, domain });
+  console.error(`Tunnel ready: ${result.publicDomain} (${result.reusedExisting ? "reused" : "created"})`);
+  console.error(`Tunnel ID: ${result.tunnelId}`);
+  let serviceInfo = null;
+  if (skipService) {
+    console.error("Skipping system service installation (--no-service).");
+  } else if (!result.tunnelToken) {
+    console.error("Existing tunnel reused; the tunnel token was not returned by Cloudflare.");
+    console.error("Keep the existing system service running, or rotate the token via the Cloudflare dashboard.");
+  } else if (!isCloudflaredInstalled()) {
+    console.error("Skipping service install: cloudflared not on PATH.");
+  } else {
+    const installed = installService(result.tunnelToken);
+    serviceInfo = { path: installed.path, how: installed.how };
+    console.error(`Installed and started ${installed.how} service: ${installed.path}`);
+  }
+  console.error("");
+  console.error("Next steps:");
+  console.error(`  1. Visit ${result.accessSetupUrl} and create a Cloudflare Access policy for *.${domain}.`);
+  console.error(`  2. Open https://${result.publicDomain} in your browser.`);
+  if (isJsonOutput()) {
+    output({
+      publicDomain: result.publicDomain,
+      tunnelId: result.tunnelId,
+      reusedExisting: result.reusedExisting,
+      service: serviceInfo
+    });
+  }
+}
+async function handleStatus(flags) {
+  const client = new FulcrumClient(flags.url, flags.port);
+  const status = await client.getServerExpose();
+  const svc = serviceStatus();
+  if (isJsonOutput()) {
+    output({ ...status, serviceStatus: svc });
+    return;
+  }
+  console.log(`Public domain:        ${status.publicDomain ?? "(not set)"}`);
+  console.log(`Tailscale hostname:   ${status.tailscaleHostname ?? "(not set)"}`);
+  console.log(`Detected tailnet:     ${status.detectedTailscaleHostname ?? "(not detected)"}`);
+  console.log(`Cloudflare ready:     ${status.tunnelAvailable ? "yes" : "no"}`);
+  console.log(`Tunnel ID:            ${status.tunnelId ?? "(none)"}`);
+  console.log(`Tunnel status:        ${status.tunnelStatus ?? "(unknown)"}`);
+  console.log(`Local service:        ${svc}`);
+}
+async function handleDown(flags) {
+  const removeTunnel = flags["remove-tunnel"] === "true";
+  const autoYes = flags.yes === "true" || flags.y === "true";
+  if (removeTunnel && !autoYes) {
+    const ok = await confirm("Permanently delete the Cloudflare Tunnel from your account?");
+    if (!ok) {
+      console.error("Aborted.");
+      return;
+    }
+  }
+  const svc = uninstallService();
+  if (svc.removed) {
+    console.error("Stopped and removed the local cloudflared service.");
+  }
+  const client = new FulcrumClient(flags.url, flags.port);
+  const result = await client.deleteServerExpose(removeTunnel);
+  if (result.tunnelDeleted)
+    console.error("Deleted the Cloudflare Tunnel from your account.");
+  console.error("Cleared server.publicDomain.");
+  if (isJsonOutput()) {
+    output({ success: true, serviceRemoved: svc.removed, tunnelDeleted: !!result.tunnelDeleted });
+  }
+}
+var exposeCommand = defineCommand({
+  meta: {
+    name: "expose",
+    description: "Expose this Fulcrum server publicly via a Cloudflare Tunnel"
+  },
+  args: {
+    ...globalArgs,
+    domain: { type: "string", description: "Cloudflare zone for the public hostname (e.g. fulcrum.example.com)" },
+    "no-service": { type: "boolean", description: "Create the tunnel but do not install/start the system service" },
+    "remove-tunnel": { type: "boolean", description: "For `down`: also delete the tunnel from Cloudflare" },
+    yes: { type: "boolean", alias: "y", description: "Auto-answer yes to prompts" }
+  },
+  subCommands: {
+    status: defineCommand({
+      meta: { name: "status", description: "Show current expose state and service status" },
+      args: { ...globalArgs },
+      async run({ args }) {
+        setupJsonOutput(args);
+        await handleStatus(toFlags(args));
+      }
+    }),
+    down: defineCommand({
+      meta: { name: "down", description: "Stop the local tunnel service and clear publicDomain" },
+      args: {
+        ...globalArgs,
+        "remove-tunnel": { type: "boolean", description: "Also delete the tunnel from Cloudflare" },
+        yes: { type: "boolean", alias: "y", description: "Auto-answer yes to prompts" }
+      },
+      async run({ args }) {
+        setupJsonOutput(args);
+        await handleDown(toFlags(args));
+      }
+    })
+  },
+  async run({ args, rawArgs }) {
+    setupJsonOutput(args);
+    const positional = args._ ?? rawArgs.filter((a2) => !a2.startsWith("-"));
+    await handleExpose({ positional, flags: toFlags(args) });
+  }
+});
+
 // cli/src/commands/status.ts
 init_server();
 async function handleStatusCommand(flags) {
@@ -51071,6 +51345,7 @@ var main = defineCommand({
     notify: notifyCommand,
     up: upCommand,
     down: downCommand,
+    expose: exposeCommand,
     status: statusCommand,
     doctor: doctorCommand,
     dev: devCommand,