@launchsecure/launch-kit 0.0.41 → 0.0.43

package/dist/server/radar-docker-init-entry.js

@@ -613,11 +613,13 @@ var RECEIVER_PATH = "/api/radar/ingest";
 
 // src/server/radar-docker-init-entry.ts
 var REQUIRED_ENV = [
-  "CLAUDE_CREDENTIALS_B64",
   "LS_PAT",
   "LS_ORG_SLUG",
   "LS_PROJECT_SLUG"
 ];
+var POD_WS = process.env.LAUNCHPOD_WORKSPACE ?? "/workspace";
+var NO_PARK = process.env.LAUNCHPOD_NO_PARK === "1";
+var LOCAL_ONLY = process.env.LAUNCHKIT_LOCAL_ONLY === "1";
 function fail2(message) {
   console.error(message);
   process.exit(1);
@@ -631,7 +633,7 @@ function run(cmd, args, stdio = "inherit") {
   const r = (0, import_node_child_process.spawnSync)(cmd, args, { stdio });
   return r.status ?? 1;
 }
-var LAUNCHPOD_DIR = "/workspace/.launchpod";
+var LAUNCHPOD_DIR = (0, import_node_path4.join)(POD_WS, ".launchpod");
 var CRASH_STATE_FILE = (0, import_node_path4.join)(LAUNCHPOD_DIR, ".boot-crash.json");
 var MAX_BOOT_CRASHES = 5;
 var STABLE_AFTER_MS = 3e4;
@@ -714,14 +716,30 @@ async function setupFromCloud() {
   console.log(`[entrypoint] bundle from cloud: org=${orgSlug} project=${projectSlug} git=${process.env.GIT_USER_NAME} <${process.env.GIT_USER_EMAIL}> github=${bundle.githubTokenStatus.toLowerCase()} ${cfNote}`);
   return bundle;
 }
+function hasUsableCredentials(credsPath) {
+  if (!(0, import_node_fs4.existsSync)(credsPath)) return false;
+  try {
+    const raw = (0, import_node_fs4.readFileSync)(credsPath, "utf8").trim();
+    if (raw.length === 0) return false;
+    const parsed = JSON.parse(raw);
+    return parsed != null && typeof parsed === "object" && "claudeAiOauth" in parsed;
+  } catch {
+    return false;
+  }
+}
 function setupClaudeCredentials() {
   const home = process.env.HOME ?? "/home/launchpod";
   const claudeDir = (0, import_node_path4.join)(home, ".claude");
   (0, import_node_fs4.mkdirSync)(claudeDir, { recursive: true });
-  const decoded = Buffer.from(requireEnv("CLAUDE_CREDENTIALS_B64"), "base64").toString("utf8");
   const credsPath = (0, import_node_path4.join)(claudeDir, ".credentials.json");
-  (0, import_node_fs4.writeFileSync)(credsPath, decoded);
-  (0, import_node_fs4.chmodSync)(credsPath, 384);
+  if (hasUsableCredentials(credsPath)) {
+    console.log("[entrypoint] ~/.claude/.credentials.json already present \u2014 leaving Claude Code's own (refreshed) credentials intact");
+  } else {
+    const decoded = Buffer.from(requireEnv("CLAUDE_CREDENTIALS_B64"), "base64").toString("utf8");
+    (0, import_node_fs4.writeFileSync)(credsPath, decoded);
+    (0, import_node_fs4.chmodSync)(credsPath, 384);
+    console.log("[entrypoint] seeded ~/.claude/.credentials.json from CLAUDE_CREDENTIALS_B64");
+  }
   const configPath = (0, import_node_path4.join)(home, ".claude.json");
   let cfg = {};
   if ((0, import_node_fs4.existsSync)(configPath)) {
@@ -745,7 +763,7 @@ function setupClaudeCredentials() {
     "launch-sequencer"
   ];
   const projects = cfg.projects ?? {};
-  const wsKey = "/workspace";
+  const wsKey = POD_WS;
   const wsProject = projects[wsKey] ?? {};
   const existingEnabled = Array.isArray(wsProject.enabledMcpjsonServers) ? wsProject.enabledMcpjsonServers : [];
   const mergedEnabled = Array.from(/* @__PURE__ */ new Set([...existingEnabled, ...PREAPPROVED_MCPS]));
@@ -764,7 +782,7 @@ function setupGitAndGh() {
 function detectAndSetPreviewPort() {
   if (process.env.PREVIEW_PORT) return;
   try {
-    const pkgPath = "/workspace/package.json";
+    const pkgPath = (0, import_node_path4.join)(POD_WS, "package.json");
     if (!(0, import_node_fs4.existsSync)(pkgPath)) return;
     const pkg = JSON.parse((0, import_node_fs4.readFileSync)(pkgPath, "utf-8"));
     const scripts = pkg.scripts ?? {};
@@ -783,23 +801,27 @@ function detectAndSetPreviewPort() {
   }
 }
 function initWorkspaceIfEmpty() {
-  process.chdir("/workspace");
+  process.chdir(POD_WS);
   if ((0, import_node_fs4.existsSync)(".git")) {
-    console.log("[entrypoint] /workspace already initialized \u2014 skipping init");
+    console.log(`[entrypoint] ${POD_WS} already initialized \u2014 skipping init`);
     return;
   }
-  console.log("[entrypoint] /workspace is empty \u2014 running launch-kit init");
+  console.log(`[entrypoint] ${POD_WS} is empty \u2014 running launch-kit init`);
   const status = run("launch-kit", [
     "init",
     `--token=${requireEnv("LS_PAT")}`,
     `--org=${requireEnv("LS_ORG_SLUG")}`,
     `--project=${requireEnv("LS_PROJECT_SLUG")}`,
     `--url=${process.env.LS_SERVER_URL ?? "https://launchsecure-v2.vercel.app"}`,
-    `--dir=/workspace`
+    `--dir=${POD_WS}`
   ]);
   if (status !== 0) fail2(`[entrypoint] launch-kit init failed (status ${status})`);
 }
 async function maybeProvisionIngress(bundle, services, projectSlug) {
+  if (LOCAL_ONLY) {
+    console.log("[entrypoint] LAUNCHKIT_LOCAL_ONLY=1 \u2014 skipping CF ingress; services run on localhost only");
+    return null;
+  }
   const token = bundle.cloudflareToken ?? null;
   const accountId = bundle.cloudflareAccountId ?? null;
   const zones = bundle.cloudflareZones ?? [];
@@ -819,7 +841,7 @@ async function maybeProvisionIngress(bundle, services, projectSlug) {
   } else {
     fail2(`[entrypoint] cloudflare token covers ${zones.length} zones (${zones.map((z) => z.name).join(", ")}) \u2014 set LAUNCHKIT_CF_BASE_DOMAIN to pick one.`);
   }
-  const stateFile = "/workspace/.launchpod/launch-kit-tunnel.json";
+  const stateFile = (0, import_node_path4.join)(POD_WS, ".launchpod", "launch-kit-tunnel.json");
   const slugLabel = projectSlug.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
   const DNS_LABEL_RE = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
   for (const s of services) {
@@ -895,7 +917,7 @@ async function maybeProvisionAccess(bundle, ingress) {
   }
   const serverUrl = process.env.LS_SERVER_URL ?? "https://launchsecure-v2.vercel.app";
   const pat = requireEnv("LS_PAT");
-  const stateFile = "/workspace/.launchpod/launch-kit-access.json";
+  const stateFile = (0, import_node_path4.join)(POD_WS, ".launchpod", "launch-kit-access.json");
   const gatedHosts = services.filter((s) => !s.bypass).map((s) => s.hostname);
   const bypassed = services.filter((s) => s.bypass).map((s) => `${s.hostname}${s.path ?? ""}`);
   console.log(`[entrypoint] gating ${gatedHosts.join(", ")} behind CF Access (IdP: ${serverUrl})`);
@@ -994,11 +1016,13 @@ function spawnServiceGroup(services) {
   }).finally(removeSignals);
 }
 async function main() {
-  const priorCrashes = readCrashState()?.count ?? 0;
-  if (priorCrashes >= MAX_BOOT_CRASHES) await parkAfterCrashLoop(priorCrashes);
-  const bootAttempt = bumpCrashCount();
-  if (bootAttempt > 1) {
-    console.warn(`[entrypoint] boot attempt ${bootAttempt}/${MAX_BOOT_CRASHES} \u2014 prior boot(s) crashed before becoming stable`);
+  if (!NO_PARK) {
+    const priorCrashes = readCrashState()?.count ?? 0;
+    if (priorCrashes >= MAX_BOOT_CRASHES) await parkAfterCrashLoop(priorCrashes);
+    const bootAttempt = bumpCrashCount();
+    if (bootAttempt > 1) {
+      console.warn(`[entrypoint] boot attempt ${bootAttempt}/${MAX_BOOT_CRASHES} \u2014 prior boot(s) crashed before becoming stable`);
+    }
   }
   for (const k of REQUIRED_ENV) requireEnv(k);
   const bundle = await setupFromCloud();
@@ -1032,8 +1056,10 @@ async function main() {
     }
   }
   const stableTimer = setTimeout(() => {
-    clearCrashCount();
-    console.log(`[entrypoint] services stable for ${Math.round(STABLE_AFTER_MS / 1e3)}s \u2014 boot-crash counter cleared`);
+    if (!NO_PARK) {
+      clearCrashCount();
+      console.log(`[entrypoint] services stable for ${Math.round(STABLE_AFTER_MS / 1e3)}s \u2014 boot-crash counter cleared`);
+    }
   }, STABLE_AFTER_MS);
   stableTimer.unref?.();
   try {