@pixelzx/genesis 2026.6.27 → 2026.6.29

package/dist/onboard-remote-B6KxBZY_.js

@@ -0,0 +1,193 @@
+import { c as isSecureWebSocketUrl } from "./net-BzaeD_3Q.js";
+import { t as resolveSecretInputModeForEnvSelection } from "./provider-auth-mode-B9Pg5Srd.js";
+import { n as promptSecretRefForSetup } from "./provider-auth-ref-Bin67QHe.js";
+import { t as detectBinary } from "./detect-binary-EimN6WHe.js";
+import { i as resolveWideAreaDiscoveryDomain } from "./widearea-dns-DSXt-AmF.js";
+import { t as discoverGatewayBeacons } from "./bonjour-discovery-DhjtoKld.js";
+import { n as buildGatewayDiscoveryTarget, t as buildGatewayDiscoveryLabel } from "./gateway-discovery-targets-BDXPQgxm.js";
+import "./onboard-helpers-D-z22ggH.js";
+//#region src/commands/onboard-remote.ts
+const DEFAULT_GATEWAY_URL = "ws://127.0.0.1:18789";
+function buildLabel(beacon) {
+	return buildGatewayDiscoveryLabel(beacon);
+}
+function ensureWsUrl(value) {
+	const trimmed = value.trim();
+	if (!trimmed) return DEFAULT_GATEWAY_URL;
+	return trimmed;
+}
+function validateGatewayWebSocketUrl(value) {
+	const trimmed = value.trim();
+	if (!trimmed.startsWith("ws://") && !trimmed.startsWith("wss://")) return "URL must start with ws:// or wss://";
+	if (!isSecureWebSocketUrl(trimmed, { allowPrivateWs: process.env.GENESIS_ALLOW_INSECURE_PRIVATE_WS === "1" })) return "Use wss:// for remote hosts, or ws://127.0.0.1/localhost via SSH tunnel. Break-glass: GENESIS_ALLOW_INSECURE_PRIVATE_WS=1 for trusted private networks.";
+}
+async function promptRemoteGatewayConfig(cfg, prompter, options) {
+	let selectedBeacon = null;
+	let suggestedUrl = cfg.gateway?.remote?.url ?? DEFAULT_GATEWAY_URL;
+	let discoveryTlsFingerprint;
+	let trustedDiscoveryUrl;
+	const hasBonjourTool = await detectBinary("dns-sd") || await detectBinary("avahi-browse");
+	const wantsDiscover = hasBonjourTool ? await prompter.confirm({
+		message: "Discover gateway on LAN (Bonjour)?",
+		initialValue: true
+	}) : false;
+	if (!hasBonjourTool) await prompter.note(["Bonjour discovery requires dns-sd (macOS) or avahi-browse (Linux).", "Docs: https://genesis.pixelzx.com/docs/gateway/discovery"].join("\n"), "Discovery");
+	if (wantsDiscover) {
+		const wideAreaDomain = resolveWideAreaDiscoveryDomain({ configDomain: cfg.discovery?.wideArea?.domain });
+		const spin = prompter.progress("Searching for gateways…");
+		const beacons = await discoverGatewayBeacons({
+			timeoutMs: 2e3,
+			wideAreaDomain
+		});
+		spin.stop(beacons.length > 0 ? `Found ${beacons.length} gateway(s)` : "No gateways found");
+		if (beacons.length > 0) {
+			const selection = await prompter.select({
+				message: "Select gateway",
+				options: [...beacons.map((beacon, index) => ({
+					value: String(index),
+					label: buildLabel(beacon)
+				})), {
+					value: "manual",
+					label: "Enter URL manually"
+				}]
+			});
+			if (selection !== "manual") {
+				const idx = Number.parseInt(selection, 10);
+				selectedBeacon = Number.isFinite(idx) ? beacons[idx] ?? null : null;
+			}
+		}
+	}
+	if (selectedBeacon) {
+		const target = buildGatewayDiscoveryTarget(selectedBeacon);
+		if (target.endpoint) {
+			const { host, port } = target.endpoint;
+			if (await prompter.select({
+				message: "Connection method",
+				options: [{
+					value: "direct",
+					label: `Direct gateway WS (${host}:${port})`
+				}, {
+					value: "ssh",
+					label: "SSH tunnel (loopback)"
+				}]
+			}) === "direct") {
+				suggestedUrl = `wss://${host}:${port}`;
+				const fingerprint = target.endpoint.gatewayTlsFingerprintSha256;
+				if (await prompter.confirm({
+					message: `Trust this gateway? Host: ${host}:${port} TLS fingerprint: ${fingerprint ?? "not advertised (connection will not be pinned)"}`,
+					initialValue: false
+				})) {
+					discoveryTlsFingerprint = fingerprint;
+					trustedDiscoveryUrl = suggestedUrl;
+					await prompter.note([
+						"Direct remote access defaults to TLS.",
+						`Using: ${suggestedUrl}`,
+						...fingerprint ? [`TLS pin: ${fingerprint}`] : [],
+						"If your gateway is loopback-only, choose SSH tunnel and keep ws://127.0.0.1:18789."
+					].join("\n"), "Direct remote");
+				} else suggestedUrl = DEFAULT_GATEWAY_URL;
+			} else {
+				suggestedUrl = DEFAULT_GATEWAY_URL;
+				await prompter.note([
+					"Start a tunnel before using the CLI:",
+					`ssh -N -L 18789:127.0.0.1:18789 <user>@${host}${target.sshPort ? ` -p ${target.sshPort}` : ""}`,
+					"Docs: https://genesis.pixelzx.com/docs/gateway/remote"
+				].join("\n"), "SSH tunnel");
+			}
+		}
+	}
+	const url = ensureWsUrl(await prompter.text({
+		message: "Gateway WebSocket URL",
+		initialValue: suggestedUrl,
+		validate: (value) => validateGatewayWebSocketUrl(value)
+	}));
+	const pinnedDiscoveryFingerprint = discoveryTlsFingerprint && url === trustedDiscoveryUrl ? discoveryTlsFingerprint : void 0;
+	const authChoice = await prompter.select({
+		message: "Gateway auth",
+		options: [
+			{
+				value: "token",
+				label: "Token (recommended)"
+			},
+			{
+				value: "password",
+				label: "Password"
+			},
+			{
+				value: "off",
+				label: "No auth"
+			}
+		]
+	});
+	let token = cfg.gateway?.remote?.token;
+	let password = cfg.gateway?.remote?.password;
+	if (authChoice === "token") {
+		if (await resolveSecretInputModeForEnvSelection({
+			prompter,
+			explicitMode: options?.secretInputMode,
+			copy: {
+				modeMessage: "How do you want to provide this gateway token?",
+				plaintextLabel: "Enter token now",
+				plaintextHint: "Stores the token directly in Genesis config"
+			}
+		}) === "ref") token = (await promptSecretRefForSetup({
+			provider: "gateway-remote-token",
+			config: cfg,
+			prompter,
+			preferredEnvVar: "GENESIS_GATEWAY_TOKEN",
+			copy: {
+				sourceMessage: "Where is this gateway token stored?",
+				envVarPlaceholder: "GENESIS_GATEWAY_TOKEN"
+			}
+		})).ref;
+		else token = (await prompter.text({
+			message: "Gateway token",
+			initialValue: typeof token === "string" ? token : void 0,
+			validate: (value) => value?.trim() ? void 0 : "Required"
+		})).trim();
+		password = void 0;
+	} else if (authChoice === "password") {
+		if (await resolveSecretInputModeForEnvSelection({
+			prompter,
+			explicitMode: options?.secretInputMode,
+			copy: {
+				modeMessage: "How do you want to provide this gateway password?",
+				plaintextLabel: "Enter password now",
+				plaintextHint: "Stores the password directly in Genesis config"
+			}
+		}) === "ref") password = (await promptSecretRefForSetup({
+			provider: "gateway-remote-password",
+			config: cfg,
+			prompter,
+			preferredEnvVar: "GENESIS_GATEWAY_PASSWORD",
+			copy: {
+				sourceMessage: "Where is this gateway password stored?",
+				envVarPlaceholder: "GENESIS_GATEWAY_PASSWORD"
+			}
+		})).ref;
+		else password = (await prompter.text({
+			message: "Gateway password",
+			initialValue: typeof password === "string" ? password : void 0,
+			validate: (value) => value?.trim() ? void 0 : "Required"
+		})).trim();
+		token = void 0;
+	} else {
+		token = void 0;
+		password = void 0;
+	}
+	return {
+		...cfg,
+		gateway: {
+			...cfg.gateway,
+			mode: "remote",
+			remote: {
+				url,
+				...token !== void 0 ? { token } : {},
+				...password !== void 0 ? { password } : {},
+				...pinnedDiscoveryFingerprint ? { tlsFingerprint: pinnedDiscoveryFingerprint } : {}
+			}
+		}
+	};
+}
+//#endregion
+export { promptRemoteGatewayConfig as t };

package/dist/onboard-remote-BrblbI6u.js

@@ -0,0 +1,2 @@
+import { t as promptRemoteGatewayConfig } from "./onboard-remote-B6KxBZY_.js";
+export { promptRemoteGatewayConfig };

package/dist/onboard-skills-BaEg-lmj.js

@@ -0,0 +1,2 @@
+import { t as setupSkills } from "./onboard-skills-BuFtX13Z.js";
+export { setupSkills };

package/dist/onboard-skills-BuFtX13Z.js

@@ -0,0 +1,134 @@
+import { t as formatCliCommand } from "./command-format-B3Q5KD9o.js";
+import { n as normalizeSecretInput } from "./normalize-secret-input-eKsMGjV8.js";
+import { t as detectBinary } from "./detect-binary-EimN6WHe.js";
+import { t as buildWorkspaceSkillStatus } from "./skills-status-CEVePldz.js";
+import { d as resolveNodeManagerOptions } from "./onboard-helpers-D-z22ggH.js";
+import { t as installSkill } from "./skills-install-B1RJkjel.js";
+//#region src/commands/onboard-skills.ts
+function summarizeInstallFailure(message) {
+	const cleaned = message.replace(/^Install failed(?:\s*\([^)]*\))?\s*:?\s*/i, "").trim();
+	if (!cleaned) return;
+	const maxLen = 140;
+	return cleaned.length > maxLen ? `${cleaned.slice(0, maxLen - 1)}…` : cleaned;
+}
+function formatSkillHint(skill) {
+	const desc = skill.description?.trim();
+	const installLabel = skill.install[0]?.label?.trim();
+	const combined = desc && installLabel ? `${desc} — ${installLabel}` : desc || installLabel;
+	if (!combined) return "install";
+	const maxLen = 90;
+	return combined.length > maxLen ? `${combined.slice(0, maxLen - 1)}…` : combined;
+}
+function upsertSkillEntry(cfg, skillKey, patch) {
+	const entries = { ...cfg.skills?.entries };
+	entries[skillKey] = {
+		...entries[skillKey] ?? {},
+		...patch
+	};
+	return {
+		...cfg,
+		skills: {
+			...cfg.skills,
+			entries
+		}
+	};
+}
+async function setupSkills(cfg, workspaceDir, runtime, prompter) {
+	const report = buildWorkspaceSkillStatus(workspaceDir, { config: cfg });
+	const eligible = report.skills.filter((s) => s.eligible);
+	const unsupportedOs = report.skills.filter((s) => !s.disabled && !s.blockedByAllowlist && s.missing.os.length > 0);
+	const missing = report.skills.filter((s) => !s.eligible && !s.disabled && !s.blockedByAllowlist && s.missing.os.length === 0);
+	const blocked = report.skills.filter((s) => s.blockedByAllowlist);
+	await prompter.note([
+		`Eligible: ${eligible.length}`,
+		`Missing requirements: ${missing.length}`,
+		`Unsupported on this OS: ${unsupportedOs.length}`,
+		`Blocked by allowlist: ${blocked.length}`
+	].join("\n"), "Skills status");
+	if (!await prompter.confirm({
+		message: "Configure skills now? (recommended)",
+		initialValue: true
+	})) return cfg;
+	const installable = missing.filter((skill) => skill.install.length > 0 && skill.missing.bins.length > 0);
+	let next = cfg;
+	if (installable.length > 0) {
+		const selected = (await prompter.multiselect({
+			message: "Install missing skill dependencies",
+			options: [{
+				value: "__skip__",
+				label: "Skip for now",
+				hint: "Continue without installing dependencies"
+			}, ...installable.map((skill) => ({
+				value: skill.name,
+				label: `${skill.emoji ?? "🧩"} ${skill.name}`,
+				hint: formatSkillHint(skill)
+			}))]
+		})).filter((name) => name !== "__skip__");
+		const selectedSkills = selected.map((name) => installable.find((s) => s.name === name)).filter((item) => Boolean(item));
+		if (process.platform !== "win32" && selectedSkills.some((skill) => skill.install.some((option) => option.kind === "brew")) && !await detectBinary("brew")) {
+			await prompter.note(["Many skill dependencies are shipped via Homebrew.", "Without brew, you'll need to build from source or download releases manually."].join("\n"), "Homebrew recommended");
+			if (await prompter.confirm({
+				message: "Show Homebrew install command?",
+				initialValue: true
+			})) await prompter.note(["Run:", "/bin/bash -c \"$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)\""].join("\n"), "Homebrew install");
+		}
+		if (selectedSkills.some((skill) => skill.install.some((option) => option.kind === "node"))) {
+			const nodeManager = await prompter.select({
+				message: "Preferred node manager for skill installs",
+				options: resolveNodeManagerOptions()
+			});
+			next = {
+				...next,
+				skills: {
+					...next.skills,
+					install: {
+						...next.skills?.install,
+						nodeManager
+					}
+				}
+			};
+		}
+		for (const name of selected) {
+			const target = installable.find((s) => s.name === name);
+			if (!target || target.install.length === 0) continue;
+			const installId = target.install[0]?.id;
+			if (!installId) continue;
+			const spin = prompter.progress(`Installing ${name}…`);
+			const result = await installSkill({
+				workspaceDir,
+				skillName: target.name,
+				installId,
+				config: next
+			});
+			const warnings = result.warnings ?? [];
+			if (result.ok) {
+				spin.stop(warnings.length > 0 ? `Installed ${name} (with warnings)` : `Installed ${name}`);
+				for (const warning of warnings) runtime.log(warning);
+				continue;
+			}
+			const code = result.code == null ? "" : ` (exit ${result.code})`;
+			const detail = summarizeInstallFailure(result.message);
+			spin.stop(`Install failed: ${name}${code}${detail ? ` — ${detail}` : ""}`);
+			for (const warning of warnings) runtime.log(warning);
+			if (result.stderr) runtime.log(result.stderr.trim());
+			else if (result.stdout) runtime.log(result.stdout.trim());
+			runtime.log(`Tip: run \`${formatCliCommand("genesis doctor")}\` to review skills + requirements.`);
+			runtime.log("Docs: https://genesis.pixelzx.com/docs/skills");
+		}
+	}
+	for (const skill of missing) {
+		if (!skill.primaryEnv || skill.missing.env.length === 0) continue;
+		if (!await prompter.confirm({
+			message: `Set ${skill.primaryEnv} for ${skill.name}?`,
+			initialValue: false
+		})) continue;
+		const apiKey = await prompter.text({
+			message: `Enter ${skill.primaryEnv}`,
+			validate: (value) => value?.trim() ? void 0 : "Required"
+		});
+		next = upsertSkillEntry(next, skill.skillKey, { apiKey: normalizeSecretInput(apiKey) });
+	}
+	return next;
+}
+//#endregion
+export { setupSkills as t };