@rubytech/create-maxy-code 0.1.109 → 0.1.111

package/payload/platform/plugins/cloudflare/scripts/reset-tunnel.sh

@@ -1,107 +0,0 @@
-#!/usr/bin/env bash
-# Reset a brand's Cloudflare tunnel state.
-# Inverse of setup-tunnel.sh; same scope boundary (tunnel state only).
-#
-# Deletes every tunnel on the brand's Cloudflare account (using the brand's
-# cert.pem) and wipes the brand-scoped cloudflared state directory. Leaves
-# the platform service alone — the operator decides whether to stop/restart
-# ${BRAND}.service.
-#
-# Usage:
-#   reset-tunnel.sh <brand>
-#
-# Example:
-#   reset-tunnel.sh maxy
-#
-# Does NOT delete stray misrouted CNAMEs in DNS (e.g. admin.maxy.bot.maxy.chat
-# from an earlier wrong-zone OAuth). Those are zone-specific DNS records the
-# CLI cannot enumerate from here; remove them manually in the CF dashboard.
-
-set -euo pipefail
-
-# --------------------------------------------------------------------------
-# Shared stream-log helpers (require STREAM_LOG_PATH, phase_line, tee_subprocess).
-# any cloudflared subprocess this script spawns is teed line-by-line
-# into the per-conversation stream log so the chat UI tailer renders live
-# progress — same contract as setup-tunnel.sh.
-# --------------------------------------------------------------------------
-
-# shellcheck source=_stream-log.sh
-# Resolve symlinks before dirname — ~/reset-tunnel.sh is installed as a symlink
-# (see packages/create-maxy-code/src/index.ts:installTunnelScripts), so the raw
-# BASH_SOURCE[0] points at $HOME, not the scripts directory where _stream-log.sh lives.
-source "$(dirname "$(readlink -f "${BASH_SOURCE[0]}")")/_stream-log.sh"
-require_stream_log_path reset-tunnel
-
-if [ "$#" -lt 1 ]; then
-  echo "Usage: $0 <brand>" >&2
-  exit 2
-fi
-
-BRAND="$1"
-CFG_DIR="${HOME}/.${BRAND}/cloudflared"
-CERT="${CFG_DIR}/cert.pem"
-
-phase_line reset-tunnel step=start brand="${BRAND}" cfg_dir="${CFG_DIR}"
-
-if [ ! -f "${CERT}" ]; then
-  phase_line reset-tunnel step=no-cert cfg_dir="${CFG_DIR}"
-  echo "No cert.pem at ${CERT} — nothing to delete via CLI."
-  echo "Removing ${CFG_DIR} if present."
-  rm -rf "${CFG_DIR}"
-  phase_line reset-tunnel step=done result=wiped-no-cert
-  exit 0
-fi
-
-# Delete every tunnel on the account (the cert is per-account for tunnel CRUD).
-# cloudflared's list/delete output is teed into STREAM_LOG_PATH; the `list`
-# call uses tee_subprocess_capture so NAMES_TMP receives the JSON for jq to
-# parse. Using the non-capture variant here would strand the JSON in stderr
-# and leave NAMES_TMP empty — every tunnel would silently survive reset.
-phase_line reset-tunnel step=list-tunnels
-NAMES_TMP="$(mktemp -t maxy-reset-tunnel-list.XXXXXX)"
-# shellcheck disable=SC2064
-trap "rm -f '${NAMES_TMP}'" EXIT
-if ! tee_subprocess_capture reset-tunnel:cloudflared -- \
-      cloudflared --origincert "${CERT}" tunnel list --output json \
-      > "${NAMES_TMP}"; then
-  phase_line reset-tunnel step=list-tunnels result=error reason=cloudflared-list-failed
-  echo "ERROR: cloudflared tunnel list failed. See stream log for detail." >&2
-  exit 1
-fi
-NAMES="$(jq -r '.[]?.name' "${NAMES_TMP}" 2>/dev/null | sort -u || true)"
-if [ -z "${NAMES}" ]; then
-  phase_line reset-tunnel step=list-tunnels result=empty
-  echo "No tunnels to delete on this brand's account."
-else
-  while IFS= read -r NAME; do
-    [ -z "${NAME}" ] && continue
-    phase_line reset-tunnel step=delete-tunnel name="${NAME}"
-    echo "Deleting tunnel: ${NAME}"
-    if ! tee_subprocess reset-tunnel:cloudflared -- \
-          cloudflared --origincert "${CERT}" tunnel delete "${NAME}"; then
-      phase_line reset-tunnel step=delete-tunnel result=error name="${NAME}"
-      echo "ERROR: cloudflared tunnel delete failed for ${NAME}. See stream log." >&2
-      exit 1
-    fi
-  done <<< "${NAMES}"
-fi
-
-# Wipe the brand-scoped cloudflared state directory.
-rm -rf "${CFG_DIR}"
-phase_line reset-tunnel step=wipe-cfg-dir path="${CFG_DIR}"
-echo "Removed ${CFG_DIR}"
-
-echo ""
-echo "Reset complete for brand=${BRAND}."
-echo ""
-echo "If earlier runs produced stray misrouted CNAMEs (e.g. admin.maxy.bot.maxy.chat"
-echo "when the cert was scoped to the wrong zone), delete those records manually in"
-echo "the Cloudflare dashboard — the CLI cannot enumerate them from here."
-echo ""
-echo "The platform service (${BRAND}.service) was not touched. To release any"
-echo "running cloudflared connector started by ${BRAND}.service's ExecStartPre,"
-echo "either restart the service (which will no-op on resume since tunnel.state"
-echo "is gone) or leave it running until you re-run setup-tunnel.sh."
-
-phase_line reset-tunnel step=done result=ok brand="${BRAND}"