@saadnvd1/agent-os 0.3.810 → 0.3.815

package/scripts/lib/service.sh

@@ -0,0 +1,230 @@
+#!/usr/bin/env bash
+# The background service: launchd on macOS, systemd elsewhere. One render per
+# init system, and one reconcile that writes only what changed, used by
+# `agent-os enable` and `agent-os setup`.
+
+LAUNCHD_LABEL="com.agent-os"
+
+launchd_plist_path() { echo "$HOME/Library/LaunchAgents/$LAUNCHD_LABEL.plist"; }
+systemd_unit_path() { echo "$HOME/.config/systemd/user/agent-os.service"; }
+launchd_domain() { echo "gui/$(id -u)"; }
+
+# launchd | systemd | none
+service_kind() {
+    if [[ "$OS" == "macos" ]]; then
+        echo launchd
+    elif has_systemd; then
+        echo systemd
+    else
+        echo none
+    fi
+}
+
+service_path() {
+    case "$(service_kind)" in
+        launchd) launchd_plist_path ;;
+        systemd) systemd_unit_path ;;
+    esac
+}
+
+# A path as plist text: & < > would break the XML.
+# sed, not ${//}: bash 5.2 reads & in a replacement as the match.
+xml_text() {
+    printf '%s' "$1" | sed -e 's/&/\&amp;/g' -e 's/</\&lt;/g' -e 's/>/\&gt;/g'
+}
+
+# A path as one systemd ExecStart word: % is a specifier, and a space would
+# split it. A plain path comes out as it went in.
+systemd_word() {
+    local s="${1//%/%%}"
+    if [[ "$s" =~ [[:space:]\"\'\\] ]]; then
+        s="${s//\\/\\\\}"
+        s="\"${s//\"/\\\"}\""
+    fi
+    printf '%s' "$s"
+}
+
+# The server runs in the foreground as launchd's own process, so a crash is
+# restarted (a clean exit isn't), and terminals (tmux) and chat workers
+# outlive a restart, as KillMode=process does on Linux.
+render_launchd_plist() {
+    local script_path log_file
+    script_path=$(xml_text "$1")
+    log_file=$(xml_text "$LOG_FILE")
+    cat << EOF
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>$LAUNCHD_LABEL</string>
+    <key>ProgramArguments</key>
+    <array>
+        <string>$script_path</string>
+        <string>start-foreground</string>
+    </array>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <dict>
+        <key>SuccessfulExit</key>
+        <false/>
+    </dict>
+    <key>ThrottleInterval</key>
+    <integer>10</integer>
+    <key>AbandonProcessGroup</key>
+    <true/>
+    <key>StandardOutPath</key>
+    <string>$log_file</string>
+    <key>StandardErrorPath</key>
+    <string>$log_file</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>PATH</key>
+        <string>/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin</string>
+    </dict>
+</dict>
+</plist>
+EOF
+}
+
+# What `agent-os enable` wrote before: it ran `agent-os start`, which exits at
+# once, so launchd never restarted a crashed server. Recognised so setup can
+# offer the update rather than calling it yours.
+render_launchd_plist_v1() {
+    local script_path log_file
+    script_path=$(xml_text "$1")
+    log_file=$(xml_text "$LOG_FILE")
+    cat << EOF
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>$LAUNCHD_LABEL</string>
+    <key>ProgramArguments</key>
+    <array>
+        <string>$script_path</string>
+        <string>start</string>
+    </array>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <false/>
+    <key>StandardOutPath</key>
+    <string>$log_file</string>
+    <key>StandardErrorPath</key>
+    <string>$log_file</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>PATH</key>
+        <string>/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin</string>
+    </dict>
+</dict>
+</plist>
+EOF
+}
+
+render_systemd_unit() {
+    local script_path
+    script_path=$(systemd_word "$1")
+    cat << EOF
+[Unit]
+Description=AgentOS - AI Coding Session Manager
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=$script_path start-foreground
+Restart=on-failure
+RestartSec=10
+# Only the server is stopped on a restart: terminals (tmux), chat workers and
+# an update in progress outlive it, as they do under launchd.
+KillMode=process
+Environment=PATH=/usr/local/bin:/usr/bin:/bin
+
+[Install]
+WantedBy=default.target
+EOF
+}
+
+render_service() {
+    case "$(service_kind)" in
+        launchd) render_launchd_plist "$1" ;;
+        systemd) render_systemd_unit "$1" ;;
+    esac
+}
+
+service_script_path() { realpath "$0"; }
+
+# absent | same | older | changed: the file on disk against what we'd write.
+service_file_state() {
+    local path script_path
+    path=$(service_path)
+    script_path=$(service_script_path)
+    if [[ -z "$path" || ! -f "$path" ]]; then
+        echo absent
+    elif [[ "$(cat "$path")" == "$(render_service "$script_path")" ]]; then
+        echo same
+    elif [[ "$(service_kind)" == launchd && "$(cat "$path")" == "$(render_launchd_plist_v1 "$script_path")" ]]; then
+        echo older
+    else
+        echo changed
+    fi
+}
+
+# Writes the service file when it differs. Prints unchanged | installed |
+# updated | kept-yours. "keep" leaves a file that isn't ours as it is; one
+# that is replaced is kept next to it as .bak first.
+service_reconcile() {
+    local mode="${1:-replace}" state path
+    state=$(service_file_state)
+    path=$(service_path)
+    case "$state" in
+        same) echo unchanged; return 0 ;;
+        changed)
+            if [[ "$mode" == keep ]]; then echo kept-yours; return 0; fi
+            cp -p "$path" "$path.bak"
+            log_info "Kept your version as $path.bak" >&2
+            ;;
+    esac
+    mkdir -p "${path%/*}"
+    render_service "$(service_script_path)" > "$path"
+    [[ "$state" == absent ]] && echo installed || echo updated
+}
+
+launchd_loaded() {
+    launchctl print "$(launchd_domain)/$LAUNCHD_LABEL" > /dev/null 2>&1
+}
+
+# Whether the plist on disk is the foreground one launchd can keep alive.
+launchd_keeps_alive() {
+    local path
+    path=$(launchd_plist_path)
+    [[ -f "$path" ]] && grep -q "<string>start-foreground</string>" "$path"
+}
+
+# (Re)load the agent. bootout first: bootstrap refuses an agent already
+# loaded. Fails over ssh with no GUI login: the caller says what to do.
+launchd_bootstrap() {
+    launchctl bootout "$(launchd_domain)/$LAUNCHD_LABEL" > /dev/null 2>&1 || true
+    launchctl bootstrap "$(launchd_domain)" "$(launchd_plist_path)" 2> /dev/null
+}
+
+launchd_no_gui_session() {
+    log_warn "launchd wouldn't load AgentOS in this session (no-gui-session: no desktop login, for example over ssh)."
+    echo "  Run 'agent-os enable' once from a terminal on the Mac itself."
+}
+
+launchd_bootout() {
+    launchctl bootout "$(launchd_domain)/$LAUNCHD_LABEL" > /dev/null 2>&1 || true
+}
+
+launchd_restart() {
+    launchctl kickstart -k "$(launchd_domain)/$LAUNCHD_LABEL" > /dev/null 2>&1
+}
+
+# Starts it if it isn't running; never kills one that is.
+launchd_kickstart() {
+    launchctl kickstart "$(launchd_domain)/$LAUNCHD_LABEL" > /dev/null 2>&1
+}

package/scripts/lib/setup.sh

@@ -0,0 +1,303 @@
+#!/usr/bin/env bash
+# agent-os setup: install, keep it running, choose how other devices reach
+# this machine, check that they can, then add a phone. Every step checks first,
+# so running it again only does what's missing. It never touches the firewall,
+# Tailscale, the router or DNS: it says what to do instead.
+
+# Runs a TypeScript entry point from the checkout this script belongs to.
+aos_tsx() { (cd "$(dirname "$SCRIPT_DIR")" && npx tsx "$@"); }
+
+SETUP_VIA=""
+SETUP_YES=0
+SETUP_SERVICE=1
+SETUP_PAIR=1
+
+setup_title() { echo ""; echo -e "${BOLD}$1${NC}"; }
+setup_ok() { echo -e "  ${GREEN}✓${NC} $1"; }
+setup_done() { echo -e "  ${GREEN}✓${NC} $1 (already done)"; }
+setup_note() { echo "  $1"; }
+
+# A yes/no question. Under --yes it takes $3 (or the default) without asking.
+setup_yn() {
+    if [[ "$SETUP_YES" == 1 ]] || ! is_interactive; then
+        [[ "${3:-$2}" == y ]]
+        return
+    fi
+    prompt_yn "  $1" "$2"
+}
+
+setup_api() {
+    curl -fsS --max-time "${2:-5}" "http://127.0.0.1:$PORT$1" 2> /dev/null
+}
+
+# One field from JSON on stdin, by dotted path; empty when missing.
+json_field() {
+    node -e '
+let s = "";
+process.stdin.on("data", (d) => (s += d)).on("end", () => {
+  let v;
+  try { v = process.argv[1].split(".").reduce((o, k) => o?.[k], JSON.parse(s)); } catch {}
+  process.stdout.write(v == null ? "" : String(v));
+});' "$1"
+}
+
+# up | not-agentos | down: what answers on AgentOS's port.
+setup_server_state() {
+    local health
+    if health=$(setup_api /api/health 3) && [[ "$(echo "$health" | json_field startedAt)" != "" ]]; then
+        echo up
+    elif curl -s --max-time 3 -o /dev/null "http://127.0.0.1:$PORT/" 2> /dev/null; then
+        echo not-agentos
+    else
+        echo down
+    fi
+}
+
+# Whether the server on the port is ours to manage: our pid file, our launchd
+# agent or our systemd unit. Otherwise something else runs it.
+setup_server_is_ours() {
+    is_running && return 0
+    [[ "${OS:-}" == "macos" ]] && launchd_loaded && return 0
+    systemd_unit_active
+}
+
+setup_wait_up() {
+    local i
+    for ((i = 0; i < ${1:-30}; i++)); do
+        [[ "$(setup_server_state)" == up ]] && return 0
+        sleep 1
+    done
+    return 1
+}
+
+setup_install() {
+    setup_title "1. Install"
+    if [[ -f "$REPO_DIR/.next/BUILD_ID" ]]; then
+        setup_done "AgentOS is installed"
+    else
+        cmd_install
+    fi
+}
+
+setup_service() {
+    setup_title "2. Keep it running"
+    local server
+    server=$(setup_server_state)
+    if [[ "$server" == not-agentos ]]; then
+        log_error "Another program holds port $PORT."
+        aos_tsx lib/reach/cli.ts "$PORT"
+        exit 2
+    fi
+    if [[ "$server" == up ]] && ! setup_server_is_ours; then
+        setup_ok "AgentOS is already running, started some other way: leaving it as it is"
+        return 0
+    fi
+    if [[ "$SETUP_SERVICE" == 1 && "$(service_kind)" != none ]]; then
+        local path
+        path=$(service_path)
+        case "$(service_file_state)" in
+            same)
+                setup_done "Starts at login and restarts after a crash"
+                ;;
+            absent)
+                if setup_yn "Start AgentOS at login and keep it running?" y; then
+                    cmd_enable
+                fi
+                ;;
+            older)
+                setup_note "The service AgentOS installed before doesn't restart it after a crash."
+                if setup_yn "Update it?" y n; then
+                    cmd_enable
+                else
+                    setup_ok "Kept the current service file"
+                fi
+                ;;
+            changed)
+                setup_note "$path differs from what AgentOS would write (edited by you?)."
+                if setup_yn "Replace it with AgentOS's own?" n n; then
+                    cmd_enable
+                else
+                    setup_ok "Kept yours"
+                fi
+                ;;
+        esac
+    fi
+    if [[ "$(setup_server_state)" == up ]]; then
+        setup_ok "AgentOS is running on port $PORT"
+        return 0
+    fi
+    cmd_start
+    if setup_wait_up 30; then
+        setup_ok "AgentOS is running on port $PORT"
+    else
+        log_error "AgentOS didn't answer within 30 seconds."
+        aos_tsx lib/reach/cli.ts "$PORT"
+        exit 2
+    fi
+}
+
+# The route already set up, or Connect.
+setup_default_via() {
+    local net="$1"
+    if [[ -n "$(echo "$net" | json_field connect.hostname)" || "$(echo "$net" | json_field connect.enrolled)" == true ]]; then
+        echo connect
+    elif [[ "$(echo "$net" | json_field tailscale.state)" == running ]]; then
+        echo tailscale
+    elif [[ "$(echo "$net" | json_field lan.on)" == true ]]; then
+        echo lan
+    else
+        echo connect
+    fi
+}
+
+setup_choose_via() {
+    local net="$1" default n
+    default=$(setup_default_via "$net")
+    if [[ -n "$SETUP_VIA" ]]; then
+        return 0
+    fi
+    if [[ "$SETUP_YES" == 1 ]] || ! is_interactive; then
+        SETUP_VIA="$default"
+        return 0
+    fi
+    local -a vias=(connect tailscale lan)
+    local d=1
+    [[ "$default" == tailscale ]] && d=2
+    [[ "$default" == lan ]] && d=3
+    setup_note "1) Connect: works from any network, nothing to open on your router. Free for one machine."
+    setup_note "2) Tailscale: your own private network, if you already use it."
+    setup_note "3) Same Wi-Fi only."
+    read -p "  Choose [$d]: " -r n
+    n="${n:-$d}"
+    if [[ ! "$n" =~ ^[123]$ ]]; then
+        log_warn "Not one of 1, 2 or 3: using $d"
+        n="$d"
+    fi
+    SETUP_VIA="${vias[$((n - 1))]}"
+}
+
+setup_connect() {
+    local net="$1"
+    if [[ -z "$(echo "$net" | json_field connect.hostname)" && "$(echo "$net" | json_field connect.enrolled)" != true ]]; then
+        if [[ "$SETUP_YES" == 1 ]] || ! is_interactive; then
+            setup_note "Connect needs a link code: run 'agent-os connect' and paste it."
+            return 0
+        fi
+        setup_note "Connect needs a free account and a link code."
+        if setup_yn "Open the sign-up page?" y; then
+            open_url "https://runagentos.com/sign-in?mode=sign-up" || true
+        fi
+        # The connect command asks for the code itself: it never passes
+        # through this script.
+        aos_tsx lib/connect/cli.ts || return 0
+    elif [[ "$(echo "$net" | json_field connect.state)" == off ]]; then
+        aos_tsx lib/connect/cli.ts --on || return 0
+    else
+        setup_done "Connect is linked"
+    fi
+    local i state
+    printf "  Connecting"
+    for ((i = 0; i < 60; i++)); do
+        state=$(setup_api /api/devices/network | json_field connect.state)
+        [[ "$state" == up ]] && break
+        [[ "$state" == denied || "$state" == refused ]] && break
+        printf "."
+        sleep 1
+    done
+    echo ""
+}
+
+setup_lan() {
+    local net="$1"
+    if [[ "$(echo "$net" | json_field lan.on)" == true ]]; then
+        setup_done "Devices on this Wi-Fi can connect"
+        return 0
+    fi
+    setup_note "Use this on networks you trust: Wi-Fi traffic to AgentOS isn't encrypted."
+    if setup_yn "Allow paired devices on this Wi-Fi?" y; then
+        if curl -fsS --max-time 5 -X PUT -H "Content-Type: application/json" \
+            -d '{"lan":true}' "http://127.0.0.1:$PORT/api/devices/network" > /dev/null 2>&1; then
+            setup_ok "Devices on this Wi-Fi can connect"
+        else
+            log_warn "Couldn't turn it on: do it in Settings → Devices & access"
+        fi
+    fi
+}
+
+setup_route() {
+    setup_title "3. How other devices reach this machine"
+    local net
+    net=$(setup_api /api/devices/network) || net="{}"
+    setup_choose_via "$net"
+    case "$SETUP_VIA" in
+        connect) setup_connect "$net" ;;
+        tailscale) setup_note "AgentOS never changes Tailscale: the check below says what it needs." ;;
+        lan) setup_lan "$net" ;;
+    esac
+}
+
+setup_check() {
+    setup_title "4. Check"
+    local tries=0 code
+    while :; do
+        code=0
+        aos_tsx lib/reach/cli.ts "$PORT" --via "$SETUP_VIA" || code=$?
+        [[ "$code" -lt 2 ]] && return 0
+        tries=$((tries + 1))
+        if [[ "$tries" -ge 3 ]] || ! setup_yn "Fixed it? Check again?" y n; then
+            echo ""
+            echo "  Run 'agent-os setup' again once it's fixed; finished steps are skipped."
+            return 1
+        fi
+    done
+}
+
+setup_phone() {
+    setup_title "5. Your phone"
+    if [[ "$SETUP_PAIR" == 1 ]] && setup_yn "Add your phone now?" y n; then
+        node "$SCRIPT_DIR/pair.mjs" "$PORT"
+    else
+        setup_note "Add one any time: agent-os pair"
+    fi
+}
+
+cmd_setup() {
+    while [[ $# -gt 0 ]]; do
+        case "$1" in
+            --via)
+                if [[ $# -lt 2 ]]; then
+                    log_error "--via takes connect, tailscale or lan"
+                    exit 2
+                fi
+                SETUP_VIA="$2"
+                shift
+                ;;
+            --via=*) SETUP_VIA="${1#--via=}" ;;
+            --yes | -y) SETUP_YES=1 ;;
+            --no-service) SETUP_SERVICE=0 ;;
+            --no-pair) SETUP_PAIR=0 ;;
+            *)
+                log_error "Unknown option: $1"
+                echo "Usage: agent-os setup [--via connect|tailscale|lan] [--yes] [--no-service] [--no-pair]"
+                exit 2
+                ;;
+        esac
+        shift
+    done
+    if [[ -n "$SETUP_VIA" && ! "$SETUP_VIA" =~ ^(connect|tailscale|lan)$ ]]; then
+        log_error "--via takes connect, tailscale or lan"
+        exit 2
+    fi
+
+    echo ""
+    echo -e "${BOLD}AgentOS setup${NC} (safe to run again: finished steps are skipped)"
+    setup_install
+    setup_service
+    setup_route
+    local ok=0
+    setup_check || ok=1
+    [[ "$ok" == 0 ]] && setup_phone
+    echo ""
+    echo "Check again any time: agent-os check"
+    return "$ok"
+}