@songsid/agend 2.1.5 → 2.1.6-beta.2

package/dist/cli.js

@@ -1659,6 +1659,101 @@ program
     console.log("Fleet not running. Start with: agend start");
     process.exitCode = 1;
 });
+program
+    .command("setup")
+    .description("Open the guided setup page in a browser (before a fleet exists)")
+    .option("--reset", "Allow setup again after it has already been completed")
+    .option("--port <port>", "Port for the setup page (default: the health port)")
+    .option("--tunnel", "Expose the setup page through a Cloudflare quick tunnel so a phone can open it")
+    .action(async (opts) => {
+    const { clearSetupComplete, isSetupComplete } = await import("./setup-marker.js");
+    if (opts.reset) {
+        console.log(clearSetupComplete(DATA_DIR) ? "Setup marker cleared." : "No setup marker to clear.");
+    }
+    else if (isSetupComplete(DATA_DIR)) {
+        // Not keyed on fleet.yaml existing: a deleted or truncated config must not
+        // reopen a setup page that starts out reachable to whoever finds it.
+        console.error("Setup has already been completed. Use `agend setup --reset` to run it again, or edit settings from the dashboard.");
+        process.exit(1);
+    }
+    if (opts.tunnel && opts.port) {
+        // Not "ignored": a fixed port behind a tunnel is the one arrangement this
+        // whole design exists to prevent, and silently overriding the flag would
+        // leave someone believing they got the port they asked for.
+        console.error("--tunnel and --port cannot be combined: a tunnelled setup page always binds an ephemeral port.");
+        process.exit(1);
+    }
+    const { loadFleetConfig } = await import("./config.js");
+    const fleet = existsSync(FLEET_CONFIG_PATH) ? loadFleetConfig(FLEET_CONFIG_PATH) : { defaults: {}, instances: {} };
+    const { SetupHost, resolvePort, SETUP_HOST_TTL_MS } = await import("./setup-host.js");
+    // Asked before anything is created: no lock taken, no listener bound, no
+    // cloudflared spawned. Every time, because there is no configuration that
+    // makes the consequences smaller, and there is no chat channel yet to put a
+    // confirmation button in.
+    if (opts.tunnel) {
+        const { confirmPublicTunnel } = await import("./setup-tunnel-consent.js");
+        const { createInterface } = await import("node:readline/promises");
+        const consent = await confirmPublicTunnel({
+            isTTY: !!process.stdin.isTTY,
+            say: line => console.log(line),
+            ask: async (question) => {
+                const rl = createInterface({ input: process.stdin, output: process.stdout });
+                try {
+                    return await rl.question(question);
+                }
+                finally {
+                    rl.close();
+                }
+            },
+        }, Math.round(SETUP_HOST_TTL_MS / 60_000));
+        if (!consent.granted) {
+            process.exit(1);
+        }
+    }
+    // In tunnel mode this ignores `--port`, `health_port` and the default
+    // alike: the health port is what the fleet will bind later, and a tunnel
+    // that outlived this process would then be pointed at its dashboard.
+    const port = resolvePort({
+        tunnel: opts.tunnel,
+        port: opts.port === undefined ? undefined : Number(opts.port),
+        healthPort: fleet.health_port,
+    });
+    const host = new SetupHost({ dataDir: DATA_DIR, configPath: FLEET_CONFIG_PATH, port, tunnel: opts.tunnel });
+    let started;
+    try {
+        started = await host.start();
+    }
+    catch (err) {
+        console.error(err.message);
+        process.exit(1);
+    }
+    // Two things, and only the second one is a credential. The link is where
+    // the page lives — a random path so nothing finds it by looking — and the
+    // code is what proves you are the person who ran this command. Putting the
+    // credential in the link would mean a preview fetch, a shell history or a
+    // forwarded message carries the whole thing.
+    const { formatSetupCode } = await import("./setup-auth.js");
+    const pageUrl = started.publicUrl ?? `http://127.0.0.1:${started.port}${started.path}`;
+    // A tunnel was asked for and there is no public URL: say why, and say what
+    // that means, rather than printing a loopback link under a flag that
+    // promised a phone could open it.
+    if (opts.tunnel && !started.publicUrl) {
+        const { noTunnelBinaryMessage } = await import("./setup-tunnel-consent.js");
+        console.log("");
+        for (const line of noTunnelBinaryMessage())
+            console.log(line);
+    }
+    console.log(`\n  Setup page: ${pageUrl}`);
+    console.log(`  Setup code: ${formatSetupCode(started.code)}`);
+    console.log("  Open the page, type the code. Five wrong attempts closes it,");
+    console.log("  and it closes itself after 15 minutes.\n");
+    // Every way this command is asked to stop, not just Ctrl-C: a host that
+    // exits without releasing the lock leaves the next `agend start` to prove
+    // the pid is stale before it can run.
+    for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) {
+        process.on(signal, () => { void host.shutdown(false, signal.toLowerCase()).then(() => process.exit(0)); });
+    }
+});
 program
     .command("quickstart")
     .description("Guided setup for a Backend, chat channel, projects, and fleet service")
@@ -1702,6 +1797,24 @@ program
     const child = spawn(cmd, [htmlPath], { detached: true, stdio: "ignore" });
     child.unref();
 });
+program
+    .command("web-token")
+    .description("Rotate the web dashboard access token")
+    .argument("<action>", "rotate")
+    .action(async (action) => {
+    if (action !== "rotate") {
+        console.error(`Unknown action "${action}". Only "rotate" is supported.`);
+        process.exit(1);
+    }
+    const { rotateWebToken } = await import("./web-auth.js");
+    rotateWebToken(DATA_DIR);
+    // The new token is deliberately not printed: it would land in shell history
+    // and scrollback, which is what moving it out of URLs and logs was for.
+    console.log("Web token rotated.");
+    console.log("Every previously issued dashboard link and browser session is now rejected.");
+    console.log("A running fleet picks this up immediately — no restart needed.");
+    console.log("Get a new link with `agend web`, or /dashboard in your chat channel.");
+});
 program
     .command("view")
     .description("Open the read-only View dashboard in your browser")