@superclawd-ai/fda 0.0.0-stage → 0.1.1

package/package.json

@@ -1,6 +1,88 @@
 {
   "name": "@superclawd-ai/fda",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "private": false,
+  "description": "SuperClawd FDA — a forward deployed agent for your team: a Slack-driven AI developer that runs on its own machine with your SuperClawd workspace.",
+  "author": "SuperClawd <support@superclawd.com>",
+  "license": "SEE LICENSE IN LICENSE",
+  "homepage": "https://superclawd.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/superclawd-ai/superclawd.git"
+  },
+  "keywords": [
+    "superclawd",
+    "fda",
+    "claude-code",
+    "slack",
+    "ai-agent",
+    "autonomous"
+  ],
+  "engines": {
+    "node": ">=22.13"
+  },
+  "type": "module",
+  "main": "dist-server/index.mjs",
+  "bin": {
+    "superclawd-fda": "dist-server/cli.mjs"
+  },
+  "files": [
+    "dist",
+    "dist-server",
+    "scripts",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "dev": "concurrently -k -n api,web -c blue,green \"pnpm dev:api\" \"pnpm dev:web\"",
+    "dev:api": "FDA_HOME=.fda-dev tsx watch server/index.ts",
+    "dev:web": "vite",
+    "build": "node build.mjs",
+    "prepublishOnly": "npm run build",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.app.json",
+    "test": "tsx test/run-all.ts",
+    "lint": "eslint 'server/**/*.ts' 'src/**/*.{ts,tsx}'",
+    "format": "prettier --check 'server/**/*.ts' 'test/**/*.ts' 'src/**/*.{ts,tsx}'",
+    "format:fix": "prettier --write 'server/**/*.ts' 'test/**/*.ts' 'src/**/*.{ts,tsx}'"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.7.0",
+    "@slack/socket-mode": "^3.1.0",
+    "@slack/web-api": "^8.2.0",
+    "express": "^4.21.2",
+    "zod": "^3.24.2"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.1",
+    "@tanstack/react-query": "^5.90.11",
+    "@types/express": "^4.17.21",
+    "@types/node": "^22.10.0",
+    "@types/react": "^18.3.12",
+    "@types/react-dom": "^18.3.1",
+    "@typescript-eslint/eslint-plugin": "^8.44.1",
+    "@typescript-eslint/parser": "^8.44.1",
+    "@vitejs/plugin-react": "^4.3.4",
+    "autoprefixer": "^10.4.22",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "concurrently": "^9.1.0",
+    "esbuild": "^0.24.0",
+    "eslint": "^9.36.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-prettier": "^5.5.4",
+    "eslint-plugin-react-hooks": "^5.1.0",
+    "eslint-plugin-react-refresh": "^0.4.16",
+    "lucide-react": "^0.555.0",
+    "postcss": "^8.5.6",
+    "prettier": "^3.6.2",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "react-router-dom": "^7.9.6",
+    "tailwind-merge": "^3.4.0",
+    "tailwindcss": "3",
+    "tailwindcss-animate": "^1.0.7",
+    "tsx": "^4.19.2",
+    "typescript": "^5.9.2",
+    "vite": "^6.0.5"
+  }
+}

package/scripts/install.sh

@@ -0,0 +1,249 @@
+#!/usr/bin/env bash
+# SuperClawd FDA one-run machine bootstrap (Ubuntu 24.04+). Takes a fresh VM to a ready FDA machine:
+# system packages, bubblewrap, Node.js (nvm), the GitHub CLI, Tailscale, Claude Code, the `superclawd`
+# CLI + `@superclawd-ai/fda`, the systemd service, and optionally Homebrew and the browser. Only the
+# logins and tokens are left at the end (it prints them).
+#
+# Run as the operator user, NOT root. It uses sudo only for system packages, Tailscale and the unit.
+# Safe to re-run: every step checks first and skips what's already there.
+#
+#   bash install.sh [options]
+#
+#   --with-browser          also install the optional browser (Playwright MCP + Chromium)
+#   --with-homebrew         also install Homebrew (Linuxbrew); nothing here needs it
+#   --node nvm|system       install Node this way even if one is found (default: keep a suitable
+#                           Node 22.13+, otherwise nvm)
+#   --no-tailscale          skip Tailscale
+#   --no-service            skip the systemd unit (e.g. containers, or to run in the foreground)
+#   --git-name <name>       set the commit identity, if git doesn't have one yet
+#   --git-email <email>
+#   --from-dir <dir>        dev: install packed tarballs (superclawd-*.tgz, superclawd-ai-fda-*.tgz)
+#
+# Environment: TS_AUTHKEY (joins the tailnet without a browser login; never printed),
+# SUPERCLAWD_VERSION / FDA_VERSION (default: latest).
+set -euo pipefail
+
+# Pinned versions (bumped together with the setup guide's dependency table).
+NODE_MAJOR=22
+NVM_VERSION="v0.40.8"
+
+say() { printf '%s\n' "$*"; }
+step() { printf '\n→ %s\n' "$*"; }
+ok() { printf '  ✓ %s\n' "$*"; }
+skip() { printf '  · %s\n' "$*"; }
+warn() { printf '  ! %s\n' "$*" >&2; }
+die() { printf '✗ %s\n' "$*" >&2; exit 1; }
+have() { command -v "$1" >/dev/null 2>&1; }
+# Run quietly; show the captured output only if it fails.
+quiet() {
+  local log rc=0
+  log="$(mktemp)"
+  "$@" >"$log" 2>&1 || rc=$?
+  [ "$rc" -eq 0 ] || cat "$log" >&2
+  rm -f "$log"
+  return "$rc"
+}
+
+node_ok() {
+  have node && node -e 'const [a,b]=process.versions.node.split(".").map(Number); process.exit(a>22||(a===22&&b>=13)?0:1)' 2>/dev/null
+}
+
+# nvm isn't written for `set -eu` (it returns non-zero and reads unset variables), so strict mode
+# is off only while it runs.
+load_nvm() {
+  export NVM_DIR="${NVM_DIR:-$HOME/.nvm}"
+  [ -s "$NVM_DIR/nvm.sh" ] || return 0
+  set +eu
+  # shellcheck disable=SC1091
+  . "$NVM_DIR/nvm.sh"
+  set -eu
+}
+nvm_run() {
+  local rc=0
+  set +eu
+  quiet nvm "$@" || rc=$?
+  set -eu
+  return "$rc"
+}
+
+# `npm i -g` needs sudo only when the global prefix isn't ours (system Node).
+npm_g() {
+  if [ -w "$(npm prefix -g)" ]; then npm i -g --no-fund --no-audit "$@"; else sudo npm i -g --no-fund --no-audit "$@"; fi
+}
+
+main() {
+  local WITH_BROWSER=0 WITH_BREW=0 NODE_VIA="" TAILSCALE=1 SERVICE=1 FROM_DIR="" GIT_NAME="" GIT_EMAIL=""
+  local SUPERCLAWD_VERSION="${SUPERCLAWD_VERSION:-latest}" FDA_VERSION="${FDA_VERSION:-latest}"
+
+  while [ $# -gt 0 ]; do
+    case "$1" in
+      --with-browser) WITH_BROWSER=1 ;;
+      --with-homebrew) WITH_BREW=1 ;;
+      --node) NODE_VIA="${2:-}"; shift ;;
+      --no-tailscale) TAILSCALE=0 ;;
+      --no-service) SERVICE=0 ;;
+      --git-name) GIT_NAME="${2:-}"; shift ;;
+      --git-email) GIT_EMAIL="${2:-}"; shift ;;
+      --from-dir) FROM_DIR="${2:-}"; shift ;;
+      -h|--help) awk 'NR>1 && /^#/ {sub(/^# ?/,""); print; next} NR>1 {exit}' "$0"; return 0 ;;
+      *) die "Unknown option: $1 (see --help)" ;;
+    esac
+    shift
+  done
+  case "$NODE_VIA" in ""|nvm|system) ;; *) die "--node must be nvm or system" ;; esac
+
+  [ "$(id -u)" -ne 0 ] || die "Run this as your regular user (not root). It uses sudo only where needed."
+  . /etc/os-release 2>/dev/null || true
+  [ "${ID:-}" = "ubuntu" ] || warn "Tested on Ubuntu 24.04+; continuing on ${PRETTY_NAME:-an unknown system}."
+  sudo -v || die "This needs sudo for system packages."
+
+  step "System packages (git, curl, jq, bubblewrap)"
+  sudo apt-get update -qq
+  sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq git curl ca-certificates jq gnupg bubblewrap >/dev/null
+  ok "installed"
+
+  if [ "$WITH_BREW" = 1 ]; then
+    step "Homebrew"
+    if [ -x /home/linuxbrew/.linuxbrew/bin/brew ] || have brew; then
+      skip "already installed"
+    else
+      sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq build-essential procps file >/dev/null
+      NONINTERACTIVE=1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)" >/dev/null
+      # shellcheck disable=SC2016
+      grep -q 'linuxbrew/bin/brew shellenv' "$HOME/.bashrc" 2>/dev/null \
+        || echo 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' >>"$HOME/.bashrc"
+      ok "installed (new shells pick it up from ~/.bashrc)"
+    fi
+  fi
+
+  step "Node.js $NODE_MAJOR"
+  load_nvm
+  if [ -z "$NODE_VIA" ] && node_ok; then
+    skip "found $(node -v) at $(command -v node)"
+  elif [ "$NODE_VIA" = system ] && node_ok && [ "$(command -v node)" = /usr/bin/node ]; then
+    skip "found $(node -v) at /usr/bin/node"
+  elif [ "$NODE_VIA" != system ]; then
+    if [ ! -s "${NVM_DIR:-$HOME/.nvm}/nvm.sh" ]; then
+      curl -fsSL "https://raw.githubusercontent.com/nvm-sh/nvm/${NVM_VERSION}/install.sh" -o "$HOME/.nvm-install.sh"
+      PROFILE="$HOME/.bashrc" quiet bash "$HOME/.nvm-install.sh" || die "the nvm installer failed"
+      rm -f "$HOME/.nvm-install.sh"
+      load_nvm
+    fi
+    nvm_run install "$NODE_MAJOR" || die "nvm install $NODE_MAJOR failed"
+    nvm_run alias default "$NODE_MAJOR"
+    nvm_run use default
+    ok "$(node -v) via nvm"
+  else
+    curl -fsSL "https://deb.nodesource.com/setup_${NODE_MAJOR}.x" | sudo -E bash - >/dev/null
+    sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq nodejs >/dev/null
+    ok "$(node -v) via NodeSource"
+  fi
+  node_ok || die "Node.js 22.13+ is still missing."
+
+  step "GitHub CLI"
+  if have gh; then
+    skip "already installed"
+  else
+    sudo mkdir -p -m 755 /etc/apt/keyrings
+    curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg >/dev/null
+    sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg
+    echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+      | sudo tee /etc/apt/sources.list.d/github-cli.list >/dev/null
+    sudo apt-get update -qq && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq gh >/dev/null
+    ok "installed"
+  fi
+
+  local TS_STATE="skipped"
+  if [ "$TAILSCALE" = 1 ]; then
+    step "Tailscale"
+    if have tailscale; then skip "already installed"; else curl -fsSL https://tailscale.com/install.sh | sh >/dev/null 2>&1; ok "installed"; fi
+    if tailscale status >/dev/null 2>&1; then
+      TS_STATE="up"; skip "already on a tailnet"
+    elif [ -n "${TS_AUTHKEY:-}" ]; then
+      # The key goes through a file, not argv, so it doesn't show up in `ps`.
+      local kf; kf="$(mktemp)"; chmod 600 "$kf"; printf '%s' "$TS_AUTHKEY" >"$kf"
+      if sudo tailscale up --auth-key="file:$kf" >/dev/null; then TS_STATE="up"; ok "joined the tailnet"; else warn "tailscale up failed"; TS_STATE="down"; fi
+      rm -f "$kf"
+    else
+      TS_STATE="down"; skip "not logged in yet (listed at the end)"
+    fi
+  fi
+
+  step "Claude Code"
+  if have claude || [ -x "$HOME/.local/bin/claude" ]; then
+    skip "already installed"
+  else
+    curl -fsSL https://claude.ai/install.sh | bash >/dev/null
+    ok "installed"
+  fi
+  case ":$PATH:" in *":$HOME/.local/bin:"*) ;; *) export PATH="$HOME/.local/bin:$PATH" ;; esac
+
+  step "SuperClawd CLI + FDA"
+  if [ -n "$FROM_DIR" ]; then
+    npm_g "$FROM_DIR"/superclawd-[0-9]*.tgz "$FROM_DIR"/superclawd-ai-fda-*.tgz >/dev/null
+  else
+    npm_g "superclawd@${SUPERCLAWD_VERSION}" "@superclawd-ai/fda@${FDA_VERSION}" >/dev/null
+  fi
+  hash -r
+  ok "superclawd $(superclawd --version 2>/dev/null | tail -1), FDA $(npm ls -g --depth=0 @superclawd-ai/fda 2>/dev/null | grep -o 'fda@[^ ]*' | cut -d@ -f2)"
+
+  # Claude Code must not update itself under a running agent (the operator updates it on purpose).
+  mkdir -p "$HOME/.superclawd/fda" && chmod 700 "$HOME/.superclawd" "$HOME/.superclawd/fda"
+  local envfile="$HOME/.superclawd/fda/env"
+  if [ ! -f "$envfile" ]; then
+    printf 'DISABLE_AUTOUPDATER=1\n' >"$envfile"
+    chmod 600 "$envfile"
+  fi
+
+  step "git identity"
+  if [ -n "$GIT_NAME" ] && [ -z "$(git config --global user.name || true)" ]; then git config --global user.name "$GIT_NAME"; fi
+  if [ -n "$GIT_EMAIL" ] && [ -z "$(git config --global user.email || true)" ]; then git config --global user.email "$GIT_EMAIL"; fi
+  if [ -n "$(git config --global user.name || true)" ] && [ -n "$(git config --global user.email || true)" ]; then
+    ok "$(git config --global user.name) <$(git config --global user.email)>"
+  else
+    skip "not set yet (listed at the end)"
+  fi
+
+  if [ "$WITH_BROWSER" = 1 ]; then
+    step "Browser"
+    superclawd fda browser install --yes
+  fi
+
+  if [ "$SERVICE" = 1 ]; then
+    step "Service"
+    if [ -d /run/systemd/system ]; then
+      superclawd fda service install --yes >/dev/null
+      ok "superclawd-fda installed and enabled (starts on boot)"
+      if [ "$TS_STATE" = up ]; then
+        if sudo tailscale serve --bg --https=443 http://127.0.0.1:63220 >/dev/null 2>&1; then
+          ok "admin panel on the tailnet: https://$(tailscale status --json 2>/dev/null | jq -r '.Self.DNSName' | sed 's/\.$//')"
+        else
+          warn "tailscale serve didn't work (HTTPS may be off for the tailnet); see the setup guide"
+        fi
+      fi
+    else
+      warn "no systemd here; run it in the foreground with: superclawd fda run"
+    fi
+  fi
+
+  step "Check"
+  superclawd fda doctor || true
+
+  say ""
+  say "✓ Machine ready. What's left is logins and tokens:"
+  local n=1
+  if [ -s "${NVM_DIR:-$HOME/.nvm}/nvm.sh" ]; then
+    say "  $n. Open a new shell (or: source ~/.bashrc) so nvm's node is on PATH"; n=$((n + 1))
+  fi
+  if [ "$TS_STATE" = down ]; then say "  $n. sudo tailscale up            # join your tailnet"; n=$((n + 1)); fi
+  if [ -z "$(git config --global user.email || true)" ]; then
+    say "  $n. git config --global user.name \"…\" && git config --global user.email \"…\""; n=$((n + 1))
+  fi
+  if ! gh auth status >/dev/null 2>&1; then say "  $n. gh auth login                 # for pull requests"; n=$((n + 1)); fi
+  say "  $n. superclawd login && superclawd fda setup"; n=$((n + 1))
+  say "  $n. superclawd fda config set-key   # your Anthropic API key, from stdin"; n=$((n + 1))
+  say "  $n. superclawd fda start && superclawd fda credentials"; n=$((n + 1))
+  say "  $n. In the admin panel: create the Slack app from the manifest, paste its tokens, set who can use it"
+}
+
+main "$@"

package/scripts/superclawd-fda.service.tmpl

@@ -0,0 +1,29 @@
+# SuperClawd FDA daemon. Installed by install.sh; placeholders are filled in at install time.
+[Unit]
+Description=SuperClawd FDA (Slack-driven AI engineer)
+Wants=network-online.target
+After=network-online.target tailscaled.service
+StartLimitIntervalSec=300
+StartLimitBurst=5
+
+[Service]
+Type=simple
+User=__USER__
+WorkingDirectory=__HOME__
+Environment=HOME=__HOME__
+# Node's own bin dir comes early so nvm installs (node, npm globals like `superclawd`) are found.
+Environment=PATH=__HOME__/.local/bin:__NODE_BIN__:/usr/local/bin:/usr/bin:/bin
+Environment=NODE_ENV=production
+EnvironmentFile=-__HOME__/.superclawd/fda/env
+ExecStart=__NODE__ __CLI__ run
+Restart=on-failure
+RestartSec=5
+# 78 = configuration problem a human must fix (don't restart-loop on it).
+RestartPreventExitStatus=78
+# SIGTERM to the daemon (it stops the running turn gracefully), then SIGKILL for the rest of the cgroup.
+KillMode=mixed
+TimeoutStopSec=45
+NoNewPrivileges=true
+
+[Install]
+WantedBy=multi-user.target