@superclawd-ai/fda 0.1.0 → 0.1.1

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "@superclawd-ai/fda",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "private": false,
-  "description": "SuperClawd FDA \u2014 a forward deployed agent for your team: a Slack-driven AI developer that runs on its own machine with your SuperClawd workspace.",
+  "description": "SuperClawd FDA — a forward deployed agent for your team: a Slack-driven AI developer that runs on its own machine with your SuperClawd workspace.",
   "author": "SuperClawd <support@superclawd.com>",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://superclawd.com",
   "repository": {
     "type": "git",
-    "url": "https://github.com/superclawd-ai/superclawd"
+    "url": "git+https://github.com/superclawd-ai/superclawd.git"
   },
   "keywords": [
     "superclawd",
@@ -38,6 +38,7 @@
     "dev:api": "FDA_HOME=.fda-dev tsx watch server/index.ts",
     "dev:web": "vite",
     "build": "node build.mjs",
+    "prepublishOnly": "npm run build",
     "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.app.json",
     "test": "tsx test/run-all.ts",
     "lint": "eslint 'server/**/*.ts' 'src/**/*.{ts,tsx}'",

package/scripts/install.sh

@@ -1,109 +1,249 @@
 #!/usr/bin/env bash
-# SuperClawd FDA machine installer (Ubuntu 24.04+). Run as the operator user, NOT root:
-#   curl -fsSLO https://superclawd.com/fda/install.sh && bash install.sh [--with-browser]
-# It uses sudo only for system packages and the systemd unit. Safe to re-run (idempotent).
+# SuperClawd FDA one-run machine bootstrap (Ubuntu 24.04+). Takes a fresh VM to a ready FDA machine:
+# system packages, bubblewrap, Node.js (nvm), the GitHub CLI, Tailscale, Claude Code, the `superclawd`
+# CLI + `@superclawd-ai/fda`, the systemd service, and optionally Homebrew and the browser. Only the
+# logins and tokens are left at the end (it prints them).
+#
+# Run as the operator user, NOT root. It uses sudo only for system packages, Tailscale and the unit.
+# Safe to re-run: every step checks first and skips what's already there.
+#
+#   bash install.sh [options]
+#
+#   --with-browser          also install the optional browser (Playwright MCP + Chromium)
+#   --with-homebrew         also install Homebrew (Linuxbrew); nothing here needs it
+#   --node nvm|system       install Node this way even if one is found (default: keep a suitable
+#                           Node 22.13+, otherwise nvm)
+#   --no-tailscale          skip Tailscale
+#   --no-service            skip the systemd unit (e.g. containers, or to run in the foreground)
+#   --git-name <name>       set the commit identity, if git doesn't have one yet
+#   --git-email <email>
+#   --from-dir <dir>        dev: install packed tarballs (superclawd-*.tgz, superclawd-ai-fda-*.tgz)
+#
+# Environment: TS_AUTHKEY (joins the tailnet without a browser login; never printed),
+# SUPERCLAWD_VERSION / FDA_VERSION (default: latest).
 set -euo pipefail
 
+# Pinned versions (bumped together with the setup guide's dependency table).
+NODE_MAJOR=22
+NVM_VERSION="v0.40.8"
+
+say() { printf '%s\n' "$*"; }
+step() { printf '\n→ %s\n' "$*"; }
+ok() { printf '  ✓ %s\n' "$*"; }
+skip() { printf '  · %s\n' "$*"; }
+warn() { printf '  ! %s\n' "$*" >&2; }
+die() { printf '✗ %s\n' "$*" >&2; exit 1; }
+have() { command -v "$1" >/dev/null 2>&1; }
+# Run quietly; show the captured output only if it fails.
+quiet() {
+  local log rc=0
+  log="$(mktemp)"
+  "$@" >"$log" 2>&1 || rc=$?
+  [ "$rc" -eq 0 ] || cat "$log" >&2
+  rm -f "$log"
+  return "$rc"
+}
+
+node_ok() {
+  have node && node -e 'const [a,b]=process.versions.node.split(".").map(Number); process.exit(a>22||(a===22&&b>=13)?0:1)' 2>/dev/null
+}
+
+# nvm isn't written for `set -eu` (it returns non-zero and reads unset variables), so strict mode
+# is off only while it runs.
+load_nvm() {
+  export NVM_DIR="${NVM_DIR:-$HOME/.nvm}"
+  [ -s "$NVM_DIR/nvm.sh" ] || return 0
+  set +eu
+  # shellcheck disable=SC1091
+  . "$NVM_DIR/nvm.sh"
+  set -eu
+}
+nvm_run() {
+  local rc=0
+  set +eu
+  quiet nvm "$@" || rc=$?
+  set -eu
+  return "$rc"
+}
+
+# `npm i -g` needs sudo only when the global prefix isn't ours (system Node).
+npm_g() {
+  if [ -w "$(npm prefix -g)" ]; then npm i -g --no-fund --no-audit "$@"; else sudo npm i -g --no-fund --no-audit "$@"; fi
+}
+
 main() {
-  # Pinned versions (bumped together with the setup guide's dependency table).
-  local NODE_MAJOR=22
-  local SUPERCLAWD_VERSION="${SUPERCLAWD_VERSION:-latest}"
-  local FDA_VERSION="${FDA_VERSION:-latest}"
-  local PLAYWRIGHT_MCP_VERSION="0.0.83"
-  local WITH_BROWSER=0
-  local FROM_DIR=""
+  local WITH_BROWSER=0 WITH_BREW=0 NODE_VIA="" TAILSCALE=1 SERVICE=1 FROM_DIR="" GIT_NAME="" GIT_EMAIL=""
+  local SUPERCLAWD_VERSION="${SUPERCLAWD_VERSION:-latest}" FDA_VERSION="${FDA_VERSION:-latest}"
 
   while [ $# -gt 0 ]; do
     case "$1" in
       --with-browser) WITH_BROWSER=1 ;;
-      --from-dir) FROM_DIR="$2"; shift ;; # dev: install packed tarballs (superclawd-*.tgz, superclawd-ai-fda-*.tgz)
-      -h|--help) echo "Usage: bash install.sh [--with-browser] [--from-dir <dir-with-tgz>]"; return 0 ;;
-      *) echo "Unknown option: $1" >&2; return 64 ;;
+      --with-homebrew) WITH_BREW=1 ;;
+      --node) NODE_VIA="${2:-}"; shift ;;
+      --no-tailscale) TAILSCALE=0 ;;
+      --no-service) SERVICE=0 ;;
+      --git-name) GIT_NAME="${2:-}"; shift ;;
+      --git-email) GIT_EMAIL="${2:-}"; shift ;;
+      --from-dir) FROM_DIR="${2:-}"; shift ;;
+      -h|--help) awk 'NR>1 && /^#/ {sub(/^# ?/,""); print; next} NR>1 {exit}' "$0"; return 0 ;;
+      *) die "Unknown option: $1 (see --help)" ;;
     esac
     shift
   done
+  case "$NODE_VIA" in ""|nvm|system) ;; *) die "--node must be nvm or system" ;; esac
 
-  if [ "$(id -u)" -eq 0 ]; then
-    echo "✗ Run this as your regular user (not root). It uses sudo only where needed." >&2
-    return 1
-  fi
+  [ "$(id -u)" -ne 0 ] || die "Run this as your regular user (not root). It uses sudo only where needed."
   . /etc/os-release 2>/dev/null || true
-  if [ "${ID:-}" != "ubuntu" ]; then
-    echo "! This installer is tested on Ubuntu 24.04+; continuing on ${PRETTY_NAME:-an unknown system}." >&2
-  fi
+  [ "${ID:-}" = "ubuntu" ] || warn "Tested on Ubuntu 24.04+; continuing on ${PRETTY_NAME:-an unknown system}."
+  sudo -v || die "This needs sudo for system packages."
 
-  echo "→ System packages"
+  step "System packages (git, curl, jq, bubblewrap)"
   sudo apt-get update -qq
-  sudo apt-get install -y -qq git curl ca-certificates jq gnupg bubblewrap >/dev/null
+  sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq git curl ca-certificates jq gnupg bubblewrap >/dev/null
+  ok "installed"
 
-  if ! command -v node >/dev/null || [ "$(node -p 'process.versions.node.split(".")[0]')" -lt "$NODE_MAJOR" ] \
-     || ! node -e 'const [a,b]=process.versions.node.split(".").map(Number); process.exit(a>22||(a===22&&b>=13)?0:1)'; then
-    echo "→ Node.js $NODE_MAJOR (NodeSource)"
+  if [ "$WITH_BREW" = 1 ]; then
+    step "Homebrew"
+    if [ -x /home/linuxbrew/.linuxbrew/bin/brew ] || have brew; then
+      skip "already installed"
+    else
+      sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq build-essential procps file >/dev/null
+      NONINTERACTIVE=1 bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)" >/dev/null
+      # shellcheck disable=SC2016
+      grep -q 'linuxbrew/bin/brew shellenv' "$HOME/.bashrc" 2>/dev/null \
+        || echo 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' >>"$HOME/.bashrc"
+      ok "installed (new shells pick it up from ~/.bashrc)"
+    fi
+  fi
+
+  step "Node.js $NODE_MAJOR"
+  load_nvm
+  if [ -z "$NODE_VIA" ] && node_ok; then
+    skip "found $(node -v) at $(command -v node)"
+  elif [ "$NODE_VIA" = system ] && node_ok && [ "$(command -v node)" = /usr/bin/node ]; then
+    skip "found $(node -v) at /usr/bin/node"
+  elif [ "$NODE_VIA" != system ]; then
+    if [ ! -s "${NVM_DIR:-$HOME/.nvm}/nvm.sh" ]; then
+      curl -fsSL "https://raw.githubusercontent.com/nvm-sh/nvm/${NVM_VERSION}/install.sh" -o "$HOME/.nvm-install.sh"
+      PROFILE="$HOME/.bashrc" quiet bash "$HOME/.nvm-install.sh" || die "the nvm installer failed"
+      rm -f "$HOME/.nvm-install.sh"
+      load_nvm
+    fi
+    nvm_run install "$NODE_MAJOR" || die "nvm install $NODE_MAJOR failed"
+    nvm_run alias default "$NODE_MAJOR"
+    nvm_run use default
+    ok "$(node -v) via nvm"
+  else
     curl -fsSL "https://deb.nodesource.com/setup_${NODE_MAJOR}.x" | sudo -E bash - >/dev/null
-    sudo apt-get install -y -qq nodejs >/dev/null
+    sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq nodejs >/dev/null
+    ok "$(node -v) via NodeSource"
   fi
+  node_ok || die "Node.js 22.13+ is still missing."
 
-  if ! command -v gh >/dev/null; then
-    echo "→ GitHub CLI"
+  step "GitHub CLI"
+  if have gh; then
+    skip "already installed"
+  else
     sudo mkdir -p -m 755 /etc/apt/keyrings
     curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | sudo tee /etc/apt/keyrings/githubcli-archive-keyring.gpg >/dev/null
     sudo chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg
     echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
       | sudo tee /etc/apt/sources.list.d/github-cli.list >/dev/null
-    sudo apt-get update -qq && sudo apt-get install -y -qq gh >/dev/null
+    sudo apt-get update -qq && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq gh >/dev/null
+    ok "installed"
   fi
 
-  echo "→ SuperClawd CLI + FDA"
-  if [ -n "$FROM_DIR" ]; then
-    sudo npm i -g --no-fund --no-audit "$FROM_DIR"/superclawd-[0-9]*.tgz "$FROM_DIR"/superclawd-ai-fda-*.tgz >/dev/null
-  else
-    sudo npm i -g --no-fund --no-audit "superclawd@${SUPERCLAWD_VERSION}" "@superclawd-ai/fda@${FDA_VERSION}" >/dev/null
+  local TS_STATE="skipped"
+  if [ "$TAILSCALE" = 1 ]; then
+    step "Tailscale"
+    if have tailscale; then skip "already installed"; else curl -fsSL https://tailscale.com/install.sh | sh >/dev/null 2>&1; ok "installed"; fi
+    if tailscale status >/dev/null 2>&1; then
+      TS_STATE="up"; skip "already on a tailnet"
+    elif [ -n "${TS_AUTHKEY:-}" ]; then
+      # The key goes through a file, not argv, so it doesn't show up in `ps`.
+      local kf; kf="$(mktemp)"; chmod 600 "$kf"; printf '%s' "$TS_AUTHKEY" >"$kf"
+      if sudo tailscale up --auth-key="file:$kf" >/dev/null; then TS_STATE="up"; ok "joined the tailnet"; else warn "tailscale up failed"; TS_STATE="down"; fi
+      rm -f "$kf"
+    else
+      TS_STATE="down"; skip "not logged in yet (listed at the end)"
+    fi
   fi
 
-  if ! command -v claude >/dev/null && [ ! -x "$HOME/.local/bin/claude" ]; then
-    echo "→ Claude Code"
+  step "Claude Code"
+  if have claude || [ -x "$HOME/.local/bin/claude" ]; then
+    skip "already installed"
+  else
     curl -fsSL https://claude.ai/install.sh | bash >/dev/null
+    ok "installed"
+  fi
+  case ":$PATH:" in *":$HOME/.local/bin:"*) ;; *) export PATH="$HOME/.local/bin:$PATH" ;; esac
+
+  step "SuperClawd CLI + FDA"
+  if [ -n "$FROM_DIR" ]; then
+    npm_g "$FROM_DIR"/superclawd-[0-9]*.tgz "$FROM_DIR"/superclawd-ai-fda-*.tgz >/dev/null
+  else
+    npm_g "superclawd@${SUPERCLAWD_VERSION}" "@superclawd-ai/fda@${FDA_VERSION}" >/dev/null
   fi
+  hash -r
+  ok "superclawd $(superclawd --version 2>/dev/null | tail -1), FDA $(npm ls -g --depth=0 @superclawd-ai/fda 2>/dev/null | grep -o 'fda@[^ ]*' | cut -d@ -f2)"
 
-  mkdir -p -m 700 "$HOME/.superclawd/fda"
+  # Claude Code must not update itself under a running agent (the operator updates it on purpose).
+  mkdir -p "$HOME/.superclawd/fda" && chmod 700 "$HOME/.superclawd" "$HOME/.superclawd/fda"
   local envfile="$HOME/.superclawd/fda/env"
   if [ ! -f "$envfile" ]; then
-    printf 'DISABLE_AUTOUPDATER=1\n' > "$envfile"
+    printf 'DISABLE_AUTOUPDATER=1\n' >"$envfile"
     chmod 600 "$envfile"
   fi
 
+  step "git identity"
+  if [ -n "$GIT_NAME" ] && [ -z "$(git config --global user.name || true)" ]; then git config --global user.name "$GIT_NAME"; fi
+  if [ -n "$GIT_EMAIL" ] && [ -z "$(git config --global user.email || true)" ]; then git config --global user.email "$GIT_EMAIL"; fi
+  if [ -n "$(git config --global user.name || true)" ] && [ -n "$(git config --global user.email || true)" ]; then
+    ok "$(git config --global user.name) <$(git config --global user.email)>"
+  else
+    skip "not set yet (listed at the end)"
+  fi
+
   if [ "$WITH_BROWSER" = 1 ]; then
-    echo "→ Browser (Playwright MCP $PLAYWRIGHT_MCP_VERSION + Chromium)"
-    local bdir="$HOME/.superclawd/fda/browser"
-    mkdir -p "$bdir"
-    (cd "$bdir" && npm init -y >/dev/null && npm i --no-fund --no-audit "@playwright/mcp@${PLAYWRIGHT_MCP_VERSION}" >/dev/null)
-    local pwv
-    pwv="$(node -p "require('$bdir/node_modules/playwright/package.json').version")"
-    sudo npx -y "playwright@${pwv}" install-deps chromium >/dev/null
-    npx -y "playwright@${pwv}" install chromium >/dev/null
+    step "Browser"
+    superclawd fda browser install --yes
+  fi
+
+  if [ "$SERVICE" = 1 ]; then
+    step "Service"
+    if [ -d /run/systemd/system ]; then
+      superclawd fda service install --yes >/dev/null
+      ok "superclawd-fda installed and enabled (starts on boot)"
+      if [ "$TS_STATE" = up ]; then
+        if sudo tailscale serve --bg --https=443 http://127.0.0.1:63220 >/dev/null 2>&1; then
+          ok "admin panel on the tailnet: https://$(tailscale status --json 2>/dev/null | jq -r '.Self.DNSName' | sed 's/\.$//')"
+        else
+          warn "tailscale serve didn't work (HTTPS may be off for the tailnet); see the setup guide"
+        fi
+      fi
+    else
+      warn "no systemd here; run it in the foreground with: superclawd fda run"
+    fi
   fi
 
-  echo "→ Service"
-  local node cli tmpl
-  node="$(command -v node)"
-  cli="$(npm root -g)/@superclawd-ai/fda/dist-server/cli.mjs"
-  tmpl="$(npm root -g)/@superclawd-ai/fda/scripts/superclawd-fda.service.tmpl"
-  [ -f "$cli" ] || { echo "✗ FDA package not found at $cli" >&2; return 1; }
-  sed -e "s|__USER__|$(id -un)|g" -e "s|__HOME__|$HOME|g" -e "s|__NODE__|$node|g" -e "s|__CLI__|$cli|g" "$tmpl" \
-    | sudo tee /etc/systemd/system/superclawd-fda.service >/dev/null
-  sudo systemctl daemon-reload
-  sudo systemctl enable superclawd-fda >/dev/null
-
-  cat <<NEXT
-
-✓ Installed. Next steps (see the setup guide):
-  1. superclawd login
-  2. superclawd fda setup --workspace <your-workspace-slug>
-  3. printf '%s' "\$ANTHROPIC_API_KEY" | superclawd fda config set-key
-  4. superclawd fda start && superclawd fda doctor
-  5. Open the admin panel (tailscale serve --bg --https=443 http://127.0.0.1:63220), sign in with
-     the password from: superclawd fda credentials
-NEXT
+  step "Check"
+  superclawd fda doctor || true
+
+  say ""
+  say "✓ Machine ready. What's left is logins and tokens:"
+  local n=1
+  if [ -s "${NVM_DIR:-$HOME/.nvm}/nvm.sh" ]; then
+    say "  $n. Open a new shell (or: source ~/.bashrc) so nvm's node is on PATH"; n=$((n + 1))
+  fi
+  if [ "$TS_STATE" = down ]; then say "  $n. sudo tailscale up            # join your tailnet"; n=$((n + 1)); fi
+  if [ -z "$(git config --global user.email || true)" ]; then
+    say "  $n. git config --global user.name \"…\" && git config --global user.email \"…\""; n=$((n + 1))
+  fi
+  if ! gh auth status >/dev/null 2>&1; then say "  $n. gh auth login                 # for pull requests"; n=$((n + 1)); fi
+  say "  $n. superclawd login && superclawd fda setup"; n=$((n + 1))
+  say "  $n. superclawd fda config set-key   # your Anthropic API key, from stdin"; n=$((n + 1))
+  say "  $n. superclawd fda start && superclawd fda credentials"; n=$((n + 1))
+  say "  $n. In the admin panel: create the Slack app from the manifest, paste its tokens, set who can use it"
 }
 
 main "$@"

package/scripts/superclawd-fda.service.tmpl

@@ -11,7 +11,8 @@ Type=simple
 User=__USER__
 WorkingDirectory=__HOME__
 Environment=HOME=__HOME__
-Environment=PATH=__HOME__/.local/bin:/usr/local/bin:/usr/bin:/bin
+# Node's own bin dir comes early so nvm installs (node, npm globals like `superclawd`) are found.
+Environment=PATH=__HOME__/.local/bin:__NODE_BIN__:/usr/local/bin:/usr/bin:/bin
 Environment=NODE_ENV=production
 EnvironmentFile=-__HOME__/.superclawd/fda/env
 ExecStart=__NODE__ __CLI__ run