agent-recon 1.0.1

package/installer/upgrade.js

@@ -0,0 +1,289 @@
+// Copyright 2026 PNW Great Loop LLC. All rights reserved.
+// Licensed under the Agent Recon™ Commercial License — see LICENSE-COMMERCIAL.
+
+'use strict';
+
+/**
+ * Agent Recon Installer — Upgrade Flow (Task 8.3)
+ *
+ * Reads manifest → backup → stop service → update hooks → re-merge settings →
+ * update service → restart → verify → update manifest.
+ */
+
+const fs   = require('fs');
+const path = require('path');
+const { execSync } = require('child_process');
+const ui       = require('./ui');
+const manifest = require('./manifest');
+const hooks    = require('./steps/hooks');
+const verify   = require('./steps/verify');
+const platform = require('../server/platform');
+const crypto   = require('crypto');
+
+/**
+ * Run the upgrade flow.
+ * @param {object} env — from detect.detectEnv()
+ * @param {object} opts — {version, force}
+ */
+async function upgrade(env, opts) {
+  const newVersion = opts.version || '1.0.0';
+  const force = opts.force || false;
+
+  ui.banner(newVersion);
+  ui.step(1, 6, 'Reading existing installation');
+
+  // ── Read manifest ──────────────────────────────────────────────────────
+  const m = manifest.readManifest();
+  if (!m) {
+    if (env.existingInstall && !env.existingInstall.manifestPath) {
+      ui.warn('Existing installation detected but no manifest found.');
+      ui.info('Run "node cli.js install" for a fresh install that creates a manifest.');
+    } else {
+      ui.error('No existing Agent Recon installation found.');
+      ui.info('Run "node cli.js install" for a fresh installation.');
+    }
+    return;
+  }
+
+  const currentVersion = m.version || 'unknown';
+  ui.ok(`Found installation: v${currentVersion} at ${m.installDir || 'unknown'}`);
+
+  if (currentVersion === newVersion && !force) {
+    ui.ok(`Already at version ${newVersion}. Use --force to re-apply.`);
+    return;
+  }
+
+  ui.info(`Upgrading: v${currentVersion} → v${newVersion}`);
+
+  // ── Backup ─────────────────────────────────────────────────────────────
+  ui.step(2, 6, 'Creating backups');
+  const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+  const backups = [];
+
+  // Backup settings.json
+  const settingsPath = m.claudeSettingsPath || env.claudeSettingsPath;
+  if (settingsPath && fs.existsSync(settingsPath)) {
+    const backupPath = settingsPath + `.bak_${timestamp}`;
+    fs.copyFileSync(settingsPath, backupPath);
+    backups.push(backupPath);
+    ui.ok(`Backed up settings.json → ${path.basename(backupPath)}`);
+  }
+
+  // Backup hook script
+  const hookDest = m.hookScript && m.hookScript.destination;
+  if (hookDest && fs.existsSync(hookDest)) {
+    const backupPath = hookDest + `.bak_${timestamp}`;
+    fs.copyFileSync(hookDest, backupPath);
+    backups.push(backupPath);
+    ui.ok(`Backed up hook script → ${path.basename(backupPath)}`);
+  }
+
+  // ── Stop service ───────────────────────────────────────────────────────
+  ui.step(3, 6, 'Stopping service');
+  if (m.service && m.service.type && m.service.type !== 'none') {
+    try {
+      _stopService(m.service, env.os);
+      ui.ok(`Stopped ${m.service.type} service`);
+    } catch (err) {
+      ui.warn(`Could not stop service: ${err.message}`);
+    }
+  } else {
+    ui.info('No service registered — skipping');
+  }
+
+  // ── Update hooks ───────────────────────────────────────────────────────
+  ui.step(4, 6, 'Updating hooks');
+
+  // Determine install directory: use manifest value or detect from current repo
+  const installDir = m.installDir || path.resolve(__dirname, '..');
+
+  const ctx = {
+    envReport: env,
+    installDir,
+    version: newVersion,
+    results: {},
+  };
+
+  try {
+    const hooksResult = await hooks.run(ctx);
+    if (!hooksResult.success) {
+      ui.error(`Hook update failed: ${hooksResult.error}`);
+      ui.warn(`Backups preserved at: ${backups.join(', ')}`);
+      return;
+    }
+    ctx.results.hooks = hooksResult;
+    ui.ok('Hooks updated');
+  } catch (err) {
+    ui.error(`Hook update failed: ${err.message}`);
+    ui.warn(`Backups preserved at: ${backups.join(', ')}`);
+    return;
+  }
+
+  // ── Update service template ────────────────────────────────────────────
+  ui.step(5, 6, 'Updating service');
+  if (m.service && m.service.type && m.service.type !== 'none') {
+    try {
+      _updateService(m.service, installDir, env);
+      ui.ok(`Updated ${m.service.type} service configuration`);
+    } catch (err) {
+      ui.warn(`Service update failed: ${err.message}`);
+    }
+
+    // Restart service
+    try {
+      _startService(m.service, env.os);
+      ui.ok(`Restarted ${m.service.type} service`);
+    } catch (err) {
+      ui.warn(`Could not restart service: ${err.message}`);
+    }
+  } else {
+    ui.info('No service registered — skipping');
+  }
+
+  // ── TLS (if --tls flag) ────────────────────────────────────────────────
+  if (opts.tls) {
+    ui.info('Configuring mkcert TLS...');
+    try {
+      const r = await fetch('http://localhost:3131/api/settings', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ key: 'tls_enabled', value: 'true' }),
+      });
+      if (r.ok) {
+        await fetch('http://localhost:3131/api/settings', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ key: 'tls_mode', value: 'mkcert' }),
+        });
+        ui.ok('TLS enabled with mkcert mode. Restart the server to activate HTTPS.');
+      } else {
+        ui.warn('Could not configure TLS — server returned ' + r.status);
+      }
+    } catch (err) {
+      ui.warn(`Could not configure TLS: ${err.message}. Configure manually in Settings.`);
+    }
+
+    // Update manifest TLS block
+    m.tls = { enabled: true, mode: 'mkcert', certPath: null, keyPath: null };
+  }
+
+  // ── Verify ─────────────────────────────────────────────────────────────
+  ui.step(6, 6, 'Verification');
+  try {
+    const verifyResult = await verify.run(ctx);
+    if (verifyResult.success) {
+      ui.ok('Server verified and running');
+    } else {
+      ui.warn('Server verification did not complete');
+    }
+  } catch (err) {
+    ui.warn(`Verification failed: ${err.message}`);
+  }
+
+  // ── Update manifest ────────────────────────────────────────────────────
+  let hookSha256 = null;
+  if (ctx.results.hooks && ctx.results.hooks.hookScriptDest) {
+    try {
+      const buf = fs.readFileSync(ctx.results.hooks.hookScriptDest);
+      hookSha256 = crypto.createHash('sha256').update(buf).digest('hex');
+    } catch { /* best effort */ }
+  }
+
+  // Ensure installation_id exists (generate if upgrading from pre-v2 manifest)
+  if (!m.installation_id) {
+    m.installation_id = crypto.randomUUID();
+    ui.ok(`Generated install ID: ${m.installation_id}`);
+  }
+
+  m.version = newVersion;
+  m.updatedAt = new Date().toISOString();
+  m.installDir = installDir;
+  if (ctx.results.hooks) {
+    m.hookScript = {
+      source: m.hookScript ? m.hookScript.source : null,
+      destination: ctx.results.hooks.hookScriptDest,
+      sha256: hookSha256,
+    };
+    m.hookCommand = ctx.results.hooks.hookCommand;
+    m.hooksRegistered = ctx.results.hooks.hooksAdded;
+  }
+
+  manifest.writeManifest(m);
+  ui.ok('Manifest updated');
+
+  // ── Summary ────────────────────────────────────────────────────────────
+  console.log('');
+  ui.divider();
+  ui.ok(`Upgraded to Agent Recon v${newVersion}`);
+  ui.divider();
+  if (backups.length) {
+    ui.info(`Backups: ${backups.map(b => path.basename(b)).join(', ')}`);
+  }
+  ui.divider();
+}
+
+// ── Service helpers ─────────────────────────────────────────────────────────
+
+function _stopService(svc, osType) {
+  switch (svc.type) {
+    case 'systemd':
+      execSync('systemctl --user stop agent-recon', { timeout: 10000, stdio: 'pipe' });
+      break;
+    case 'launchd':
+      if (svc.path && fs.existsSync(svc.path)) {
+        execSync(`launchctl unload "${svc.path}"`, { timeout: 10000, stdio: 'pipe' });
+      }
+      break;
+    case 'nssm': {
+      const ps = osType === 'wsl'
+        ? '/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe'
+        : 'powershell.exe';
+      execSync(`"${ps}" -NoProfile -Command "Stop-Service AgentRecon -ErrorAction SilentlyContinue"`,
+        { timeout: 10000, stdio: 'pipe', shell: true });
+      break;
+    }
+  }
+}
+
+function _startService(svc, osType) {
+  switch (svc.type) {
+    case 'systemd':
+      execSync('systemctl --user start agent-recon', { timeout: 10000, stdio: 'pipe' });
+      break;
+    case 'launchd':
+      if (svc.path && fs.existsSync(svc.path)) {
+        execSync(`launchctl load "${svc.path}"`, { timeout: 10000, stdio: 'pipe' });
+      }
+      break;
+    case 'nssm': {
+      const ps = osType === 'wsl'
+        ? '/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe'
+        : 'powershell.exe';
+      execSync(`"${ps}" -NoProfile -Command "Start-Service AgentRecon -ErrorAction SilentlyContinue"`,
+        { timeout: 10000, stdio: 'pipe', shell: true });
+      break;
+    }
+  }
+}
+
+function _updateService(svc, installDir, env) {
+  if (svc.type === 'systemd' && svc.path) {
+    const templatePath = path.join(installDir, 'service', 'agent-recon.service');
+    if (fs.existsSync(templatePath)) {
+      let content = fs.readFileSync(templatePath, 'utf8');
+      content = content.replace(/\{\{INSTALL_DIR\}\}/g, installDir);
+      fs.writeFileSync(svc.path, content, 'utf8');
+      execSync('systemctl --user daemon-reload', { timeout: 10000, stdio: 'pipe' });
+    }
+  } else if (svc.type === 'launchd' && svc.path) {
+    const templatePath = path.join(installDir, 'service', 'com.agent-recon.server.plist');
+    if (fs.existsSync(templatePath)) {
+      let content = fs.readFileSync(templatePath, 'utf8');
+      content = content.replace(/\{\{INSTALL_DIR\}\}/g, installDir);
+      content = content.replace(/\{\{HOME\}\}/g, env.home);
+      fs.writeFileSync(svc.path, content, 'utf8');
+    }
+  }
+}
+
+module.exports = upgrade;

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "agent-recon",
+  "version": "1.0.1",
+  "description": "Agent Recon™ — real-time observability dashboard for AI coding agents",
+  "license": "SEE LICENSE IN LICENSE",
+  "bin": {
+    "agent-recon": "./installer/cli.js"
+  },
+  "main": "server/start.js",
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "os": [
+    "darwin",
+    "linux",
+    "win32"
+  ],
+  "scripts": {
+    "build": "node build.js",
+    "start": "node server/start.js",
+    "test": "cd server && npm test",
+    "test:unit": "cd server && npm run test:unit",
+    "test:fe": "cd server && npm run test:fe",
+    "prepare": "node scripts/install-hooks.js",
+    "prepublishOnly": "bash scripts/release-build.sh",
+    "postinstall": "node -e \"try{require('child_process').execSync('cd server && npm rebuild better-sqlite3',{stdio:'ignore'})}catch(e){}\""
+  },
+  "dependencies": {
+    "@inquirer/prompts": "^7.0.0",
+    "@litko/yara-x": "^0.5.0",
+    "better-sqlite3": "^12.8.0",
+    "express": "^5.2.1",
+    "ws": "^8.16.0"
+  },
+  "optionalDependencies": {
+    "@litko/yara-x-darwin-arm64": "0.5.0",
+    "@litko/yara-x-darwin-x64": "0.5.0",
+    "@litko/yara-x-linux-x64-gnu": "0.5.0",
+    "@litko/yara-x-win32-x64-msvc": "0.5.0"
+  },
+  "devDependencies": {
+    "c8": "^11.0.0",
+    "esbuild": "^0.25.12",
+    "terser": "^5.46.1"
+  },
+  "keywords": [
+    "observability",
+    "dashboard",
+    "claude-code",
+    "agent",
+    "hooks",
+    "security",
+    "monitoring"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}