agent-relay 2.0.23 → 2.0.24

package/deploy/scripts/setup-fly-workspaces.sh

@@ -1,69 +0,0 @@
-#!/bin/bash
-# Setup Fly.io for Agent Relay Workspaces
-# Run this from the project root
-
-set -e
-
-echo "=== Agent Relay Cloud - Fly.io Workspace Setup ==="
-echo ""
-
-# Check for fly CLI
-if ! command -v fly &> /dev/null; then
-    echo "Error: Fly CLI not found. Install it with:"
-    echo "  curl -L https://fly.io/install.sh | sh"
-    exit 1
-fi
-
-# Check if logged in
-if ! fly auth whoami &> /dev/null; then
-    echo "Please log in to Fly.io first:"
-    fly auth login
-fi
-
-# Get org
-FLY_ORG=${FLY_ORG:-personal}
-echo "Using Fly.io org: $FLY_ORG"
-
-echo ""
-echo "=== Building Workspace Image ==="
-echo ""
-
-# Build and push the workspace image
-cd deploy/workspace
-
-echo "Building workspace Docker image..."
-docker build -t ghcr.io/khaliqgant/agent-relay-workspace:latest .
-
-echo ""
-echo "Pushing to GitHub Container Registry..."
-echo "(Make sure you're logged in: docker login ghcr.io)"
-docker push ghcr.io/khaliqgant/agent-relay-workspace:latest
-
-cd ../..
-
-echo ""
-echo "=== Get Your API Token ==="
-echo ""
-echo "Run this to get your Fly.io API token:"
-echo "  fly auth token"
-echo ""
-echo "Add it to your Railway environment:"
-echo "  FLY_API_TOKEN=<token>"
-echo "  FLY_ORG=$FLY_ORG"
-echo "  COMPUTE_PROVIDER=fly"
-echo ""
-
-echo "=== Custom Domain Setup ==="
-echo ""
-echo "To use custom workspace domains (e.g., abc123.ws.agent-relay.com):"
-echo ""
-echo "1. Add a wildcard CNAME record in your DNS:"
-echo "   *.ws.agent-relay.com  CNAME  fly.dev"
-echo ""
-echo "2. Set the domain in Railway:"
-echo "   FLY_WORKSPACE_DOMAIN=ws.agent-relay.com"
-echo ""
-echo "3. Each workspace will be accessible at:"
-echo "   https://{workspace-id}.ws.agent-relay.com"
-echo ""
-echo "Setup complete!"

package/deploy/scripts/setup-railway.sh

@@ -1,75 +0,0 @@
-#!/bin/bash
-# Setup Agent Relay Cloud on Railway
-# Run this from the project root
-
-set -e
-
-echo "=== Agent Relay Cloud - Railway Setup ==="
-echo ""
-
-# Check for railway CLI
-if ! command -v railway &> /dev/null; then
-    echo "Error: Railway CLI not found. Install it with:"
-    echo "  npm install -g @railway/cli"
-    exit 1
-fi
-
-# Check if logged in
-if ! railway whoami &> /dev/null; then
-    echo "Please log in to Railway first:"
-    railway login
-fi
-
-echo "Creating Railway project..."
-railway init --name agent-relay-cloud
-
-echo ""
-echo "Adding PostgreSQL database..."
-railway add --plugin postgresql
-
-echo ""
-echo "Adding Redis..."
-railway add --plugin redis
-
-echo ""
-echo "=== Required Environment Variables ==="
-echo "Please set these in Railway dashboard or via CLI:"
-echo ""
-echo "Required:"
-echo "  SESSION_SECRET          - openssl rand -hex 32"
-echo "  GITHUB_CLIENT_ID        - From GitHub OAuth App"
-echo "  GITHUB_CLIENT_SECRET    - From GitHub OAuth App"
-echo "  VAULT_ENCRYPTION_KEY    - openssl rand -hex 32"
-echo ""
-echo "For Fly.io workspaces:"
-echo "  COMPUTE_PROVIDER=fly"
-echo "  FLY_API_TOKEN           - fly auth token"
-echo "  FLY_ORG=personal"
-echo "  FLY_WORKSPACE_DOMAIN    - e.g., ws.agent-relay.com"
-echo ""
-echo "For Stripe billing:"
-echo "  STRIPE_SECRET_KEY"
-echo "  STRIPE_PUBLISHABLE_KEY"
-echo "  STRIPE_WEBHOOK_SECRET"
-echo ""
-
-echo "Set variables with:"
-echo "  railway variables set KEY=value"
-echo ""
-
-echo "When ready, deploy with:"
-echo "  railway up"
-echo ""
-
-echo "=== DNS Configuration ==="
-echo "After deployment, configure your DNS:"
-echo ""
-echo "1. Get your Railway domain:"
-echo "   railway domain"
-echo ""
-echo "2. Configure DNS records:"
-echo "   api.agent-relay.com    CNAME  <railway-domain>"
-echo "   app.agent-relay.com    CNAME  <your-dashboard-host>"
-echo "   agent-relay.com        A      <your-landing-host>"
-echo "   *.ws.agent-relay.com   CNAME  fly.dev (for workspaces)"
-echo ""

package/dist/src/cloud/index.d.ts

@@ -1,8 +0,0 @@
-/**
- * @deprecated Import from '@agent-relay/cloud' instead.
- *
- * This file re-exports from the @relay/cloud package for backward compatibility.
- * All cloud functionality has been moved to packages/cloud/.
- */
-export * from '@agent-relay/cloud';
-//# sourceMappingURL=index.d.ts.map

package/dist/src/cloud/index.js

@@ -1,8 +0,0 @@
-/**
- * @deprecated Import from '@agent-relay/cloud' instead.
- *
- * This file re-exports from the @relay/cloud package for backward compatibility.
- * All cloud functionality has been moved to packages/cloud/.
- */
-export * from '@agent-relay/cloud';
-//# sourceMappingURL=index.js.map

package/packages/cloud/dist/api/admin.d.ts

@@ -1,8 +0,0 @@
-/**
- * Admin API Routes
- *
- * Administrative endpoints for managing workspaces at scale.
- * Protected by admin secret (ADMIN_API_SECRET environment variable).
- */
-export declare const adminRouter: import("express-serve-static-core").Router;
-//# sourceMappingURL=admin.d.ts.map

package/packages/cloud/dist/api/admin.js

@@ -1,225 +0,0 @@
-/**
- * Admin API Routes
- *
- * Administrative endpoints for managing workspaces at scale.
- * Protected by admin secret (ADMIN_API_SECRET environment variable).
- */
-import { Router } from 'express';
-import { getConfig } from '../config.js';
-import { getProvisioner, WorkspaceProvisioner } from '../provisioner/index.js';
-export const adminRouter = Router();
-/**
- * Middleware to authenticate admin requests
- * Requires ADMIN_API_SECRET header to match environment variable
- */
-async function requireAdminAuth(req, res, next) {
-    const authHeader = req.headers['x-admin-secret'] || req.headers.authorization;
-    const adminSecret = process.env.ADMIN_API_SECRET;
-    if (!adminSecret) {
-        res.status(503).json({ error: 'Admin API not configured' });
-        return;
-    }
-    // Support both x-admin-secret header and Bearer token
-    const providedSecret = authHeader?.toString().replace('Bearer ', '');
-    if (!providedSecret || providedSecret !== adminSecret) {
-        res.status(401).json({ error: 'Invalid admin credentials' });
-        return;
-    }
-    next();
-}
-// Apply admin auth to all routes
-adminRouter.use(requireAdminAuth);
-/**
- * POST /api/admin/workspaces/update-image
- *
- * Gracefully update workspace images across all or specific workspaces.
- *
- * Request body:
- * - image: New Docker image to deploy (required)
- * - workspaceIds?: Array of specific workspace IDs to update
- * - userIds?: Array of user IDs whose workspaces to update
- * - force?: Force update even if agents are active (default: false)
- * - skipRestart?: Update config without restarting (default: false)
- * - batchSize?: Number of concurrent updates (default: 5)
- *
- * Response:
- * - summary: { total, updated, pendingRestart, skippedActiveAgents, skippedVerificationFailed, skippedNotRunning, errors }
- * - results: Array of per-workspace results
- */
-adminRouter.post('/workspaces/update-image', async (req, res) => {
-    const { image, workspaceIds, userIds, force = false, skipRestart = false, batchSize = 5, } = req.body;
-    if (!image) {
-        res.status(400).json({ error: 'image is required' });
-        return;
-    }
-    console.log(`[admin] Starting workspace image update to ${image}`, {
-        workspaceIds: workspaceIds?.length ?? 'all',
-        userIds: userIds?.length ?? 'all',
-        force,
-        skipRestart,
-        batchSize,
-    });
-    try {
-        const provisioner = getProvisioner();
-        const result = await provisioner.gracefulUpdateAllImages(image, {
-            workspaceIds,
-            userIds,
-            force,
-            skipRestart,
-            batchSize,
-        });
-        res.json(result);
-    }
-    catch (error) {
-        console.error('[admin] Error updating workspace images:', error);
-        res.status(500).json({
-            error: 'Failed to update workspace images',
-            details: error.message,
-        });
-    }
-});
-/**
- * POST /api/admin/workspaces/:id/update-image
- *
- * Gracefully update a single workspace's image.
- *
- * Request body:
- * - image: New Docker image to deploy (required)
- * - force?: Force update even if agents are active (default: false)
- * - skipRestart?: Update config without restarting (default: false)
- *
- * Response:
- * - result: Update result code
- * - workspaceId: Workspace ID
- * - machineState?: Current machine state
- * - agentCount?: Number of active agents (if applicable)
- * - error?: Error message (if applicable)
- */
-adminRouter.post('/workspaces/:id/update-image', async (req, res) => {
-    const id = req.params.id;
-    const { image, force = false, skipRestart = false, } = req.body;
-    if (!image) {
-        res.status(400).json({ error: 'image is required' });
-        return;
-    }
-    console.log(`[admin] Updating workspace ${id} image to ${image}`, { force, skipRestart });
-    try {
-        const provisioner = getProvisioner();
-        const result = await provisioner.gracefulUpdateImage(id, image, {
-            force,
-            skipRestart,
-        });
-        // Return appropriate status code based on result
-        if (result.result === WorkspaceProvisioner.UpdateResult.ERROR) {
-            res.status(500).json(result);
-        }
-        else if (result.result === WorkspaceProvisioner.UpdateResult.NOT_SUPPORTED) {
-            res.status(400).json(result);
-        }
-        else {
-            res.json(result);
-        }
-    }
-    catch (error) {
-        console.error(`[admin] Error updating workspace ${id}:`, error);
-        res.status(500).json({
-            error: 'Failed to update workspace image',
-            details: error.message,
-        });
-    }
-});
-/**
- * GET /api/admin/workspaces/:id/agents
- *
- * Check active agents in a workspace.
- * Useful for pre-flight checks before updates.
- *
- * Response:
- * - hasActiveAgents: boolean
- * - agentCount: number
- * - agents: Array of { name, status }
- */
-adminRouter.get('/workspaces/:id/agents', async (req, res) => {
-    const id = req.params.id;
-    try {
-        // Query workspace directly from DB and check agents via daemon API
-        const workspace = await (await import('../db/index.js')).db.workspaces.findById(id);
-        if (!workspace) {
-            res.status(404).json({ error: 'Workspace not found' });
-            return;
-        }
-        if (workspace.computeProvider !== 'fly') {
-            res.status(400).json({ error: 'Only Fly.io workspaces support agent checking' });
-            return;
-        }
-        // Query the workspace daemon directly
-        const baseUrl = workspace.publicUrl;
-        if (!baseUrl) {
-            res.json({ hasActiveAgents: false, agentCount: 0, agents: [] });
-            return;
-        }
-        try {
-            // Use /api/data endpoint which returns { agents: [...], ... }
-            // Note: /api/agents doesn't exist on the workspace dashboard-server
-            const response = await fetch(`${baseUrl}/api/data`, {
-                method: 'GET',
-                headers: { 'Accept': 'application/json' },
-                signal: AbortSignal.timeout(10_000),
-            });
-            if (!response.ok) {
-                res.json({ hasActiveAgents: false, agentCount: 0, agents: [], error: `Daemon returned ${response.status}` });
-                return;
-            }
-            const data = await response.json();
-            const agents = data.agents || [];
-            const activeAgents = agents.filter(a => {
-                const status = (a.status ?? '').toLowerCase();
-                const activityState = (a.activityState ?? '').toLowerCase();
-                const isProcessing = a.isProcessing === true;
-                if (activityState === 'active' || activityState === 'idle')
-                    return true;
-                if (status && status !== 'disconnected' && status !== 'offline')
-                    return true;
-                if (isProcessing)
-                    return true;
-                return false;
-            });
-            res.json({
-                hasActiveAgents: activeAgents.length > 0,
-                agentCount: activeAgents.length,
-                agents: agents.map(a => ({ name: a.name, status: a.status || a.activityState || 'unknown' })),
-            });
-        }
-        catch (error) {
-            // Workspace might be stopped
-            res.json({
-                hasActiveAgents: false,
-                agentCount: 0,
-                agents: [],
-                error: `Could not reach workspace: ${error.message}`,
-            });
-        }
-    }
-    catch (error) {
-        console.error(`[admin] Error checking agents for workspace ${id}:`, error);
-        res.status(500).json({
-            error: 'Failed to check workspace agents',
-            details: error.message,
-        });
-    }
-});
-/**
- * GET /api/admin/health
- *
- * Health check for admin API.
- */
-adminRouter.get('/health', (_req, res) => {
-    res.json({
-        status: 'ok',
-        timestamp: new Date().toISOString(),
-        config: {
-            computeProvider: getConfig().compute.provider,
-        },
-    });
-});
-//# sourceMappingURL=admin.js.map

package/packages/cloud/dist/api/auth.d.ts

@@ -1,20 +0,0 @@
-/**
- * Auth API Routes
- *
- * Session management routes.
- * User login is handled via Nango (see nango-auth.ts).
- * GitHub repo operations are in github-app.ts.
- */
-import { Request, Response } from 'express';
-export declare const authRouter: import("express-serve-static-core").Router;
-declare module 'express-session' {
-    interface SessionData {
-        userId?: string;
-        githubToken?: string;
-    }
-}
-/**
- * Middleware to require authentication
- */
-export declare function requireAuth(req: Request, res: Response, next: () => void): Response<any, Record<string, any>> | undefined;
-//# sourceMappingURL=auth.d.ts.map

package/packages/cloud/dist/api/auth.js

@@ -1,138 +0,0 @@
-/**
- * Auth API Routes
- *
- * Session management routes.
- * User login is handled via Nango (see nango-auth.ts).
- * GitHub repo operations are in github-app.ts.
- */
-import { Router } from 'express';
-import { db } from '../db/index.js';
-export const authRouter = Router();
-/**
- * GET /api/auth/github
- * Redirect to Nango login flow
- * @deprecated Use /api/auth/nango/login-session instead
- */
-authRouter.get('/github', (_req, res) => {
-    res.redirect('/api/auth/nango/login-session');
-});
-/**
- * POST /api/auth/logout
- * Logout user
- */
-authRouter.post('/logout', (req, res) => {
-    req.session.destroy((err) => {
-        if (err) {
-            return res.status(500).json({ error: 'Failed to logout' });
-        }
-        res.json({ success: true });
-    });
-});
-/**
- * GET /api/auth/me
- * Get current user
- */
-authRouter.get('/me', async (req, res) => {
-    if (!req.session.userId) {
-        return res.status(401).json({ error: 'Not authenticated' });
-    }
-    try {
-        const user = await db.users.findById(req.session.userId);
-        if (!user) {
-            return res.status(401).json({ error: 'User not found' });
-        }
-        // Get connected providers
-        const credentials = await db.credentials.findByUserId(user.id);
-        const connectedProviders = credentials.map((c) => ({
-            provider: c.provider,
-            email: c.providerAccountEmail,
-            connectedAt: c.createdAt,
-        }));
-        // Get pending invites
-        const pendingInvites = await db.workspaceMembers.getPendingInvites(user.id);
-        // Check for pending GitHub installation request
-        const pendingGitHubApproval = !!user.pendingInstallationRequest;
-        res.json({
-            id: user.id,
-            githubUsername: user.githubUsername,
-            displayName: user.displayName || user.githubUsername || user.email?.split('@')[0] || null,
-            email: user.email,
-            avatarUrl: user.avatarUrl,
-            plan: user.plan,
-            connectedProviders,
-            pendingInvites: pendingInvites.length,
-            pendingGitHubApproval,
-            onboardingCompleted: !!user.onboardingCompletedAt,
-        });
-    }
-    catch (error) {
-        console.error('Error getting user:', error);
-        res.status(500).json({ error: 'Failed to get user' });
-    }
-});
-/**
- * Middleware to require authentication
- */
-export function requireAuth(req, res, next) {
-    if (!req.session.userId) {
-        return res.status(401).json({
-            error: 'Authentication required',
-            code: 'SESSION_EXPIRED',
-            message: 'Your session has expired. Please log in again.',
-        });
-    }
-    next();
-}
-/**
- * GET /api/auth/session
- * Check if current session is valid
- */
-authRouter.get('/session', async (req, res) => {
-    if (!req.session.userId) {
-        return res.json({
-            authenticated: false,
-            code: 'SESSION_EXPIRED',
-            message: 'Your session has expired. Please log in again.',
-        });
-    }
-    try {
-        // Verify user still exists
-        const user = await db.users.findById(req.session.userId);
-        if (!user) {
-            req.session.destroy(() => { });
-            return res.json({
-                authenticated: false,
-                code: 'USER_NOT_FOUND',
-                message: 'User account not found. Please log in again.',
-            });
-        }
-        // Get connected providers
-        const credentials = await db.credentials.findByUserId(user.id);
-        const connectedProviders = credentials.map((c) => ({
-            provider: c.provider,
-            email: c.providerAccountEmail,
-            connectedAt: c.createdAt,
-        }));
-        res.json({
-            authenticated: true,
-            user: {
-                id: user.id,
-                githubUsername: user.githubUsername,
-                displayName: user.displayName || user.githubUsername || user.email?.split('@')[0] || null,
-                email: user.email,
-                avatarUrl: user.avatarUrl,
-                plan: user.plan,
-            },
-            connectedProviders,
-        });
-    }
-    catch (error) {
-        console.error('Session check error:', error);
-        res.status(500).json({
-            authenticated: false,
-            code: 'SESSION_ERROR',
-            message: 'An error occurred while checking your session.',
-        });
-    }
-});
-//# sourceMappingURL=auth.js.map

package/packages/cloud/dist/api/billing.d.ts

@@ -1,7 +0,0 @@
-/**
- * Agent Relay Cloud - Billing API
- *
- * REST API for subscription and billing management.
- */
-export declare const billingRouter: import("express-serve-static-core").Router;
-//# sourceMappingURL=billing.d.ts.map