agent-relay 2.3.2 → 2.3.5

package/packages/cli-tester/scripts/test-with-daemon.sh

@@ -1,247 +0,0 @@
-#!/bin/bash
-# Full integration test with daemon
-# This starts a local daemon and tests the complete spawn flow
-#
-# Usage: ./test-with-daemon.sh <cli>
-# Example: ./test-with-daemon.sh cursor
-#          DEBUG=1 ./test-with-daemon.sh cursor
-
-set -e
-
-CLI=${1:-cursor}
-
-# Map CLI name to actual command
-CLI_CMD="$CLI"
-if [ "$CLI" = "cursor" ]; then
-    CLI_CMD="agent"
-fi
-
-NAME="daemon-test-${CLI}"
-SOCKET="/tmp/relay-pty-${NAME}.sock"
-
-# Daemon configuration
-DAEMON_PORT=${DAEMON_PORT:-3377}
-DAEMON_HOST="127.0.0.1"
-DAEMON_URL="http://${DAEMON_HOST}:${DAEMON_PORT}"
-DATA_DIR="/tmp/relay-daemon-test"
-
-# Cleanup function
-cleanup() {
-    echo ""
-    echo "========================================"
-    echo "  Cleaning up"
-    echo "========================================"
-    rm -f "$SOCKET"
-    if [ -n "$DAEMON_PID" ]; then
-        echo "Stopping daemon (PID: $DAEMON_PID)..."
-        kill $DAEMON_PID 2>/dev/null || true
-    fi
-    if [ -n "$PTY_PID" ]; then
-        echo "Stopping relay-pty (PID: $PTY_PID)..."
-        kill $PTY_PID 2>/dev/null || true
-    fi
-    echo "Done."
-}
-trap cleanup EXIT
-
-# Create data directory
-mkdir -p "$DATA_DIR"
-
-echo "========================================"
-echo "  Full Daemon Integration Test: $CLI"
-echo "========================================"
-echo ""
-echo "This test starts a real daemon and tests the complete flow:"
-echo "  1. Start relay-daemon"
-echo "  2. Start relay-pty with CLI"
-echo "  3. Wait for agent registration"
-echo "  4. Monitor the full flow"
-echo ""
-echo "Configuration:"
-echo "  CLI:         $CLI_CMD"
-echo "  Agent name:  $NAME"
-echo "  Daemon URL:  $DAEMON_URL"
-echo "  Data dir:    $DATA_DIR"
-echo ""
-
-# Check if daemon binary is available
-if ! command -v relay-daemon &> /dev/null; then
-    echo "WARNING: relay-daemon not found in PATH"
-    echo ""
-    echo "To build the daemon:"
-    echo "  cd packages/daemon && npm run build"
-    echo ""
-    echo "Or run a daemon manually:"
-    echo "  npm run daemon"
-    echo ""
-    echo "Then re-run this test."
-    exit 1
-fi
-
-echo "========================================"
-echo "  Phase 1: Starting Daemon"
-echo "========================================"
-echo ""
-
-# Check if a daemon is already running
-if curl -s "${DAEMON_URL}/health" > /dev/null 2>&1; then
-    echo "Daemon already running at $DAEMON_URL"
-    DAEMON_PID=""
-else
-    echo "Starting daemon on port $DAEMON_PORT..."
-
-    # Start daemon in background with test configuration
-    RELAY_DATA_DIR="$DATA_DIR" \
-    RELAY_PORT="$DAEMON_PORT" \
-    DEBUG="${DEBUG:-}" \
-    relay-daemon > "$DATA_DIR/daemon.log" 2>&1 &
-
-    DAEMON_PID=$!
-    echo "Daemon started (PID: $DAEMON_PID)"
-
-    # Wait for daemon to be ready
-    echo "Waiting for daemon to be ready..."
-    for i in $(seq 1 30); do
-        if curl -s "${DAEMON_URL}/health" > /dev/null 2>&1; then
-            echo "Daemon is ready!"
-            break
-        fi
-        if [ $i -eq 30 ]; then
-            echo "ERROR: Daemon failed to start within 30 seconds"
-            echo ""
-            echo "Daemon log:"
-            cat "$DATA_DIR/daemon.log" | tail -50
-            exit 1
-        fi
-        sleep 1
-    done
-fi
-
-echo ""
-
-echo "========================================"
-echo "  Phase 2: Starting CLI with relay-pty"
-echo "========================================"
-echo ""
-
-# Build CLI arguments
-CLI_ARGS=()
-case $CLI in
-    claude)
-        CLI_ARGS+=(--dangerously-skip-permissions)
-        ;;
-    cursor)
-        CLI_ARGS+=(--force)
-        ;;
-esac
-
-echo "Command: $CLI_CMD ${CLI_ARGS[*]}"
-
-# Build relay-pty args
-RELAY_ARGS=(
-    --name "$NAME"
-    --socket "$SOCKET"
-    --idle-timeout 300
-)
-
-# Enable verbose output
-if [ -n "$DEBUG" ]; then
-    RELAY_ARGS+=(--json-output)
-fi
-
-# Set daemon URL environment variable so relay-pty connects to our test daemon
-export RELAY_DAEMON_URL="$DAEMON_URL"
-
-echo "Starting relay-pty..."
-if [ ${#CLI_ARGS[@]} -gt 0 ]; then
-    relay-pty "${RELAY_ARGS[@]}" -- "$CLI_CMD" "${CLI_ARGS[@]}" 2>&1 &
-else
-    relay-pty "${RELAY_ARGS[@]}" -- "$CLI_CMD" 2>&1 &
-fi
-
-PTY_PID=$!
-echo "relay-pty started (PID: $PTY_PID)"
-echo ""
-
-echo "========================================"
-echo "  Phase 3: Monitoring Registration"
-echo "========================================"
-echo ""
-
-# Poll for registration via daemon API
-START_TIME=$(date +%s)
-TIMEOUT_SEC=60
-
-echo "Polling daemon for agent registration (timeout: ${TIMEOUT_SEC}s)..."
-echo ""
-
-while true; do
-    CURRENT_TIME=$(date +%s)
-    ELAPSED=$((CURRENT_TIME - START_TIME))
-
-    # Check if PTY process is still running
-    if ! kill -0 $PTY_PID 2>/dev/null; then
-        echo ""
-        echo "[$(date +%T)] ERROR: relay-pty exited after ${ELAPSED}s"
-        echo ""
-        echo "The CLI crashed or exited before completing registration."
-        echo ""
-        if [ -f "$DATA_DIR/daemon.log" ]; then
-            echo "Daemon log (last 20 lines):"
-            tail -20 "$DATA_DIR/daemon.log"
-        fi
-        exit 1
-    fi
-
-    # Query daemon for connected agents
-    AGENTS=$(curl -s "${DAEMON_URL}/api/agents" 2>/dev/null || echo "[]")
-
-    # Check if our agent is registered
-    if echo "$AGENTS" | grep -q "\"$NAME\""; then
-        echo ""
-        echo "========================================"
-        echo "  SUCCESS: Agent Registered!"
-        echo "========================================"
-        echo ""
-        echo "Agent '$NAME' successfully registered with daemon after ${ELAPSED}s"
-        echo ""
-        echo "Connected agents:"
-        echo "$AGENTS" | jq . 2>/dev/null || echo "$AGENTS"
-        echo ""
-        echo "Press Ctrl+C to stop the test, or leave running to interact with the CLI."
-
-        # Keep running so user can interact
-        wait $PTY_PID
-        exit 0
-    fi
-
-    echo "[$(date +%T)] +${ELAPSED}s: Waiting for registration... (agents: $(echo "$AGENTS" | grep -o '"' | wc -l | xargs))"
-
-    # Check timeout
-    if [ $ELAPSED -ge $TIMEOUT_SEC ]; then
-        echo ""
-        echo "========================================"
-        echo "  TIMEOUT: Registration Failed"
-        echo "========================================"
-        echo ""
-        echo "Agent '$NAME' did not register within ${TIMEOUT_SEC}s"
-        echo ""
-        echo "This is the same timeout the real spawner would hit."
-        echo ""
-        echo "Debugging info:"
-        echo ""
-        echo "1. Connected agents from daemon:"
-        echo "$AGENTS" | jq . 2>/dev/null || echo "$AGENTS"
-        echo ""
-        if [ -f "$DATA_DIR/daemon.log" ]; then
-            echo "2. Daemon log (last 30 lines):"
-            tail -30 "$DATA_DIR/daemon.log"
-        fi
-        echo ""
-        echo "3. Check if CLI is stuck on a prompt (auth, trust, etc.)"
-        echo ""
-        exit 1
-    fi
-
-    sleep 2
-done

package/packages/cli-tester/scripts/verify-auth.sh

@@ -1,112 +0,0 @@
-#!/bin/bash
-# Verify CLI credentials exist and show (redacted) contents
-# Usage: ./verify-auth.sh <cli>
-# Example: ./verify-auth.sh claude
-
-CLI=${1:-claude}
-
-# Map CLI to credential file path
-case $CLI in
-    claude)
-        CRED_FILE="$HOME/.claude/.credentials.json"
-        ;;
-    codex)
-        CRED_FILE="$HOME/.codex/auth.json"
-        ;;
-    gemini)
-        # Gemini stores in application_default_credentials.json
-        CRED_FILE="$HOME/.config/gcloud/application_default_credentials.json"
-        ALT_FILE="$HOME/.gemini/credentials.json"
-        ;;
-    cursor|agent)
-        # Cursor CLI installs as 'agent', credentials in ~/.cursor/
-        CRED_FILE="$HOME/.cursor/auth.json"
-        CLI="cursor"  # Normalize name
-        ;;
-    opencode)
-        CRED_FILE="$HOME/.local/share/opencode/auth.json"
-        ;;
-    droid)
-        CRED_FILE="$HOME/.droid/auth.json"
-        ;;
-    copilot)
-        # GitHub Copilot uses gh CLI auth - stored in YAML format
-        CRED_FILE="$HOME/.config/gh/hosts.yml"
-        ;;
-    *)
-        echo "Unknown CLI: $CLI"
-        echo "Supported: claude, codex, gemini, cursor, opencode, droid, copilot"
-        exit 1
-        ;;
-esac
-
-echo "========================================"
-echo "  Checking credentials for: $CLI"
-echo "========================================"
-echo ""
-
-# Check primary credential file
-if [ -f "$CRED_FILE" ]; then
-    echo "✓ Credentials found: $CRED_FILE"
-    echo ""
-    echo "Contents (tokens redacted):"
-    echo "----------------------------------------"
-    # Redact any values that look like tokens (long strings, JWTs, etc.)
-    cat "$CRED_FILE" | jq '.' 2>/dev/null | \
-        sed -E 's/"([^"]*[Tt]oken[^"]*|[Aa]ccess[^"]*|[Rr]efresh[^"]*|[Ss]ecret[^"]*)": "[^"]{20,}"/"***\1***": "[REDACTED]"/g' || \
-        cat "$CRED_FILE" | sed -E 's/"[^"]{40,}"/"[REDACTED]"/g'
-    echo "----------------------------------------"
-    echo ""
-
-    # Check for specific fields
-    if command -v jq &> /dev/null && [ -f "$CRED_FILE" ]; then
-        echo "Token check:"
-        if jq -e '.claudeAiOauth.accessToken' "$CRED_FILE" &>/dev/null; then
-            echo "  ✓ Access token present (Claude format)"
-        elif jq -e '.tokens.access_token' "$CRED_FILE" &>/dev/null; then
-            echo "  ✓ Access token present (Codex format)"
-        elif jq -e '.accessToken' "$CRED_FILE" &>/dev/null; then
-            echo "  ✓ Access token present (generic format)"
-        elif jq -e '.access_token' "$CRED_FILE" &>/dev/null; then
-            echo "  ✓ Access token present (OAuth format)"
-        else
-            echo "  ? Access token format unknown"
-        fi
-
-        if jq -e '.claudeAiOauth.refreshToken' "$CRED_FILE" &>/dev/null || \
-           jq -e '.tokens.refresh_token' "$CRED_FILE" &>/dev/null || \
-           jq -e '.refreshToken' "$CRED_FILE" &>/dev/null || \
-           jq -e '.refresh_token' "$CRED_FILE" &>/dev/null; then
-            echo "  ✓ Refresh token present"
-        else
-            echo "  ✗ No refresh token found"
-        fi
-    fi
-
-    exit 0
-else
-    echo "✗ No credentials found at: $CRED_FILE"
-
-    # Check alternate location for Gemini
-    if [ -n "$ALT_FILE" ] && [ -f "$ALT_FILE" ]; then
-        echo ""
-        echo "✓ Found alternate credentials: $ALT_FILE"
-        cat "$ALT_FILE" | jq '.' 2>/dev/null | \
-            sed -E 's/"[^"]{40,}"/"[REDACTED]"/g' || \
-            cat "$ALT_FILE"
-        exit 0
-    fi
-
-    # Show what files exist in the CLI's config directory
-    CLI_DIR=$(dirname "$CRED_FILE")
-    if [ -d "$CLI_DIR" ]; then
-        echo ""
-        echo "Files in $CLI_DIR:"
-        ls -la "$CLI_DIR" 2>/dev/null || echo "  (directory exists but is empty or unreadable)"
-    else
-        echo ""
-        echo "Config directory does not exist: $CLI_DIR"
-    fi
-
-    exit 1
-fi

package/packages/cli-tester/src/index.ts

@@ -1,40 +0,0 @@
-/**
- * CLI Auth Tester - Manual interactive testing for CLI authentication flows
- *
- * This package provides utilities for testing CLI authentication in a Docker container.
- * Primary use case is debugging auth issues with various CLI tools (Claude, Codex, Gemini, etc.)
- *
- * @example
- * ```bash
- * # Start the test environment
- * npm run cli-tester:start
- *
- * # Inside container, test a CLI
- * ./scripts/test-cli.sh claude
- *
- * # Verify credentials
- * ./scripts/verify-auth.sh claude
- * ```
- */
-
-export {
-  RelayPtyClient,
-  createClient,
-  getSocketPath,
-  type InjectRequest,
-  type InjectResponse,
-  type StatusRequest,
-  type StatusResponse,
-  type RelayPtyResponse,
-} from './utils/socket-client.js';
-
-export {
-  checkCredentials,
-  clearCredentials,
-  checkAllCredentials,
-  clearAllCredentials,
-  getCredentialPath,
-  getConfigPaths,
-  type CLIType,
-  type CredentialCheck,
-} from './utils/credential-check.js';

package/packages/cli-tester/src/utils/credential-check.ts

@@ -1,284 +0,0 @@
-/**
- * Credential checking utilities for CLI authentication testing
- * Verifies and parses credential files for various CLI tools
- */
-
-import { readFileSync, existsSync, unlinkSync, rmSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-
-export type CLIType = 'claude' | 'codex' | 'gemini' | 'cursor' | 'opencode' | 'droid';
-
-export interface CredentialCheck {
-  /** CLI type being checked */
-  cli: CLIType;
-  /** Whether the credential file exists */
-  exists: boolean;
-  /** Whether the credentials appear valid (have required fields) */
-  valid: boolean;
-  /** Whether an access token is present */
-  hasAccessToken: boolean;
-  /** Whether a refresh token is present */
-  hasRefreshToken: boolean;
-  /** Token expiration date if available */
-  expiresAt?: Date;
-  /** Path to the credential file */
-  filePath: string;
-  /** Raw credential data (tokens redacted) */
-  data?: Record<string, unknown>;
-  /** Error message if check failed */
-  error?: string;
-}
-
-/**
- * Get the credential file path for a CLI
- */
-export function getCredentialPath(cli: CLIType): string {
-  const home = homedir();
-
-  switch (cli) {
-    case 'claude':
-      return join(home, '.claude', '.credentials.json');
-    case 'codex':
-      return join(home, '.codex', 'auth.json');
-    case 'gemini':
-      return join(home, '.config', 'gcloud', 'application_default_credentials.json');
-    case 'cursor':
-      return join(home, '.cursor', 'auth.json');
-    case 'opencode':
-      return join(home, '.local', 'share', 'opencode', 'auth.json');
-    case 'droid':
-      return join(home, '.droid', 'auth.json');
-    default:
-      throw new Error(`Unknown CLI type: ${cli}`);
-  }
-}
-
-/**
- * Get all config paths for a CLI (for clearing)
- */
-export function getConfigPaths(cli: CLIType): string[] {
-  const home = homedir();
-
-  switch (cli) {
-    case 'claude':
-      return [
-        join(home, '.claude', '.credentials.json'),
-        join(home, '.claude', 'settings.json'),
-        join(home, '.claude', 'settings.local.json'),
-      ];
-    case 'codex':
-      return [
-        join(home, '.codex', 'auth.json'),
-        join(home, '.codex', 'config.json'),
-        join(home, '.codex', 'config.toml'),
-      ];
-    case 'gemini':
-      return [
-        join(home, '.config', 'gcloud', 'application_default_credentials.json'),
-        join(home, '.gemini', 'credentials.json'),
-        join(home, '.gemini', 'settings.json'),
-      ];
-    case 'cursor':
-      return [
-        join(home, '.cursor', 'auth.json'),
-        join(home, '.cursor', 'settings.json'),
-      ];
-    case 'opencode':
-      return [join(home, '.local', 'share', 'opencode', 'auth.json')];
-    case 'droid':
-      return [join(home, '.droid', 'auth.json')];
-    default:
-      throw new Error(`Unknown CLI type: ${cli}`);
-  }
-}
-
-/**
- * Extract token info from credential data based on CLI type
- */
-function extractTokenInfo(
-  cli: CLIType,
-  data: Record<string, unknown>
-): { hasAccessToken: boolean; hasRefreshToken: boolean; expiresAt?: Date } {
-  let hasAccessToken = false;
-  let hasRefreshToken = false;
-  let expiresAt: Date | undefined;
-
-  switch (cli) {
-    case 'claude': {
-      // Claude format: { claudeAiOauth: { accessToken, refreshToken, expiresAt } }
-      const oauth = data.claudeAiOauth as Record<string, unknown> | undefined;
-      if (oauth) {
-        hasAccessToken = typeof oauth.accessToken === 'string' && oauth.accessToken.length > 0;
-        hasRefreshToken = typeof oauth.refreshToken === 'string' && oauth.refreshToken.length > 0;
-        if (typeof oauth.expiresAt === 'number') {
-          expiresAt = new Date(oauth.expiresAt);
-        }
-      }
-      break;
-    }
-
-    case 'codex': {
-      // Codex format: { tokens: { access_token, refresh_token, expires_at } }
-      const tokens = data.tokens as Record<string, unknown> | undefined;
-      if (tokens) {
-        hasAccessToken =
-          typeof tokens.access_token === 'string' && tokens.access_token.length > 0;
-        hasRefreshToken =
-          typeof tokens.refresh_token === 'string' && tokens.refresh_token.length > 0;
-        if (typeof tokens.expires_at === 'number') {
-          expiresAt = new Date(tokens.expires_at * 1000); // Unix timestamp
-        }
-      }
-      break;
-    }
-
-    case 'gemini': {
-      // Google OAuth format: { access_token, refresh_token, expiry_date }
-      hasAccessToken =
-        typeof data.access_token === 'string' && data.access_token.length > 0;
-      hasRefreshToken =
-        typeof data.refresh_token === 'string' && data.refresh_token.length > 0;
-      if (typeof data.expiry_date === 'number') {
-        expiresAt = new Date(data.expiry_date);
-      }
-      break;
-    }
-
-    case 'cursor':
-    case 'opencode':
-    case 'droid': {
-      // Generic format: { accessToken, refreshToken } or { access_token, refresh_token }
-      hasAccessToken =
-        (typeof data.accessToken === 'string' && data.accessToken.length > 0) ||
-        (typeof data.access_token === 'string' && data.access_token.length > 0);
-      hasRefreshToken =
-        (typeof data.refreshToken === 'string' && data.refreshToken.length > 0) ||
-        (typeof data.refresh_token === 'string' && data.refresh_token.length > 0);
-      break;
-    }
-  }
-
-  return { hasAccessToken, hasRefreshToken, expiresAt };
-}
-
-/**
- * Redact sensitive values in credential data
- */
-function redactData(data: Record<string, unknown>): Record<string, unknown> {
-  const redacted: Record<string, unknown> = {};
-
-  for (const [key, value] of Object.entries(data)) {
-    if (typeof value === 'string') {
-      // Redact anything that looks like a token
-      if (
-        key.toLowerCase().includes('token') ||
-        key.toLowerCase().includes('secret') ||
-        key.toLowerCase().includes('key') ||
-        value.length > 40
-      ) {
-        redacted[key] = '[REDACTED]';
-      } else {
-        redacted[key] = value;
-      }
-    } else if (typeof value === 'object' && value !== null) {
-      redacted[key] = redactData(value as Record<string, unknown>);
-    } else {
-      redacted[key] = value;
-    }
-  }
-
-  return redacted;
-}
-
-/**
- * Check credentials for a specific CLI
- */
-export function checkCredentials(cli: CLIType): CredentialCheck {
-  const filePath = getCredentialPath(cli);
-
-  const result: CredentialCheck = {
-    cli,
-    exists: false,
-    valid: false,
-    hasAccessToken: false,
-    hasRefreshToken: false,
-    filePath,
-  };
-
-  if (!existsSync(filePath)) {
-    return result;
-  }
-
-  result.exists = true;
-
-  try {
-    const content = readFileSync(filePath, 'utf-8');
-    const data = JSON.parse(content) as Record<string, unknown>;
-
-    const tokenInfo = extractTokenInfo(cli, data);
-    result.hasAccessToken = tokenInfo.hasAccessToken;
-    result.hasRefreshToken = tokenInfo.hasRefreshToken;
-    result.expiresAt = tokenInfo.expiresAt;
-
-    // Valid if at least access token is present
-    result.valid = result.hasAccessToken;
-
-    // Include redacted data for debugging
-    result.data = redactData(data);
-  } catch (err) {
-    result.error = err instanceof Error ? err.message : 'Unknown error';
-  }
-
-  return result;
-}
-
-/**
- * Clear credentials for a specific CLI
- */
-export function clearCredentials(cli: CLIType): { cleared: string[]; errors: string[] } {
-  const paths = getConfigPaths(cli);
-  const cleared: string[] = [];
-  const errors: string[] = [];
-
-  for (const path of paths) {
-    if (existsSync(path)) {
-      try {
-        unlinkSync(path);
-        cleared.push(path);
-      } catch (err) {
-        errors.push(`Failed to remove ${path}: ${err instanceof Error ? err.message : 'Unknown error'}`);
-      }
-    }
-  }
-
-  return { cleared, errors };
-}
-
-/**
- * Clear all CLI credentials
- */
-export function clearAllCredentials(): Record<CLIType, { cleared: string[]; errors: string[] }> {
-  const clis: CLIType[] = ['claude', 'codex', 'gemini', 'cursor', 'opencode', 'droid'];
-  const results: Record<string, { cleared: string[]; errors: string[] }> = {};
-
-  for (const cli of clis) {
-    results[cli] = clearCredentials(cli);
-  }
-
-  return results as Record<CLIType, { cleared: string[]; errors: string[] }>;
-}
-
-/**
- * Check all CLI credentials
- */
-export function checkAllCredentials(): Record<CLIType, CredentialCheck> {
-  const clis: CLIType[] = ['claude', 'codex', 'gemini', 'cursor', 'opencode', 'droid'];
-  const results: Record<string, CredentialCheck> = {};
-
-  for (const cli of clis) {
-    results[cli] = checkCredentials(cli);
-  }
-
-  return results as Record<CLIType, CredentialCheck>;
-}