alexandr 0.1.1 → 0.1.2

package/bin.js

@@ -1,7 +1,20 @@
 #!/usr/bin/env node
 // Public entrypoint for the `alexandr` CLI. Keep this a thin shim; logic lives
-// in ./src. Plain Node (no Bun, no deps) so it runs anywhere Node 20+ is.
-import { run } from "./src/cli.js";
+// in ./src. Plain Node (no Bun, no deps) so it runs anywhere Node 18+ is.
+
+// Our own version guard, so nobody meets npm's EBADENGINE wall: package.json
+// declares >=18 (what Ubuntu LTS's apt ships, and provably sufficient — the CLI
+// is dependency-free), and anything older gets ONE styled line instead of a trace.
+const major = Number(process.versions.node.split(".")[0]);
+if (major < 18) {
+  process.stderr.write(
+    `\x1b[31m✗\x1b[0m alexandr needs Node 18 or newer — this is Node ${process.versions.node}.\n` +
+    `  On Ubuntu/Debian: apt install -y npm    (or use nodesource for a current LTS)\n`,
+  );
+  process.exit(1);
+}
+
+const { run } = await import("./src/cli.js");
 
 run().catch((err) => {
   process.stderr.write(`${err?.stack || err}\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "alexandr",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Run the alexandr workspace runtime locally — a thin Docker front door (npx alexandr up). Pulls + boots the published kernel image.",
   "type": "module",
   "bin": {
@@ -17,7 +17,7 @@
     "LICENSE"
   ],
   "engines": {
-    "node": ">=20"
+    "node": ">=18"
   },
   "license": "Apache-2.0",
   "repository": {

package/src/commands.js

@@ -173,6 +173,12 @@ export async function up(flags) {
 
   if (flags.port) setEnv(inst.dir, "ALEXANDR_KERNEL_PORT", String(flags.port));
   if (flags.domain) setEnv(inst.dir, "ALEXANDR_DOMAIN", String(flags.domain));
+  // Persist the display name so a RETRIED ceremony reuses the wizard's answer — the
+  // first attempt on the aos box lost "AOS" to the default because it lived only in
+  // that run's memory (the ceremony it fed timed out).
+  if (typeof flags.name === "string" && flags.name.trim()) {
+    setEnv(inst.dir, "ALEXANDR_WORKSPACE_NAME", flags.name.trim());
+  }
 
   // Sign-in comes FIRST (account-required-runtimes D3) — now literally: the entitlement
   // gate fires before anything system-mutating, so a refused account walks away from a

package/src/link.js

@@ -101,7 +101,9 @@ export async function runLinkCeremony(inst, flags) {
     ? `https://${String(domain).replace(/^https?:\/\//, "").replace(/\/+$/, "")}`
     : kernelUrl(kernelPort(inst.dir));
   const name =
-    typeof flags.name === "string" && flags.name.trim() ? flags.name.trim() : "My self-hosted workspace";
+    (typeof flags.name === "string" && flags.name.trim()) ||
+    (readEnv(inst.dir).ALEXANDR_WORKSPACE_NAME || "").trim() ||
+    "My self-hosted workspace";
 
   // PKCE (S256) + a CSRF state for the loopback redirect.
   const verifier = b64url(crypto.randomBytes(32));
@@ -309,7 +311,7 @@ export async function presentAuthUrl(authUrl, { port, domain, headless = isHeadl
 }
 
 /** Start a loopback listener for the OAuth redirect. Resolves {code,state} when /callback is hit. */
-function startLoopback() {
+export function startLoopback() {
   let resolveFn, rejectFn;
   const done = new Promise((res, rej) => {
     resolveFn = res;
@@ -317,6 +319,20 @@ function startLoopback() {
   });
   const server = http.createServer((req, res) => {
     const u = new URL(req.url, "http://127.0.0.1");
+    // Reachability probe for the consent page: /cli-auth pings this before the user
+    // clicks Link, so a missing ssh tunnel becomes a guided "start the tunnel" notice
+    // instead of a dead browser error page after the click. The PNA header answers
+    // Chrome's public→loopback preflight; ACAO lets the page read the success.
+    if (u.pathname === "/ping") {
+      res.writeHead(204, {
+        "access-control-allow-origin": "*",
+        "access-control-allow-methods": "GET, OPTIONS",
+        "access-control-allow-headers": "*",
+        "access-control-allow-private-network": "true",
+      });
+      res.end();
+      return;
+    }
     if (u.pathname !== "/callback") {
       res.writeHead(404);
       res.end();

package/templates/env.example

@@ -21,6 +21,8 @@
 # ALEXANDR_INSTANCE_ID=
 # ALEXANDR_RUNTIME_SECRET=
 # ALEXANDR_WORKSPACE_ID=        # account-side record id (used by `destroy --unlink`)
+# ALEXANDR_WORKSPACE_NAME=      # display name for registration (the wizard writes it,
+#                               # so a retried sign-in reuses your answer)
 
 # Public domain for Caddy auto-HTTPS. Setting this starts the "public" profile — the
 # supported way to reach the runtime from another machine. Without a domain the