create-ekka-desktop-app 0.3.2 → 0.3.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ekka-desktop-app",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "Create an EKKA desktop app with built-in demo backend. No setup required.",
   "type": "module",
   "bin": {

package/template/src-tauri/src/commands.rs

@@ -741,18 +741,9 @@ fn handle_ensure_node_identity(state: &EngineState) -> EngineResponse {
 /// Requires local engine to be available (strict local engine mode).
 /// Does NOT use Ed25519 register/challenge/session flow.
 fn handle_bootstrap_node_session(payload: &Value, state: &EngineState) -> EngineResponse {
-    // STRICT LOCAL ENGINE MODE: Gate node_auth + node_runner behind engine availability
-    if !state.is_engine_available() {
-        tracing::warn!(
-            op = "node_runner.skipped.engine_unavailable",
-            engine_available = false,
-            "Node session bootstrap skipped: local engine not available"
-        );
-        return EngineResponse::err(
-            "ENGINE_UNAVAILABLE",
-            "Local engine not available. Node session requires local engine.",
-        );
-    }
+    // NodeSessionRunner is an in-process runner that uses node session auth (Authorization: Bearer).
+    // It does NOT require the local engine-bootstrap binary - it makes direct HTTP calls to the engine API.
+    // The engine_available check was overly restrictive and has been removed.
 
     // Get home_path
     let home_path = match state.home_path.lock() {

package/template/src-tauri/src/engine_process.rs

@@ -51,25 +51,42 @@ fn build_engine_env() -> Result<Vec<(&'static str, String)>, &'static str> {
         env.push(("EKKA_ENGINE_URL", url.to_string()));
     }
 
-    // EKKA_INTERNAL_SERVICE_KEY - required for engine mode
+    // EKKA_INTERNAL_SERVICE_KEY - optional for desktop (only needed for engine-bootstrap binary)
+    // Desktop runner uses node session auth, not internal key
     let internal_key = std::env::var("EKKA_INTERNAL_SERVICE_KEY")
         .or_else(|_| std::env::var("INTERNAL_SERVICE_KEY"))
-        .map_err(|_| "EKKA_INTERNAL_SERVICE_KEY")?;
-    env.push(("EKKA_INTERNAL_SERVICE_KEY", internal_key));
-
-    // EKKA_TENANT_ID - required, must be valid UUID
-    let tenant_id = std::env::var("EKKA_TENANT_ID")
-        .map_err(|_| "EKKA_TENANT_ID")?;
-    uuid::Uuid::parse_str(&tenant_id)
-        .map_err(|_| "EKKA_TENANT_ID")?;
-    env.push(("EKKA_TENANT_ID", tenant_id));
-
-    // EKKA_WORKSPACE_ID - required, must be valid UUID
-    let workspace_id = std::env::var("EKKA_WORKSPACE_ID")
-        .map_err(|_| "EKKA_WORKSPACE_ID")?;
-    uuid::Uuid::parse_str(&workspace_id)
-        .map_err(|_| "EKKA_WORKSPACE_ID")?;
-    env.push(("EKKA_WORKSPACE_ID", workspace_id));
+        .ok();
+
+    if let Some(ref key) = internal_key {
+        env.push(("EKKA_INTERNAL_SERVICE_KEY", key.clone()));
+        tracing::info!(
+            op = "desktop.internal_key.optional",
+            present = true,
+            "Internal service key configured (for engine-bootstrap)"
+        );
+    } else {
+        tracing::info!(
+            op = "desktop.internal_key.optional",
+            present = false,
+            "Internal service key not set (desktop runner uses node session auth)"
+        );
+    }
+
+    // EKKA_TENANT_ID - optional for desktop (only needed for engine-bootstrap binary)
+    // Desktop runner gets tenant_id from node session
+    if let Ok(tenant_id) = std::env::var("EKKA_TENANT_ID") {
+        if uuid::Uuid::parse_str(&tenant_id).is_ok() {
+            env.push(("EKKA_TENANT_ID", tenant_id));
+        }
+    }
+
+    // EKKA_WORKSPACE_ID - optional for desktop (only needed for engine-bootstrap binary)
+    // Desktop runner gets workspace_id from node session
+    if let Ok(workspace_id) = std::env::var("EKKA_WORKSPACE_ID") {
+        if uuid::Uuid::parse_str(&workspace_id).is_ok() {
+            env.push(("EKKA_WORKSPACE_ID", workspace_id));
+        }
+    }
 
     // Node credentials: Try keychain first, fall back to env vars
     // This enables headless engine startup without manual env exports

package/template/src-tauri/src/well_known.rs

@@ -8,6 +8,7 @@ use serde::Deserialize;
 
 /// Response from /.well-known/ekka-configuration
 #[derive(Debug, Deserialize)]
+#[allow(dead_code)] // Fields used for deserialization, may not all be read
 pub struct WellKnownConfig {
     pub grant_verify_key_b64: String,
     pub grant_signing_algorithm: String,