crewx 0.9.0-rc.16 → 0.9.0-rc.161

package/bin/cli-commands.js

@@ -1,36 +1 @@
-/**
- * SSOT for CLI subcommand whitelist.
- *
- * These are all commands that the launcher routes to the CLI engine (packages/cli).
- * Must stay in sync with KNOWN_COMMANDS ∪ BUILTIN_COMMAND_NAMES ∪ NOT_YET_MIGRATED
- * in packages/cli/src/commands/registry.ts.
- *
- * Verified by bin/__tests__/crewx-entrypoint.test.ts SSOT assertion test.
- */
-export const CLI_SUBCOMMANDS = new Set([
-  // Query / Execute
-  'q', 'query',
-  'x', 'execute',
-
-  // Agent / Task
-  'agent',
-  'ps', 'kill', 'result', 'log', 'restart',
-
-  // Diagnostics / Init / DB
-  'doctor', 'init',
-  'db',
-  'help',
-
-  // Built-in tools
-  'memory', 'search', 'doc', 'wbs', 'cron', 'workflow', 'skill', 'dreaming',
-  'wi', 'chromex',
-
-  // Hook platform
-  'hook', 'hook-dispatch',
-
-  // Slack / Adapters
-  'slack', 'slack:files',
-
-  // Not-yet-migrated
-  'template', 'templates', 'chat', 'mcp',
-]);
+const e=new Set(["q","query","x","execute","agent","ps","stop","kill","result","log","restart","doctor","init","db","help","shortcut","publish","memory","search","doc","wbs","cron","workflow","skill","dreaming","wi","chromex","notify","app","hook","hook-dispatch","slack","slack:files","template","templates","chat","mcp"]);export{e as CLI_SUBCOMMANDS};

package/bin/crewx-lib.js

@@ -1,173 +1,2 @@
-/**
- * crewx launcher library — testable pure-logic functions extracted from crewx.js.
- */
-import { mkdirSync } from 'fs';
-import { homedir } from 'os';
-import { join } from 'path';
-import { CLI_SUBCOMMANDS } from './cli-commands.js';
-import { buildHintMessage } from './launcher-flags.js';
-
-
-/**
- * Parse --port option from extra CLI args.
- * Backward-compatible thin wrapper; kept for existing callers.
- *
- * @param {string[]} extraArgs
- * @returns {{ port: number } | { error: string } | null}
- */
-export function parseWebPort(extraArgs) {
-  const portIdx = extraArgs.indexOf('--port');
-  if (portIdx === -1) return null;
-  const portVal = Number(extraArgs[portIdx + 1]);
-  if (!portVal || portVal < 1 || portVal > 65535) {
-    return { error: 'Invalid port number. Use 1-65535.' };
-  }
-  return { port: portVal };
-}
-
-/**
- * Determine the route based on CLI arguments.
- *
- * Priority order:
- *   1. --help/-h, --version/-v → CLI (global options handled by CLI engine)
- *   2. Known CLI subcommand    → CLI
- *   3. 'serve' verb            → serve
- *   4. 'electron' verb         → electron
- *   5. No arguments            → web-default (browser auto-open)
- *   6. Unknown first argument  → error with hint
- *
- * @param {string[]} args - process.argv.slice(2)
- * @returns {{ route: string, routeArgs: string[], error?: string }}
- */
-export function resolveRoute(args) {
-  const firstArg = args[0];
-
-  // 1. Global options → CLI engine handles them
-  if (firstArg === '--help' || firstArg === '-h') {
-    return { route: 'cli', routeArgs: args };
-  }
-  if (firstArg === '--version' || firstArg === '-v') {
-    return { route: 'cli', routeArgs: args };
-  }
-
-  // 2. CLI subcommand whitelist → CLI engine
-  if (firstArg !== undefined && CLI_SUBCOMMANDS.has(firstArg)) {
-    return { route: 'cli', routeArgs: args };
-  }
-
-  // 3. New verb: serve
-  if (firstArg === 'serve') {
-    return { route: 'serve', routeArgs: args.slice(1) };
-  }
-
-  // 4. New verb: electron
-  if (firstArg === 'electron') {
-    return { route: 'electron', routeArgs: args.slice(1) };
-  }
-
-  // 5. No arguments → web default
-  if (firstArg === undefined) {
-    return { route: 'web-default', routeArgs: [] };
-  }
-
-  // 6. Unknown → error with hint
-  const hint = buildHintMessage(firstArg);
-  const hintSuffix = hint ? `\n   ${hint}` : '\n   Run `crewx --help` for usage.';
-  return {
-    route: 'error',
-    error: `Unknown command or option: "${firstArg}"${hintSuffix}`,
-    routeArgs: args,
-  };
-}
-
-/**
- * Ensure CrewX directories exist before any subcommand runs.
- *  - ~/.crewx (crewx home)             — config + DB (crewx.db)
- *  - ~/crewx  (crewx workspaces dir)   — user-facing workspaces collection,
- *                                        surfaced as "워크스페이스" Quick Access shortcut
- *                                        in DirectoryPickerDialog (WKSUI001-NEW).
- *
- * The two are completely different directories — never conflate them.
- * Both calls are idempotent (mkdir recursive). Failures are warned to stderr
- * but never abort the launcher.
- */
-export function ensureCrewxDirs() {
-  const crewxHome = join(homedir(), '.crewx');         // config/DB
-  const crewxWorkspaces = join(homedir(), 'crewx');    // workspaces collection
-
-  const crewxTls = join(crewxHome, 'tls');
-
-  for (const dir of [crewxHome, crewxWorkspaces, crewxTls]) {
-    try {
-      mkdirSync(dir, { recursive: true });
-    } catch (err) {
-      console.warn(`[crewx] Failed to ensure ${dir}: ${err?.message ?? err}`);
-    }
-  }
-}
-
-/**
- * Forward signals to a child process for clean shutdown.
- *
- * Uses an `exited` flag (set by the child's 'exit' event) instead of
- * `child.killed`, because `child.killed` becomes `true` immediately after
- * calling `child.kill()` — even if the child process is still running.
- * This ensures the SIGKILL escalation timer can actually fire.
- *
- * On Windows, SIGTERM is equivalent to an immediate kill.
- *
- * @param {import('child_process').ChildProcess} child
- * @param {{ escalateKill?: boolean, detached?: boolean }} options
- */
-export function setupSignalForwarding(child, { escalateKill = false, detached = false } = {}) {
-  let exited = false;
-  let escalationScheduled = false;
-
-  child.on('exit', () => {
-    exited = true;
-  });
-
-  // When detached, the child runs in its own process group.
-  // Use process.kill(-pid) to kill the entire group (Electron + GPU helpers).
-  // When not detached, use child.kill() for single-process kill.
-  const killChild = (signal) => {
-    try {
-      if (detached) {
-        process.kill(-child.pid, signal);
-      } else {
-        child.kill(signal);
-      }
-    } catch {
-      // Process or process group already terminated
-    }
-  };
-
-  process.on('SIGINT', () => {
-    if (!exited) {
-      killChild('SIGTERM');
-      if (escalateKill && !escalationScheduled) {
-        escalationScheduled = true;
-        setTimeout(() => {
-          if (!exited) killChild('SIGKILL');
-        }, 3000).unref();
-      }
-    }
-  });
-
-  process.on('SIGTERM', () => {
-    if (!exited) killChild('SIGTERM');
-  });
-
-  process.on('SIGHUP', () => {
-    if (!exited) killChild('SIGHUP');
-  });
-
-  // Clean up the child process group when the parent exits unexpectedly
-  if (detached) {
-    process.on('exit', () => {
-      if (!exited) {
-        try { process.kill(-child.pid, 'SIGKILL'); } catch {}
-      }
-    });
-  }
-}
+import{lstatSync as a,mkdirSync as l,readFileSync as f}from"fs";import{homedir as u}from"os";import{join as s}from"path";import{getCrewxHome as p}from"@crewx/sdk";import{CLI_SUBCOMMANDS as d}from"./cli-commands.js";import{buildHintMessage as w}from"./launcher-flags.js";const m=384;const h="pairing.token";const E="http://localhost:8150";const I=/^crewxrt_pairing_[0-9a-f]{64}$/;function g(){return process.platform==="win32"||typeof process.getuid!=="function"?void 0:process.getuid()}function x(){return s(p(),"auth","runtime",h)}function C(){const e=x();let r;try{r=a(e)}catch(o){if(o?.code==="ENOENT"){throw new Error("Pairing runtime credential is missing; start the CrewX server once to create pairing.token.")}throw new Error("Pairing runtime credential is not readable.")}if(!r.isFile()){throw new Error("Pairing runtime credential is not a regular file.")}if(process.platform!=="win32"&&(r.mode&511)!==m){throw new Error("Pairing runtime credential permissions are invalid; expected mode 0600.")}const n=g();if(n!==void 0&&r.uid!==n){throw new Error("Pairing runtime credential must be owned by the current user.")}let t;try{t=f(e,"utf8")}catch{throw new Error("Pairing runtime credential is not readable.")}if(!I.test(t)){throw new Error("Pairing runtime credential has an invalid format.")}return t}function T({port:e,env:r=process.env}={}){const n=e===void 0?r.CREWX_ENDPOINT?.trim()||E:`http://localhost:${e}`;let t;try{t=new URL(n)}catch{throw new Error("Invalid CrewX endpoint. Use an http:// or https:// URL.")}if(t.protocol!=="http:"&&t.protocol!=="https:"){throw new Error("Invalid CrewX endpoint. Use an http:// or https:// URL.")}if(t.username||t.password||t.search||t.hash){throw new Error("Invalid CrewX endpoint. Do not include credentials, query, or fragment data.")}return t.toString().replace(/\/$/,"")}function y(e){const r=e.indexOf("--port");if(r===-1)return null;const n=Number(e[r+1]);if(!n||n<1||n>65535){return{error:"Invalid port number. Use 1-65535."}}return{port:n}}function G(e){const r=e[0];if(r==="--help"||r==="-h"){return{route:"cli",routeArgs:e}}if(r==="--version"||r==="-v"){return{route:"cli",routeArgs:e}}if(r!==void 0&&d.has(r)){return{route:"cli",routeArgs:e}}if(r==="serve"){return{route:"serve",routeArgs:e.slice(1)}}if(r==="pair"){return{route:"pair",routeArgs:e.slice(1)}}if(r==="electron"){return{route:"electron",routeArgs:e.slice(1)}}if(r===void 0){return{route:"web-default",routeArgs:[]}}const n=w(r);const t=n?`
+   ${n}`:"\n   Run `crewx --help` for usage.";return{route:"error",error:`Unknown command or option: "${r}"${t}`,routeArgs:e}}function L(){const e=s(u(),".crewx");const r=s(u(),"crewx");const n=s(e,"tls");for(const t of[e,r,n]){try{l(t,{recursive:true})}catch(o){console.warn(`[crewx] Failed to ensure ${t}: ${o?.message??o}`)}}}function U(e,{escalateKill:r=false,detached:n=false}={}){let t=false;let o=false;e.on("exit",()=>{t=true});const i=c=>{try{if(n){process.kill(-e.pid,c)}else{e.kill(c)}}catch{}};process.on("SIGINT",()=>{if(!t){i("SIGTERM");if(r&&!o){o=true;setTimeout(()=>{if(!t)i("SIGKILL")},3e3).unref()}}});process.on("SIGTERM",()=>{if(!t)i("SIGTERM")});process.on("SIGHUP",()=>{if(!t)i("SIGHUP")});if(n){process.on("exit",()=>{if(!t){try{process.kill(-e.pid,"SIGKILL")}catch{}}})}}export{L as ensureCrewxDirs,x as pairingCredentialPath,y as parseWebPort,C as readPairingCredential,T as resolvePairEndpoint,G as resolveRoute,U as setupSignalForwarding};

package/bin/crewx-ui.js

@@ -1,86 +1,2 @@
 #!/usr/bin/env node
-/**
- * crewx-ui launcher
- *
- * Usage:
- *   npx crewx-ui              → NestJS web server (default)
- *   npx crewx-ui --electron   → Electron dashboard (main window)
- *   npx crewx-ui --overlay    → Electron floating overlay
- */
-import { spawn } from 'child_process';
-import { fileURLToPath } from 'url';
-import { dirname, join } from 'path';
-import { createRequire } from 'module';
-import { ensureCrewxDirs } from './crewx-lib.js';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-ensureCrewxDirs();
-
-const args = process.argv.slice(2);
-const isElectron = args.includes('--electron');
-const isOverlay = args.includes('--overlay');
-
-function getElectronSpawnEnv() {
-  const env = { ...process.env };
-  delete env.ELECTRON_RUN_AS_NODE;
-  env.NODE_ENV = 'production'; // Force production — prevents users from bypassing FREE limits via env
-  return env;
-}
-
-if (isElectron || isOverlay) {
-  // Electron mode: resolve binary path via require('electron')
-  const require = createRequire(import.meta.url);
-
-  let electronPath;
-  try {
-    electronPath = require('electron');
-  } catch {
-    console.error('');
-    console.error('  ❌ Electron is not installed.');
-    console.error('');
-    console.error('  To use --electron or --overlay mode, install Electron:');
-    console.error('');
-    console.error('    npm install -g electron');
-    console.error('    # or, in this project:');
-    console.error('    npm install --save-dev electron');
-    console.error('');
-    process.exit(1);
-  }
-
-  const entryFile = isOverlay
-    ? join(__dirname, '..', 'dist-electron', 'overlay.js')
-    : join(__dirname, '..', 'dist-electron', 'main.js');
-
-  if (process.env.ELECTRON_RUN_AS_NODE) {
-    console.warn(
-      '[crewx-ui] Ignoring ELECTRON_RUN_AS_NODE for Electron UI launch (it forces Electron into Node mode).',
-    );
-  }
-
-  const child = spawn(String(electronPath), [entryFile], {
-    stdio: 'inherit',
-    env: getElectronSpawnEnv(),
-  });
-
-  child.on('exit', (code) => process.exit(code ?? 0));
-  child.on('error', (err) => {
-    console.error('Failed to launch Electron:', err);
-    process.exit(1);
-  });
-} else {
-  // Default: delegate to server.js (NestJS web server)
-  const serverScript = join(__dirname, '..', 'server.js');
-
-  const child = spawn(process.execPath, [serverScript, ...args], {
-    stdio: 'inherit',
-    env: { ...process.env, NODE_ENV: 'production' }, // Force production — prevents users from bypassing FREE limits via env
-  });
-
-  child.on('exit', (code) => process.exit(code ?? 0));
-  child.on('error', (err) => {
-    console.error('Failed to start server:', err);
-    process.exit(1);
-  });
-}
+import{spawn as l}from"child_process";import{fileURLToPath as p}from"url";import{dirname as m,join as t}from"path";import{createRequire as d}from"module";import{ensureCrewxDirs as v}from"./crewx-lib.js";const u=p(import.meta.url);const s=m(u);v();const c=process.argv.slice(2);const E=c.includes("--electron");const a=c.includes("--overlay");function h(){const e={...process.env};delete e.ELECTRON_RUN_AS_NODE;e.NODE_ENV="production";return e}if(E||a){const e=d(import.meta.url);let r;try{r=e("electron")}catch{console.error("");console.error("  \u274C Electron is not installed.");console.error("");console.error("  To use --electron or --overlay mode, install Electron:");console.error("");console.error("    npm install -g electron");console.error("    # or, in this project:");console.error("    npm install --save-dev electron");console.error("");process.exit(1)}const o=a?t(s,"..","dist-electron","overlay.js"):t(s,"..","dist-electron","main.js");const i=l(String(r),[o],{stdio:"inherit",env:h()});i.on("exit",n=>process.exit(n??0));i.on("error",n=>{console.error("Failed to launch Electron:",n);process.exit(1)})}else{const e=t(s,"..","server.js");const r=l(process.execPath,[e,...c],{stdio:"inherit",env:{...process.env,NODE_ENV:"production"}});r.on("exit",o=>process.exit(o??0));r.on("error",o=>{console.error("Failed to start server:",o);process.exit(1)})}

package/bin/crewx.js

@@ -1,253 +1,3 @@
 #!/usr/bin/env node
-/**
- * crewx launcher
- *
- * Usage:
- *   crewx                              → Web dashboard + browser auto-open (default)
- *   crewx serve [--port N]             → Web server (explicit)
- *              [--token T]             → MCP bearer token (⚠️  prefer --token-file in shared shells)
- *              [--token-file PATH]     → Read token from file
- *              [--https]               → Enable HTTPS with auto-generated certificate
- *              [--trust]               → Install CA to system trust store (requires --https)
- *              [--no-open]             → Do not open browser
- *   crewx electron [--overlay]         → Electron desktop or overlay window
- *   crewx --version                    → CLI version output
- *   crewx --help                       → CLI help output
- *   crewx q|x|agent|... <args>         → CLI subcommand (forwarded to packages/cli)
- */
-import { spawn } from 'child_process';
-import { existsSync, readFileSync } from 'fs';
-import { fileURLToPath } from 'url';
-import { dirname, join } from 'path';
-import { homedir, tmpdir } from 'os';
-import { createRequire } from 'module';
-import { defineCommand, runCommand, renderUsage } from 'citty';
-import { setupSignalForwarding, resolveRoute, ensureCrewxDirs } from './crewx-lib.js';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-function getElectronSpawnEnv() {
-  const env = { ...process.env };
-  delete env.ELECTRON_RUN_AS_NODE;
-  env.NODE_ENV = 'production'; // Force production — prevents users from bypassing FREE limits via env
-  return env;
-}
-
-/**
- * Launch Electron with the given entry file.
- * Returns false when Electron is not installed (fail-fast — caller must handle).
- */
-function launchElectron(entryFile, routeArgs = []) {
-  const require = createRequire(import.meta.url);
-  let electronPath;
-  try {
-    electronPath = require('electron');
-  } catch {
-    return false; // Electron not installed
-  }
-
-  if (process.env.ELECTRON_RUN_AS_NODE) {
-    console.warn(
-      '[crewx] Ignoring ELECTRON_RUN_AS_NODE for Electron UI launch (it forces Electron into Node mode).',
-    );
-  }
-
-  const child = spawn(String(electronPath), [entryFile, ...routeArgs], {
-    stdio: 'inherit',
-    env: getElectronSpawnEnv(),
-    detached: true, // Separate process group so Ctrl+C doesn't reach Electron directly
-  });
-
-  setupSignalForwarding(child, { escalateKill: true, detached: true });
-
-  child.on('exit', (code) => process.exit(code ?? 0));
-  child.on('error', (err) => {
-    console.error('Failed to launch Electron:', err);
-    process.exit(1);
-  });
-
-  return true;
-}
-
-/**
- * Launch the web server with the given options.
- * Token injection: --token → MCP_BEARER_TOKEN env; --token-file → read + inject.
- */
-function launchWeb({ port, token, tokenFile, open: openFlag, https, trust } = {}) {
-  const serverScript = join(__dirname, '..', 'server.js');
-
-  const env = { ...process.env, NODE_ENV: 'production' };
-
-  if (https) {
-    env.CREWX_HTTPS = 'true';
-  }
-  if (trust) {
-    env.CREWX_TRUST_CA = 'true';
-  }
-
-  if (port) {
-    env.PORT = String(port);
-  }
-
-  if (token) {
-    env.MCP_BEARER_TOKEN = token;
-    process.stderr.write(
-      'ℹ️  Tip: use --token-file to avoid exposing token in shell history.\n',
-    );
-  } else if (tokenFile) {
-    let content;
-    try {
-      content = readFileSync(tokenFile, 'utf8').trim();
-    } catch (err) {
-      console.error(`❌ --token-file not readable: ${tokenFile}`);
-      console.error(`   ${err.message}`);
-      process.exit(1);
-    }
-    if (!content) {
-      console.error(`❌ --token-file is empty: ${tokenFile}`);
-      process.exit(1);
-    }
-    env.MCP_BEARER_TOKEN = content;
-  }
-
-  const certPath = join(homedir(), '.crewx', 'tls', 'cert.pem');
-  if (existsSync(certPath)) {
-    env.NODE_EXTRA_CA_CERTS = certPath;
-  }
-
-  if (https) {
-    console.log('🔒 HTTPS enabled with SowonLabs CA');
-    if (!trust) {
-      console.log('⚠️  Browser may show a certificate warning.');
-      console.log('   To remove warning: npx crewx serve --https --trust');
-    }
-  }
-
-  if (openFlag) {
-    env.CREWX_OPEN_BROWSER = '1';
-    env.CREWX_OPEN_BROWSER_ONCE_FILE = join(
-      tmpdir(),
-      `crewx-open-browser-${process.pid}-${Date.now()}`,
-    );
-  }
-
-  const child = spawn(process.execPath, [serverScript], {
-    stdio: 'inherit',
-    env,
-  });
-
-  setupSignalForwarding(child);
-
-  child.on('exit', (code) => process.exit(code ?? 0));
-  child.on('error', (err) => {
-    console.error('Failed to start web server:', err);
-    process.exit(1);
-  });
-}
-
-const serveCommand = defineCommand({
-  meta: { name: 'serve', description: 'Launch CrewX web server' },
-  args: {
-    port:         { type: 'string', description: 'Port to listen on' },
-    token:        { type: 'string', description: 'MCP bearer token' },
-    'token-file': { type: 'string', description: 'Read token from file' },
-    https:        { type: 'boolean', description: 'Enable HTTPS with auto-generated certificate' },
-    trust:        { type: 'boolean', description: 'Install CA to system trust store (requires --https)' },
-    open:         { type: 'boolean', description: 'Auto-open browser', default: true },
-    help:         { type: 'boolean', alias: 'h', description: 'Show this help' },
-  },
-  async run({ args }) {
-    if (args.help) {
-      const usage = await renderUsage(serveCommand);
-      process.stdout.write(usage + '\n');
-      process.exit(0);
-    }
-    const knownArgs = new Set(['_', 'port', 'token', 'token-file', 'tokenFile', 'https', 'trust', 'open', 'help', 'h']);
-    for (const key of Object.keys(args)) {
-      if (!knownArgs.has(key)) {
-        console.error(`❌ Unknown option for "crewx serve": --${key}`);
-        console.error('   Run `crewx serve --help` for usage.');
-        process.exit(2);
-      }
-    }
-    if (args.trust && !args.https) {
-      console.error('❌ --trust requires --https');
-      process.exit(1);
-    }
-    const port = args.port ? Number(args.port) : undefined;
-    if (args.port && (!port || port < 1 || port > 65535)) {
-      console.error('❌ Invalid port number. Use 1-65535.');
-      process.exit(1);
-    }
-    launchWeb({
-      port,
-      token: args.token,
-      tokenFile: args['token-file'],
-      open: args.open,
-      https: args.https,
-      trust: args.trust,
-    });
-  },
-});
-
-function forwardToCli(cliArgs) {
-  const serverScript = join(__dirname, '..', 'server.js');
-  const child = spawn(process.execPath, [serverScript, 'cli', ...cliArgs], {
-    stdio: 'inherit',
-    env: { ...process.env, NODE_ENV: 'production' }, // Force production — prevents users from bypassing FREE limits via env
-  });
-
-  setupSignalForwarding(child);
-
-  child.on('exit', (code) => process.exit(code ?? 0));
-  child.on('error', (err) => {
-    console.error('Failed to run CLI subcommand:', err);
-    process.exit(1);
-  });
-}
-
-ensureCrewxDirs();
-
-// Route
-const args = process.argv.slice(2);
-const { route, routeArgs, error } = resolveRoute(args);
-
-if (route === 'serve') {
-  runCommand(serveCommand, { rawArgs: routeArgs });
-} else if (route === 'electron') {
-  // Electron: desktop (default) or overlay (--overlay flag)
-  const isOverlay = routeArgs.includes('--overlay');
-  const entryFile = join(
-    __dirname, '..', 'dist-electron',
-    isOverlay ? 'overlay.js' : 'main.js',
-  );
-  const launched = launchElectron(entryFile, isOverlay ? [] : []);
-  if (!launched) {
-    console.error('');
-    console.error('  ❌ Electron is not installed.');
-    console.error('');
-    console.error('  This command requires Electron. Install it:');
-    console.error('');
-    console.error('    npm install -g electron');
-    console.error('    # or in this project:');
-    console.error('    npm install --save-dev electron');
-    console.error('');
-    console.error('  Alternatively, use: crewx serve   (web mode)');
-    console.error('');
-    process.exit(1);
-  }
-} else if (route === 'cli') {
-  forwardToCli(routeArgs);
-} else if (route === 'web-default') {
-  // No arguments → web dashboard + browser auto-open
-  runCommand(serveCommand, { rawArgs: ['--open', ...routeArgs] });
-} else if (route === 'error') {
-  // Unknown command or option
-  console.error(`❌ ${error}`);
-  process.exit(2);
-} else {
-  // Should not happen — guard against future routing additions
-  console.error(`❌ Internal routing error: unknown route "${route}"`);
-  process.exit(1);
-}
+import{spawn as f}from"child_process";import{existsSync as _,readFileSync as C}from"fs";import{fileURLToPath as P}from"url";import{dirname as R,join as p}from"path";import{homedir as k,tmpdir as S}from"os";import{createRequire as T}from"module";import{defineCommand as g,runCommand as h,renderUsage as v}from"citty";import{setupSignalForwarding as w,resolveRoute as O,ensureCrewxDirs as N,readPairingCredential as A,resolvePairEndpoint as $}from"./crewx-lib.js";const U=P(import.meta.url);const m=R(U);function j(){const e={...process.env};delete e.ELECTRON_RUN_AS_NODE;e.NODE_ENV="production";return e}function q(e,r=[]){const o=T(import.meta.url);let t;try{t=o("electron")}catch{return false}const i=f(String(t),[e,...r],{stdio:"inherit",env:j(),detached:true});w(i,{escalateKill:true,detached:true});i.on("exit",s=>process.exit(s??0));i.on("error",s=>{console.error("Failed to launch Electron:",s);process.exit(1)});return true}function L({port:e,token:r,tokenFile:o,open:t,https:i,trust:s}={}){const n=p(m,"..","server.js");const c={...process.env,NODE_ENV:"production"};if(i){c.CREWX_HTTPS="true"}if(s){c.CREWX_TRUST_CA="true"}if(e){c.PORT=String(e)}if(r){c.MCP_BEARER_TOKEN=r;process.stderr.write("\u2139\uFE0F  Tip: use --token-file to avoid exposing token in shell history.\n")}else if(o){let l;try{l=C(o,"utf8").trim()}catch(b){console.error(`\u274C --token-file not readable: ${o}`);console.error(`   ${b.message}`);process.exit(1)}if(!l){console.error(`\u274C --token-file is empty: ${o}`);process.exit(1)}c.MCP_BEARER_TOKEN=l}const y=p(k(),".crewx","tls","cert.pem");if(_(y)){c.NODE_EXTRA_CA_CERTS=y}if(i){console.log("\u{1F512} HTTPS enabled with SowonLabs CA");if(!s){console.log("\u26A0\uFE0F  Browser may show a certificate warning.");console.log("   To remove warning: npx crewx serve --https --trust")}}if(t){c.CREWX_OPEN_BROWSER="1";c.CREWX_OPEN_BROWSER_ONCE_FILE=p(S(),`crewx-open-browser-${process.pid}-${Date.now()}`)}const d=f(process.execPath,["--disable-sigusr1",n],{stdio:"inherit",env:c});w(d);d.on("exit",l=>process.exit(l??0));d.on("error",l=>{console.error("Failed to start web server:",l);process.exit(1)})}function I(e){const r=Number(e);if(!Number.isInteger(r)||r<1||r>65535){console.error("\u274C Invalid port number. Use 1-65535.");process.exit(1)}return r}function X(e){if(typeof e!=="string"||e.length===0)return false;try{const r=new URL(e);return(r.protocol==="http:"||r.protocol==="https:")&&r.search===""&&/^#pair=.{1,}$/.test(r.hash)}catch{return false}}async function D(e,r){let o;try{o=await fetch(`${e}/api/v1/auth/local/code`,{method:"POST",headers:{Accept:"application/json",Authorization:`Bearer ${r}`}})}catch{throw new Error(`Could not reach the CrewX server at ${e}.`)}if(!o.ok){throw new Error(`Pairing code request failed (HTTP ${o.status}).`)}let t;try{t=await o.json()}catch{throw new Error("Pairing code response was not valid JSON.")}if(!X(t?.url)){throw new Error("Pairing code response did not contain a valid pairing URL.")}return t.url}const x=g({meta:{name:"pair",description:"Request a one-time local browser pairing link"},args:{port:{type:"string",description:"Port of the CrewX web server"},open:{type:"boolean",description:"Open the pairing link in a browser",default:false},help:{type:"boolean",alias:"h",description:"Show this help"}},async run({args:e}){if(e.help){const n=await v(x);process.stdout.write(n+"\n");process.exit(0)}const r=new Set(["_","port","open","help","h"]);for(const n of Object.keys(e)){if(!r.has(n)){console.error(`\u274C Unknown option for "crewx pair": --${n}`);console.error("   Run `crewx pair --help` for usage.");process.exit(2)}}const o=e.port===void 0?void 0:I(e.port);let t;let i;try{t=$({port:o});i=A()}catch(n){console.error(`\u274C ${n instanceof Error?n.message:"Unable to read pairing credential."}`);process.exit(1)}let s;try{s=await D(t,i)}catch(n){console.error(`\u274C ${n instanceof Error?n.message:"Unable to request pairing link."}`);process.exit(1)}process.stdout.write(`${s}
+`);if(e.open){try{const n=(await import("open")).default;await n(s)}catch{console.error("\u274C Could not open the pairing link automatically.");process.exit(1)}}}});const E=g({meta:{name:"serve",description:"Launch CrewX web server"},args:{port:{type:"string",description:"Port to listen on"},token:{type:"string",description:"MCP bearer token"},"token-file":{type:"string",description:"Read token from file"},https:{type:"boolean",description:"Enable HTTPS with auto-generated certificate"},trust:{type:"boolean",description:"Install CA to system trust store (requires --https)"},open:{type:"boolean",description:"Auto-open browser",default:true},help:{type:"boolean",alias:"h",description:"Show this help"}},async run({args:e}){if(e.help){const t=await v(E);process.stdout.write(t+"\n");process.exit(0)}const r=new Set(["_","port","token","token-file","tokenFile","https","trust","open","help","h"]);for(const t of Object.keys(e)){if(!r.has(t)){console.error(`\u274C Unknown option for "crewx serve": --${t}`);console.error("   Run `crewx serve --help` for usage.");process.exit(2)}}if(e.trust&&!e.https){console.error("\u274C --trust requires --https");process.exit(1)}const o=e.port?Number(e.port):void 0;if(e.port&&(!o||o<1||o>65535)){console.error("\u274C Invalid port number. Use 1-65535.");process.exit(1)}L({port:o,token:e.token,tokenFile:e["token-file"],open:e.open,https:e.https,trust:e.trust})}});function W(e){const r=p(m,"..","server.js");const o=f(process.execPath,[r,"cli",...e],{stdio:"inherit",env:{...process.env,NODE_ENV:"production"}});w(o);o.on("exit",t=>process.exit(t??0));o.on("error",t=>{console.error("Failed to run CLI subcommand:",t);process.exit(1)})}N();const B=process.argv.slice(2);const{route:a,routeArgs:u,error:F}=O(B);if(a==="serve"){h(E,{rawArgs:u})}else if(a==="pair"){h(x,{rawArgs:u})}else if(a==="electron"){const e=u.includes("--overlay");const r=p(m,"..","dist-electron",e?"overlay.js":"main.js");const o=q(r,e?[]:[]);if(!o){console.error("");console.error("  \u274C Electron is not installed.");console.error("");console.error("  This command requires Electron. Install it:");console.error("");console.error("    npm install -g electron");console.error("    # or in this project:");console.error("    npm install --save-dev electron");console.error("");console.error("  Alternatively, use: crewx serve   (web mode)");console.error("");process.exit(1)}}else if(a==="cli"){W(u)}else if(a==="web-default"){h(E,{rawArgs:["--open",...u]})}else if(a==="error"){console.error(`\u274C ${F}`);process.exit(2)}else{console.error(`\u274C Internal routing error: unknown route "${a}"`);process.exit(1)}

package/bin/launcher-flags.js

@@ -1,29 +1 @@
-/**
- * SSOT for launcher-owned flags.
- * Imported by bin/crewx-lib.js and bin/crewx.js.
- */
-
-/** Flags owned by the launcher (bin/crewx.js), not the CLI engine. */
-export const LAUNCHER_OWNED_FLAGS = new Set([
-  '--port',
-  '--no-open',
-  '--overlay',
-  '--token',
-  '--token-file',
-]);
-
-/**
- * Build a hint message for a launcher-owned flag used in wrong context.
- * @param {string} flag
- * @returns {string}
- */
-export function buildHintMessage(flag) {
-  const hints = {
-    '--port':       'use: crewx serve --port <N>',
-    '--token':      'use: crewx serve --token <T>',
-    '--token-file': 'use: crewx serve --token-file <PATH>',
-    '--no-open':    'use: crewx serve --no-open',
-    '--overlay':    'use: crewx electron --overlay',
-  };
-  return hints[flag] ?? '';
-}
+const n=new Set(["--port","--no-open","--overlay","--token","--token-file"]);function r(e){const o={"--port":"use: crewx serve --port <N>","--token":"use: crewx serve --token <T>","--token-file":"use: crewx serve --token-file <PATH>","--no-open":"use: crewx serve --no-open","--overlay":"use: crewx electron --overlay"};return o[e]??""}export{n as LAUNCHER_OWNED_FLAGS,r as buildHintMessage};

package/crewx-host.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require("./dist-server/main.js");