diggylab 0.1.34 → 0.1.35

package/README.md

@@ -6,7 +6,7 @@ headless Chromium — the Electron app is not involved.
 
 ## Requirements
 
-- Node.js 22+
+- Node.js 20+
 - Linux packages: `xvfb`, `x11vnc`, `websockify`, `novnc` (Debian/Ubuntu: `apt install xvfb x11vnc websockify novnc`). The Docker image below bundles them.
 - Chromium for Playwright: run `diggylab install-browser` once after installing the CLI.
 
@@ -80,6 +80,15 @@ The noVNC URL carries a one-time token, the port is only open while `login` runs
 torn down when the login finishes or times out (10 minutes). If you prefer not to expose a port,
 pass `--bind 127.0.0.1` and forward it over SSH (`ssh -L 6080:127.0.0.1:6080 <server>`).
 
+### Which address the link uses
+
+The link points at the machine's default-route address, so a multi-homed server advertises the
+network it actually reaches the internet through. When that address is private, the agent also looks
+up the public IP and prints a second link for phones on another network — forward the port first.
+
+Pin it explicitly with `--public-host <ip or domain>` or `DIGGYLAB_PUBLIC_HOST`, for example when a
+domain points at the server.
+
 ## Security notes
 
 - `~/.diggylab/key` (mode `600`) encrypts device credentials, the Facebook session, and the

package/cli.js

@@ -3,7 +3,7 @@
 // src/cli/cli.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync2, readFileSync as readFileSync2, realpathSync } from "node:fs";
+import { existsSync as existsSync2, readFileSync as readFileSync3, realpathSync } from "node:fs";
 import { hostname, homedir } from "node:os";
 import { dirname as dirname3, join as join4 } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -2411,11 +2411,13 @@ function terminalQr(value) {
 // src/cli/virtual-display.ts
 import { spawn } from "node:child_process";
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { mkdirSync as mkdirSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { createConnection } from "node:net";
 import { networkInterfaces } from "node:os";
 import { join as join3 } from "node:path";
 var START_TIMEOUT_MS = 15e3;
+var PUBLIC_IP_TIMEOUT_MS = 3e3;
+var PUBLIC_IP_ENDPOINT = "https://api.ipify.org";
 function waitForPort(host, port, timeoutMs) {
   const deadline = Date.now() + timeoutMs;
   return new Promise((resolve, reject) => {
@@ -2437,13 +2439,36 @@ function waitForPort(host, port, timeoutMs) {
     attempt();
   });
 }
-function localAddress() {
-  for (const addresses of Object.values(networkInterfaces())) {
-    for (const address of addresses ?? []) {
-      if (address.family === "IPv4" && !address.internal) return address.address;
+function isPrivateAddress(address) {
+  const [first, second] = address.split(".").map(Number);
+  return first === 10 || first === 127 || first === 169 && second === 254 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168 || first === 100 && second >= 64 && second <= 127;
+}
+function defaultRouteInterface() {
+  if (process.platform !== "linux") return null;
+  try {
+    for (const line of readFileSync2("/proc/net/route", "utf8").split("\n").slice(1)) {
+      const [iface, destination, , , , , flags] = line.trim().split(/\s+/);
+      if (destination === "00000000" && Number.parseInt(flags ?? "0", 16) & 2) return iface;
     }
+  } catch {
+  }
+  return null;
+}
+function localAddress() {
+  const interfaces = networkInterfaces();
+  const addressOf = (addresses) => addresses?.find((entry) => entry.family === "IPv4" && !entry.internal)?.address ?? null;
+  const preferred = defaultRouteInterface();
+  return (preferred ? addressOf(interfaces[preferred]) : null) ?? Object.values(interfaces).map(addressOf).find((address) => address !== null) ?? "127.0.0.1";
+}
+async function detectPublicIp(fetcher = fetch) {
+  try {
+    const response = await fetcher(PUBLIC_IP_ENDPOINT, { signal: AbortSignal.timeout(PUBLIC_IP_TIMEOUT_MS) });
+    if (!response.ok) return null;
+    const value = (await response.text()).trim();
+    return /^\d{1,3}(?:\.\d{1,3}){3}$/.test(value) ? value : null;
+  } catch {
+    return null;
   }
-  return "127.0.0.1";
 }
 function start(command, args, env, deps) {
   const child = deps.spawnProcess(command, args, env);
@@ -2454,7 +2479,13 @@ function start(command, args, env, deps) {
   return { child, failure };
 }
 async function startVirtualDisplay(options, overrides = {}) {
-  const deps = { spawnProcess: spawn, waitForPort, ...overrides };
+  const deps = {
+    detectPublicIp: () => detectPublicIp(),
+    localAddress,
+    spawnProcess: spawn,
+    waitForPort,
+    ...overrides
+  };
   const bind = options.bind ?? "0.0.0.0";
   const displayNumber = options.displayNumber ?? 99;
   const height = options.height ?? 900;
@@ -2488,10 +2519,13 @@ async function startVirtualDisplay(options, overrides = {}) {
     await stop();
     throw error;
   }
-  const publicHost = options.publicHost ?? localAddress();
+  const publicHost = options.publicHost ?? deps.localAddress();
+  const link = (host) => `http://${host}:${port}/vnc.html?autoconnect=1&token=${encodeURIComponent(token)}`;
+  const publicIp = options.publicHost || !isPrivateAddress(publicHost) ? null : await deps.detectPublicIp();
   return {
+    alternateUrl: publicIp && publicIp !== publicHost ? link(publicIp) : null,
     stop,
-    url: `http://${publicHost}:${port}/vnc.html?autoconnect=1&token=${encodeURIComponent(token)}`
+    url: link(publicHost)
   };
 }
 
@@ -2512,13 +2546,14 @@ Global options:
   --config <directory>   Agent state directory (default ~/.diggylab)
   --api <origin>         API origin (default $DIGGYLAB_API_URL or https://api.diggylab.com)`;
 var MISSING_BROWSER_HINT = "Chromium for Playwright is not installed yet. Run `diggylab install-browser` once.";
+var MISSING_DISPLAY_HINT = "The shared login screen needs Xvfb, x11vnc, websockify, and noVNC. Install them (apt install xvfb x11vnc websockify novnc) or use the Docker image.";
 function agentVersion() {
   let directory = fileURLToPath(new URL(".", import.meta.url));
   for (let depth = 0; depth < 4; depth += 1) {
     const manifest = join4(directory, "package.json");
     if (existsSync2(manifest)) {
       try {
-        const version = JSON.parse(readFileSync2(manifest, "utf8")).version;
+        const version = JSON.parse(readFileSync3(manifest, "utf8")).version;
         if (typeof version === "string" && version) return version;
       } catch {
       }
@@ -2640,18 +2675,23 @@ async function commandLogin(runtime, options, io) {
     if (!needsVirtualDisplay) {
       io.log(process.env.DISPLAY ? `Opening the Facebook login page on display ${process.env.DISPLAY}.` : "Opening the Facebook login page in a browser window.");
     } else {
+      const configuredHost = options.publicHost ?? process.env.DIGGYLAB_PUBLIC_HOST?.trim();
       display = await startVirtualDisplay({
         bind: options.bind,
         displayNumber: options.display,
         novncWeb: options.novncWeb,
         port: options.port,
-        publicHost: options.publicHost,
+        publicHost: configuredHost || void 0,
         tokenDirectory: join4(runtime.directory, "novnc")
       });
       process.env.DISPLAY = `:${options.display ?? 99}`;
       io.log(terminalQr(display.url));
       io.log(`Open this link on your phone, or scan the QR above:
 ${display.url}`);
+      if (display.alternateUrl) {
+        io.log(`Phone on another network? Forward port ${options.port ?? 6080} and use:
+${display.alternateUrl}`);
+      }
       io.log("Log into Facebook on that screen; the agent saves the session automatically.");
     }
     await waitForFacebookLogin(login, LOGIN_TIMEOUT_MS + 6e4);
@@ -2659,6 +2699,10 @@ ${display.url}`);
     return 0;
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
+    if (/spawn (?:Xvfb|x11vnc|websockify) ENOENT/.test(message)) {
+      io.error(MISSING_DISPLAY_HINT);
+      return 1;
+    }
     if (/Executable doesn't exist|playwright install/i.test(message)) {
       io.error(MISSING_BROWSER_HINT);
       return 1;
@@ -2683,11 +2727,16 @@ async function commandInstallBrowser(io) {
     return 1;
   }
   io.log("Downloading Chromium for Playwright...");
-  const code = await new Promise((resolve, reject) => {
-    const child = spawn2(process.execPath, [cli, "install", "chromium"], { stdio: "inherit" });
+  const run = (args) => new Promise((resolve, reject) => {
+    const child = spawn2(process.execPath, [cli, ...args], { stdio: "inherit" });
     child.once("error", reject);
     child.once("exit", (value) => resolve(value ?? 1));
   });
+  let code = process.platform === "linux" ? await run(["install", "--with-deps", "chromium"]) : 0;
+  if (code !== 0) {
+    io.log("Installing the system libraries failed; downloading the browser only...");
+    code = await run(["install", "chromium"]);
+  }
   if (code !== 0) {
     io.error("Chromium download failed. Check the network and try again.");
     return code;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "diggylab",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "DiggyLab Desktop Agent collects posts and information from Facebook Groups on a paired computer. (headless CLI)",
   "type": "module",
   "bin": {
@@ -11,7 +11,7 @@
     "README.md"
   ],
   "engines": {
-    "node": ">=22"
+    "node": ">=20"
   },
   "dependencies": {
     "playwright": "^1.62.0",