forge-remote 0.1.0

package/src/init.js

@@ -0,0 +1,645 @@
+// Forge Remote Relay — Desktop Agent for Forge Remote
+// Copyright (c) 2025-2026 Iron Forge Apps
+// Created by Daniel Wendel, CEO/Founder of Iron Forge Apps
+// AGPL-3.0 License — See LICENSE
+
+import { execSync } from "child_process";
+import { hostname, platform, homedir } from "os";
+import { existsSync, mkdirSync, writeFileSync, readFileSync } from "fs";
+import { join, dirname } from "path";
+import { fileURLToPath } from "url";
+import { initializeApp, cert } from "firebase-admin/app";
+import { getFirestore, FieldValue } from "firebase-admin/firestore";
+import qrcode from "qrcode-terminal";
+import chalk from "chalk";
+
+// ─── Helpers ────────────────────────────────────────────────────────────────
+
+/**
+ * Run a shell command and return stdout (trimmed).
+ * Returns null if the command fails.
+ */
+function run(cmd, { silent = false } = {}) {
+  try {
+    return execSync(cmd, {
+      encoding: "utf-8",
+      stdio: silent ? "pipe" : ["pipe", "pipe", "pipe"],
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Run a shell command, throwing on failure with a descriptive message.
+ */
+function runOrFail(cmd, errorMsg) {
+  try {
+    return execSync(cmd, {
+      encoding: "utf-8",
+      stdio: ["pipe", "pipe", "pipe"],
+    }).trim();
+  } catch (e) {
+    const stderr = e.stderr ? e.stderr.toString().trim() : e.message;
+    throw new Error(`${errorMsg}\n  Command: ${cmd}\n  ${stderr}`);
+  }
+}
+
+/**
+ * Get a sanitized hostname suitable for a Firebase project ID.
+ * Max 30 chars total (including "forge-remote-" prefix), alphanumeric + hyphens.
+ */
+function sanitizedHostname() {
+  const raw = hostname()
+    .toLowerCase()
+    .replace(/\.local$/, "")
+    .replace(/[^a-z0-9-]/g, "-")
+    .replace(/-+/g, "-")
+    .replace(/^-|-$/g, "");
+  // "forge-remote-" is 13 chars, so hostname portion is max 17 chars.
+  return raw.slice(0, 17);
+}
+
+/**
+ * Get platform name from os.platform().
+ */
+function getPlatformName() {
+  const p = platform();
+  if (p === "darwin") return "macos";
+  if (p === "win32") return "windows";
+  return "linux";
+}
+
+/**
+ * Get a stable desktop ID based on hostname.
+ */
+function getDesktopId() {
+  const name = hostname()
+    .toLowerCase()
+    .replace(/[^a-z0-9]/g, "-");
+  return `desktop-${name}`;
+}
+
+/**
+ * Walk up from a starting directory to find a file.
+ */
+function findFileUpwards(filename, startDir) {
+  let dir = startDir;
+  while (true) {
+    const candidate = join(dir, filename);
+    if (existsSync(candidate)) return candidate;
+    const parent = dirname(dir);
+    if (parent === dir) return null; // reached filesystem root
+    dir = parent;
+  }
+}
+
+// ─── Main init flow ─────────────────────────────────────────────────────────
+
+/**
+ * Run the full Forge Remote initialization:
+ *   1. Check Firebase CLI
+ *   2. Check Firebase login
+ *   3. Generate / confirm project name
+ *   4. Create Firebase project
+ *   5. Create web app
+ *   6. Get SDK config
+ *   7. Enable Firestore
+ *   8. Deploy security rules (if found)
+ *   9. Set up service account credentials
+ *  10. Register desktop in Firestore
+ *  11. Build QR payload
+ *  12. Display QR code + success message
+ */
+export async function runInit({ projectId: overrideProjectId } = {}) {
+  const forgeDir = join(homedir(), ".forge-remote");
+  const line = "═".repeat(50);
+
+  console.log(`\n${chalk.bold.cyan(line)}`);
+  console.log(chalk.bold.cyan("  ⚡ FORGE REMOTE INIT"));
+  console.log(`${chalk.bold.cyan(line)}\n`);
+  console.log(
+    chalk.dim("  This command will set up a Firebase project for Forge Remote"),
+  );
+  console.log(
+    chalk.dim("  and generate a QR code to pair with the mobile app.\n"),
+  );
+
+  // ── Step 1: Check Firebase CLI ──────────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 1/12 — Checking Firebase CLI...\n"));
+
+  const firebaseVersion = run("firebase --version", { silent: true });
+  if (!firebaseVersion) {
+    console.error(chalk.red("Firebase CLI not found."));
+    console.error(
+      chalk.yellow("Install it with:\n\n  npm install -g firebase-tools\n"),
+    );
+    console.error(chalk.dim("Then run this command again: forge-remote init"));
+    process.exit(1);
+  }
+  console.log(chalk.green(`  ✓ Firebase CLI ${firebaseVersion}`));
+
+  // ── Step 2: Check Firebase login ────────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 2/12 — Checking Firebase login...\n"));
+
+  const loginList = run("firebase login:list", { silent: true });
+  const isLoggedIn = loginList && !loginList.includes("No authorized accounts");
+
+  if (!isLoggedIn) {
+    console.log(
+      chalk.yellow("  Not logged into Firebase. Opening login flow...\n"),
+    );
+    try {
+      execSync("firebase login", { stdio: "inherit" });
+    } catch {
+      console.error(chalk.red("\n  Firebase login failed or was cancelled."));
+      console.error(
+        chalk.dim("  Run `firebase login` manually, then retry.\n"),
+      );
+      process.exit(1);
+    }
+  }
+
+  // Re-check after login.
+  const loginListAfter = run("firebase login:list", { silent: true });
+  if (!loginListAfter || loginListAfter.includes("No authorized accounts")) {
+    console.error(chalk.red("  Firebase login required. Aborting.\n"));
+    process.exit(1);
+  }
+  console.log(chalk.green("  ✓ Logged into Firebase"));
+
+  // ── Step 3: Generate project name ───────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 3/12 — Generating project name...\n"));
+
+  const defaultProjectId = `forge-remote-${sanitizedHostname()}`;
+  const projectId = overrideProjectId || defaultProjectId;
+  console.log(chalk.dim(`  Using project ID: ${projectId}`));
+  if (!overrideProjectId) {
+    console.log(
+      chalk.dim(`  (Override with: forge-remote init --project-id <id>)`),
+    );
+  }
+
+  // Validate project ID.
+  if (!/^[a-z][a-z0-9-]{4,28}[a-z0-9]$/.test(projectId)) {
+    console.error(
+      chalk.red(
+        "\n  Invalid project ID. Must be 6-30 chars, lowercase alphanumeric + hyphens,",
+      ),
+    );
+    console.error(
+      chalk.red(
+        "  starting with a letter and ending with a letter or number.\n",
+      ),
+    );
+    process.exit(1);
+  }
+
+  console.log(chalk.green(`  ✓ Project ID: ${projectId}`));
+
+  // ── Step 4: Create Firebase project ─────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 4/12 — Creating Firebase project...\n"));
+
+  try {
+    const createResult = runOrFail(
+      `firebase projects:create ${projectId} --display-name "Forge Remote"`,
+      "Failed to create Firebase project.",
+    );
+    console.log(chalk.green(`  ✓ Firebase project created: ${projectId}`));
+    console.log(chalk.dim(`  ${createResult.split("\n").pop()}`));
+  } catch (e) {
+    const msg = e.message || "";
+    if (
+      msg.includes("already exists") ||
+      msg.includes("ALREADY_EXISTS") ||
+      msg.includes("already being used")
+    ) {
+      console.log(
+        chalk.yellow(`  ⚠ Project "${projectId}" already exists — reusing it.`),
+      );
+    } else {
+      console.error(chalk.red(`  ✗ ${e.message}`));
+      console.error(
+        chalk.dim(
+          "\n  If the project ID is taken, re-run with a different name.\n",
+        ),
+      );
+      process.exit(1);
+    }
+  }
+
+  // ── Step 5: Create web app ──────────────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 5/12 — Creating web app...\n"));
+
+  let appId = null;
+
+  try {
+    const createAppOutput = runOrFail(
+      `firebase apps:create web "Forge Remote Mobile" --project ${projectId}`,
+      "Failed to create web app.",
+    );
+
+    // Parse the app ID from the output.
+    // The output typically contains "App ID: 1:xxxx:web:xxxx" or similar.
+    const appIdMatch = createAppOutput.match(/(?:App ID|appId)[:\s]+(\S+)/i);
+    if (appIdMatch) {
+      appId = appIdMatch[1];
+    }
+    console.log(chalk.green(`  ✓ Web app created`));
+  } catch (e) {
+    const msg = e.message || "";
+    if (msg.includes("already exists") || msg.includes("ALREADY_EXISTS")) {
+      console.log(
+        chalk.yellow("  ⚠ Web app already exists — fetching existing app ID."),
+      );
+    } else {
+      console.error(chalk.red(`  ✗ ${e.message}`));
+      process.exit(1);
+    }
+  }
+
+  // If we didn't parse the app ID from creation output, list apps to find it.
+  if (!appId) {
+    try {
+      const appsList = runOrFail(
+        `firebase apps:list --project ${projectId}`,
+        "Failed to list apps.",
+      );
+
+      // Look for a WEB app ID in the table output.
+      const lines = appsList.split("\n");
+      for (const appLine of lines) {
+        if (appLine.includes("WEB") || appLine.includes("web")) {
+          const idMatch = appLine.match(/1:\d+:web:[a-f0-9]+/);
+          if (idMatch) {
+            appId = idMatch[0];
+            break;
+          }
+        }
+      }
+
+      if (!appId) {
+        // Try a broader pattern — any app ID in the list.
+        for (const appLine of lines) {
+          const idMatch = appLine.match(/1:\d+:web:[a-f0-9]+/);
+          if (idMatch) {
+            appId = idMatch[0];
+            break;
+          }
+        }
+      }
+    } catch (e) {
+      console.error(chalk.red(`  ✗ Could not determine web app ID.`));
+      console.error(chalk.dim(`  ${e.message}\n`));
+      process.exit(1);
+    }
+  }
+
+  if (!appId) {
+    console.error(chalk.red("  ✗ Could not determine web app ID."));
+    console.error(
+      chalk.dim(
+        "  Run `firebase apps:list --project " + projectId + "` to find it.\n",
+      ),
+    );
+    process.exit(1);
+  }
+
+  console.log(chalk.green(`  ✓ App ID: ${appId}`));
+
+  // ── Step 6: Get SDK config ──────────────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 6/12 — Fetching SDK config...\n"));
+
+  let sdkConfig = {};
+
+  try {
+    const sdkOutput = runOrFail(
+      `firebase apps:sdkconfig web ${appId} --project ${projectId}`,
+      "Failed to get SDK config.",
+    );
+
+    // Parse the config object from the output.
+    // The output contains a JS object like: { apiKey: "...", authDomain: "...", ... }
+    const parseField = (field) => {
+      const regex = new RegExp(`${field}:\\s*"([^"]+)"`);
+      const match = sdkOutput.match(regex);
+      return match ? match[1] : null;
+    };
+
+    sdkConfig = {
+      apiKey: parseField("apiKey"),
+      authDomain: parseField("authDomain"),
+      projectId: parseField("projectId"),
+      storageBucket: parseField("storageBucket"),
+      messagingSenderId: parseField("messagingSenderId"),
+      appId: parseField("appId"),
+    };
+
+    // Validate we got the critical fields.
+    if (!sdkConfig.apiKey || !sdkConfig.projectId) {
+      throw new Error(
+        "Could not parse apiKey or projectId from SDK config output.",
+      );
+    }
+
+    console.log(chalk.green("  ✓ SDK config retrieved"));
+    console.log(chalk.dim(`    apiKey:             ${sdkConfig.apiKey}`));
+    console.log(chalk.dim(`    projectId:          ${sdkConfig.projectId}`));
+    console.log(chalk.dim(`    appId:              ${sdkConfig.appId}`));
+    console.log(
+      chalk.dim(`    messagingSenderId:  ${sdkConfig.messagingSenderId}`),
+    );
+    console.log(
+      chalk.dim(`    storageBucket:      ${sdkConfig.storageBucket}`),
+    );
+
+    // Cache SDK config so `pair` can read it without the Firebase CLI.
+    const sdkCachePath = join(forgeDir, "sdk-config.json");
+    writeFileSync(sdkCachePath, JSON.stringify(sdkConfig, null, 2));
+  } catch (e) {
+    console.error(chalk.red(`  ✗ ${e.message}`));
+    process.exit(1);
+  }
+
+  // ── Step 7: Enable Firestore ────────────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 7/12 — Enabling Firestore...\n"));
+
+  try {
+    runOrFail(
+      `firebase firestore:databases:create default --project ${projectId} --location=nam5`,
+      "Failed to enable Firestore.",
+    );
+    console.log(chalk.green("  ✓ Firestore enabled (nam5 — US multi-region)"));
+  } catch (e) {
+    const msg = e.message || "";
+    if (
+      msg.includes("already exists") ||
+      msg.includes("ALREADY_EXISTS") ||
+      msg.includes("database already exists")
+    ) {
+      console.log(chalk.yellow("  ⚠ Firestore already enabled — continuing."));
+    } else {
+      console.error(chalk.red(`  ✗ ${e.message}`));
+      console.error(
+        chalk.dim("\n  You may need to enable Firestore manually at:"),
+      );
+      console.error(
+        chalk.dim(
+          `  https://console.firebase.google.com/project/${projectId}/firestore\n`,
+        ),
+      );
+      process.exit(1);
+    }
+  }
+
+  // ── Step 8: Deploy security rules ───────────────────────────────────────
+
+  console.log(
+    chalk.bold("\n📋 Step 8/12 — Deploying Firestore security rules...\n"),
+  );
+
+  // Walk up from the relay directory to find firestore.rules in the project root.
+  const __dirname = dirname(fileURLToPath(import.meta.url));
+  const rulesPath = findFileUpwards("firestore.rules", join(__dirname, ".."));
+
+  if (rulesPath) {
+    console.log(chalk.dim(`  Found rules at: ${rulesPath}`));
+    const rulesDir = dirname(rulesPath);
+
+    try {
+      // Deploy rules using the directory containing firestore.rules.
+      runOrFail(
+        `firebase deploy --only firestore:rules --project ${projectId}`,
+        "Failed to deploy Firestore security rules.",
+      );
+      console.log(chalk.green("  ✓ Firestore security rules deployed"));
+    } catch (e) {
+      console.warn(chalk.yellow(`  ⚠ Could not deploy rules automatically.`));
+      console.warn(chalk.dim(`  ${e.message}`));
+      console.warn(
+        chalk.dim(
+          "  You can deploy them manually: firebase deploy --only firestore:rules --project " +
+            projectId,
+        ),
+      );
+    }
+  } else {
+    console.log(chalk.yellow("  ⚠ No firestore.rules file found — skipping."));
+    console.log(
+      chalk.dim(
+        "  You can add rules later and deploy with: firebase deploy --only firestore:rules --project " +
+          projectId,
+      ),
+    );
+  }
+
+  // ── Step 9: Set up service account credentials ──────────────────────────
+
+  console.log(
+    chalk.bold("\n📋 Step 9/12 — Setting up service account credentials...\n"),
+  );
+
+  const saKeyPath = join(forgeDir, "service-account.json");
+
+  // Ensure ~/.forge-remote directory exists.
+  if (!existsSync(forgeDir)) {
+    mkdirSync(forgeDir, { recursive: true });
+  }
+
+  let saReady = false;
+
+  if (existsSync(saKeyPath)) {
+    console.log(
+      chalk.green(`  ✓ Service account key already exists at ${saKeyPath}`),
+    );
+    saReady = true;
+  } else {
+    // Try to find the service account email for this project.
+    let saEmail = null;
+
+    try {
+      const saListOutput = run(
+        `gcloud iam service-accounts list --project ${projectId} --format="value(email)" --filter="email:firebase-adminsdk"`,
+        { silent: true },
+      );
+      if (saListOutput) {
+        saEmail = saListOutput.split("\n")[0].trim();
+      }
+    } catch {
+      // gcloud not available — fall through to manual instructions.
+    }
+
+    if (saEmail) {
+      // gcloud is available — try to generate the key automatically.
+      console.log(chalk.dim(`  Found service account: ${saEmail}`));
+
+      try {
+        runOrFail(
+          `gcloud iam service-accounts keys create "${saKeyPath}" --iam-account="${saEmail}" --project="${projectId}"`,
+          "Failed to create service account key.",
+        );
+        console.log(
+          chalk.green(`  ✓ Service account key saved to ${saKeyPath}`),
+        );
+        saReady = true;
+      } catch (e) {
+        console.warn(chalk.yellow("  ⚠ Could not generate key automatically."));
+        console.warn(chalk.dim(`  ${e.message}`));
+      }
+    }
+
+    if (!saReady) {
+      // Fallback: guide the user to download manually.
+      const consoleUrl = `https://console.firebase.google.com/project/${projectId}/settings/serviceaccounts/adminsdk`;
+
+      console.log(
+        chalk.yellow("  gcloud CLI not available or key generation failed."),
+      );
+      console.log(
+        chalk.yellow("  Please download the service account key manually:\n"),
+      );
+      console.log(chalk.bold(`  1. Open: ${chalk.cyan(consoleUrl)}`));
+      console.log(chalk.bold('  2. Click "Generate new private key"'));
+      console.log(
+        chalk.bold(`  3. Save the file to: ${chalk.cyan(saKeyPath)}\n`),
+      );
+
+      console.log(
+        chalk.yellow(
+          `  Save the key to ${chalk.cyan(saKeyPath)} and re-run, or run ${chalk.cyan("forge-remote start")} once the key is in place.\n`,
+        ),
+      );
+    }
+  }
+
+  // ── Step 10: Register desktop in Firestore ──────────────────────────────
+
+  console.log(
+    chalk.bold("\n📋 Step 10/12 — Registering desktop in Firestore...\n"),
+  );
+
+  const desktopId = getDesktopId();
+  const platformName = getPlatformName();
+  const host = hostname();
+
+  if (saReady) {
+    try {
+      const serviceAccount = JSON.parse(readFileSync(saKeyPath, "utf-8"));
+
+      initializeApp({
+        credential: cert(serviceAccount),
+      });
+
+      const db = getFirestore();
+      const desktopRef = db.collection("desktops").doc(desktopId);
+      const doc = await desktopRef.get();
+
+      if (doc.exists) {
+        await desktopRef.update({
+          status: "online",
+          lastHeartbeat: FieldValue.serverTimestamp(),
+          platform: platformName,
+          hostname: host,
+        });
+      } else {
+        await desktopRef.set({
+          ownerUid: "", // Will be set during pairing.
+          hostname: host,
+          platform: platformName,
+          status: "online",
+          lastHeartbeat: FieldValue.serverTimestamp(),
+          projects: [],
+          createdAt: FieldValue.serverTimestamp(),
+        });
+      }
+
+      console.log(
+        chalk.green(`  ✓ Desktop registered: ${desktopId} (${host})`),
+      );
+    } catch (e) {
+      console.warn(
+        chalk.yellow(`  ⚠ Could not register desktop: ${e.message}`),
+      );
+      console.warn(
+        chalk.dim("  The relay will register on first `forge-remote start`.\n"),
+      );
+    }
+  } else {
+    console.log(
+      chalk.yellow(
+        "  ⚠ Skipping desktop registration (no service account key).",
+      ),
+    );
+    console.log(
+      chalk.dim("  The relay will register on first `forge-remote start`.\n"),
+    );
+  }
+
+  // ── Step 11: Build QR payload ───────────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 11/12 — Building pairing QR code...\n"));
+
+  const qrPayload = {
+    v: 1,
+    firebase: {
+      apiKey: sdkConfig.apiKey,
+      projectId: sdkConfig.projectId,
+      appId: sdkConfig.appId,
+      messagingSenderId: sdkConfig.messagingSenderId,
+      storageBucket: sdkConfig.storageBucket,
+    },
+    desktop: {
+      id: desktopId,
+      hostname: host,
+      platform: platformName,
+    },
+  };
+
+  const qrString = JSON.stringify(qrPayload);
+
+  // ── Step 12: Display QR code ────────────────────────────────────────────
+
+  console.log(chalk.bold("\n📋 Step 12/12 — Displaying QR code...\n"));
+
+  console.log(
+    chalk.cyan("  Scan this QR code with the Forge Remote mobile app:\n"),
+  );
+
+  qrcode.generate(qrString, { small: true });
+
+  console.log(chalk.dim("\n  Raw pairing data (for manual entry):\n"));
+  console.log(chalk.dim(`  ${qrString}\n`));
+
+  // ── Success! ────────────────────────────────────────────────────────────
+
+  const successLine = "═".repeat(50);
+
+  console.log(`\n${chalk.bold.green(successLine)}`);
+  console.log(chalk.bold.green("  ✓ FORGE REMOTE SETUP COMPLETE"));
+  console.log(`${chalk.bold.green(successLine)}\n`);
+
+  console.log(chalk.bold("  What's next:\n"));
+  console.log(`  1. Scan the QR code above with the Forge Remote app`);
+  console.log(`  2. Start the relay:  ${chalk.cyan("forge-remote start")}`);
+  console.log(
+    `  3. Open a Claude Code session and watch it appear in the app!\n`,
+  );
+
+  console.log(chalk.dim("  Your Firebase project:"));
+  console.log(
+    chalk.dim(`  https://console.firebase.google.com/project/${projectId}\n`),
+  );
+
+  console.log(
+    chalk.dim(
+      "  Love Forge Remote? Support us: https://github.com/sponsors/AirForgeApps\n",
+    ),
+  );
+}