infinicode 2.8.113 → 2.8.115

package/README.md

@@ -130,7 +130,25 @@ infinicode serve --hub --gateway ws://<infinibot-host>:18789 --gateway-token <to
 
 Discovery options: `--lan` (same subnet, zero-config UDP broadcast, port 47915), `--tailscale` (LAN+remote), `--seed <url>` (exact) — they combine. Full guide: `docs/user-manual.html`; design deep-dive: `docs/federation-architecture.html`.
 
-> The Windows TUI binaries are not shipped in the npm package (they're large and platform-specific), so `infinicode run` needs a local TUI build; the mesh commands (`serve`, `mcp`, `mission`, `console`) run everywhere as pure Node.
+### One-link MCP mesh connection
+
+On the first Tailscale device, generate the direct link and start MCP. Infinicode creates and persists the shared token automatically:
+
+```bash
+infinicode mesh link
+infinicode mcp --tailscale
+```
+
+Give the single generated `http://.../fed/join?token=...` URL to the agent on the second device. It can connect immediately with either:
+
+```bash
+infinicode mcp --connect "PASTE_LINK_HERE"
+infinicode mesh join "PASTE_LINK_HERE" --host opencode
+```
+
+The first form runs an MCP instance directly. The second persists the same MCP connection in OpenCode or Claude (`--host all` configures both). The link is a credential: share it only inside the tailnet and rotate the mesh token if it leaks.
+
+> The Windows TUI binaries are not shipped in the npm package (they're large and platform-specific), so `infinicode run` needs a local TUI build; the mesh commands (`serve`, `mcp`, `mission`, `console`) run everywhere as pure Node.
 
 ### As a library
 
@@ -621,4 +639,4 @@ MIT
 
 ---
 
-⚡ Built for sovereign computing. Your code, your models, your hardware.
+⚡ Built for sovereign computing. Your code, your models, your hardware.

package/dist/cli.js

@@ -16,6 +16,7 @@ import { serve } from './commands/serve.js';
 import { mcpCommand } from './commands/mcp.js';
 import { maintain } from './commands/maintain.js';
 import { meshInstall, meshUninstall } from './commands/mesh-install.js';
+import { meshLink } from './commands/mesh-link.js';
 import { installTui } from './commands/install-tui.js';
 import { attachRoboparkSubcommands } from './commands/robopark.js';
 import { DEFAULT_CONFIG } from './kernel/config-schema.js';
@@ -351,12 +352,33 @@ meshCmd
     .option('--host <host>', 'target host: claude | opencode | all', 'claude')
     .option('--token <token>', 'shared bearer token every device must present (recommended off-LAN)')
     .option('--name <name>', 'friendly node name for this device')
+    .option('--link <url>', 'direct mesh join URL generated on the other device')
     .option('--tailscale', 'discover peers over Tailscale instead of / as well as the LAN')
     .option('--no-lan', 'disable zero-config LAN auto-discovery')
     .option('--print', 'dry run — show what would be written without changing anything')
     .action(async (opts) => {
     await meshInstall(opts);
 });
+meshCmd
+    .command('link')
+    .description('Generate one direct Tailscale URL another MCP agent can use to join this mesh')
+    .option('--host <host>', 'Tailscale MagicDNS name or 100.x IP (auto-detected by default)')
+    .option('--port <port>', 'MCP mesh port on this device (default: serve port + 1)')
+    .option('--token <token>', 'shared mesh token (defaults to saved federation token)')
+    .option('--https', 'generate an https:// link for a TLS-enabled mesh node')
+    .option('--quiet', 'print only the URL')
+    .action(async (opts) => {
+    await meshLink(config, opts);
+});
+meshCmd
+    .command('join <link>')
+    .description('Install a direct mesh URL into Claude Code and/or OpenCode')
+    .option('--host <host>', 'target host: claude | opencode | all', 'all')
+    .option('--name <name>', 'friendly node name for this device')
+    .option('--print', 'dry run - show what would be written')
+    .action(async (link, opts) => {
+    await meshInstall({ ...opts, link, lan: false });
+});
 meshCmd
     .command('uninstall')
     .description('Remove the infinicode MCP server from your coding host')
@@ -387,6 +409,7 @@ program
     .option('--lan', 'auto-discover + connect peers on the same LAN via UDP broadcast (no seed/Tailscale needed)')
     .option('--lan-port <port>', 'UDP discovery port for --lan (default 47915)')
     .option('--tag <tag>', 'only discover peers carrying this tag (Tailscale ACL tag or LAN beacon tag)')
+    .option('--connect <url>', 'single direct mesh join URL generated by `infinicode mesh link`')
     .action(async (opts) => {
     await mcpCommand(config, opts);
 });

package/dist/commands/mcp.d.ts

@@ -10,5 +10,7 @@ export interface McpOptions {
     tag?: string;
     lan?: boolean;
     lanPort?: string;
+    /** Canonical URL generated by `infinicode mesh link`. */
+    connect?: string;
 }
 export declare function mcpCommand(config: Conf<InfinicodeConfig>, opts: McpOptions): Promise<void>;

package/dist/commands/mcp.js

@@ -14,6 +14,7 @@ import { fileURLToPath } from 'node:url';
 import { dirname, join } from 'node:path';
 import { buildKernelFromConfig, registerCloudProviders } from '../kernel/setup.js';
 import { Federation, GoalLoop, loadOrCreateIdentity, serveMcpStdio, SilentLogger, } from '../kernel/index.js';
+import { parseMeshJoinLink, redactMeshJoinLink } from '../kernel/federation/mesh-link.js';
 function pkgVersion() {
     try {
         const here = dirname(fileURLToPath(import.meta.url));
@@ -32,10 +33,14 @@ const stderrLogger = {
 };
 export async function mcpCommand(config, opts) {
     const fed = config.get('federation') ?? {};
+    const direct = opts.connect ? parseMeshJoinLink(opts.connect) : undefined;
     const role = (opts.role ?? fed.role ?? 'peer');
     // Default to 47914 so a co-located `infinicode serve` (47913) doesn't clash.
     const port = opts.meshPort ? parseInt(opts.meshPort, 10) : (fed.port ?? 47913) + 1;
-    const token = opts.token ?? fed.token;
+    if (opts.token && direct?.token && opts.token !== direct.token) {
+        throw new Error('the explicit --token does not match the direct mesh link token');
+    }
+    const token = opts.token ?? direct?.token ?? fed.token;
     const version = pkgVersion();
     const kernel = buildKernelFromConfig(config, { logger: new SilentLogger() });
     const identity = loadOrCreateIdentity({ role, displayName: opts.name ?? fed.displayName });
@@ -94,9 +99,15 @@ export async function mcpCommand(config, opts) {
         // Continue serving MCP tools; dispatch will report "no peers" until fixed.
     }
     // Join the mesh: static seeds + optional Tailscale discovery.
-    const seeds = [...(fed.seeds ?? []), ...(opts.seed ?? [])];
-    for (const url of seeds)
-        await federation.connect(url).catch(() => null);
+    const seeds = [...(fed.seeds ?? []), ...(opts.seed ?? []), ...(direct ? [direct.seed] : [])];
+    for (const url of [...new Set(seeds)]) {
+        const peer = await federation.connect(url).catch(() => null);
+        if (direct && url === direct.seed) {
+            if (!peer)
+                throw new Error(`direct mesh connection failed: ${redactMeshJoinLink(direct.link)}`);
+            stderrLogger.info(`direct mesh connected to ${peer.displayName} @ ${url}`);
+        }
+    }
     if (opts.tailscale) {
         const n = await federation.discoverAndConnect(opts.tag).catch(() => 0);
         stderrLogger.info(`tailscale discovery connected ${n} peer(s)`);

package/dist/commands/mesh-install.d.ts

@@ -3,6 +3,7 @@ export interface MeshInstallOptions {
     token?: string;
     name?: string;
     tailscale?: boolean;
+    link?: string;
     lan?: boolean;
     print?: boolean;
 }

package/dist/commands/mesh-install.js

@@ -17,6 +17,7 @@ import { homedir } from 'node:os';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { findExecutable } from '../kernel/agents/backends/detect.js';
+import { parseMeshJoinLink, redactMeshJoinLink } from '../kernel/federation/mesh-link.js';
 /** How a host should spawn the infinicode MCP node. Resolves a global binary
  *  if present, else falls back to `node <this package's cli.js>`. */
 function resolveLaunch() {
@@ -29,12 +30,18 @@ function resolveLaunch() {
 /** The `infinicode mcp …` argv the host should run. */
 function meshArgs(opts) {
     const args = ['mcp'];
-    if (opts.lan !== false)
-        args.push('--lan');
-    if (opts.tailscale)
-        args.push('--tailscale');
-    if (opts.token)
-        args.push('--token', opts.token);
+    if (opts.link) {
+        parseMeshJoinLink(opts.link);
+        args.push('--connect', opts.link);
+    }
+    else {
+        if (opts.lan !== false)
+            args.push('--lan');
+        if (opts.tailscale)
+            args.push('--tailscale');
+        if (opts.token)
+            args.push('--token', opts.token);
+    }
     if (opts.name)
         args.push('--name', opts.name);
     return args;
@@ -114,6 +121,7 @@ function selectedHosts(host) {
     return ['claude'];
 }
 export async function meshInstall(opts) {
+    const direct = opts.link ? parseMeshJoinLink(opts.link) : undefined;
     const hosts = selectedHosts(opts.host);
     console.log(chalk.bold('\n🕸  infinicode mesh — MCP registration\n'));
     for (const host of hosts) {
@@ -121,7 +129,10 @@ export async function meshInstall(opts) {
         const label = host === 'claude' ? 'Claude Code' : 'OpenCode';
         const verb = opts.print ? 'would write' : res.existed ? 'updated' : 'added';
         console.log(`  ${chalk.green('✓')} ${chalk.cyan(label)} — ${verb} ${chalk.dim(res.path)}`);
-        console.log(chalk.dim(`      ${JSON.stringify(res.entry)}`));
+        const shown = opts.link
+            ? JSON.stringify(res.entry).split(opts.link).join(redactMeshJoinLink(opts.link))
+            : JSON.stringify(res.entry);
+        console.log(chalk.dim(`      ${shown}`));
     }
     // Warn if the target CLI backend isn't installed on THIS machine — a worker
     // node can only run agents for CLIs it actually has.
@@ -138,10 +149,16 @@ export async function meshInstall(opts) {
         return;
     }
     console.log(chalk.bold('\n  Next:'));
-    console.log(`    1. Run the SAME command on the other laptop.`);
-    console.log(`    2. Restart your coding host (Claude Code) on both.`);
-    console.log(`    3. Ask it: ${chalk.italic('"list_nodes"')} then ${chalk.italic('"spawn_agent on <laptop> with agent claude to …"')}`);
-    if (!opts.token) {
+    if (direct) {
+        console.log(`    1. Restart the coding host on this device.`);
+        console.log(`    2. Ask the agent to call ${chalk.italic('"list_nodes"')}.`);
+    }
+    else {
+        console.log(`    1. Run the SAME command on the other laptop.`);
+        console.log(`    2. Restart your coding host (Claude Code) on both.`);
+        console.log(`    3. Ask it: ${chalk.italic('"list_nodes"')} then ${chalk.italic('"spawn_agent on <laptop> with agent claude to …"')}`);
+    }
+    if (!opts.token && !direct?.token) {
         console.log(chalk.dim(`\n  Tip: on an untrusted network, re-run with --token <secret> on every device.`));
     }
     console.log();

package/dist/commands/mesh-link.d.ts

@@ -0,0 +1,10 @@
+import type Conf from 'conf';
+import type { InfinicodeConfig } from '../kernel/config-schema.js';
+export interface MeshLinkOptions {
+    host?: string;
+    port?: string;
+    token?: string;
+    https?: boolean;
+    quiet?: boolean;
+}
+export declare function meshLink(config: Conf<InfinicodeConfig>, opts: MeshLinkOptions): Promise<string>;

package/dist/commands/mesh-link.js

@@ -0,0 +1,46 @@
+import chalk from 'chalk';
+import { execa } from 'execa';
+import { randomBytes } from 'node:crypto';
+import { buildMeshJoinLink } from '../kernel/federation/mesh-link.js';
+async function tailscaleHost() {
+    try {
+        const { stdout } = await execa('tailscale', ['status', '--json'], { timeout: 5000 });
+        const self = JSON.parse(stdout).Self;
+        const dns = self?.DNSName?.replace(/\.$/, '');
+        if (dns)
+            return dns;
+        return self?.TailscaleIPs?.find(ip => ip.includes('.'));
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function meshLink(config, opts) {
+    const fed = config.get('federation') ?? {};
+    const host = opts.host?.trim() || await tailscaleHost();
+    if (!host)
+        throw new Error('Tailscale address unavailable; run tailscale up or pass --host <MagicDNS-name-or-100.x-IP>');
+    const rawPort = opts.port ?? String((fed.port ?? 47913) + 1);
+    const port = Number.parseInt(rawPort, 10);
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        throw new Error('mesh link port must be between 1 and 65535');
+    const generatedToken = !opts.token && !fed.token;
+    const token = opts.token ?? fed.token ?? randomBytes(24).toString('base64url');
+    if (token !== fed.token)
+        config.set('federation', { ...fed, token });
+    const bracketedHost = host.includes(':') && !host.startsWith('[') ? `[${host}]` : host;
+    const link = buildMeshJoinLink(`${opts.https ? 'https' : 'http'}://${bracketedHost}:${port}`, token);
+    if (opts.quiet) {
+        console.log(link);
+        return link;
+    }
+    console.log(chalk.bold('\n  Infinicode direct mesh link'));
+    console.log(chalk.cyan(`  ${link}`));
+    console.log(chalk.green(`\n  ${generatedToken ? 'Generated and saved a new mesh token.' : 'Mesh token saved and ready.'}`));
+    console.log(chalk.dim('\n  Give this one URL to the agent on the other device.'));
+    console.log(`  Direct MCP: ${chalk.cyan(`infinicode mcp --connect "${link}"`)}`);
+    console.log(`  OpenCode/Claude: ${chalk.cyan(`infinicode mesh join "${link}" --host all`)}`);
+    console.log(chalk.yellow('\n  This link grants mesh access. Treat it like a password and rotate the token if shared accidentally.'));
+    console.log();
+    return link;
+}