infinicode 2.8.114 → 2.8.115

package/README.md

@@ -132,11 +132,11 @@ Discovery options: `--lan` (same subnet, zero-config UDP broadcast, port 47915),
 
 ### One-link MCP mesh connection
 
-On the first Tailscale device, start MCP with a shared token and generate its direct link:
+On the first Tailscale device, generate the direct link and start MCP. Infinicode creates and persists the shared token automatically:
 
 ```bash
-infinicode mesh link --token YOUR_SECRET
-infinicode mcp --tailscale --token YOUR_SECRET
+infinicode mesh link
+infinicode mcp --tailscale
 ```
 
 Give the single generated `http://.../fed/join?token=...` URL to the agent on the second device. It can connect immediately with either:

package/dist/commands/mesh-link.js

@@ -1,5 +1,6 @@
 import chalk from 'chalk';
 import { execa } from 'execa';
+import { randomBytes } from 'node:crypto';
 import { buildMeshJoinLink } from '../kernel/federation/mesh-link.js';
 async function tailscaleHost() {
     try {
@@ -23,7 +24,10 @@ export async function meshLink(config, opts) {
     const port = Number.parseInt(rawPort, 10);
     if (!Number.isInteger(port) || port < 1 || port > 65535)
         throw new Error('mesh link port must be between 1 and 65535');
-    const token = opts.token ?? fed.token;
+    const generatedToken = !opts.token && !fed.token;
+    const token = opts.token ?? fed.token ?? randomBytes(24).toString('base64url');
+    if (token !== fed.token)
+        config.set('federation', { ...fed, token });
     const bracketedHost = host.includes(':') && !host.startsWith('[') ? `[${host}]` : host;
     const link = buildMeshJoinLink(`${opts.https ? 'https' : 'http'}://${bracketedHost}:${port}`, token);
     if (opts.quiet) {
@@ -32,13 +36,11 @@ export async function meshLink(config, opts) {
     }
     console.log(chalk.bold('\n  Infinicode direct mesh link'));
     console.log(chalk.cyan(`  ${link}`));
+    console.log(chalk.green(`\n  ${generatedToken ? 'Generated and saved a new mesh token.' : 'Mesh token saved and ready.'}`));
     console.log(chalk.dim('\n  Give this one URL to the agent on the other device.'));
     console.log(`  Direct MCP: ${chalk.cyan(`infinicode mcp --connect "${link}"`)}`);
     console.log(`  OpenCode/Claude: ${chalk.cyan(`infinicode mesh join "${link}" --host all`)}`);
-    if (token)
-        console.log(chalk.yellow('\n  This link grants mesh access. Treat it like a password and rotate the token if shared accidentally.'));
-    else
-        console.log(chalk.yellow('\n  This mesh has no token. Add --token <secret> on both devices for production use.'));
+    console.log(chalk.yellow('\n  This link grants mesh access. Treat it like a password and rotate the token if shared accidentally.'));
     console.log();
     return link;
 }