// The e2e dev CLI: the same primitives scenarios use, interactive.//// bun scripts/cli.ts up selfhost [--share] [--keep-data]// bun scripts/cli.ts up cloud [--share]// bun scripts/cli.ts status// bun scripts/cli.ts identity <target> [--no-org]// bun scripts/cli.ts api <target> <group.endpoint> [json]// bun scripts/cli.ts mcp <target> tools | call <tool> [json]// bun scripts/cli.ts ledger <target> [workos|autumn]// bun scripts/cli.ts logs <target>// bun scripts/cli.ts down <target>//// Develop against a live instance with the exact machinery the tests use// (same boot recipe, same Target/identity/surfaces), then crystallize the// journey into a scenario. `up` leaves the instance running until `down` —// it IS the handoff demo (AGENTS.md: evidence, not assertions). `--share`// makes it reachable over the user's tailnet.//// Instances are tracked in .dev/<target>.json: a state file marks a// DELIBERATE long-lived instance (not a leak). Cloud's WorkOS/Autumn// emulators run inside the detached runner process this CLI spawns.import { spawn } from "node:child_process";import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";import { networkInterfaces } from "node:os";import { join } from "node:path";import { fileURLToPath } from "node:url"; const e2eDir = fileURLToPath(new URL("..", import.meta.url));const devDir = join(e2eDir, ".dev");const cliPath = fileURLToPath(import.meta.url); interface InstanceState { readonly target: "selfhost" | "cloud"; status: "starting" | "ready" | "failed"; error?: string; readonly runnerPid: number; childPids?: ReadonlyArray<number>; /** env other CLI commands must set before importing targets/registry. */ env?: Record<string, string>; urls?: Record<string, string>; admin?: { readonly email: string; readonly password: string }; /** tailscale serve --https ports to turn off on `down`. */ servePorts?: ReadonlyArray<number>; readonly logFile: string; readonly startedAt: string;} const statePath = (target: string) => join(devDir, `${target}.json`);const readState = (target: string): InstanceState | undefined => { try { return JSON.parse(readFileSync(statePath(target), "utf8")) as InstanceState; } catch { return undefined; }};const writeState = (state: InstanceState) => { mkdirSync(devDir, { recursive: true }); writeFileSync(statePath(state.target), JSON.stringify(state, null, 1));}; const alive = (pid: number): boolean => { try { process.kill(pid, 0); return true; } catch { return false; }}; const isInstanceState = (value: unknown): value is InstanceState => { if (!value || typeof value !== "object") return false; const v = value as Record<string, unknown>; return ( typeof v.target === "string" && typeof v.runnerPid === "number" && typeof v.startedAt === "string" );}; const appResponds = async (url: string): Promise<boolean> => { try { await fetch(url, { signal: AbortSignal.timeout(3000) }); return true; } catch { return false; }}; // --- tailnet helpers ------------------------------------------------------- const TAILSCALE_CANDIDATES = [ "tailscale", "/opt/homebrew/opt/tailscale/bin/tailscale", "/Applications/Tailscale.app/Contents/MacOS/Tailscale",]; const sh = (cmd: string, args: ReadonlyArray<string>): Promise<{ ok: boolean; out: string }> => new Promise((resolve) => { const child = spawn(cmd, [...args], { stdio: ["ignore", "pipe", "pipe"] }); let out = ""; child.stdout?.on("data", (d: Buffer) => (out += d.toString())); child.stderr?.on("data", (d: Buffer) => (out += d.toString())); child.on("error", () => resolve({ ok: false, out })); child.on("exit", (code) => resolve({ ok: code === 0, out })); }); const findTailscale = async (): Promise<string | undefined> => { for (const candidate of TAILSCALE_CANDIDATES) { const { ok } = await sh(candidate, ["version"]); if (ok) return candidate; } return undefined;}; /** This machine's tailnet IPv4 (100.x.y.z), from interfaces — works even * when the tailscale CLI is a broken shim. */const tailnetIp = (): string | undefined => { for (const addrs of Object.values(networkInterfaces())) { for (const addr of addrs ?? []) { if (addr.family === "IPv4" && addr.address.startsWith("100.")) return addr.address; } } return undefined;}; const tailnetDnsName = async (ts: string): Promise<string | undefined> => { const { ok, out } = await sh(ts, ["status", "--json"]); if (!ok) return undefined; try { const dns = (JSON.parse(out) as { Self?: { DNSName?: string } }).Self?.DNSName; return dns?.replace(/\.$/, ""); } catch { return undefined; }}; // --- up -------------------------------------------------------------------- const up = async (target: string, flags: ReadonlySet<string>) => { if (target !== "selfhost" && target !== "cloud") { throw new Error(`unknown target ${JSON.stringify(target)} — selfhost | cloud`); } const existing = readState(target); if (existing && alive(existing.runnerPid) && existing.status !== "failed") { console.log(`${target} already up (runner ${existing.runnerPid}):`); printInstance(existing); return; } rmSync(statePath(target), { force: true }); mkdirSync(devDir, { recursive: true }); const logFile = join(devDir, `${target}.log`); rmSync(logFile, { force: true }); const runnerArgs = [cliPath, "__run", target, ...flags]; const runner = spawn("bun", runnerArgs, { cwd: e2eDir, detached: true, stdio: ["ignore", "ignore", "ignore"], env: { ...process.env, E2E_CLI_LOG: logFile }, }); runner.unref(); console.log(`booting ${target} (runner ${runner.pid}, log: ${logFile}) …`); const deadline = Date.now() + 240_000; for (;;) { const state = readState(target); if (state?.status === "ready") { printInstance(state); return; } if (state?.status === "failed") { throw new Error(`${target} boot failed: ${state.error}\n log: ${logFile}`); } if (runner.pid !== undefined && !alive(runner.pid)) { throw new Error(`runner died during boot — log: ${logFile}`); } if (Date.now() > deadline) throw new Error(`timed out booting ${target} — log: ${logFile}`); await new Promise((resolve) => setTimeout(resolve, 500)); }}; const printInstance = (state: InstanceState) => { for (const [name, url] of Object.entries(state.urls ?? {})) { console.log(` ${name.padEnd(8)} ${url}`); } if (state.admin) console.log(` login ${state.admin.email} / ${state.admin.password}`); console.log(` log ${state.logFile}`);}; // The detached runner: boots the target, owns it (cloud's emulators live in// this process), writes the state file, and tears down on SIGTERM.const run = async (target: "selfhost" | "cloud", flags: ReadonlySet<string>) => { const share = flags.has("--share"); const logFile = process.env.E2E_CLI_LOG ?? join(devDir, `${target}.log`); const base: Omit<InstanceState, "status"> = { target, runnerPid: process.pid, logFile, startedAt: new Date().toISOString(), }; writeState({ ...base, status: "starting" }); try { let state: InstanceState; let teardown: () => Promise<void>; // Claim ports atomically from this checkout's block (src/ports.ts) — the // held block lock doubles as "this instance is deliberate, not a leak", // and a concurrently running vitest suite walks to its own block. const { claimPorts } = await import("../src/ports"); if (target === "selfhost") { const { bootSelfhost } = await import("../setup/selfhost.boot"); const claim = await claimPorts([ { envVar: "E2E_SELFHOST_PORT", offset: 4, label: "selfhost vite dev (cli)" }, ]); const port = claim.ports.E2E_SELFHOST_PORT!; const ip = share ? tailnetIp() : undefined; const baseUrl = ip ? `http://${ip}:${port}` : `http://localhost:${port}`; const admin = { email: "admin@e2e.test", password: "e2e-admin-password-123" }; const booted = await bootSelfhost({ port, webBaseUrl: baseUrl, admin, host: share ? "0.0.0.0" : undefined, fresh: !flags.has("--keep-data"), logFile, }); teardown = async () => { await booted.teardown(); await claim.release(); }; state = { ...base, status: "ready", childPids: booted.pids, env: { E2E_TARGET: "selfhost", E2E_SELFHOST_URL: baseUrl, E2E_SELFHOST_ADMIN_EMAIL: admin.email, E2E_SELFHOST_ADMIN_PASSWORD: admin.password, }, urls: { app: baseUrl }, admin, }; } else { const { bootCloud } = await import("../setup/cloud.boot"); const claim = await claimPorts([ { envVar: "E2E_CLOUD_PORT", offset: 0, label: "cloud vite dev (cli)" }, { envVar: "E2E_CLOUD_DB_PORT", offset: 1, label: "cloud dev-db (cli)" }, { envVar: "E2E_WORKOS_EMULATOR_PORT", offset: 2, label: "WorkOS emulator (cli)" }, { envVar: "E2E_AUTUMN_EMULATOR_PORT", offset: 3, label: "Autumn emulator (cli)" }, ]); const cloudPort = claim.ports.E2E_CLOUD_PORT!; const dbPort = claim.ports.E2E_CLOUD_DB_PORT!; const workosPort = claim.ports.E2E_WORKOS_EMULATOR_PORT!; const autumnPort = claim.ports.E2E_AUTUMN_EMULATOR_PORT!; const clientId = "client_e2e_emulate"; const cookiePassword = "e2e_cookie_password_0123456789abcdef0123456789abcdef"; // Sharing cloud needs HTTPS on BOTH the app and the WorkOS emulator — // the app's auth cookies are Secure, and the browser walks the login // redirect across both origins (see RUNNING.md). let publicUrl = `http://localhost:${cloudPort}`; let workosPublicUrl: string | undefined; let servePorts: number[] | undefined; let host: string | undefined; if (share) { const ts = await findTailscale(); const dns = ts ? await tailnetDnsName(ts) : undefined; if (!ts || !dns) throw new Error("--share for cloud needs a working tailscale CLI"); const appHttps = cloudPort + 4000; const workosHttps = workosPort + 4000; const appServe = await sh(ts, [ "serve", "--bg", `--https=${appHttps}`, `http://127.0.0.1:${cloudPort}`, ]); const workosServe = await sh(ts, [ "serve", "--bg", `--https=${workosHttps}`, `http://127.0.0.1:${workosPort}`, ]); if (!appServe.ok || !workosServe.ok) { throw new Error(`tailscale serve failed:\n${appServe.out}\n${workosServe.out}`); } publicUrl = `https://${dns}:${appHttps}`; workosPublicUrl = `https://${dns}:${workosHttps}`; servePorts = [appHttps, workosHttps]; host = "127.0.0.1"; // proxied — no direct bind needed } const booted = await bootCloud({ cloudPort, dbPort, workosPort, autumnPort, workosClientId: clientId, cookiePassword, publicUrl, workosPublicUrl, host, logFile, // The boot recipe shrinks the per-org execution cap to a number the // rate-limit-backstop scenario can exhaust (execution-limits.ts). An // interactive instance is a human clicking around — artifact pages // alone run several executions per open — so restore the prod cap. extraEnv: { EXECUTION_RATE_LIMIT_PER_HOUR: "1000" }, }); teardown = async () => { await booted.teardown(); await claim.release(); }; state = { ...base, status: "ready", childPids: booted.pids, env: { E2E_TARGET: "cloud", E2E_CLOUD_URL: publicUrl, E2E_CLOUD_PORT: String(cloudPort), E2E_CLOUD_DB_PORT: String(dbPort), E2E_WORKOS_EMULATOR_PORT: String(workosPort), E2E_AUTUMN_EMULATOR_PORT: String(autumnPort), }, urls: { app: publicUrl, workos: booted.workosUrl, autumn: booted.autumnUrl, }, servePorts, }; } writeState(state); const shutdown = async () => { await teardown(); if (state.servePorts) { const ts = await findTailscale(); if (ts) { for (const port of state.servePorts) await sh(ts, ["serve", `--https=${port}`, "off"]); } } rmSync(statePath(target), { force: true }); process.exit(0); }; process.on("SIGTERM", () => void shutdown()); process.on("SIGINT", () => void shutdown()); // Stay alive: this process owns the instance (and cloud's emulators). setInterval(() => {}, 60_000); } catch (error) { writeState({ ...base, status: "failed", error: String(error) }); process.exit(1); }}; // --- target-backed commands ------------------------------------------------ /** Point the targets module at the running instance, then import it. */const loadTarget = async (targetName: string) => { const state = readState(targetName); if (!state || state.status !== "ready" || !alive(state.runnerPid)) { throw new Error(`${targetName} is not up — run: bun scripts/cli.ts up ${targetName}`); } for (const [key, value] of Object.entries(state.env ?? {})) process.env[key] = value; const { resolveTarget } = await import("../targets/registry"); return { target: resolveTarget(), state };}; const runEffect = async <A>(effect: unknown): Promise<A> => { const { Effect } = await import("effect"); const { FetchHttpClient } = await import("effect/unstable/http"); return Effect.runPromise( (effect as ReturnType<typeof Effect.succeed<A>>).pipe(Effect.provide(FetchHttpClient.layer)), );}; const identity = async (targetName: string, flags: ReadonlySet<string>) => { const { target } = await loadTarget(targetName); const minted = await runEffect<import("../src/target").Identity>( target.newIdentity(flags.has("--no-org") ? { org: false } : undefined), ); console.log(JSON.stringify(minted, null, 2));}; const apiCall = async (targetName: string, endpoint: string | undefined, json?: string) => { if (!endpoint?.includes(".")) { throw new Error("usage: api <target> <group.endpoint> [json] — e.g. api selfhost tools.list"); } const { target } = await loadTarget(targetName); const [group, method] = endpoint.split(".", 2) as [string, string]; // No-arg endpoints (tools.list) reject a spurious {}; only pass what was given. const args = json === undefined ? undefined : (JSON.parse(json) as Record<string, unknown>); const { Effect } = await import("effect"); const { FetchHttpClient } = await import("effect/unstable/http"); const { composePluginApi } = await import("@executor-js/api/server"); const { openApiHttpPlugin } = await import("@executor-js/plugin-openapi/api"); const { graphqlHttpPlugin } = await import("@executor-js/plugin-graphql/api"); const { mcpHttpPlugin } = await import("@executor-js/plugin-mcp/api"); const { makeApiSurface } = await import("../src/surfaces/api"); const apiDef = composePluginApi([ openApiHttpPlugin(), graphqlHttpPlugin(), mcpHttpPlugin(), ] as const); const surface = makeApiSurface(target); // The endpoint is picked at runtime, so the client is driven untyped here — // the full static typing lives in scenarios; this is the interactive probe. const program = Effect.gen(function* () { const who = yield* target.newIdentity(); // eslint-disable-next-line @typescript-eslint/no-explicit-any const client: any = yield* surface.client(apiDef as any, who); if (typeof client[group]?.[method] !== "function") { const groups = Object.keys(client).filter((k) => typeof client[k] === "object"); throw new Error(`no endpoint ${endpoint}; groups: ${groups.join(", ")}`); } return yield* client[group][method](args); }) as import("effect").Effect.Effect< unknown, unknown, import("effect/unstable/http").HttpClient.HttpClient >; const result = await Effect.runPromise(program.pipe(Effect.provide(FetchHttpClient.layer))); console.log(JSON.stringify(result, null, 2));}; const mcpCall = async ( targetName: string, sub: string | undefined, rest: ReadonlyArray<string>,) => { const { target } = await loadTarget(targetName); const { Effect } = await import("effect"); const { FetchHttpClient } = await import("effect/unstable/http"); const { makeMcpSurface } = await import("../src/surfaces/mcp"); const surface = makeMcpSurface(target); const result = await Effect.runPromise( Effect.gen(function* () { const who = yield* target.newIdentity(); const session = surface.session(who); if (sub === "tools") return yield* session.listTools(); if (sub === "call") { const [tool, json] = rest; if (!tool) throw new Error("usage: mcp <target> call <tool> [json]"); return yield* session.call(tool, json ? (JSON.parse(json) as Record<string, unknown>) : {}); } throw new Error("usage: mcp <target> tools | call <tool> [json]"); }).pipe(Effect.provide(FetchHttpClient.layer)), ); console.log(JSON.stringify(result, null, 2));}; const ledger = async (targetName: string, service = "workos") => { const state = readState(targetName); const url = state?.urls?.[service]; if (!url) throw new Error(`no ${service} emulator url recorded for ${targetName}`); const { connectEmulator } = await import("@executor-js/emulate"); const client = await connectEmulator({ baseUrl: url }); const entries = await client.ledger.list(); console.log(JSON.stringify(entries, null, 2));}; // --- lifecycle commands ---------------------------------------------------- const status = async () => { if (!existsSync(devDir)) return console.log("no instances"); const states: InstanceState[] = []; for (const f of readdirSync(devDir)) { if (!f.endsWith(".json")) continue; try { const parsed: unknown = JSON.parse(readFileSync(join(devDir, f), "utf8")); if (isInstanceState(parsed)) states.push(parsed); } catch { // skip unparseable debris } } if (states.length === 0) return console.log("no instances"); for (const state of states) { const live = alive(state.runnerPid); let label: string; if (!live) { label = "DEAD (stale state file)"; } else if (state.status === "ready") { const appUrl = state.urls?.app; if (appUrl && !(await appResponds(appUrl))) { label = "UNRESPONSIVE (runner alive but app not answering)"; } else { label = state.status; } } else { label = state.status; } console.log(`${state.target}: ${label} — runner ${state.runnerPid}, since ${state.startedAt}`);Lines 1–500 of 605. Load more
// The e2e dev CLI: the same primitives scenarios use, interactive. // // bun scripts/cli.ts up selfhost [--share] [--keep-data] // bun scripts/cli.ts up cloud [--share] // bun scripts/cli.ts status // bun scripts/cli.ts identity <target> [--no-org] // bun scripts/cli.ts api <target> <group.endpoint> [json] // bun scripts/cli.ts mcp <target> tools | call <tool> [json] // bun scripts/cli.ts ledger <target> [workos|autumn] // bun scripts/cli.ts logs <target> // bun scripts/cli.ts down <target> // // Develop against a live instance with the exact machinery the tests use // (same boot recipe, same Target/identity/surfaces), then crystallize the // journey into a scenario. `up` leaves the instance running until `down` — // it IS the handoff demo (AGENTS.md: evidence, not assertions). `--share` // makes it reachable over the user's tailnet. // // Instances are tracked in .dev/<target>.json: a state file marks a // DELIBERATE long-lived instance (not a leak). Cloud's WorkOS/Autumn // emulators run inside the detached runner process this CLI spawns. import { spawn } from "node:child_process"; import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs"; import { networkInterfaces } from "node:os"; import { join } from "node:path"; import { fileURLToPath } from "node:url"; const e2eDir = fileURLToPath(new URL("..", import.meta.url)); const devDir = join(e2eDir, ".dev"); const cliPath = fileURLToPath(import.meta.url); interface InstanceState { readonly target: "selfhost" | "cloud"; status: "starting" | "ready" | "failed"; error?: string; readonly runnerPid: number; childPids?: ReadonlyArray<number>; /** env other CLI commands must set before importing targets/registry. */ env?: Record<string, string>; urls?: Record<string, string>; admin?: { readonly email: string; readonly password: string }; /** tailscale serve --https ports to turn off on `down`. */ servePorts?: ReadonlyArray<number>; readonly logFile: string; readonly startedAt: string; } const statePath = (target: string) => join(devDir, `${target}.json`); const readState = (target: string): InstanceState | undefined => { try { return JSON.parse(readFileSync(statePath(target), "utf8")) as InstanceState; } catch { return undefined; } }; const writeState = (state: InstanceState) => { mkdirSync(devDir, { recursive: true }); writeFileSync(statePath(state.target), JSON.stringify(state, null, 1)); }; const alive = (pid: number): boolean => { try { process.kill(pid, 0); return true; } catch { return false; } }; const isInstanceState = (value: unknown): value is InstanceState => { if (!value || typeof value !== "object") return false; const v = value as Record<string, unknown>; return ( typeof v.target === "string" && typeof v.runnerPid === "number" && typeof v.startedAt === "string" ); }; const appResponds = async (url: string): Promise<boolean> => { try { await fetch(url, { signal: AbortSignal.timeout(3000) }); return true; } catch { return false; } }; // --- tailnet helpers ------------------------------------------------------- const TAILSCALE_CANDIDATES = [ "tailscale", "/opt/homebrew/opt/tailscale/bin/tailscale", "/Applications/Tailscale.app/Contents/MacOS/Tailscale", ]; const sh = (cmd: string, args: ReadonlyArray<string>): Promise<{ ok: boolean; out: string }> => new Promise((resolve) => { const child = spawn(cmd, [...args], { stdio: ["ignore", "pipe", "pipe"] }); let out = ""; child.stdout?.on("data", (d: Buffer) => (out += d.toString())); child.stderr?.on("data", (d: Buffer) => (out += d.toString())); child.on("error", () => resolve({ ok: false, out })); child.on("exit", (code) => resolve({ ok: code === 0, out })); }); const findTailscale = async (): Promise<string | undefined> => { for (const candidate of TAILSCALE_CANDIDATES) { const { ok } = await sh(candidate, ["version"]); if (ok) return candidate; } return undefined; }; /** This machine's tailnet IPv4 (100.x.y.z), from interfaces — works even * when the tailscale CLI is a broken shim. */ const tailnetIp = (): string | undefined => { for (const addrs of Object.values(networkInterfaces())) { for (const addr of addrs ?? []) { if (addr.family === "IPv4" && addr.address.startsWith("100.")) return addr.address; } } return undefined; }; const tailnetDnsName = async (ts: string): Promise<string | undefined> => { const { ok, out } = await sh(ts, ["status", "--json"]); if (!ok) return undefined; try { const dns = (JSON.parse(out) as { Self?: { DNSName?: string } }).Self?.DNSName; return dns?.replace(/\.$/, ""); } catch { return undefined; } }; // --- up -------------------------------------------------------------------- const up = async (target: string, flags: ReadonlySet<string>) => { if (target !== "selfhost" && target !== "cloud") { throw new Error(`unknown target ${JSON.stringify(target)} — selfhost | cloud`); } const existing = readState(target); if (existing && alive(existing.runnerPid) && existing.status !== "failed") { console.log(`${target} already up (runner ${existing.runnerPid}):`); printInstance(existing); return; } rmSync(statePath(target), { force: true }); mkdirSync(devDir, { recursive: true }); const logFile = join(devDir, `${target}.log`); rmSync(logFile, { force: true }); const runnerArgs = [cliPath, "__run", target, ...flags]; const runner = spawn("bun", runnerArgs, { cwd: e2eDir, detached: true, stdio: ["ignore", "ignore", "ignore"], env: { ...process.env, E2E_CLI_LOG: logFile }, }); runner.unref(); console.log(`booting ${target} (runner ${runner.pid}, log: ${logFile}) …`); const deadline = Date.now() + 240_000; for (;;) { const state = readState(target); if (state?.status === "ready") { printInstance(state); return; } if (state?.status === "failed") { throw new Error(`${target} boot failed: ${state.error}\n log: ${logFile}`); } if (runner.pid !== undefined && !alive(runner.pid)) { throw new Error(`runner died during boot — log: ${logFile}`); } if (Date.now() > deadline) throw new Error(`timed out booting ${target} — log: ${logFile}`); await new Promise((resolve) => setTimeout(resolve, 500)); } }; const printInstance = (state: InstanceState) => { for (const [name, url] of Object.entries(state.urls ?? {})) { console.log(` ${name.padEnd(8)} ${url}`); } if (state.admin) console.log(` login ${state.admin.email} / ${state.admin.password}`); console.log(` log ${state.logFile}`); }; // The detached runner: boots the target, owns it (cloud's emulators live in // this process), writes the state file, and tears down on SIGTERM. const run = async (target: "selfhost" | "cloud", flags: ReadonlySet<string>) => { const share = flags.has("--share"); const logFile = process.env.E2E_CLI_LOG ?? join(devDir, `${target}.log`); const base: Omit<InstanceState, "status"> = { target, runnerPid: process.pid, logFile, startedAt: new Date().toISOString(), }; writeState({ ...base, status: "starting" }); try { let state: InstanceState; let teardown: () => Promise<void>; // Claim ports atomically from this checkout's block (src/ports.ts) — the // held block lock doubles as "this instance is deliberate, not a leak", // and a concurrently running vitest suite walks to its own block. const { claimPorts } = await import("../src/ports"); if (target === "selfhost") { const { bootSelfhost } = await import("../setup/selfhost.boot"); const claim = await claimPorts([ { envVar: "E2E_SELFHOST_PORT", offset: 4, label: "selfhost vite dev (cli)" }, ]); const port = claim.ports.E2E_SELFHOST_PORT!; const ip = share ? tailnetIp() : undefined; const baseUrl = ip ? `http://${ip}:${port}` : `http://localhost:${port}`; const admin = { email: "admin@e2e.test", password: "e2e-admin-password-123" }; const booted = await bootSelfhost({ port, webBaseUrl: baseUrl, admin, host: share ? "0.0.0.0" : undefined, fresh: !flags.has("--keep-data"), logFile, }); teardown = async () => { await booted.teardown(); await claim.release(); }; state = { ...base, status: "ready", childPids: booted.pids, env: { E2E_TARGET: "selfhost", E2E_SELFHOST_URL: baseUrl, E2E_SELFHOST_ADMIN_EMAIL: admin.email, E2E_SELFHOST_ADMIN_PASSWORD: admin.password, }, urls: { app: baseUrl }, admin, }; } else { const { bootCloud } = await import("../setup/cloud.boot"); const claim = await claimPorts([ { envVar: "E2E_CLOUD_PORT", offset: 0, label: "cloud vite dev (cli)" }, { envVar: "E2E_CLOUD_DB_PORT", offset: 1, label: "cloud dev-db (cli)" }, { envVar: "E2E_WORKOS_EMULATOR_PORT", offset: 2, label: "WorkOS emulator (cli)" }, { envVar: "E2E_AUTUMN_EMULATOR_PORT", offset: 3, label: "Autumn emulator (cli)" }, ]); const cloudPort = claim.ports.E2E_CLOUD_PORT!; const dbPort = claim.ports.E2E_CLOUD_DB_PORT!; const workosPort = claim.ports.E2E_WORKOS_EMULATOR_PORT!; const autumnPort = claim.ports.E2E_AUTUMN_EMULATOR_PORT!; const clientId = "client_e2e_emulate"; const cookiePassword = "e2e_cookie_password_0123456789abcdef0123456789abcdef"; // Sharing cloud needs HTTPS on BOTH the app and the WorkOS emulator — // the app's auth cookies are Secure, and the browser walks the login // redirect across both origins (see RUNNING.md). let publicUrl = `http://localhost:${cloudPort}`; let workosPublicUrl: string | undefined; let servePorts: number[] | undefined; let host: string | undefined; if (share) { const ts = await findTailscale(); const dns = ts ? await tailnetDnsName(ts) : undefined; if (!ts || !dns) throw new Error("--share for cloud needs a working tailscale CLI"); const appHttps = cloudPort + 4000; const workosHttps = workosPort + 4000; const appServe = await sh(ts, [ "serve", "--bg", `--https=${appHttps}`, `http://127.0.0.1:${cloudPort}`, ]); const workosServe = await sh(ts, [ "serve", "--bg", `--https=${workosHttps}`, `http://127.0.0.1:${workosPort}`, ]); if (!appServe.ok || !workosServe.ok) { throw new Error(`tailscale serve failed:\n${appServe.out}\n${workosServe.out}`); } publicUrl = `https://${dns}:${appHttps}`; workosPublicUrl = `https://${dns}:${workosHttps}`; servePorts = [appHttps, workosHttps]; host = "127.0.0.1"; // proxied — no direct bind needed } const booted = await bootCloud({ cloudPort, dbPort, workosPort, autumnPort, workosClientId: clientId, cookiePassword, publicUrl, workosPublicUrl, host, logFile, // The boot recipe shrinks the per-org execution cap to a number the // rate-limit-backstop scenario can exhaust (execution-limits.ts). An // interactive instance is a human clicking around — artifact pages // alone run several executions per open — so restore the prod cap. extraEnv: { EXECUTION_RATE_LIMIT_PER_HOUR: "1000" }, }); teardown = async () => { await booted.teardown(); await claim.release(); }; state = { ...base, status: "ready", childPids: booted.pids, env: { E2E_TARGET: "cloud", E2E_CLOUD_URL: publicUrl, E2E_CLOUD_PORT: String(cloudPort), E2E_CLOUD_DB_PORT: String(dbPort), E2E_WORKOS_EMULATOR_PORT: String(workosPort), E2E_AUTUMN_EMULATOR_PORT: String(autumnPort), }, urls: { app: publicUrl, workos: booted.workosUrl, autumn: booted.autumnUrl, }, servePorts, }; } writeState(state); const shutdown = async () => { await teardown(); if (state.servePorts) { const ts = await findTailscale(); if (ts) { for (const port of state.servePorts) await sh(ts, ["serve", `--https=${port}`, "off"]); } } rmSync(statePath(target), { force: true }); process.exit(0); }; process.on("SIGTERM", () => void shutdown()); process.on("SIGINT", () => void shutdown()); // Stay alive: this process owns the instance (and cloud's emulators). setInterval(() => {}, 60_000); } catch (error) { writeState({ ...base, status: "failed", error: String(error) }); process.exit(1); } }; // --- target-backed commands ------------------------------------------------ /** Point the targets module at the running instance, then import it. */ const loadTarget = async (targetName: string) => { const state = readState(targetName); if (!state || state.status !== "ready" || !alive(state.runnerPid)) { throw new Error(`${targetName} is not up — run: bun scripts/cli.ts up ${targetName}`); } for (const [key, value] of Object.entries(state.env ?? {})) process.env[key] = value; const { resolveTarget } = await import("../targets/registry"); return { target: resolveTarget(), state }; }; const runEffect = async <A>(effect: unknown): Promise<A> => { const { Effect } = await import("effect"); const { FetchHttpClient } = await import("effect/unstable/http"); return Effect.runPromise( (effect as ReturnType<typeof Effect.succeed<A>>).pipe(Effect.provide(FetchHttpClient.layer)), ); }; const identity = async (targetName: string, flags: ReadonlySet<string>) => { const { target } = await loadTarget(targetName); const minted = await runEffect<import("../src/target").Identity>( target.newIdentity(flags.has("--no-org") ? { org: false } : undefined), ); console.log(JSON.stringify(minted, null, 2)); }; const apiCall = async (targetName: string, endpoint: string | undefined, json?: string) => { if (!endpoint?.includes(".")) { throw new Error("usage: api <target> <group.endpoint> [json] — e.g. api selfhost tools.list"); } const { target } = await loadTarget(targetName); const [group, method] = endpoint.split(".", 2) as [string, string]; // No-arg endpoints (tools.list) reject a spurious {}; only pass what was given. const args = json === undefined ? undefined : (JSON.parse(json) as Record<string, unknown>); const { Effect } = await import("effect"); const { FetchHttpClient } = await import("effect/unstable/http"); const { composePluginApi } = await import("@executor-js/api/server"); const { openApiHttpPlugin } = await import("@executor-js/plugin-openapi/api"); const { graphqlHttpPlugin } = await import("@executor-js/plugin-graphql/api"); const { mcpHttpPlugin } = await import("@executor-js/plugin-mcp/api"); const { makeApiSurface } = await import("../src/surfaces/api"); const apiDef = composePluginApi([ openApiHttpPlugin(), graphqlHttpPlugin(), mcpHttpPlugin(), ] as const); const surface = makeApiSurface(target); // The endpoint is picked at runtime, so the client is driven untyped here — // the full static typing lives in scenarios; this is the interactive probe. const program = Effect.gen(function* () { const who = yield* target.newIdentity(); // eslint-disable-next-line @typescript-eslint/no-explicit-any const client: any = yield* surface.client(apiDef as any, who); if (typeof client[group]?.[method] !== "function") { const groups = Object.keys(client).filter((k) => typeof client[k] === "object"); throw new Error(`no endpoint ${endpoint}; groups: ${groups.join(", ")}`); } return yield* client[group][method](args); }) as import("effect").Effect.Effect< unknown, unknown, import("effect/unstable/http").HttpClient.HttpClient >; const result = await Effect.runPromise(program.pipe(Effect.provide(FetchHttpClient.layer))); console.log(JSON.stringify(result, null, 2)); }; const mcpCall = async ( targetName: string, sub: string | undefined, rest: ReadonlyArray<string>, ) => { const { target } = await loadTarget(targetName); const { Effect } = await import("effect"); const { FetchHttpClient } = await import("effect/unstable/http"); const { makeMcpSurface } = await import("../src/surfaces/mcp"); const surface = makeMcpSurface(target); const result = await Effect.runPromise( Effect.gen(function* () { const who = yield* target.newIdentity(); const session = surface.session(who); if (sub === "tools") return yield* session.listTools(); if (sub === "call") { const [tool, json] = rest; if (!tool) throw new Error("usage: mcp <target> call <tool> [json]"); return yield* session.call(tool, json ? (JSON.parse(json) as Record<string, unknown>) : {}); } throw new Error("usage: mcp <target> tools | call <tool> [json]"); }).pipe(Effect.provide(FetchHttpClient.layer)), ); console.log(JSON.stringify(result, null, 2)); }; const ledger = async (targetName: string, service = "workos") => { const state = readState(targetName); const url = state?.urls?.[service]; if (!url) throw new Error(`no ${service} emulator url recorded for ${targetName}`); const { connectEmulator } = await import("@executor-js/emulate"); const client = await connectEmulator({ baseUrl: url }); const entries = await client.ledger.list(); console.log(JSON.stringify(entries, null, 2)); }; // --- lifecycle commands ---------------------------------------------------- const status = async () => { if (!existsSync(devDir)) return console.log("no instances"); const states: InstanceState[] = []; for (const f of readdirSync(devDir)) { if (!f.endsWith(".json")) continue; try { const parsed: unknown = JSON.parse(readFileSync(join(devDir, f), "utf8")); if (isInstanceState(parsed)) states.push(parsed); } catch { // skip unparseable debris } } if (states.length === 0) return console.log("no instances"); for (const state of states) { const live = alive(state.runnerPid); let label: string; if (!live) { label = "DEAD (stale state file)"; } else if (state.status === "ready") { const appUrl = state.urls?.app; if (appUrl && !(await appResponds(appUrl))) { label = "UNRESPONSIVE (runner alive but app not answering)"; } else { label = state.status; } } else { label = state.status; } console.log(`${state.target}: ${label} — runner ${state.runnerPid}, since ${state.startedAt}`);