package cli import (	"context"	"flag"	"fmt"	"os"	"os/exec" 	"github.com/davis7dotsh/tx9/internal/box"	"github.com/davis7dotsh/tx9/internal/docker") // cmdOpen implements `tx9 open <box>`: print (or open) the authenticated// dashboard URL (?_token=). Mirrors boxd's cmd_open (dossier §4): the// token-bearing URL is a one-shot secret, distinct from `create`'s printed// (unauthenticated) dashboard URL.func cmdOpen(args []string) error {	fs := flag.NewFlagSet("open", flag.ContinueOnError)	if err := parseFlagsAnywhere(fs, args); err != nil {		return err	}	name, err := requireBoxName(fs, "open")	if err != nil {		return err	} 	return withDocker(func(ctx context.Context, cli *docker.Client) error {		b, err := box.Get(ctx, cli, name)		if err != nil {			return fmt.Errorf("open %s: %w", name, err)		}		if b.DerivedState() != "running" {			return fmt.Errorf("open %s: box is not running; run: tx9 start %s", name, name)		} 		port, err := box.HostPort(ctx, cli, b)		if err != nil {			return fmt.Errorf("open %s: %w", name, err)		}		tok, err := box.Token(name)		if err != nil {			return fmt.Errorf("open %s: %w", name, err)		} 		url, err := box.OpenURL(port, tok, b.ExecutorWebBaseURL)		if err != nil {			return fmt.Errorf("open %s: %w", name, err)		} 		if browser := firstNonEmpty(os.Getenv("TX9_BROWSER"), os.Getenv("BOX_BROWSER")); browser != "" {			if _, lookErr := exec.LookPath(browser); lookErr == nil {				if runErr := exec.Command(browser, url).Start(); runErr == nil {					fmt.Printf("tx9: opened dashboard for %s\n", name)					return nil				}			}		} 		fmt.Println("tx9: dashboard URL — this embeds a bearer token, treat it as a secret:")		fmt.Println(url)		return nil	})} func firstNonEmpty(vals ...string) string {	for _, v := range vals {		if v != "" {			return v		}	}	return ""}