feat: mosaic gateway CLI daemon management + admin token auth #369

jason.woltje · 2026-04-04T18:00:39Z

jason.woltje commented

2026-04-04 18:00:39 +00:00

Summary

New mosaic gateway command family for daemon lifecycle: install, start, stop, restart, status, config, logs, uninstall
Admin API token authentication (Bearer tokens) in AdminGuard alongside existing BetterAuth sessions
Bootstrap endpoint (POST /api/bootstrap/setup) for first-user creation when zero users exist
admin_tokens DB table with SHA-256 hashed tokens, expiry, usage tracking
Gateway .env fallback from ~/.config/mosaic/gateway/.env for daemon mode
CLI flags: --host -h, --port -p, --token -t for remote gateway connection
--help only (no -h short) to free -h for --host

New Files

apps/gateway/src/admin/admin-tokens.controller.ts — Token CRUD
apps/gateway/src/admin/admin-tokens.dto.ts — Token DTOs
apps/gateway/src/admin/bootstrap.controller.ts — First-user setup
apps/gateway/src/admin/bootstrap.dto.ts — Bootstrap DTOs
packages/cli/src/commands/gateway.ts — Command registration
packages/cli/src/commands/gateway/daemon.ts — PID, process, health utils
packages/cli/src/commands/gateway/install.ts — Install wizard
packages/cli/src/commands/gateway/status.ts — Status display
packages/cli/src/commands/gateway/config.ts — Config management
packages/cli/src/commands/gateway/logs.ts — Log tailing
packages/cli/src/commands/gateway/uninstall.ts — Clean removal

Modified Files

packages/db/src/schema.ts — Added admin_tokens table
packages/db/src/index.ts — Export count from drizzle-orm
apps/gateway/src/admin/admin.guard.ts — Bearer token + session dual auth
apps/gateway/src/admin/admin.module.ts — Register new controllers
apps/gateway/src/main.ts — Daemon .env fallback loading
packages/cli/src/commands/gateway.ts — Replaced stale @mosaic/config-based impl

Test plan

Typecheck passes (new files have zero new errors)
Lint passes
Format check passes
Manual: mosaic gateway install wizard flow
Manual: mosaic gateway status output
Manual: Bearer token auth on admin endpoints
DB migration for admin_tokens table

## Summary - New `mosaic gateway` command family for daemon lifecycle: install, start, stop, restart, status, config, logs, uninstall - Admin API token authentication (Bearer tokens) in AdminGuard alongside existing BetterAuth sessions - Bootstrap endpoint (`POST /api/bootstrap/setup`) for first-user creation when zero users exist - `admin_tokens` DB table with SHA-256 hashed tokens, expiry, usage tracking - Gateway `.env` fallback from `~/.config/mosaic/gateway/.env` for daemon mode - CLI flags: `--host -h`, `--port -p`, `--token -t` for remote gateway connection - `--help` only (no `-h` short) to free `-h` for `--host` ## New Files - `apps/gateway/src/admin/admin-tokens.controller.ts` — Token CRUD - `apps/gateway/src/admin/admin-tokens.dto.ts` — Token DTOs - `apps/gateway/src/admin/bootstrap.controller.ts` — First-user setup - `apps/gateway/src/admin/bootstrap.dto.ts` — Bootstrap DTOs - `packages/cli/src/commands/gateway.ts` — Command registration - `packages/cli/src/commands/gateway/daemon.ts` — PID, process, health utils - `packages/cli/src/commands/gateway/install.ts` — Install wizard - `packages/cli/src/commands/gateway/status.ts` — Status display - `packages/cli/src/commands/gateway/config.ts` — Config management - `packages/cli/src/commands/gateway/logs.ts` — Log tailing - `packages/cli/src/commands/gateway/uninstall.ts` — Clean removal ## Modified Files - `packages/db/src/schema.ts` — Added `admin_tokens` table - `packages/db/src/index.ts` — Export `count` from drizzle-orm - `apps/gateway/src/admin/admin.guard.ts` — Bearer token + session dual auth - `apps/gateway/src/admin/admin.module.ts` — Register new controllers - `apps/gateway/src/main.ts` — Daemon .env fallback loading - `packages/cli/src/commands/gateway.ts` — Replaced stale @mosaic/config-based impl ## Test plan - [x] Typecheck passes (new files have zero new errors) - [x] Lint passes - [x] Format check passes - [ ] Manual: `mosaic gateway install` wizard flow - [ ] Manual: `mosaic gateway status` output - [ ] Manual: Bearer token auth on admin endpoints - [ ] DB migration for admin_tokens table

jason.woltje added 1 commit 2026-04-04 18:00:40 +00:00

feat: add mosaic gateway CLI commands and admin token auth

ci/woodpecker/push/ci Pipeline was successful

Details

ci/woodpecker/pr/ci Pipeline was successful

Details

0e6f5eace0

Gateway daemon lifecycle management via the Mosaic CLI:
- install, start, stop, restart, status, config, logs, uninstall
- Admin API token auth (Bearer tokens) alongside existing session auth
- Bootstrap endpoint for first-user setup (POST /api/bootstrap/setup)
- admin_tokens table in DB schema with SHA-256 hashed tokens
- Gateway .env fallback loading from ~/.config/mosaic/gateway/.env
- CLI daemon management with PID file, log tailing, health checks

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

jason.woltje merged commit 39ccba95d0 into main

2026-04-04 18:03:13 +00:00

jason.woltje deleted branch feat/gateway-management

2026-04-04 18:03:13 +00:00

jason.woltje referenced this issue from a commit

2026-04-04 18:03:15 +00:00

feat: mosaic gateway CLI daemon management + admin token auth (#369)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: mosaicstack/stack#369