mosaicstack/stack
19
0
Fork 1
Code Issues 335 Pull Requests 16 Actions Packages Projects Releases 15 Wiki Activity

feat(mosaic): gateway token recovery via BetterAuth cookie #411

Merged
jason.woltje merged 1 commits from feat/gateway-token-recovery into main 2026-04-05 05:43:50 +00:00
Conversation 0 Commits 1 Files Changed 7
+720 -4
jason.woltje commented 2026-04-05 05:26:40 +00:00
Owner
Copy Link
Copy Source

Mission: cli-unification-20260404. Tasks: CU-03-03, CU-03-04, CU-03-05, CU-03-06, CU-03-07. Design doc: PR 401.

Commands added:

mosaic gateway login - Thin wrapper with gateway URL defaulting from meta.json, falling back to localhost:14242. Email and password prompted if not supplied as flags.

mosaic gateway config rotate-token - Requires a stored valid BetterAuth session. Calls POST /api/admin/tokens with the session cookie and writes the returned plaintext to meta.json.

mosaic gateway config recover-token - Stranded-operator entry point. If no valid session exists, prompts for email and password inline, signs in, saves the session, then mints and persists a new admin token.

Installer fix - bootstrapFirstUser in install.ts now offers inline token recovery when admin user exists but no token is on file. In TTY mode it prompts; non-interactive prints the recover-token hint.

New files: login.ts, token-ops.ts, login.spec.ts (5 tests), rotate-token.spec.ts (10 tests), recover-token.spec.ts (7 tests).

All gates green: 100 tests pass, typecheck clean, lint clean, format clean.

Mission: cli-unification-20260404. Tasks: CU-03-03, CU-03-04, CU-03-05, CU-03-06, CU-03-07. Design doc: PR 401. Commands added: mosaic gateway login - Thin wrapper with gateway URL defaulting from meta.json, falling back to localhost:14242. Email and password prompted if not supplied as flags. mosaic gateway config rotate-token - Requires a stored valid BetterAuth session. Calls POST /api/admin/tokens with the session cookie and writes the returned plaintext to meta.json. mosaic gateway config recover-token - Stranded-operator entry point. If no valid session exists, prompts for email and password inline, signs in, saves the session, then mints and persists a new admin token. Installer fix - bootstrapFirstUser in install.ts now offers inline token recovery when admin user exists but no token is on file. In TTY mode it prompts; non-interactive prints the recover-token hint. New files: login.ts, token-ops.ts, login.spec.ts (5 tests), rotate-token.spec.ts (10 tests), recover-token.spec.ts (7 tests). All gates green: 100 tests pass, typecheck clean, lint clean, format clean.
jason.woltje added 1 commit 2026-04-05 05:26:42 +00:00
feat(mosaic): gateway token recovery via BetterAuth cookie (CU-03-03..07)
ci/woodpecker/push/ci Pipeline was successful
Details
ci/woodpecker/pr/ci Pipeline was successful
Details
41f5d34072 
Add mosaic gateway login subcommand with meta.json URL default, config
rotate-token and recover-token subcommands for admin token minting via
BetterAuth session cookie, fix the bootstrapFirstUser dead-end when admin
exists but no token is on file, and add Vitest tests for all new flows.

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
jason.woltje merged commit 5917016509 into main 2026-04-05 05:43:50 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Defect in framework tooling or delivered code
 fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
code-be-01 (Mosaic fleet seat code-be-01) code-be-02 (Mosaic fleet seat code-be-02) code-infra-01 (Mosaic fleet seat code-infra-01) fargo fred gate-merge-01 (Mosaic fleet seat gate-merge-01) happy jason.woltje (Jason Woltje) marcie merge-gate ops-01 (Mosaic fleet seat ops-01) ops-02 (Mosaic fleet seat ops-02) ops-03 (Mosaic fleet seat ops-03) ops-ci-01 (Mosaic fleet seat ops-ci-01) ops-deploy-01 (Mosaic fleet seat ops-deploy-01) orch-01 (Mosaic fleet seat orch-01) pepper resume rev-code-01 rev-code-02 rev-security-01 rev-security-02 rev-security-03 (Mosaic fleet seat rev-security-03) sanity scooby (Scooby) scrappy shaggy tiny velma veronica (Mosaic fleet seat veronica) vision woodpecker
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#411