Add sr server installer

Author: lawrencecchen

README.md

@@ -22,6 +22,18 @@ This repo sets `CGO_ENABLED=0` in `Makefile` because the local macOS Go 1.22 too
 
 ## Install
 
+Install the released Go binary directly:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/manaflow-ai/subrouter/main/install.sh | sh
+```
+
+On a Linux server, install to `/usr/local/bin`:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/manaflow-ai/subrouter/main/install.sh | sudo sh
+```
+
 Install with npm:
 
 ```bash
@@ -34,7 +46,7 @@ Install with Python:
 pipx install subrouter
 ```
 
-Both packages install `subrouter`, `sr`, and `cx`. The wrappers download the matching Go release binary for macOS, Linux, Windows, FreeBSD, OpenBSD, or NetBSD on amd64, arm64, or supported 32-bit variants. Set `SUBROUTER_BIN` to use a local binary instead.
+All install paths provide `subrouter`, `sr`, and `cx`. The npm and Python wrappers download the matching Go release binary for macOS, Linux, Windows, FreeBSD, OpenBSD, or NetBSD on amd64, arm64, or supported 32-bit variants. Set `SUBROUTER_BIN` to use a local binary instead.
 
 ## Local macOS daemon
 
@@ -51,7 +63,22 @@ This installs the binary to `~/bin/subrouter`, installs `~/bin/cx` as a symlink
 ~/bin/subrouter serve --addr 127.0.0.1:31415 --transcripts ~/.subrouter/transcripts --cx-switch-interval 10m
 ```
 
-The 10 minute `cx` auto-switch interval is the default. Override it with `subrouter install-daemon --cx-switch-interval 5m`, or disable it with `--cx-switch-interval 0`. This command is macOS-specific; use a systemd unit or another supervisor on Linux.
+The 10 minute `cx` auto-switch interval is the default. Override it with `subrouter install-daemon --cx-switch-interval 5m`, or disable it with `--cx-switch-interval 0`.
+
+## Linux systemd service
+
+On a Linux server, install the binary and service:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/manaflow-ai/subrouter/main/install.sh | sudo sh
+sudo sr install-systemd --addr 0.0.0.0:31415
+```
+
+This creates a `subrouter` system user, stores state under `/var/lib/subrouter`, writes `/etc/systemd/system/subrouter.service`, installs `subrouter`, `sr`, and `cx` in `/usr/local/bin`, and starts:
+
+```bash
+/usr/local/bin/subrouter serve --addr 0.0.0.0:31415 --sessions /var/lib/subrouter/sessions.json --transcripts /var/lib/subrouter/transcripts --cx-switch-interval 10m
+```
 
 Useful endpoints:
 

cmd/subrouter/cx.go

@@ -53,6 +53,7 @@ Usage:
 
   cx server             Manage Subrouter servers
   cx server add <name> --url <url> --gcp-instance <name> --gcp-zone <zone> [--gcp-project <project>]
+  cx server install <name>
   cx server login <name> [--device-auth]
 
   cx admin-keys         List stored OpenAI admin keys

cmd/subrouter/cx_server.go

@@ -28,10 +28,13 @@ Usage:
   cx server add <name> --url <url> --gcp-instance <name> --gcp-zone <zone> [--gcp-project <project>]
   cx server remove <name>
   cx server status <name>
+  cx server install <name> [--version latest]
   cx server login <name> [--device-auth]
 
 `
 
+const publicInstallScriptURL = "https://raw.githubusercontent.com/manaflow-ai/subrouter/main/install.sh"
+
 type cxServerStore struct {
 	Path string
 }
@@ -69,6 +72,8 @@ func (r cxRunner) server(ctx context.Context, args []string) error {
 			return fmt.Errorf("usage: cx server status <name>")
 		}
 		return r.serverStatus(ctx, store, args[1])
+	case "install":
+		return r.serverInstall(ctx, store, args[1:])
 	case "login", "add-account", "add-auth":
 		return r.serverLogin(ctx, store, args[1:])
 	case "help", "-h", "--help":
@@ -260,6 +265,61 @@ func (r cxRunner) serverStatus(ctx context.Context, store cxServerStore, name st
 	return err
 }
 
+func (r cxRunner) serverInstall(ctx context.Context, store cxServerStore, args []string) error {
+	if len(args) == 0 {
+		return fmt.Errorf("usage: cx server install <name> [--version latest]")
+	}
+	name := args[0]
+	flags := flag.NewFlagSet("cx server install", flag.ContinueOnError)
+	flags.SetOutput(r.errOut)
+	version := flags.String("version", "latest", "Subrouter release version to install")
+	addr := flags.String("addr", "0.0.0.0:31415", "server listen address")
+	cxSwitchInterval := flags.String("cx-switch-interval", "10m", "cx auto-switch interval; 0 disables")
+	extraArgs := flags.String("extra-args", "", "extra arguments appended to subrouter serve")
+	tailscaleHostname := flags.String("tailscale-hostname", "", "hostname for tailscale up when TAILSCALE_AUTH_KEY is set")
+	if err := flags.Parse(args[1:]); err != nil {
+		return err
+	}
+	server, ok, err := store.find(name)
+	if err != nil {
+		return err
+	}
+	if !ok {
+		return fmt.Errorf("server %q not found", name)
+	}
+	if server.GCPInstance == "" || server.GCPZone == "" {
+		return fmt.Errorf("server %s has no GCP target", server.Name)
+	}
+	hostname := *tailscaleHostname
+	if hostname == "" {
+		hostname = server.GCPInstance
+	}
+	tailscaleAuthKey := strings.TrimSpace(os.Getenv("TAILSCALE_AUTH_KEY"))
+	remoteCommand := strings.Join([]string{
+		"set -eu",
+		"tailscale_auth_key=''",
+		"read -r tailscale_auth_key || true",
+		"curl -fsSL " + shellQuote(publicInstallScriptURL) + " | sudo env SUBROUTER_VERSION=" + shellQuote(*version) + " sh",
+		"sudo /usr/local/bin/sr install-systemd --addr " + shellQuote(*addr) + " --cx-switch-interval " + shellQuote(*cxSwitchInterval) + " --extra-args " + shellQuote(*extraArgs),
+		"if [ -n \"$tailscale_auth_key\" ]; then sudo tailscale up --auth-key \"$tailscale_auth_key\" --hostname " + shellQuote(hostname) + " --ssh --accept-routes=false --accept-dns=false; fi",
+		"curl -fsS http://127.0.0.1:31415/_subrouter/health >/dev/null",
+		"/usr/local/bin/sr --help >/dev/null",
+	}, "\n")
+	sshArgs := []string{"compute", "ssh", server.GCPInstance, "--zone", server.GCPZone, "--command", remoteCommand}
+	if server.GCPProject != "" {
+		sshArgs = append(sshArgs, "--project", server.GCPProject)
+	}
+	stdin := strings.NewReader(tailscaleAuthKey + "\n")
+	if err := r.commandRunner().Run(ctx, "gcloud", sshArgs, stdin, r.out, r.errOut); err != nil {
+		return fmt.Errorf("install server: %w", err)
+	}
+	fmt.Fprintf(r.out, "Installed Subrouter server: %s\n", server.Name)
+	if tailscaleAuthKey != "" {
+		fmt.Fprintf(r.out, "Joined Tailscale as: %s\n", hostname)
+	}
+	return nil
+}
+
 func (r cxRunner) serverLogin(ctx context.Context, store cxServerStore, args []string) error {
 	if len(args) == 0 {
 		return fmt.Errorf("usage: cx server login <name> [--device-auth]")

cmd/subrouter/cx_server_test.go

@@ -107,6 +107,52 @@ func TestCXServerLoginUploadsFreshAuthAndRestoresLocalChain(t *testing.T) {
 	}
 }
 
+func TestCXServerInstallUsesPublicInstallerAndSystemdCommand(t *testing.T) {
+	home := t.TempDir()
+	t.Setenv("HOME", home)
+	t.Setenv("TAILSCALE_AUTH_KEY", "tailscale-auth-test-secret")
+	store := accounts.DefaultCodexStore()
+
+	var out bytes.Buffer
+	fake := &recordingCXCommandRunner{}
+	runner := cxRunner{store: store, out: &out, errOut: &out, cmd: fake}
+	if err := runner.run(context.Background(), []string{
+		"server", "add", "community",
+		"--url", "http://100.64.0.1:31415",
+		"--gcp-instance", "subrouter-community",
+		"--gcp-zone", "us-central1-a",
+		"--gcp-project", "example-project",
+	}); err != nil {
+		t.Fatal(err)
+	}
+
+	if err := runner.run(context.Background(), []string{"server", "install", "community", "--version", "0.1.2"}); err != nil {
+		t.Fatal(err)
+	}
+
+	if !fake.hasCommandPrefix("gcloud", "compute", "ssh", "subrouter-community") {
+		t.Fatalf("missing gcloud ssh install command: %#v", fake.commands)
+	}
+	joined := strings.Join(fake.commands[0], " ")
+	if strings.Contains(joined, "tailscale-auth-test-secret") {
+		t.Fatalf("tailscale auth key leaked into command: %s", joined)
+	}
+	installCommand := strings.Join(fake.commands[len(fake.commands)-1], " ")
+	for _, want := range []string{
+		publicInstallScriptURL,
+		"SUBROUTER_VERSION='0.1.2'",
+		"/usr/local/bin/sr install-systemd",
+		"tailscale up",
+	} {
+		if !strings.Contains(installCommand, want) {
+			t.Fatalf("install command missing %q:\n%s", want, installCommand)
+		}
+	}
+	if !strings.Contains(out.String(), "Installed Subrouter server: community") {
+		t.Fatalf("missing install message:\n%s", out.String())
+	}
+}
+
 type recordingCXCommandRunner struct {
 	loginAuth accounts.CodexAuthFile
 	commands  [][]string