Function buildBootstrapURL

internal/cli/bootstrap.go:153–183

buildBootstrapURL constructs the /setup URL the operator should open. setup_method dispatch (kept in sync with handleSessionCheck in internal/server/handlers_auth.go): - "logs_token" — server generated a one-time token and persisted it to /.bootstrap-token. We read it and hand the operato

(cfg *config.Config, setupMethod, next string)

//   - anything else — newer server speaking a method this CLI doesn't know.
//     Bail loudly with the same --cli-prompt fallback hint.
func buildBootstrapURL(cfg *config.Config, setupMethod, next string) (string, error) {
	base := cfg.BrowserURL()

	// The next= handoff target rides as a query param, which MUST sit
	// before any #token fragment (a query after the fragment would be
	// parsed as part of the fragment and never reach the page's
	// searchParams). url.QueryEscape keeps the leading slash and any
	// nested path safe to round-trip through the address bar.
	query := ""
	if next != "" {
		query = "?next=" + url.QueryEscape(next)
	}

	switch setupMethod {
	case "logs_token":
		token, err := ReadBootstrapToken(cfg.DataDir)
		if err != nil {
			return "", err
		}
		return fmt.Sprintf("%s/setup%s#token=%s", base, query, token), nil

	case "open":
		return base + "/setup" + query, nil

	case "", "local_cli":
		return "", fmt.Errorf("server has no bootstrap token configured (setup_method=%q); re-run with --cli-prompt to use the legacy TTY flow", setupMethod)

	default:
		return "", fmt.Errorf("server reported unknown setup_method=%q; this CLI may be older than the server. Re-run with --cli-prompt to use the legacy TTY flow", setupMethod)
	}
}

// ReadBootstrapToken reads <DataDir>/.bootstrap-token. The file is created
// by EnsureBootstrapToken in internal/server/bootstrap.go with mode 0600