Function RunBrowserBootstrap

internal/cli/bootstrap.go:92–129

RunBrowserBootstrap walks the operator through the browser-based first- admin bootstrap. Returns nil on success (server has flipped to setup_required: false), an error if the helper can't proceed (no token configured, token file unreadable, timeout, ctx cancelled). Callers in this PR: only setupCmd

(ctx context.Context, client *Client, cfg *config.Config, next string)

// touching the token file or printing anything. That matters for any
// caller invoking it against a server where setup is already done.
func RunBrowserBootstrap(ctx context.Context, client *Client, cfg *config.Config, next string) error {
	if client == nil {
		return errors.New("RunBrowserBootstrap: nil client")
	}
	if cfg == nil {
		return errors.New("RunBrowserBootstrap: nil config")
	}

	session, err := client.CheckSession()
	if err != nil {
		return fmt.Errorf("check server status: %w", err)
	}
	if !session.SetupRequired {
		// Already bootstrapped — nothing to do.
		return nil
	}

	setupURL, err := buildBootstrapURL(cfg, session.SetupMethod, next)
	if err != nil {
		return err
	}

	bold := color.New(color.Bold).SprintFunc()
	fmt.Println()
	fmt.Println("  Open this URL in your browser to finish setup:")
	fmt.Println()
	fmt.Printf("  %s\n", bold(setupURL))
	fmt.Println()
	fmt.Println("  Waiting for setup to complete (Ctrl+C to cancel)...")

	if err := pollUntilSetupDone(ctx, client); err != nil {
		return err
	}

	green := color.New(color.FgGreen).SprintFunc()
	fmt.Printf("  %s Setup complete\n", green("✓"))
	return nil
}

// buildBootstrapURL constructs the /setup URL the operator should open.
//