Method start

src/webui/plugin.ts:94–340

(ctx: EngineContext)

  ) {}

  async start(ctx: EngineContext) {
    // ==================== Auth bootstrap ====================
    // Generate the admin token on first run; subsequent boots no-op.
    // We do this BEFORE any route mounts so the public-mode safety
    // check below has a meaningful auth-file state to read.
    const { bootstrapToken, getTokenInfo } = await import('@/services/auth/index.js')
    await bootstrapToken({
      onFirstGeneration: (token) => {
        console.log('')
        console.log('═══════════════════════════════════════════════════════════════')
        console.log('  First-run admin token (save this — won\'t be shown again):')
        console.log('')
        console.log(`      ${token}`)
        console.log('')
        console.log('  To rotate: delete data/config/auth.json and restart.')
        console.log('═══════════════════════════════════════════════════════════════')
        console.log('')
      },
    })

    // ==================== Public-mode safety net ====================
    // Refuse to start if Alice is bound to a non-localhost interface
    // without an admin token configured. Prevents the "I set
    // OPENALICE_BIND_HOST=0.0.0.0 for testing and forgot auth" footgun.
    const bindHost = (process.env['OPENALICE_BIND_HOST'] ?? '127.0.0.1').trim()
    const bindIsPublic = bindHost !== '127.0.0.1' && bindHost !== '::1' && bindHost !== 'localhost'
    if (bindIsPublic) {
      const tokenInfo = await getTokenInfo()
      if (!tokenInfo.exists && process.env['OPENALICE_DISABLE_AUTH'] !== '1') {
        throw new Error(
          `Refusing to start: OPENALICE_BIND_HOST="${bindHost}" exposes Alice ` +
          `to non-localhost callers, but no admin token has been provisioned. ` +
          `Start once with OPENALICE_BIND_HOST=127.0.0.1 to generate the token, ` +
          `then re-set the bind. Set OPENALICE_DISABLE_AUTH=1 only when you ` +
          `understand the implication (no protection at the Alice boundary).`
        )
      }
    }

    // Load sub-channel definitions
    const subChannels = await readWebSubchannels()

    // Initialize sessions for the default channel and all sub-channels
    const sessions = new Map<string, SessionStore>()

    const defaultSession = new SessionStore('web/default')
    await defaultSession.restore()
    sessions.set('default', defaultSession)

    for (const ch of subChannels) {
      const session = new SessionStore(`web/${ch.id}`)
      await session.restore()
      sessions.set(ch.id, session)
    }

    // Initialize SSE map for known channels (entries are created lazily too)
    this.sseByChannel.set('default', new Map())
    for (const ch of subChannels) {