#!/usr/bin/env bash # ============================================================================ # JARVIS MISSION CONTROL — Community Installer · by KomputerMechanic # The curl one-liner target. Verifies your membership key, then runs the real # installer in a temporary folder that is wiped afterwards. The installer is # never stored on your machine. # # Usage (served by the licence Worker). THIS IS THE LIVE ADDRESS - verified, not aspirational: # curl -fsSL https://km-jarvis-installer.lingering-frost-ddb0.workers.dev | bash # # jarvis.komputermechanic.com was advertised here for months and HAS NEVER EXISTED: no DNS # record, no response. Attaching it needs komputermechanic.com moved onto Cloudflare (its # nameservers are Hostinger's today) plus a route in deploy/wrangler.toml. Until both are # done, this line must name the workers.dev address, because that is the one that answers. # ============================================================================ set -euo pipefail WORKER_URL="https://jarvis-crimson-summit.komputermechanic.com" TUTORIAL_SLUG="jarvis" if [ -t 1 ]; then B=$'\e[1m'; DIM=$'\e[2m'; G=$'\e[38;5;71m'; R=$'\e[38;5;167m'; ACC=$'\e[38;5;214m'; Z=$'\e[0m' else B=; DIM=; G=; R=; ACC=; Z=; fi printf '\n %s%sKomputerMechanic ~ JARVIS Mission Control%s\n' "$B" "$ACC" "$Z" printf ' %sVoice-driven AI-crew dashboard · community installer%s\n\n' "$DIM" "$Z" command -v curl >/dev/null || { printf ' %scurl is required.%s\n' "$R" "$Z"; exit 1; } TMP="$(mktemp -d)"; trap 'rm -rf "$TMP"' EXIT # ---- Intel Macs: not supported, said BEFORE the key is asked for --------------------------- # A deliberate scope decision (2026-08-14): the test fleet is Apple Silicon + Linux, and a # commercial product does not sell onto silicon it has never run on. Said here, before the # licence prompt, so nobody types a key for a machine we will not support. JMC_INTEL_OK=1 # proceeds anyway for tinkerers - unsupported, clearly labelled. if [ "$(uname -s 2>/dev/null)" = "Darwin" ] && [ "$(uname -m 2>/dev/null)" = "x86_64" ] && [ -z "${JMC_INTEL_OK:-}" ]; then printf '\n %s%sThis is an Intel-based Mac.%s\n\n' "$R" "$B" "$Z" printf ' JARVIS Mission Control supports %sApple Silicon Macs (M1 or newer) and Linux%s.\n' "$B" "$Z" printf ' Intel Macs are not supported - not because it cannot work, but because we\n' printf ' do not test on them, and we only sell what we test.\n\n' printf ' %sNo key was asked for and nothing was changed on this machine.%s\n' "$DIM" "$Z" printf ' Determined to try anyway, unsupported? Re-run with JMC_INTEL_OK=1\n' printf ' Questions or refunds: %sinfo@komputermechanic.com%s\n\n' "$DIM" "$Z" exit 1 fi # the "error" from the worker's JSON answer, read properly (a message with a quote in it defeated grep) _server_reason() { python3 -c 'import json, sys try: print((json.load(open(sys.argv[1])).get("error") or "").strip()) except Exception: pass' "$1" 2>/dev/null && return 0 { grep -o '"error":"[^"]*"' "$1" 2>/dev/null || true; } | head -1 | cut -d'"' -f4 } # membership key — verify, with one extra try in case of a typo LAST_ERR="" ATTEMPTS=2; [ -n "${JMC_LICENSE:-}" ] && ATTEMPTS=1 VERIFIED=0 for try in $(seq 1 "$ATTEMPTS"); do KEY="${JMC_LICENSE:-}" if [ -z "$KEY" ]; then [ "$try" -gt 1 ] && printf " %sLet's try that once more.%s\n" "$DIM" "$Z" read -r -p " Enter your membership key: " KEY /dev/null || true)" CODE="${CODE:0:3}"; [ -n "$CODE" ] || CODE=000 # curl prints 000 itself when nothing answered if [ "$CODE" = "200" ]; then VERIFIED=1; break; fi # The server says WHY (install limit, renewal date, payment, wrong installer...): show its words as they # are. A Kit buyer at his install limit was told "check your key and your connection" twelve times # (2026-10-11). Only a reply that never came is a connection problem. ERR="$(_server_reason "$TMP/body")" LAST_CODE="$CODE"; LAST_ERR="$ERR" if [ -z "$ERR" ]; then case "$CODE" in 000|5??) ERR="Could not reach the membership server. Check this machine's internet connection and try again." ;; *) ERR="The membership server refused this key (HTTP $CODE) without saying why. Contact info@komputermechanic.com" ;; esac fi printf ' %s✗ %s%s\n' "$R" "$ERR" "$Z" # a typo is worth a second try; an install limit, a payment or an expired key is not case "$CODE:$LAST_ERR" in 403:*[Ii]nvalid*|403:) : ;; 403:*) break ;; esac done if [ "$VERIFIED" != "1" ]; then # Don't contradict the server. When it told us WHY (e.g. the install limit is reached), # repeating "check your key" sends a customer whose key is perfectly valid down the # wrong path. Echo guidance that matches the actual reason. if [ -n "${LAST_ERR:-}" ]; then # the server's own words were printed above, as they are; just close the run printf '\n %sNothing was installed. Questions: info@komputermechanic.com%s\n\n' "$DIM" "$Z" else case "${LAST_CODE:-000}" in 000|5??) printf '\n %s%sCould not reach the membership server.%s Check this machine'"'"'s internet connection and try again.\n\n' "$R" "$B" "$Z" ;; *) printf '\n %s%sYour key was not accepted.%s Contact info@komputermechanic.com\n\n' "$R" "$B" "$Z" ;; esac fi exit 1 fi printf ' %s✓ Membership verified.%s\n' "$G" "$Z" # unpack into the temp folder, stamp the key, run, then wipe tar -xzf "$TMP/body" -C "$TMP" 2>/dev/null || { printf ' %sInstaller package was invalid.%s\n' "$R" "$Z"; exit 1; } DIR="$TMP/jarvis-installer" [ -f "$DIR/install.sh" ] || { printf ' %sInstaller not found in package.%s\n' "$R" "$Z"; exit 1; } CUSTOMER="$(grep -i '^x-km-customer:' "$TMP/head" | tr -d '\r' | awk '{print $2}')" printf 'membership_key=%s\ncustomer=%s\ninstalled=%s\n' \ "$KEY" "$CUSTOMER" "$(date -u +%FT%TZ 2>/dev/null || echo now)" > "$DIR/.license" 2>/dev/null || true printf ' %sStarting the installer...%s\n' "$DIM" "$Z" cd "$DIR" # The real installer runs its own licence step; it already verified here, so skip the double-check. export JMC_SKIP_LICENSE=1 set +e # ---- Hermes in a Docker container on this VPS (Hostinger's image and the like) --------------- # On such a box there is no `hermes` on the host at all: it lives inside a container, with its # data at /opt/data, running as its own user. The installer used to die here at "hermes CLI not # found". Now: if there is no hermes on the host and a running container looks like Hermes, offer # to install INTO it - the package is copied in and run as the container's Hermes user, and the # activation is recorded from the result exactly as for a host install. # # WHICH container: the first version only looked at containers whose NAME or IMAGE contained # "hermes", then quietly took the first of them. A buyer with two Hermes containers - one he # wanted to keep and a new one for JARVIS - got the old one every time, because the new one # was named after his project, not after Hermes (feedback, 2026-09-10). Now every running # container is PROBED for Hermes (a hermes binary, HERMES_HOME, or a Hermes config in a home # dir), the ones that already carry a JARVIS install are flagged, and with more than one the # BUYER picks from a numbered list - no default, the installer never chooses a container for # him (it is his setup). Headless with more than one: stop and ask for JMC_CONTAINER_NAME=. # # HOST **AND** CONTAINER: a buyer running Mission Control on the host as root spun up a fresh # Hermes container to try JARVIS beside it, and the script never even looked - the whole Docker # path was gated on there being NO Hermes on the host, so the host install won by default and # his container was invisible (feedback, 2026-09-11). Having both is a normal thing to want: # the old crew keeps working while the new one is tried next to it. So containers are now # looked for ALWAYS, and when both exist the buyer is asked which one. Unattended runs keep # the host, exactly as before, and say which containers they saw. _hermes_on_host() { command -v hermes >/dev/null 2>&1 || [ -x "$HOME/.local/bin/hermes" ] || [ -x /usr/local/bin/hermes ]; } # does this running container hold a Hermes? asks the container itself, never its name _ctr_is_hermes() { timeout 10 docker exec "$1" sh -c 'command -v hermes >/dev/null 2>&1 || [ -n "${HERMES_HOME:-}" ] \ || ls /opt/data/config.yaml /home/*/.hermes/config.yaml /root/.hermes/config.yaml >/dev/null 2>&1' >/dev/null 2>&1 } # the Hermes user's home in this container (where a JARVIS install lands), empty if unknown _ctr_jarvis_installed() { local hh u home hh="$(timeout 10 docker exec "$1" sh -c 'printf %s "${HERMES_HOME:-/opt/data}"' 2>/dev/null || true)" u="$(timeout 10 docker exec "$1" sh -c "stat -c %U '${hh:-/opt/data}'" 2>/dev/null || true)" home="$(timeout 10 docker exec "$1" sh -c "getent passwd '${u:-hermes}' | cut -d: -f6" 2>/dev/null || true)" [ -n "$home" ] && timeout 10 docker exec "$1" sh -c "[ -d '$home/jarvis-mission-control' ]" >/dev/null 2>&1 } CTR="" _HOST_HERMES=""; _hermes_on_host && _HOST_HERMES=1 if [ "$(uname -s 2>/dev/null)" = "Linux" ] && command -v docker >/dev/null 2>&1; then _NAMES=(); _IMAGES=(); _FLAGS=() while IFS=$'\t' read -r _n _img; do [ -n "$_n" ] || continue if _ctr_is_hermes "$_n" || printf '%s %s' "$_n" "$_img" | grep -qi hermes; then _NAMES+=("$_n"); _IMAGES+=("$_img") if _ctr_jarvis_installed "$_n"; then _FLAGS+=("JARVIS already installed") else _FLAGS+=(""); fi fi done < <(docker ps --format '{{.Names}}\t{{.Image}}' 2>/dev/null || true) # Hermes containers that exist but are NOT running are named too, so "the script does not # see my new container" has an answer on screen: start it, then re-run. _STOPPED="$(docker ps -a --filter status=exited --filter status=created --format '{{.Names}} {{.Image}}' 2>/dev/null | grep -i hermes || true)" if [ -n "${JMC_CONTAINER_NAME:-}" ]; then if docker ps --format '{{.Names}}' 2>/dev/null | grep -qx "$JMC_CONTAINER_NAME"; then CTR="$JMC_CONTAINER_NAME"; JMC_CONTAINER_OK=1 printf '\n %sHermes is running in a Docker container; JMC_CONTAINER_NAME picked %s%s\n' "$B" "$CTR" "$Z" elif docker ps -a --format '{{.Names}}' 2>/dev/null | grep -qx "$JMC_CONTAINER_NAME"; then printf '\n %sContainer %s exists but is not running.%s Start it, then re-run:\n docker start %s\n\n' "$R" "$JMC_CONTAINER_NAME" "$Z" "$JMC_CONTAINER_NAME"; exit 1 else printf '\n %sNo container called %s on this machine%s (JMC_CONTAINER_NAME). Running containers:\n' "$R" "$JMC_CONTAINER_NAME" "$Z" docker ps --format ' {{.Names}} {{.Image}}' 2>/dev/null; echo; exit 1 fi elif [ "${#_NAMES[@]}" -gt 0 ] && [ -n "$_HOST_HERMES" ]; then # Both. Neither is the obvious answer, so neither is assumed. printf '\n %sHermes is installed on this machine AND running in Docker.%s Where should JARVIS go?\n' "$B" "$Z" printf ' %s0)%s this machine %s(the Hermes already installed here)%s\n' "$B" "$Z" "$DIM" "$Z" _i=0; while [ "$_i" -lt "${#_NAMES[@]}" ]; do printf ' %s%d)%s %-28s %s%s%s\n' "$B" $((_i+1)) "$Z" "${_NAMES[$_i]}" "$DIM" "${_IMAGES[$_i]}" "$Z" [ -n "${_FLAGS[$_i]}" ] && printf ' %s%s%s\n' "$ACC" "${_FLAGS[$_i]}" "$Z" _i=$((_i+1)) done [ -n "$_STOPPED" ] && { printf ' %snot running (docker start first):%s\n' "$DIM" "$Z"; printf '%s\n' "$_STOPPED" | sed "s/^/ /"; } printf ' %sInstalling into a container leaves whatever is on this machine untouched.%s\n' "$DIM" "$Z" if ! { : /dev/null; then # Unattended keeps the old behaviour to the letter: the host. Changing the # default here would silently move somebody else's scripted install. printf '\n %sNo terminal to ask, so JARVIS goes on this machine%s (as it always has).\n' "$ACC" "$Z" printf ' To install into a container instead, re-run with: JMC_CONTAINER_NAME=\n\n' else _try=0; _done="" while [ -z "$_done" ] && [ "$_try" -lt 3 ]; do read -r -p " Which one? [0-${#_NAMES[@]}]: " _pick /dev/null | grep -qx "$_pick"; then CTR="$_pick"; _done=1 else [ -n "$_pick" ] && printf ' %s"%s" is not one of the choices.%s\n' "$R" "$_pick" "$Z" _try=$((_try+1)) fi done [ -z "$_done" ] && { printf '\n Nothing installed: no target chosen. Re-run and pick one.\n\n'; exit 1; } fi elif [ "${#_NAMES[@]}" -gt 0 ]; then printf '\n %sNo Hermes on this machine itself, but Hermes is running in a Docker container:%s\n' "$B" "$Z" _i=0; while [ "$_i" -lt "${#_NAMES[@]}" ]; do printf ' %s%d)%s %-28s %s%s%s\n' "$B" $((_i+1)) "$Z" "${_NAMES[$_i]}" "$DIM" "${_IMAGES[$_i]}" "$Z" [ -n "${_FLAGS[$_i]}" ] && printf ' %s%s%s\n' "$ACC" "${_FLAGS[$_i]}" "$Z" _i=$((_i+1)) done [ -n "$_STOPPED" ] && { printf ' %snot running (docker start first):%s\n' "$DIM" "$Z"; printf '%s\n' "$_STOPPED" | sed "s/^/ /"; } printf ' %sNot the one you want? Start the Hermes container you mean, or set JMC_CONTAINER_NAME=.%s\n' "$DIM" "$Z" if [ "${#_NAMES[@]}" -eq 1 ]; then CTR="${_NAMES[0]}" # the only one: confirmed below, never assumed elif ! { : /dev/null; then printf '\n %sMore than one Hermes container and no terminal to ask you.%s Name the one you mean and re-run:\n JMC_CONTAINER_NAME= curl ... | bash\n\n' "$R" "$Z"; exit 1 else _try=0 while [ -z "$CTR" ] && [ "$_try" -lt 3 ]; do read -r -p " Which container? [1-${#_NAMES[@]}]: " _pick /dev/null | grep -qx "$_pick"; then CTR="$_pick"; break # any RUNNING container by name, even one the probe did not flag fi [ -n "$_pick" ] && printf ' %sNo running container "%s" - a number from the list or an exact name.%s\n' "$R" "$_pick" "$Z" _try=$((_try+1)) done [ -z "$CTR" ] && { printf '\n Nothing installed: no container chosen. Re-run and pick one, or set JMC_CONTAINER_NAME=.\n\n'; exit 1; } fi if [ -z "${JMC_CONTAINER_OK:-}" ] && { : /dev/null; then read -r -p " Install JARVIS Mission Control into container '$CTR'? [Y/n]: " _ok ) and re-run.\n\n'; exit 0 ;; esac fi elif [ -n "$_STOPPED" ] && [ -n "$_HOST_HERMES" ]; then # There is a perfectly good Hermes here; a stopped container is worth naming, not fatal. printf '\n %sHermes container(s) here are not running, so JARVIS goes on this machine:%s\n' "$DIM" "$Z" printf '%s\n' "$_STOPPED" | sed 's/^/ /' printf ' %sWanted one of those instead? docker start , then re-run.%s\n' "$DIM" "$Z" elif [ -n "$_STOPPED" ]; then printf '\n %sNo Hermes on this machine, and the Hermes container(s) here are not running:%s\n' "$R" "$Z" printf '%s\n' "$_STOPPED" | sed 's/^/ /' printf ' Start the one you want (docker start ), then re-run.\n\n'; exit 1 fi fi if [ -n "$CTR" ]; then # the user Hermes runs as inside the container: whoever owns its data dir (uid 10000 on the # official image). Root via a plain docker exec would leave files the gateway cannot read. _CHH="$(docker exec "$CTR" sh -c 'printf %s "${HERMES_HOME:-/opt/data}"' 2>/dev/null || echo /opt/data)" _CUSER="$(docker exec "$CTR" sh -c "stat -c %U '$_CHH'" 2>/dev/null || echo hermes)" printf ' %sCopying the installer into %s (as %s, data at %s)...%s\n' "$DIM" "$CTR" "$_CUSER" "$_CHH" "$Z" docker cp "$TMP/body" "$CTR:/tmp/jarvis-installer.tar.gz" >/dev/null 2>&1 \ || { printf ' %sCould not copy the installer into the container.%s\n' "$R" "$Z"; exit 1; } docker cp "$DIR/.license" "$CTR:/tmp/jarvis-installer.license" >/dev/null 2>&1 || true # docker cp keeps OUR uid on the files; in the container's sticky /tmp the Hermes user could # then neither move the licence stamp nor remove the package afterwards (found by the lane) docker exec "$CTR" chown "$_CUSER" /tmp/jarvis-installer.tar.gz /tmp/jarvis-installer.license >/dev/null 2>&1 || true # The installer's prompts read the terminal, so hand it ours (-it, stdin from /dev/tty). # Without a terminal (a fully piped run) stdin is /dev/null and JMC_YES answers: NEVER the # bootstrap's own stdin, which is this very script arriving from curl - docker exec -i would # swallow the rest of it. _CSCRIPT='rm -rf /tmp/jarvis-installer && tar -xzf /tmp/jarvis-installer.tar.gz -C /tmp \ && mv -f /tmp/jarvis-installer.license /tmp/jarvis-installer/.license 2>/dev/null cd /tmp/jarvis-installer && JMC_SKIP_LICENSE=1 JMC_CONTAINER=1 bash install.sh; rc=$? rm -rf /tmp/jarvis-installer /tmp/jarvis-installer.tar.gz; exit $rc' # `-e /dev/tty` is true on every Linux box, even with no terminal attached (the device file # exists); only OPENING it tells the truth. # every JMC_* knob set on the VPS shell travels into the container (JMC_VPS_HOST, JMC_PORT, # JMC_NO_VOICE, JMC_FORCE_REINSTALL, JMC_TG_LINK...), or a re-run could never be steered _ENVARGS=() while IFS= read -r _kv; do _ENVARGS+=(-e "$_kv"); done < <(env | grep -E '^JMC_[A-Z_]+=' | grep -vE '^JMC_(LICENSE|SKIP_LICENSE|CONTAINER)=' || true) if { : /dev/null; then docker exec -it -u "$_CUSER" "${_ENVARGS[@]}" "$CTR" bash -c "$_CSCRIPT" /dev/null 2>&1 || true else # ---- pick the installer for this operating system --------------------------- # macOS ships bash 3.2 (2007, frozen because bash 4 is GPLv3) and lacks GNU tools like # `timeout` and `grep -P`, and has launchd instead of systemd. It gets its own installer. # The Linux install.sh is left exactly as tested. # # `uname -s` decides — Darwin on every Mac, Linux on every Linux — but we SHOW the answer # and let the buyer correct it, so a wrong guess can never silently run the wrong one. OS_NAME="$(uname -s 2>/dev/null || echo unknown)" if [ "$OS_NAME" = "Darwin" ] && [ -f ./install-macos.sh ]; then PICKED="macos"; PICKED_LABEL="macOS" else PICKED="linux"; PICKED_LABEL="Linux" fi # Friendly name only — "Darwin" is macOS's internal kernel name and means nothing to a buyer. printf '\n %sDetected system:%s %s%s%s\n' "$DIM" "$Z" "$B" "$PICKED_LABEL" "$Z" # Only ask when there is a terminal AND a choice to make. Piped/unattended runs keep the # detected answer. JMC_OS=macos|linux overrides without prompting. if [ -n "${JMC_OS:-}" ]; then case "$JMC_OS" in macos|Darwin|mac) PICKED="macos"; PICKED_LABEL="macOS" ;; linux|Linux) PICKED="linux"; PICKED_LABEL="Linux" ;; esac printf ' %sJMC_OS set — using %s.%s\n' "$DIM" "$PICKED_LABEL" "$Z" elif [ -t 0 ] || [ -e /dev/tty ]; then read -r -p " Is that correct? [Y/n]: " OS_OK /dev/null || echo 000)" if [ "$ACT_CODE" = "200" ]; then USED="$(grep -o '"used":[0-9]*' "$TMP/act" 2>/dev/null | cut -d: -f2 || true)" LIMIT="$(grep -o '"limit":[0-9]*' "$TMP/act" 2>/dev/null | cut -d: -f2 || true)" printf ' %s✓ Activation recorded (%s/%s installs used).%s\n' "$G" "${USED:-?}" "${LIMIT:-?}" "$Z" else printf ' %s⚠ Could not record activation — the install succeeded, but the count may not have updated.%s\n' "$R" "$Z" fi else printf '\n %s✗ Installation failed — no activation was recorded. Your install count was not affected.%s\n' "$R" "$Z" exit "$INSTALL_EXIT" fi