Juan DenisandClaude Fable 5 089b75526e fix(agent): accept registration token from env to keep it out of argv (M5) ...

The installers ran `serverkit-agent register --token <token>`, putting the
registration token in the process argument list — world-readable via `ps` /
/proc/<pid>/cmdline while register runs. The documented curl|bash one-liner also
landed the token in shell history.

- register now falls back to SERVERKIT_REGISTRATION_TOKEN /
  SERVERKIT_CONNECTION_STRING / SERVERKIT_SERVER_URL when the flags are absent
  (a process's environment is readable only by its owner and root).
- install.sh passes the token via env (drops the old `eval`) and accepts it from
  the environment so it need not appear on the curl line.
- install.ps1 passes the token to the child via env, and makes -Token optional
  with the same env fallback.

Verified: agent reads the env token at runtime (register proceeds past flag
validation to the network call); install.sh `bash -n` and install.ps1 parser
both clean.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-12 17:52:59 -04:00

..

build.ps1

Add ServerKit agent and multi-server integration plan

2026-01-21 22:27:17 -05:00

build.sh

Add ServerKit agent and multi-server integration plan

2026-01-21 22:27:17 -05:00

install.ps1

fix(agent): accept registration token from env to keep it out of argv (M5)

2026-06-12 17:52:59 -04:00

install.sh

fix(agent): accept registration token from env to keep it out of argv (M5)

2026-06-12 17:52:59 -04:00