ghosthand tunnel url

Usage

1ghosthand tunnel url [--new-token] [--name <label>]

Options

Option	Description
`--new-token`	Create an API token and print `export GHOSTHAND_URL=...` and `export GHOSTHAND_TOKEN=...`
`--name [label]`	With --new-token: a label to recognise the token (default: tunnel-token)

Also takes the global options.

Details

While this Mac is signed in, the daemon keeps a connection to ghosthand.dev. The URL is https://ghosthand.dev/macs/<mac>: the same API as the local socket (openapi.yaml) plus an API token. It stays the same while the Mac keeps its name and session.

For scripts: curl with Authorization: Bearer <token>. The ghosthand CLI does not need it: on another Mac, sign that Mac in and list shows this Mac's iPhones.
A token works for every Mac of the account and is shown once. Store it like a password. Revoke it with ghosthand tunnel revoke <id> (the id goes to stderr).
Through the tunnel a request body is at most 20 MB, and acquire returns leases like studio:42 (the plain 42 works too, on its own Mac's URL).
Signed out or connecting: run ghosthand setup or try again in a few seconds.

Examples

12$ ghosthand tunnel url
$ ghosthand tunnel url --new-token --name ci  # copy the two export lines to the script's computer