feat(setup): add a setup token for first-run setup (#3437)

packages/config/src/MasterConfig.ts

@@ -301,6 +301,7 @@ export interface MasterConfig {
 		branding: InstanceBrandingConfig;
 		setup: {
 			configured: boolean;
+			token?: string;
 		};
 		account_identity: AccountIdentityModeName | null;
 		tag_style: TagStyleName | null;

packages/config/src/__tests__/EnvironmentOverrides.test.ts

@@ -50,6 +50,12 @@ describe('buildNamedFluxerEnvOverrides', () => {
 		).toEqual({});
 	});
 
+	test('maps the setup token onto the instance setup section', () => {
+		expect(buildNamedFluxerEnvOverrides({FLUXER_SETUP_TOKEN: 'a-setup-token-of-at-least-32-characters'})).toEqual({
+			instance: {setup: {token: 'a-setup-token-of-at-least-32-characters'}},
+		});
+	});
+
 	test('a blank canonical name falls through to its alias', () => {
 		expect(
 			buildNamedFluxerEnvOverrides({

packages/config/src/config_loader/EnvironmentOverrides.ts

@@ -288,6 +288,7 @@ const NAMED_FLUXER_ENV_OVERRIDES: Record<string, NamedEnvOverride> = {
 	FLUXER_APP_STATUS_PAGE_URL: {path: ['instance', 'branding', 'status_page_url']},
 	FLUXER_APP_STATUS_PAGE_INCIDENT_HISTORY_URL: {path: ['instance', 'branding', 'status_page_incident_history_url']},
 	FLUXER_INSTANCE_SETUP_CONFIGURED: {path: ['instance', 'setup', 'configured'], parse: parseBoolean},
+	FLUXER_SETUP_TOKEN: {path: ['instance', 'setup', 'token']},
 	FLUXER_ACCOUNT_IDENTITY: {path: ['instance', 'account_identity'], parse: parseAccountIdentity},
 	FLUXER_TAG_STYLE: {path: ['instance', 'tag_style'], parse: parseTagStyle},
 	FLUXER_DISCOVERY_ENABLED: {path: ['discovery', 'enabled'], parse: parseBoolean},