From c1f196640bd23eba0e3f6cda9ee9b077f08ad83e Mon Sep 17 00:00:00 2001
From: Elias Kohout <elias@kohout.de>
Date: Fri, 12 Jun 2026 15:53:09 +0200
Subject: [PATCH] fix: resolve AX_TOKEN before config user in getNodeService

---
 src/cmd/root.go | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/src/cmd/root.go b/src/cmd/root.go
index 31a2bfd..aeb5dae 100644
--- a/src/cmd/root.go
+++ b/src/cmd/root.go
@@ -12,6 +12,21 @@ import (
 )
 
 func getNodeService() (service.NodeService, error) {
+	if token := os.Getenv("AX_TOKEN"); token != "" {
+		if cfg.Remote.Host != "" {
+			base := fmt.Sprintf("http://%s:%d", cfg.Remote.Host, cfg.Remote.Port)
+			return service.NewRemoteNodeService(base, ""), nil
+		}
+		st, err := store.FindAndOpenSQLiteStore()
+		if err != nil {
+			return nil, err
+		}
+		agentID := service.LookupAgentToken(st, token)
+		if agentID == "" {
+			return nil, fmt.Errorf("invalid AX_TOKEN: agent not found")
+		}
+		return service.NewLocalNodeService(st, agentID), nil
+	}
 	user := cfg.User
 	if user == "" {
 		return nil, fmt.Errorf("no user configured: run 'ax user set <username>' first")