@bulletproof-sh/ctrl-daemon 0.4.0-beta.12 → 0.4.0-beta.35

package/README.md

@@ -1,6 +1,6 @@
 # @bulletproof-sh/ctrl-daemon
 
-WebSocket daemon for [Ctrl / Cubicles](https://ctrl.bulletproof.sh) — auto-discovers AI coding agent sessions (Claude Code, OpenAI Codex, Augment Code) and broadcasts live agent state to connected web clients. Features a full-screen animated TUI with a centered log panel showing daemon events in real time.
+WebSocket daemon for [Ctrl](https://ctrl.bulletproof.sh) — auto-discovers AI coding agent sessions (Claude Code, OpenAI Codex, Augment Code) and broadcasts live agent state to connected web clients. Supports relay sharing with end-to-end encryption for remote spectators. Features a full-screen animated TUI with a centered log panel.
 
 ## Requirements
 
@@ -39,6 +39,10 @@ npx @bulletproof-sh/ctrl-daemon --no-open
 | `--animation, -a <name>` | `random` | Background animation: matrix, starfield, aurora, fireflies, life, pipes, dvd, starwars, none |
 | `--no-tui` | — | Disable TUI (also auto-disabled when not a TTY) |
 | `--no-open` | — | Don't auto-open the browser on startup |
+| `--share` | — | Enable relay sharing (env: `CTRL_SHARE=1`) |
+| `--relay-url <url>` | channel-aware | Custom relay URL (env: `CTRL_RELAY_URL`) |
+| `--no-encrypt` | — | Disable end-to-end encryption for relay |
+| `--relay-only` | — | Relay only, no local server (implies `--share`) |
 | `--help`, `-h` | — | Print usage |
 
 Without `--project-dir`, the daemon auto-discovers all installed AI coding tools and watches their session directories.
@@ -53,19 +57,21 @@ The TUI handles terminal resize and restores the terminal cleanly on exit. The T
 
 ## Sharing your office
 
-Run the daemon and an [ngrok](https://ngrok.com) tunnel in parallel to share a live view with anyone:
+Share a live view of your office with anyone:
 
 ```sh
-# Terminal 1 — start the daemon
-npx @bulletproof-sh/ctrl-daemon
-
-# Terminal 2 — expose it publicly
-ngrok http 3001
+npx @bulletproof-sh/ctrl-daemon --share
 ```
 
-Then open [ctrl.bulletproof.sh](https://ctrl.bulletproof.sh), go to **Settings → Share Office** and copy the generated link. Anyone who opens it will see your agents in real time — no auth or setup required on their end.
+The daemon connects to the relay server, generates a share URL with an embedded encryption key, and prints it to the TUI. Anyone who opens the link sees your agents in real time — end-to-end encrypted, no auth required.
+
+For relay-only mode (no local server):
+
+```sh
+npx @bulletproof-sh/ctrl-daemon --relay-only
+```
 
-> **Note:** Free ngrok URLs rotate each time you restart the tunnel. A paid ngrok plan gives you a stable domain.
+> **Legacy:** You can still use [ngrok](https://ngrok.com) to tunnel the local server if you prefer: `ngrok http 3001`
 
 ## WebSocket API
 
@@ -78,9 +84,28 @@ The [Ctrl web app](https://ctrl.bulletproof.sh) connects here by default. You ca
 `GET /health` returns JSON with daemon status, agent count, and version:
 
 ```json
-{ "status": "ok", "agents": 3, "version": "0.0.18" }
+{ "status": "ok", "agents": 3, "version": "0.4.0" }
 ```
 
+### Message protocol
+
+The daemon broadcasts JSON messages over WebSocket. Key message types:
+
+| Direction | Type | Description |
+|---|---|---|
+| daemon→client | `existingAgents` | Initial state snapshot (agents, layout, version, share URL) |
+| daemon→client | `agentCreated` | New agent session detected |
+| daemon→client | `agentClosed` | Agent session ended |
+| daemon→client | `agentStatus` | Agent idle/waiting/working state change |
+| daemon→client | `agentToolStart` | Agent started using a tool |
+| daemon→client | `agentToolDone` | Agent finished using a tool |
+| daemon→client | `agentCostUpdate` | Token usage update |
+| daemon→client | `agentSessionResult` | Session completed with success/failure + cost |
+| client→daemon | `clientVersion` | Client identifies itself (triggers state snapshot for relay subscribers) |
+| client→daemon | `clientLayout` | Client sends its office layout (cached by daemon for spectators) |
+
+When relay sharing is enabled, messages are wrapped in a relay envelope (`{ v: 1, src, type, payload }`) and optionally encrypted with AES-GCM.
+
 ## Environment Variables
 
 | Variable | Description |

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@bulletproof-sh/ctrl-daemon",
-	"version": "0.4.0-beta.12",
+	"version": "0.4.0-beta.35",
 	"description": "WebSocket daemon for ctrl — watches Claude Code sessions and broadcasts agent state",
 	"type": "module",
 	"license": "BUSL-1.1",
@@ -17,22 +17,24 @@
 		"build": "bun build src/index.ts --outdir dist --target bun --minify",
 		"build:binaries": "bun scripts/build-binaries.ts",
 		"check": "biome check .",
-		"verify": "bunx tsc --noEmit && biome check . && vitest run",
+		"verify": "bunx tsc --noEmit && biome check . && vitest run --coverage && bun test src/relay.e2e.test.ts",
 		"test": "vitest run",
-		"test:watch": "vitest"
+		"test:watch": "vitest",
+		"test:coverage": "vitest run --coverage"
 	},
 	"devDependencies": {
 		"@biomejs/biome": "^2.4.4",
 		"@types/bun": "latest",
+		"@vitest/coverage-v8": "^4.0.18",
 		"typescript": "~5.9.3",
 		"vitest": "^4.0.18"
 	},
 	"optionalDependencies": {
-		"@bulletproof-sh/ctrl-daemon-darwin-arm64": "0.4.0-beta.12",
-		"@bulletproof-sh/ctrl-daemon-darwin-x64": "0.4.0-beta.12",
-		"@bulletproof-sh/ctrl-daemon-linux-arm64": "0.4.0-beta.12",
-		"@bulletproof-sh/ctrl-daemon-linux-x64": "0.4.0-beta.12",
-		"@bulletproof-sh/ctrl-daemon-windows-x64": "0.4.0-beta.12"
+		"@bulletproof-sh/ctrl-daemon-darwin-arm64": "0.4.0-beta.35",
+		"@bulletproof-sh/ctrl-daemon-darwin-x64": "0.4.0-beta.35",
+		"@bulletproof-sh/ctrl-daemon-linux-arm64": "0.4.0-beta.35",
+		"@bulletproof-sh/ctrl-daemon-linux-x64": "0.4.0-beta.35",
+		"@bulletproof-sh/ctrl-daemon-windows-x64": "0.4.0-beta.35"
 	},
 	"dependencies": {
 		"posthog-node": "^5.26.0"