@delt/claude-alarm 0.8.0 → 0.8.2

package/dist/dashboard/index.html

@@ -617,12 +617,35 @@
     border-radius: 5px;
     padding: 6px 10px;
     margin-top: 5px;
-    max-height: 60px;
-    overflow-y: auto;
+    max-height: 220px;
+    overflow: auto;
     white-space: pre-wrap;
     word-break: break-all;
     line-height: 1.4;
   }
+  .perm-preview pre {
+    margin: 0;
+    white-space: pre;
+    font-family: inherit;
+    font-size: inherit;
+  }
+  .perm-preview code { font-family: inherit; }
+  .perm-preview.prose {
+    font-family: inherit;
+    white-space: normal;
+    word-break: normal;
+  }
+  .perm-preview.prose pre,
+  .perm-preview.prose code { font-family: monospace; }
+  .perm-preview.prose ul { margin: 4px 0; padding-left: 20px; }
+  .perm-preview.prose li { margin: 2px 0; }
+  .perm-preview.prose strong { font-weight: 600; }
+  .perm-preview.prose h2,
+  .perm-preview.prose h3,
+  .perm-preview.prose h4 { font-size: 12px; font-weight: 600; margin: 4px 0; }
+  .perm-preview.prose table { border-collapse: collapse; margin: 4px 0; font-size: 11px; }
+  .perm-preview.prose th,
+  .perm-preview.prose td { border: 1px solid var(--border); padding: 3px 6px; text-align: left; }
   .perm-actions {
     display: flex;
     gap: 10px;
@@ -1670,9 +1693,26 @@
     return toolName;
   }
 
-  // Returns { text } — dashboard shows full content, no truncation
+  const LANG_BY_EXT = {
+    js: 'javascript', mjs: 'javascript', cjs: 'javascript', jsx: 'javascript',
+    ts: 'typescript', tsx: 'typescript', py: 'python', rb: 'ruby', go: 'go',
+    java: 'java', kt: 'kotlin', rs: 'rust', php: 'php', cs: 'csharp',
+    sh: 'bash', bash: 'bash', zsh: 'bash', ps1: 'powershell',
+    json: 'json', yml: 'yaml', yaml: 'yaml', xml: 'xml', sql: 'sql',
+    md: 'markdown', html: 'html', vue: 'html', css: 'css', scss: 'scss',
+  };
+  function langOf(path) {
+    const m = /\.([a-z0-9]+)$/i.exec(path || '');
+    return m ? (LANG_BY_EXT[m[1].toLowerCase()] || '') : '';
+  }
+
+  // Returns { text, kind, lang } — dashboard shows full content, no truncation.
+  // kind 'code' must stay byte-exact: markdown rendering would swallow the ** and `
+  // characters that the approver needs to see to judge what actually gets executed.
+  // Only notify-style messages (prose Claude wrote) are safe to render as markdown.
   function formatPermPreview(toolName, raw) {
-    if (!raw) return { text: '' };
+    if (!raw) return { text: '', kind: 'code', lang: '' };
+    const isNotify = toolName === 'notify' || toolName.endsWith('__notify');
     let p = null;
     try { p = JSON.parse(raw); } catch {
       // Truncated JSON - extract known fields with regex (closing quote optional for truncated strings)
@@ -1682,43 +1722,52 @@
       const contentMatch = raw.match(/"content"\s*:\s*"((?:[^"\\]|\\.)*)"?/);
       const titleMatch = raw.match(/"title"\s*:\s*"((?:[^"\\]|\\.)*)"?/);
       const msgMatch = raw.match(/"message"\s*:\s*"((?:[^"\\]|\\.)*)"?/);
-      if (titleMatch && msgMatch) return { text: msgMatch[1] };
-      if (cmdMatch) return { text: '$ ' + cmdMatch[1] };
-      if (fileMatch) return { text: fileMatch[1] };
-      if (patternMatch) return { text: patternMatch[1] };
-      if (contentMatch) return { text: contentMatch[1] };
-      return { text: raw };
+      if (titleMatch && msgMatch) return { text: msgMatch[1], kind: 'prose', lang: '' };
+      if (cmdMatch) return { text: '$ ' + cmdMatch[1], kind: 'code', lang: 'bash' };
+      if (fileMatch) return { text: fileMatch[1], kind: 'code', lang: langOf(fileMatch[1]) };
+      if (patternMatch) return { text: patternMatch[1], kind: 'code', lang: '' };
+      if (contentMatch) return { text: contentMatch[1], kind: 'code', lang: '' };
+      return { text: raw, kind: 'code', lang: '' };
     }
     let text;
+    let kind = 'code';
+    let lang = '';
     switch (toolName) {
       case 'Bash':
-        text = p.command ? '$ ' + p.command : raw; break;
+        text = p.command ? '$ ' + p.command : raw; lang = 'bash'; break;
       case 'Write':
       case 'Edit':
         if (p.file_path) {
           text = p.file_path;
+          lang = langOf(p.file_path);
           if (p.new_string) text += '\n+ ' + p.new_string;
           else if (p.content) text += '\n' + p.content;
         } else { text = raw; }
         break;
       case 'Read':
-        text = p.file_path || raw; break;
+        text = p.file_path || raw; lang = langOf(p.file_path); break;
       case 'Glob':
         text = p.pattern || raw; break;
       case 'Grep':
         text = (p.pattern || '') + (p.path ? '  in ' + p.path : ''); break;
       default:
         if (p.title && p.message) {
-          text = p.message;
+          text = p.message; kind = 'prose';
         } else if (p.content && typeof p.content === 'string') {
-          text = p.content;
+          text = p.content; kind = isNotify ? 'prose' : 'code';
         } else {
           const entries = Object.entries(p);
           if (entries.length <= 3) text = entries.map(([k, v]) => k + ': ' + String(v)).join('\n');
           else text = JSON.stringify(p, null, 1);
         }
     }
-    return { text: text || '' };
+    return { text: text || '', kind, lang };
+  }
+
+  function renderPermPreview(text, kind, lang) {
+    if (kind === 'prose') return `<div class="perm-preview prose">${renderMarkdown(text)}</div>`;
+    const cls = lang ? ` class="lang-${esc(lang)}"` : '';
+    return `<div class="perm-preview"><pre><code${cls}>${esc(text)}</code></pre></div>`;
   }
 
   function sendPermissionVerdict(sessionId, requestId, behavior) {
@@ -1742,7 +1791,7 @@
     if (!reqs.length) { bar.classList.remove('active'); bar.innerHTML = ''; return; }
     bar.classList.add('active');
     bar.innerHTML = reqs.map(r => {
-      const { text: previewText } = formatPermPreview(r.toolName, r.inputPreview);
+      const { text: previewText, kind: previewKind, lang: previewLang } = formatPermPreview(r.toolName, r.inputPreview);
       const displayName = formatToolName(r.toolName, r.inputPreview);
       return `<div class="perm-item">
         <div class="perm-icon">&#9888;</div>
@@ -1750,7 +1799,7 @@
           <div class="perm-header">
             <span class="perm-tool">${esc(displayName)}</span>
           </div>
-          ${previewText ? `<div class="perm-preview">${esc(previewText)}</div>` : ''}
+          ${previewText ? renderPermPreview(previewText, previewKind, previewLang) : ''}
         </div>
         <div class="perm-actions">
           <button class="perm-allow" data-req-id="${esc(r.requestId)}" data-session-id="${esc(sid)}">Allow <span class="perm-kbd">(Enter)</span></button>

package/dist/hub/server.js

@@ -2,7 +2,7 @@
 
 // src/hub/server.ts
 import http from "http";
-import fs3 from "fs";
+import fs4 from "fs";
 import path4 from "path";
 import { fileURLToPath } from "url";
 import { WebSocketServer, WebSocket } from "ws";
@@ -210,7 +210,7 @@ import fs from "fs";
 import path2 from "path";
 import { randomUUID } from "crypto";
 var TELEGRAM_API = "https://api.telegram.org/bot";
-var TelegramBot = class {
+var TelegramBot = class _TelegramBot {
   config;
   offset = 0;
   polling = false;
@@ -442,33 +442,45 @@ ${this.mdToHtml(message)}`;
   }
   /** Send a permission request with inline buttons */
   async sendPermissionRequest(sessionId, sessionLabel, requestId, toolName, description, inputPreview) {
+    const isNotify = toolName.endsWith("__notify") || toolName === "notify";
     let preview = inputPreview;
+    let kind = "code";
+    let lang = "";
     let truncated = false;
     try {
       const p = JSON.parse(inputPreview);
-      if (p.command) preview = `$ ${p.command}`;
-      else if (p.title && p.message) preview = p.message;
-      else if (p.file_path) {
+      if (p.command) {
+        preview = `$ ${p.command}`;
+        lang = "bash";
+      } else if (p.title && p.message) {
+        preview = p.message;
+        kind = "prose";
+      } else if (p.file_path) {
         preview = p.file_path;
+        lang = this.langOf(p.file_path);
         if (p.content) {
           preview += "\n" + p.content.slice(0, 3e3);
           if (p.content.length > 500) truncated = true;
         }
       } else if (p.content && typeof p.content === "string") {
         preview = p.content.slice(0, 3e3);
+        if (isNotify) kind = "prose";
         if (p.content.length > 500) truncated = true;
       }
     } catch {
       truncated = true;
       const cmdMatch = inputPreview.match(/"command"\s*:\s*"((?:[^"\\]|\\.)*)"/);
       const contentMatch = inputPreview.match(/"content"\s*:\s*"((?:[^"\\]|\\.)*)"/);
-      if (cmdMatch) preview = `$ ${cmdMatch[1]}`;
-      else if (contentMatch) preview = contentMatch[1].slice(0, 3e3);
+      if (cmdMatch) {
+        preview = `$ ${cmdMatch[1]}`;
+        lang = "bash";
+      } else if (contentMatch) preview = contentMatch[1].slice(0, 3e3);
     }
     const truncNote = truncated ? "\n\n<i>...truncated</i>" : "";
     const previewSlice = preview.slice(0, 3e3);
     const isShort = !previewSlice.includes("\n") && previewSlice.length < 100;
-    const previewHtml = isShort ? `<code>${this.escHtml(previewSlice)}</code>` : this.escHtml(previewSlice);
+    const langAttr = lang ? ` class="language-${lang}"` : "";
+    const previewHtml = kind === "prose" ? this.mdToHtml(previewSlice) : isShort ? `<code>${this.escHtml(previewSlice)}</code>` : `<pre><code${langAttr}>${this.escHtml(previewSlice)}</code></pre>`;
     let displayTool = toolName;
     if ((toolName.endsWith("__notify") || toolName === "notify") && inputPreview) {
       try {
@@ -568,6 +580,40 @@ ${label}`);
   escHtml(s) {
     return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   }
+  static LANG_BY_EXT = {
+    js: "javascript",
+    mjs: "javascript",
+    cjs: "javascript",
+    jsx: "javascript",
+    ts: "typescript",
+    tsx: "typescript",
+    py: "python",
+    rb: "ruby",
+    go: "go",
+    java: "java",
+    kt: "kotlin",
+    rs: "rust",
+    php: "php",
+    cs: "csharp",
+    sh: "bash",
+    bash: "bash",
+    zsh: "bash",
+    ps1: "powershell",
+    json: "json",
+    yml: "yaml",
+    yaml: "yaml",
+    xml: "xml",
+    sql: "sql",
+    md: "markdown",
+    html: "html",
+    vue: "html",
+    css: "css",
+    scss: "scss"
+  };
+  langOf(path5) {
+    const m = /\.([a-z0-9]+)$/i.exec(path5 || "");
+    return m ? _TelegramBot.LANG_BY_EXT[m[1].toLowerCase()] ?? "" : "";
+  }
   /** Convert markdown to Telegram HTML (escape first, then apply formatting) */
   mdToHtml(s) {
     let text = s.replace(
@@ -653,6 +699,54 @@ function saveConfig(config) {
   fs2.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { encoding: "utf-8", mode: 384 });
 }
 
+// src/shared/crash-guard.ts
+import fs3 from "fs";
+var BURST_WINDOW_MS = 6e4;
+var BURST_LIMIT = 10;
+function appendToLog(text) {
+  try {
+    fs3.mkdirSync(CONFIG_DIR, { recursive: true });
+    fs3.appendFileSync(LOG_FILE, text, "utf-8");
+  } catch {
+  }
+}
+function describe(err) {
+  if (err instanceof Error) return err.stack ?? `${err.name}: ${err.message}`;
+  try {
+    return JSON.stringify(err);
+  } catch {
+    return String(err);
+  }
+}
+function installCrashGuard(context) {
+  let recent = [];
+  const handle = (kind, err) => {
+    const stack = describe(err);
+    appendToLog(`
+[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind} (${context})
+${stack}
+`);
+    logger.error(`${kind} caught by crash guard: ${stack}`);
+    const now = Date.now();
+    recent = recent.filter((t) => now - t < BURST_WINDOW_MS);
+    recent.push(now);
+    if (recent.length > BURST_LIMIT) {
+      const msg = `${recent.length} unhandled errors within ${BURST_WINDOW_MS / 1e3}s \u2014 exiting`;
+      appendToLog(`[${(/* @__PURE__ */ new Date()).toISOString()}] ${msg}
+`);
+      logger.error(msg);
+      process.exit(1);
+    }
+  };
+  process.on("uncaughtException", (err) => handle("uncaughtException", err));
+  process.on("unhandledRejection", (reason) => handle("unhandledRejection", reason));
+}
+function logStartup(context) {
+  appendToLog(`
+[${(/* @__PURE__ */ new Date()).toISOString()}] ${context} started (pid ${process.pid})
+`);
+}
+
 // src/hub/server.ts
 var __dirname = path4.dirname(fileURLToPath(import.meta.url));
 var HubServer = class {
@@ -696,9 +790,12 @@ var HubServer = class {
     this.httpServer = http.createServer((req, res) => this.handleHttp(req, res));
     this.wssChannel = new WebSocketServer({ noServer: true });
     this.wssChannel.on("connection", (ws, req) => this.handleChannelConnection(ws, req));
+    this.wssChannel.on("error", (err) => logger.warn(`Channel WebSocket server error: ${err.message}`));
     this.wssDashboard = new WebSocketServer({ noServer: true });
     this.wssDashboard.on("connection", (ws) => this.handleDashboardConnection(ws));
+    this.wssDashboard.on("error", (err) => logger.warn(`Dashboard WebSocket server error: ${err.message}`));
     this.httpServer.on("upgrade", (req, socket, head) => {
+      socket.on("error", (err) => logger.debug(`Upgrade socket error: ${err.message}`));
       const url = new URL(req.url, `http://${req.headers.host}`);
       const pathname = url.pathname;
       if (this.token && !this.isLocalRequest(req)) {
@@ -725,8 +822,11 @@ var HubServer = class {
     this.cleanupUploads();
     this.startHeartbeat();
     return new Promise((resolve, reject) => {
-      this.httpServer.on("error", reject);
+      const onStartupError = (err) => reject(err);
+      this.httpServer.once("error", onStartupError);
       this.httpServer.listen(this.port, this.host, () => {
+        this.httpServer.removeListener("error", onStartupError);
+        this.httpServer.on("error", (err) => logger.error(`HTTP server error: ${err.message}`));
         const displayHost = this.host === "0.0.0.0" ? "127.0.0.1" : this.host;
         logger.info(`Hub server listening on http://${displayHost}:${this.port}`);
         resolve();
@@ -847,8 +947,8 @@ var HubServer = class {
     ];
     logger.debug(`Dashboard candidates: ${JSON.stringify(candidates)}`);
     for (const candidate of candidates) {
-      if (fs3.existsSync(candidate)) {
-        const html = fs3.readFileSync(candidate, "utf-8");
+      if (fs4.existsSync(candidate)) {
+        const html = fs4.readFileSync(candidate, "utf-8");
         res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
         res.end(html);
         return;
@@ -895,6 +995,10 @@ var HubServer = class {
   handleChannelConnection(ws, req) {
     const isLocal = this.isLocalRequest(req);
     logger.info(`Channel server connected (local: ${isLocal})`);
+    ws.on("error", (err) => {
+      logger.warn(`Channel WebSocket error: ${err.message}`);
+      ws.terminate();
+    });
     ws.on("pong", () => {
       for (const [sessionId, sock] of this.channelSockets) {
         if (sock === ws) {
@@ -1004,6 +1108,10 @@ var HubServer = class {
   handleDashboardConnection(ws) {
     this.dashboardSockets.add(ws);
     logger.info(`Dashboard connected (total: ${this.dashboardSockets.size})`);
+    ws.on("error", (err) => {
+      logger.warn(`Dashboard WebSocket error: ${err.message}`);
+      ws.terminate();
+    });
     const sessionsMsg = {
       type: "sessions_list",
       sessions: this.sessions.getAll()
@@ -1060,11 +1168,11 @@ var HubServer = class {
       logger.warn("Image upload rejected: exceeds 10MB");
       return;
     }
-    fs3.mkdirSync(UPLOADS_DIR, { recursive: true });
+    fs4.mkdirSync(UPLOADS_DIR, { recursive: true });
     const ext = mimeType.split("/")[1] === "jpeg" ? "jpg" : mimeType.split("/")[1];
     const filename = `${randomUUID3()}.${ext}`;
     const filePath = path4.join(UPLOADS_DIR, filename);
-    fs3.writeFileSync(filePath, buffer);
+    fs4.writeFileSync(filePath, buffer);
     const forwardMsg = {
       type: "image_to_session",
       sessionId,
@@ -1077,7 +1185,7 @@ var HubServer = class {
     logger.info(`Image saved and forwarded: ${filename} (${buffer.length} bytes)`);
     setTimeout(() => {
       try {
-        fs3.unlinkSync(filePath);
+        fs4.unlinkSync(filePath);
       } catch {
       }
     }, 5 * 60 * 1e3);
@@ -1247,11 +1355,11 @@ var HubServer = class {
   }
   cleanupUploads() {
     try {
-      if (!fs3.existsSync(UPLOADS_DIR)) return;
-      const files = fs3.readdirSync(UPLOADS_DIR);
+      if (!fs4.existsSync(UPLOADS_DIR)) return;
+      const files = fs4.readdirSync(UPLOADS_DIR);
       for (const file of files) {
         try {
-          fs3.unlinkSync(path4.join(UPLOADS_DIR, file));
+          fs4.unlinkSync(path4.join(UPLOADS_DIR, file));
         } catch {
         }
       }
@@ -1295,6 +1403,8 @@ var HubServer = class {
   }
 };
 if (process.argv[1] && (process.argv[1].endsWith("hub/server.js") || process.argv[1].endsWith("hub/server.ts"))) {
+  installCrashGuard("hub daemon");
+  logStartup("Hub daemon");
   const config = loadConfig();
   const hub = new HubServer(config);
   hub.start().catch((err) => {