@dylanpiercey/work 0.0.1

package/dist/public/icon.svg

@@ -0,0 +1,4 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128">
+  <rect width="128" height="128" rx="24" fill="#131316"/>
+  <text x="64" y="86" font-family="ui-monospace, monospace" font-size="64" font-weight="700" fill="#7c96ff" text-anchor="middle">w_</text>
+</svg>

package/dist/public/manifest.webmanifest

@@ -0,0 +1,35 @@
+{
+  "name": "work",
+  "short_name": "work",
+  "description": "Agentic dev workspaces",
+  "start_url": "/",
+  "display": "standalone",
+  "background_color": "#131316",
+  "theme_color": "#131316",
+  "icons": [
+    {
+      "src": "/icon-192.png",
+      "sizes": "192x192",
+      "type": "image/png",
+      "purpose": "any"
+    },
+    {
+      "src": "/icon-512.png",
+      "sizes": "512x512",
+      "type": "image/png",
+      "purpose": "any"
+    },
+    {
+      "src": "/icon-maskable-512.png",
+      "sizes": "512x512",
+      "type": "image/png",
+      "purpose": "maskable"
+    },
+    {
+      "src": "/icon.svg",
+      "sizes": "any",
+      "type": "image/svg+xml",
+      "purpose": "any"
+    }
+  ]
+}

package/dist/public/sw.js

@@ -0,0 +1,48 @@
+// Push + badge only. Deliberately no fetch handler: this app must never
+// serve cached assets (stale PWA clients were a hard-won lesson).
+self.addEventListener("install", () => self.skipWaiting());
+self.addEventListener("activate", (e) => e.waitUntil(self.clients.claim()));
+
+self.addEventListener("push", (e) => {
+  let payload = {};
+  try {
+    payload = e.data ? e.data.json() : {};
+  } catch {}
+  const badge = Number(payload.badge) || 0;
+  e.waitUntil(
+    Promise.all([
+      self.registration.showNotification(payload.title || "work", {
+        body: payload.body || "An agent is waiting for input",
+        tag: payload.tag,
+        icon: "/icon-192.png",
+        badge: "/icon-192.png",
+        data: payload.data || null,
+      }),
+      "setAppBadge" in self.navigator
+        ? badge
+          ? self.navigator.setAppBadge(badge)
+          : self.navigator.clearAppBadge()
+        : Promise.resolve(),
+    ]),
+  );
+});
+
+self.addEventListener("notificationclick", (e) => {
+  e.notification.close();
+  const target = e.notification.data;
+  e.waitUntil(
+    self.clients
+      .matchAll({ type: "window", includeUncontrolled: true })
+      .then((clients) => {
+        const client = clients[0];
+        if (client) {
+          if (target) client.postMessage({ type: "open-session", ...target });
+          return client.focus();
+        }
+        const params = target
+          ? `?ws=${encodeURIComponent(target.workspaceId)}&session=${encodeURIComponent(target.sessionId)}`
+          : "";
+        return self.clients.openWindow(`/${params}`);
+      }),
+  );
+});

package/install.sh

@@ -0,0 +1,104 @@
+#!/usr/bin/env bash
+# work installer — bootstraps a bare machine (no node, no tools) and
+# installs the `work` server as a background service.
+#
+#   curl -fsSL https://cdn.jsdelivr.net/npm/@dylanpiercey/work/install.sh | bash
+#
+# Idempotent: re-running updates everything. Assumes only bash + curl
+# (and sudo for system packages on Linux). All the real setup logic lives
+# in the npm package (`work setup`) — this script just gets node there.
+#
+# Environment (optional):
+#   WORK_PKG        npm spec to install (default @dylanpiercey/work@latest;
+#                   a local tarball path works for testing)
+#   WORK_YES=1      non-interactive (skips prompts; gh auth deferred)
+set -euo pipefail
+
+log() { printf '==> %s\n' "$*"; }
+die() { printf 'error: %s\n' "$*" >&2; exit 1; }
+have() { command -v "$1" >/dev/null 2>&1; }
+
+PKG="${WORK_PKG:-@dylanpiercey/work@latest}"
+SUDO=""
+if [[ "$(id -u)" != 0 ]]; then
+  if have sudo; then SUDO="sudo"; else SUDO="__none__"; fi
+fi
+
+# ── system packages ──────────────────────────────────────────────────────
+# git/tmux are runtime requirements; python3/make/g++ compile node-pty on
+# Linux (it ships no linux prebuilds).
+need_system_packages() {
+  case "$(uname -s)" in
+    Linux) ! { have curl && have git && have tmux && have python3 && have make && { have g++ || have c++; }; } ;;
+    Darwin) ! { have git && have tmux; } ;;
+  esac
+}
+if ! need_system_packages; then
+  log "system packages already present"
+elif [[ "$SUDO" == "__none__" ]]; then
+  die "system packages are missing (git/tmux/compiler) and sudo is unavailable — install them as root and re-run"
+else
+case "$(uname -s)" in
+  Linux)
+    if have apt-get; then
+      log "installing system packages (apt)"
+      $SUDO apt-get update -qq
+      $SUDO apt-get install -y -qq curl git tmux python3 make g++ >/dev/null
+    elif have dnf; then
+      log "installing system packages (dnf)"
+      $SUDO dnf install -y -q curl git tmux python3 make gcc-c++ >/dev/null
+    elif have pacman; then
+      log "installing system packages (pacman)"
+      $SUDO pacman -Sy --noconfirm --needed curl git tmux python make gcc >/dev/null
+    else
+      log "unknown package manager — make sure curl, git, tmux, and a C++ toolchain are installed"
+    fi
+    ;;
+  Darwin)
+    # git comes with the Xcode CLT (macOS prompts to install on first use);
+    # tmux needs Homebrew.
+    if ! have brew && ! have tmux; then
+      log "installing Homebrew (for tmux)"
+      NONINTERACTIVE=1 /bin/bash -c \
+        "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
+      eval "$(/opt/homebrew/bin/brew shellenv 2>/dev/null || /usr/local/bin/brew shellenv)"
+    fi
+    if have brew && ! have tmux; then
+      log "installing tmux (brew)"
+      brew install -q tmux
+    fi
+    have git || xcode-select --install || true
+    ;;
+  *) die "unsupported platform: $(uname -s)" ;;
+esac
+fi
+
+# ── mise + node ──────────────────────────────────────────────────────────
+export PATH="$HOME/.local/bin:$HOME/.local/share/mise/shims:$PATH"
+if ! have mise; then
+  log "installing mise"
+  curl -fsSL https://mise.run | sh
+fi
+log "installing node (mise)"
+mise use -g -y node@lts >/dev/null
+eval "$(mise env -s bash)"
+have node || die "node did not install via mise"
+
+# ── the work package ─────────────────────────────────────────────────────
+log "installing $PKG"
+npm install -g --loglevel=error "$PKG"
+
+# npm's global bin lives inside the mise-managed node install; make sure
+# future shells can find `work`.
+if ! grep -qs 'mise activate' "$HOME/.bashrc" 2>/dev/null && ! have work; then
+  log 'adding mise activation to ~/.bashrc'
+  printf '\neval "$(%s activate bash)"\n' "$(command -v mise)" >> "$HOME/.bashrc"
+fi
+
+# ── hand off ─────────────────────────────────────────────────────────────
+log "running work setup"
+if [[ "${WORK_YES:-0}" == 1 ]]; then
+  work setup --yes
+else
+  work setup
+fi

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@dylanpiercey/work",
+  "version": "0.0.1",
+  "type": "module",
+  "description": "Web GUI for agentic dev workspaces",
+  "license": "MIT",
+  "bin": {
+    "work": "bin/work.mjs"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "install.sh",
+    "scripts/migrate.mjs"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22.5"
+  },
+  "scripts": {
+    "dev": "marko-run dev src/entry.ts",
+    "postinstall": "chmod +x node_modules/node-pty/prebuilds/*/spawn-helper node_modules/node-pty/build/Release/spawn-helper 2>/dev/null || true",
+    "build": "marko-run build src/entry.ts",
+    "check": "mtc",
+    "preview": "PORT=7171 node dist/index.mjs"
+  },
+  "dependencies": {
+    "node-pty": "^1.1.0"
+  },
+  "devDependencies": {
+    "@lobehub/icons-static-svg": "^1.94.0",
+    "@marko/run": "^0.11.9",
+    "@marko/run-adapter-node": "^2.0.6",
+    "@marko/type-check": "^3.1.6",
+    "@pierre/diffs": "^1.3.5",
+    "@types/compression": "^1.8.1",
+    "@types/node": "^26.2.0",
+    "@types/serve-static": "^2.2.0",
+    "@types/web-push": "^3.6.4",
+    "@types/ws": "^8.18.1",
+    "@xterm/addon-clipboard": "^0.2.0",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/addon-web-links": "^0.12.0",
+    "@xterm/addon-webgl": "^0.19.0",
+    "@xterm/xterm": "^6.0.0",
+    "compression": "^1.8.1",
+    "iconoir": "^7.12.0",
+    "marko": "^6.3.34",
+    "playwright": "^1.62.1",
+    "serve-static": "^2.2.1",
+    "typescript": "^6.0.3",
+    "valibot": "^1.4.2",
+    "vite": "^8.2.1",
+    "web-push": "^3.6.7",
+    "ws": "^8.21.3"
+  }
+}

package/scripts/migrate.mjs

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+// migrate.mjs — one-shot cleanups for changes between versions, run by
+// update.sh/setup-prod.sh so the runtime stays free of legacy handling.
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { DatabaseSync } from "node:sqlite";
+
+const dataDir =
+  process.env.WORK_DATA_DIR ||
+  path.join(
+    process.env.XDG_DATA_HOME || path.join(os.homedir(), ".local", "share"),
+    "work",
+  );
+const dbPath = path.join(dataDir, "work.db");
+if (!fs.existsSync(dbPath)) process.exit(0);
+const db = new DatabaseSync(dbPath, { readOnly: true });
+
+// Pre-scrape versions wrote agent hook files into every workspace
+// (identified by their agent-state callback); state now comes from
+// terminal scraping and launch flags, so sweep them out.
+const LEGACY_HOOK_FILES = [
+  ".claude/settings.json",
+  ".codex/hooks.json",
+  ".cursor/hooks.json",
+  ".cursor/hooks/work-working.sh",
+  ".cursor/hooks/work-done.sh",
+  ".github/hooks/work-agent-state.json",
+];
+
+let removed = 0;
+for (const { path: wsPath } of db
+  .prepare("SELECT path FROM workspaces")
+  .all()) {
+  for (const rel of LEGACY_HOOK_FILES) {
+    const file = path.join(wsPath, rel);
+    try {
+      const text = fs.readFileSync(file, "utf8");
+      if (
+        !text.includes("/api/agent-state") &&
+        !text.includes(".cursor/hooks/work-")
+      ) {
+        continue;
+      }
+      fs.rmSync(file);
+      removed++;
+      // Prune now-empty dirs the old version created.
+      for (
+        let dir = path.dirname(file);
+        dir !== wsPath && !fs.readdirSync(dir).length;
+        dir = path.dirname(dir)
+      ) {
+        fs.rmdirSync(dir);
+      }
+    } catch {}
+  }
+}
+if (removed) console.log(`==> migrate: removed ${removed} legacy hook file(s)`);
+
+// Backfill the push-signal hook into bare caches that predate it (new
+// caches get it from ensureBare — keep this script in sync with
+// src/server/repo-events.ts).
+const workRoot = process.env.WORK_ROOT || path.join(os.homedir(), "work");
+const gitHost = "github.com";
+const appPort = Number(process.env.WORK_APP_PORT || 7171);
+// Same token file the server uses (src/server/hook-token.ts) — hooks ride
+// the public port and the endpoint refuses pings without it. dataDir is
+// declared at the top of this script.
+const tokenFile = path.join(dataDir, "hook-token");
+let hookTokenValue = "";
+try {
+  hookTokenValue = fs.readFileSync(tokenFile, "utf8").trim();
+} catch {}
+if (!hookTokenValue) {
+  hookTokenValue = crypto.randomBytes(16).toString("hex");
+  fs.mkdirSync(dataDir, { recursive: true });
+  fs.writeFileSync(tokenFile, `${hookTokenValue}\n`, { mode: 0o600 });
+}
+const cacheHost = path.join(workRoot, ".cache", gitHost);
+let hooked = 0;
+try {
+  for (const owner of fs.readdirSync(cacheHost)) {
+    const ownerDir = path.join(cacheHost, owner);
+    for (const repoDir of fs.readdirSync(ownerDir)) {
+      if (!repoDir.endsWith(".git")) continue;
+      const fullName = `${owner}/${repoDir.slice(0, -4)}`;
+      const script =
+        `#!/bin/sh\n` +
+        `# installed by work — signals remote-ref updates to the app server.\n` +
+        `[ "$1" = "committed" ] || exit 0\n` +
+        `grep -q "refs/remotes/origin/" || exit 0\n` +
+        `curl -sf -m 2 -X POST "http://127.0.0.1:${appPort}` +
+        `/api/repo-pushed?repo=${encodeURIComponent(fullName)}&token=${hookTokenValue}" >/dev/null 2>&1 &\n` +
+        `exit 0\n`;
+      const file = path.join(ownerDir, repoDir, "hooks", "reference-transaction");
+      try {
+        if (fs.readFileSync(file, "utf8") === script) continue;
+      } catch {}
+      try {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, script, { mode: 0o755 });
+        hooked++;
+      } catch {}
+    }
+  }
+} catch {}
+if (hooked) console.log(`==> migrate: installed push hook in ${hooked} cache repo(s)`);