@jlongo78/agent-spaces 0.4.0 → 0.5.0

package/README.md

@@ -1,131 +1,131 @@
-<p align="center">
-  <img src="public/spaces_logo.png" alt="Spaces" width="420" />
-</p>
-
-<h3 align="center">The workspace manager for AI coding agents</h3>
-
-<p align="center">
-  Run Claude Code, Codex CLI, Gemini CLI, Aider, or any agent side-by-side<br/>
-  in a browser-based terminal grid. Totally free. Totally open source.
-</p>
-
-<p align="center">
-  <a href="#quick-start">Quick Start</a> &middot;
-  <a href="#features">Features</a> &middot;
-  <a href="docs/getting-started.md">Full Docs</a>
-</p>
-
-<p align="center">
-  <a href="https://www.npmjs.com/package/@jlongo78/agent-spaces"><img src="https://img.shields.io/npm/v/@jlongo78/agent-spaces?style=flat-square&color=cb3837" alt="npm" /></a>
-  <a href="https://github.com/jlongo78/spaces/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/jlongo78/spaces/ci.yml?style=flat-square&label=CI" alt="CI" /></a>
-  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" alt="MIT License" /></a>
-  <img src="https://img.shields.io/badge/node-%3E%3D20.9-brightgreen?style=flat-square" alt="Node 20.9+" />
-  <img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux%20%7C%20ARM64-lightgrey?style=flat-square" alt="Platforms" />
-</p>
-
-<p align="center">
-  <img src="public/demo.gif" alt="Spaces demo" width="800" />
-</p>
-
----
-
-## What is Spaces?
-
-Most AI coding agents are powerful but isolated — one terminal, one session, one agent at a time. **Spaces** changes that.
-
-Open your browser and get a full terminal grid where every pane is a real PTY. Spin up Claude in one pane, Codex in another, a plain shell in a third. Group them into named workspaces. Search across every session you've ever had. See your usage stats at a glance.
-
-Everything runs locally. Your data never leaves your machine.
-
-## Quick Start
-
-### Install from npm (recommended)
-
-```bash
-npm install -g @jlongo78/agent-spaces
-spaces
-```
-
-### Or build from source
-
-```bash
-git clone https://github.com/jlongo78/spaces.git
-cd spaces
-npm install
-npm run build
-npm start
-```
-
-Open [http://localhost:3457](http://localhost:3457) and start adding panes.
-
-## Features
-
-### Terminal Multiplexer
-Split your browser into a grid of terminal panes. Each one runs a real PTY streamed over WebSocket to xterm.js — not a toy emulator.
-
-### Agent-Agnostic
-First-class support for **Claude Code**, **Codex CLI**, **Gemini CLI**, **Aider**, any custom command, and plain shell. Pick your agent per-pane from a dropdown.
-
-### Workspaces
-Group panes into named, color-coded spaces. Working on the frontend and the API at the same time? Give each its own workspace and switch instantly.
-
-### Session Browser
-Every agent session (Claude, Codex, Gemini, Aider) is indexed automatically. Browse, search, and filter with full-text search powered by SQLite FTS5. Jump back into any conversation.
-
-### Dashboard & Analytics
-Session counts, token usage breakdown by model, activity heatmap, and cost estimates — all computed locally from your `~/.claude/` data.
-
-### Everything Local
-Zero cloud dependencies. No accounts. No telemetry by default. All data lives in `~/.claude/` (read-only) and `~/.spaces/` (auto-created). Fully offline-capable.
-
-## Advanced Tiers
-
-The Community edition above is fully open source (MIT) and free forever. For teams and organizations, Spaces also supports multi-user auth, admin panels, federated node networks, and remote workspaces through optional paid tiers.
-
-| | Community | Server | Team | Federation |
-|---|:---------:|:------:|:----:|:----------:|
-| Multi-pane terminals | Yes | Yes | Yes | Yes |
-| Session browser & search | Yes | Yes | Yes | Yes |
-| Dashboard & analytics | Yes | Yes | Yes | Yes |
-| Browser access | Yes | Yes | Yes | Yes |
-| Login & TOTP auth | - | Yes | Yes | Yes |
-| Multi-user accounts | - | - | Yes | Yes |
-| Admin panel | - | - | Yes | Yes |
-| Federated node network | - | - | - | Yes |
-| Remote workspaces | - | - | - | Yes |
-| mDNS auto-discovery | - | - | - | Yes |
-
-See [docs/tiers.md](docs/tiers.md) for details.
-
-## Tech Stack
-
-| Layer | Technology |
-|-------|------------|
-| Framework | Next.js 16 (App Router) |
-| UI | React 19, Tailwind CSS, Lucide icons |
-| Database | SQLite via better-sqlite3, FTS5 full-text search |
-| Terminal | xterm.js + node-pty over WebSocket |
-| Runtime | Node.js (CLI) |
-
-## Configuration
-
-| Variable | Default | Description |
-|----------|---------|-------------|
-| `SPACES_PORT` | `3457` | Web UI port |
-| `SPACES_WS_PORT` | `3458` | Terminal WebSocket port |
-| `NEXT_PUBLIC_TIER` | `community` | Product tier |
-
-Data lives in:
-- **`~/.claude/`** — Claude Code sessions (read-only)
-- **`~/.codex/`** — Codex CLI sessions (read-only)
-- **`~/.gemini/`** — Gemini CLI sessions (read-only)
-- **`.aider.chat.history.md`** — Aider sessions in each project directory (read-only)
-- **`~/.spaces/`** — Spaces database and config (auto-created)
-
-## Contributing
-
-Contributions are welcome. Please open an issue first to discuss what you'd like to change.
-
-## License
-
-[MIT](LICENSE)
+<p align="center">
+  <img src="public/spaces_logo.png" alt="Spaces" width="420" />
+</p>
+
+<h3 align="center">The workspace manager for AI coding agents</h3>
+
+<p align="center">
+  Run Claude Code, Codex CLI, Gemini CLI, Aider, or any agent side-by-side<br/>
+  in a browser-based terminal grid. Totally free. Totally open source.
+</p>
+
+<p align="center">
+  <a href="#quick-start">Quick Start</a> &middot;
+  <a href="#features">Features</a> &middot;
+  <a href="docs/getting-started.md">Full Docs</a>
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@jlongo78/agent-spaces"><img src="https://img.shields.io/npm/v/@jlongo78/agent-spaces?style=flat-square&color=cb3837" alt="npm" /></a>
+  <a href="https://github.com/jlongo78/spaces/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/jlongo78/spaces/ci.yml?style=flat-square&label=CI" alt="CI" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" alt="MIT License" /></a>
+  <img src="https://img.shields.io/badge/node-%3E%3D20.9-brightgreen?style=flat-square" alt="Node 20.9+" />
+  <img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux%20%7C%20ARM64-lightgrey?style=flat-square" alt="Platforms" />
+</p>
+
+<p align="center">
+  <img src="public/demo.gif" alt="Spaces demo" width="800" />
+</p>
+
+---
+
+## What is Spaces?
+
+Most AI coding agents are powerful but isolated — one terminal, one session, one agent at a time. **Spaces** changes that.
+
+Open your browser and get a full terminal grid where every pane is a real PTY. Spin up Claude in one pane, Codex in another, a plain shell in a third. Group them into named workspaces. Search across every session you've ever had. See your usage stats at a glance.
+
+Everything runs locally. Your data never leaves your machine.
+
+## Quick Start
+
+### Install from npm (recommended)
+
+```bash
+npm install -g @jlongo78/agent-spaces
+spaces
+```
+
+### Or build from source
+
+```bash
+git clone https://github.com/jlongo78/spaces.git
+cd spaces
+npm install
+npm run build
+npm start
+```
+
+Open [http://localhost:3457](http://localhost:3457) and start adding panes.
+
+## Features
+
+### Terminal Multiplexer
+Split your browser into a grid of terminal panes. Each one runs a real PTY streamed over WebSocket to xterm.js — not a toy emulator.
+
+### Agent-Agnostic
+First-class support for **Claude Code**, **Codex CLI**, **Gemini CLI**, **Aider**, any custom command, and plain shell. Pick your agent per-pane from a dropdown.
+
+### Workspaces
+Group panes into named, color-coded spaces. Working on the frontend and the API at the same time? Give each its own workspace and switch instantly.
+
+### Session Browser
+Every agent session (Claude, Codex, Gemini, Aider) is indexed automatically. Browse, search, and filter with full-text search powered by SQLite FTS5. Jump back into any conversation.
+
+### Dashboard & Analytics
+Session counts, token usage breakdown by model, activity heatmap, and cost estimates — all computed locally from your `~/.claude/` data.
+
+### Everything Local
+Zero cloud dependencies. No accounts. No telemetry by default. All data lives in `~/.claude/` (read-only) and `~/.spaces/` (auto-created). Fully offline-capable.
+
+## Advanced Tiers
+
+The Community edition above is fully open source (MIT) and free forever. For teams and organizations, Spaces also supports multi-user auth, admin panels, federated node networks, and remote workspaces through optional paid tiers.
+
+| | Community | Server | Team | Federation |
+|---|:---------:|:------:|:----:|:----------:|
+| Multi-pane terminals | Yes | Yes | Yes | Yes |
+| Session browser & search | Yes | Yes | Yes | Yes |
+| Dashboard & analytics | Yes | Yes | Yes | Yes |
+| Browser access | Yes | Yes | Yes | Yes |
+| Login & TOTP auth | - | Yes | Yes | Yes |
+| Multi-user accounts | - | - | Yes | Yes |
+| Admin panel | - | - | Yes | Yes |
+| Federated node network | - | - | - | Yes |
+| Remote workspaces | - | - | - | Yes |
+| mDNS auto-discovery | - | - | - | Yes |
+
+See [docs/tiers.md](docs/tiers.md) for details.
+
+## Tech Stack
+
+| Layer | Technology |
+|-------|------------|
+| Framework | Next.js 16 (App Router) |
+| UI | React 19, Tailwind CSS, Lucide icons |
+| Database | SQLite via better-sqlite3, FTS5 full-text search |
+| Terminal | xterm.js + node-pty over WebSocket |
+| Runtime | Node.js (CLI) |
+
+## Configuration
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `SPACES_PORT` | `3457` | Web UI port |
+| `SPACES_WS_PORT` | `3458` | Terminal WebSocket port |
+| `NEXT_PUBLIC_TIER` | `community` | Product tier |
+
+Data lives in:
+- **`~/.claude/`** — Claude Code sessions (read-only)
+- **`~/.codex/`** — Codex CLI sessions (read-only)
+- **`~/.gemini/`** — Gemini CLI sessions (read-only)
+- **`.aider.chat.history.md`** — Aider sessions in each project directory (read-only)
+- **`~/.spaces/`** — Spaces database and config (auto-created)
+
+## Contributing
+
+Contributions are welcome. Please open an issue first to discuss what you'd like to change.
+
+## License
+
+[MIT](LICENSE)

package/bin/fix-standalone-externals.js

@@ -1,79 +1,79 @@
-#!/usr/bin/env node
-
-// Turbopack mangles serverExternalPackages names with a hash suffix
-// (e.g. "better-sqlite3-90e2652d1716b047"). This script scans the
-// standalone build output, finds all mangled require() calls, and
-// creates proxy modules so the standalone server can resolve them.
-
-const fs = require('fs');
-const path = require('path');
-
-const chunksDir = path.join(__dirname, '..', '.next', 'standalone', '.next', 'server', 'chunks');
-const standaloneModules = path.join(__dirname, '..', '.next', 'standalone', 'node_modules');
-
-if (!fs.existsSync(chunksDir)) {
-  console.log('[fix-externals] No standalone chunks found, skipping.');
-  process.exit(0);
-}
-
-// Scan all JS chunk files for mangled external requires
-const re = /require\("([a-z@][a-z0-9@/_.-]*)-([0-9a-f]{16})"\)/g;
-const aliases = new Map(); // mangled name -> real package name
-
-const files = fs.readdirSync(chunksDir).filter(f => f.endsWith('.js'));
-for (const file of files) {
-  const content = fs.readFileSync(path.join(chunksDir, file), 'utf-8');
-  let match;
-  while ((match = re.exec(content)) !== null) {
-    const mangledName = `${match[1]}-${match[2]}`;
-    const realName = match[1];
-    aliases.set(mangledName, realName);
-  }
-}
-
-if (aliases.size === 0) {
-  console.log('[fix-externals] No mangled externals found.');
-  process.exit(0);
-}
-
-for (const [alias, real] of aliases) {
-  const aliasDir = path.join(standaloneModules, alias);
-  if (fs.existsSync(aliasDir)) continue;
-
-  fs.mkdirSync(aliasDir, { recursive: true });
-  fs.writeFileSync(
-    path.join(aliasDir, 'index.js'),
-    `module.exports = require(${JSON.stringify(real)});\n`
-  );
-  fs.writeFileSync(
-    path.join(aliasDir, 'package.json'),
-    JSON.stringify({ name: alias, version: '1.0.0', main: 'index.js' }) + '\n'
-  );
-  console.log(`[fix-externals] Created alias: ${alias} -> ${real}`);
-}
-
-// Remove native modules from the standalone bundle.
-// Next.js standalone mode copies all traced dependencies into
-// .next/standalone/node_modules/, including pre-compiled native addons.
-// These binaries are built for the CI Node version and will fail on
-// machines running a different Node version (NODE_MODULE_VERSION mismatch).
-// Removing them forces resolution to the parent node_modules/ where
-// the postinstall `npm rebuild` compiles them for the user's Node version.
-const nativeModules = ['better-sqlite3', 'node-pty'];
-for (const mod of nativeModules) {
-  const modDir = path.join(standaloneModules, mod);
-  if (fs.existsSync(modDir)) {
-    fs.rmSync(modDir, { recursive: true, force: true });
-    console.log(`[fix-externals] Removed native module from standalone: ${mod}`);
-  }
-}
-
-// Also remove transitive native dependencies that Next.js may have copied
-const nativeTransitive = ['bindings', 'file-uri-to-path', 'detect-libc'];
-for (const mod of nativeTransitive) {
-  const modDir = path.join(standaloneModules, mod);
-  if (fs.existsSync(modDir)) {
-    fs.rmSync(modDir, { recursive: true, force: true });
-    console.log(`[fix-externals] Removed transitive native dep from standalone: ${mod}`);
-  }
-}
+#!/usr/bin/env node
+
+// Turbopack mangles serverExternalPackages names with a hash suffix
+// (e.g. "better-sqlite3-90e2652d1716b047"). This script scans the
+// standalone build output, finds all mangled require() calls, and
+// creates proxy modules so the standalone server can resolve them.
+
+const fs = require('fs');
+const path = require('path');
+
+const chunksDir = path.join(__dirname, '..', '.next', 'standalone', '.next', 'server', 'chunks');
+const standaloneModules = path.join(__dirname, '..', '.next', 'standalone', 'node_modules');
+
+if (!fs.existsSync(chunksDir)) {
+  console.log('[fix-externals] No standalone chunks found, skipping.');
+  process.exit(0);
+}
+
+// Scan all JS chunk files for mangled external requires
+const re = /require\("([a-z@][a-z0-9@/_.-]*)-([0-9a-f]{16})"\)/g;
+const aliases = new Map(); // mangled name -> real package name
+
+const files = fs.readdirSync(chunksDir).filter(f => f.endsWith('.js'));
+for (const file of files) {
+  const content = fs.readFileSync(path.join(chunksDir, file), 'utf-8');
+  let match;
+  while ((match = re.exec(content)) !== null) {
+    const mangledName = `${match[1]}-${match[2]}`;
+    const realName = match[1];
+    aliases.set(mangledName, realName);
+  }
+}
+
+if (aliases.size === 0) {
+  console.log('[fix-externals] No mangled externals found.');
+  process.exit(0);
+}
+
+for (const [alias, real] of aliases) {
+  const aliasDir = path.join(standaloneModules, alias);
+  if (fs.existsSync(aliasDir)) continue;
+
+  fs.mkdirSync(aliasDir, { recursive: true });
+  fs.writeFileSync(
+    path.join(aliasDir, 'index.js'),
+    `module.exports = require(${JSON.stringify(real)});\n`
+  );
+  fs.writeFileSync(
+    path.join(aliasDir, 'package.json'),
+    JSON.stringify({ name: alias, version: '1.0.0', main: 'index.js' }) + '\n'
+  );
+  console.log(`[fix-externals] Created alias: ${alias} -> ${real}`);
+}
+
+// Remove native modules from the standalone bundle.
+// Next.js standalone mode copies all traced dependencies into
+// .next/standalone/node_modules/, including pre-compiled native addons.
+// These binaries are built for the CI Node version and will fail on
+// machines running a different Node version (NODE_MODULE_VERSION mismatch).
+// Removing them forces resolution to the parent node_modules/ where
+// the postinstall `npm rebuild` compiles them for the user's Node version.
+const nativeModules = ['better-sqlite3', 'node-pty'];
+for (const mod of nativeModules) {
+  const modDir = path.join(standaloneModules, mod);
+  if (fs.existsSync(modDir)) {
+    fs.rmSync(modDir, { recursive: true, force: true });
+    console.log(`[fix-externals] Removed native module from standalone: ${mod}`);
+  }
+}
+
+// Also remove transitive native dependencies that Next.js may have copied
+const nativeTransitive = ['bindings', 'file-uri-to-path', 'detect-libc'];
+for (const mod of nativeTransitive) {
+  const modDir = path.join(standaloneModules, mod);
+  if (fs.existsSync(modDir)) {
+    fs.rmSync(modDir, { recursive: true, force: true });
+    console.log(`[fix-externals] Removed transitive native dep from standalone: ${mod}`);
+  }
+}

package/bin/lib/auto-setup.js

@@ -1,101 +1,101 @@
-// Non-interactive first-time setup for Spaces federation edition.
-// Called automatically when @spaces/pro is detected but admin.db or session_secret are missing.
-// For interactive customization, use: spaces --setup
-
-const Database = require('better-sqlite3');
-const crypto = require('crypto');
-const path = require('path');
-const fs = require('fs');
-const os = require('os');
-
-function hashPassword(password) {
-  const salt = crypto.randomBytes(16).toString('hex');
-  const hash = crypto.scryptSync(password, salt, 64).toString('hex');
-  return `${salt}:${hash}`;
-}
-
-function generatePassword() {
-  const chars = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789';
-  let password = '';
-  const bytes = crypto.randomBytes(16);
-  for (let i = 0; i < 16; i++) {
-    password += chars[bytes[i] % chars.length];
-  }
-  return password;
-}
-
-function autoSetup({ SPACES_DIR, SESSION_SECRET_PATH, ADMIN_DB_PATH, CONFIG_PATH, tier, port, basePath }) {
-  // Ensure ~/.spaces directory
-  if (!fs.existsSync(SPACES_DIR)) {
-    fs.mkdirSync(SPACES_DIR, { recursive: true });
-  }
-
-  // Generate session secret
-  let sessionSecret;
-  if (fs.existsSync(SESSION_SECRET_PATH)) {
-    sessionSecret = fs.readFileSync(SESSION_SECRET_PATH, 'utf-8').trim();
-  }
-  if (!sessionSecret) {
-    sessionSecret = crypto.randomBytes(32).toString('hex');
-    fs.writeFileSync(SESSION_SECRET_PATH, sessionSecret, { mode: 0o600 });
-  }
-
-  // Create admin DB and user
-  let generatedPassword = null;
-  if (!fs.existsSync(ADMIN_DB_PATH)) {
-    const db = new Database(ADMIN_DB_PATH);
-    db.pragma('journal_mode = WAL');
-    db.pragma('synchronous = NORMAL');
-    db.pragma('foreign_keys = ON');
-
-    db.exec(`
-      CREATE TABLE IF NOT EXISTS users (
-        id TEXT PRIMARY KEY,
-        username TEXT NOT NULL UNIQUE,
-        password_hash TEXT NOT NULL,
-        display_name TEXT NOT NULL DEFAULT '',
-        shell_user TEXT NOT NULL,
-        role TEXT NOT NULL DEFAULT 'user',
-        totp_secret TEXT,
-        totp_enabled INTEGER DEFAULT 0,
-        created TEXT DEFAULT (datetime('now'))
-      );
-    `);
-
-    generatedPassword = generatePassword();
-    const shellUser = os.userInfo().username;
-    const id = crypto.randomUUID();
-    const passwordHash = hashPassword(generatedPassword);
-
-    db.prepare(`
-      INSERT INTO users (id, username, password_hash, display_name, shell_user, role)
-      VALUES (?, ?, ?, ?, ?, 'admin')
-    `).run(id, 'admin', passwordHash, 'Admin', shellUser);
-
-    db.close();
-  }
-
-  // Save server.json if it doesn't exist
-  if (!fs.existsSync(CONFIG_PATH)) {
-    const config = { tier, port: port || 3457, basePath: basePath || '' };
-    fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2));
-  }
-
-  // Print credentials box
-  if (generatedPassword) {
-    console.log('');
-    console.log('  ┌──────────────────────────────────────────┐');
-    console.log('  │  First-time setup complete                │');
-    console.log('  │                                           │');
-    console.log('  │  Username:  admin                         │');
-    console.log(`  │  Password:  ${generatedPassword}                │`);
-    console.log('  │                                           │');
-    console.log('  │  Run `spaces --setup` to customize.       │');
-    console.log('  └──────────────────────────────────────────┘');
-    console.log('');
-  }
-
-  return { sessionSecret, generatedPassword };
-}
-
-module.exports = { autoSetup, hashPassword, generatePassword };
+// Non-interactive first-time setup for Spaces federation edition.
+// Called automatically when @spaces/pro is detected but admin.db or session_secret are missing.
+// For interactive customization, use: spaces --setup
+
+const Database = require('better-sqlite3');
+const crypto = require('crypto');
+const path = require('path');
+const fs = require('fs');
+const os = require('os');
+
+function hashPassword(password) {
+  const salt = crypto.randomBytes(16).toString('hex');
+  const hash = crypto.scryptSync(password, salt, 64).toString('hex');
+  return `${salt}:${hash}`;
+}
+
+function generatePassword() {
+  const chars = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789';
+  let password = '';
+  const bytes = crypto.randomBytes(16);
+  for (let i = 0; i < 16; i++) {
+    password += chars[bytes[i] % chars.length];
+  }
+  return password;
+}
+
+function autoSetup({ SPACES_DIR, SESSION_SECRET_PATH, ADMIN_DB_PATH, CONFIG_PATH, tier, port, basePath }) {
+  // Ensure ~/.spaces directory
+  if (!fs.existsSync(SPACES_DIR)) {
+    fs.mkdirSync(SPACES_DIR, { recursive: true });
+  }
+
+  // Generate session secret
+  let sessionSecret;
+  if (fs.existsSync(SESSION_SECRET_PATH)) {
+    sessionSecret = fs.readFileSync(SESSION_SECRET_PATH, 'utf-8').trim();
+  }
+  if (!sessionSecret) {
+    sessionSecret = crypto.randomBytes(32).toString('hex');
+    fs.writeFileSync(SESSION_SECRET_PATH, sessionSecret, { mode: 0o600 });
+  }
+
+  // Create admin DB and user
+  let generatedPassword = null;
+  if (!fs.existsSync(ADMIN_DB_PATH)) {
+    const db = new Database(ADMIN_DB_PATH);
+    db.pragma('journal_mode = WAL');
+    db.pragma('synchronous = NORMAL');
+    db.pragma('foreign_keys = ON');
+
+    db.exec(`
+      CREATE TABLE IF NOT EXISTS users (
+        id TEXT PRIMARY KEY,
+        username TEXT NOT NULL UNIQUE,
+        password_hash TEXT NOT NULL,
+        display_name TEXT NOT NULL DEFAULT '',
+        shell_user TEXT NOT NULL,
+        role TEXT NOT NULL DEFAULT 'user',
+        totp_secret TEXT,
+        totp_enabled INTEGER DEFAULT 0,
+        created TEXT DEFAULT (datetime('now'))
+      );
+    `);
+
+    generatedPassword = generatePassword();
+    const shellUser = os.userInfo().username;
+    const id = crypto.randomUUID();
+    const passwordHash = hashPassword(generatedPassword);
+
+    db.prepare(`
+      INSERT INTO users (id, username, password_hash, display_name, shell_user, role)
+      VALUES (?, ?, ?, ?, ?, 'admin')
+    `).run(id, 'admin', passwordHash, 'Admin', shellUser);
+
+    db.close();
+  }
+
+  // Save server.json if it doesn't exist
+  if (!fs.existsSync(CONFIG_PATH)) {
+    const config = { tier, port: port || 3457, basePath: basePath || '' };
+    fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2));
+  }
+
+  // Print credentials box
+  if (generatedPassword) {
+    console.log('');
+    console.log('  ┌──────────────────────────────────────────┐');
+    console.log('  │  First-time setup complete                │');
+    console.log('  │                                           │');
+    console.log('  │  Username:  admin                         │');
+    console.log(`  │  Password:  ${generatedPassword}                │`);
+    console.log('  │                                           │');
+    console.log('  │  Run `spaces --setup` to customize.       │');
+    console.log('  └──────────────────────────────────────────┘');
+    console.log('');
+  }
+
+  return { sessionSecret, generatedPassword };
+}
+
+module.exports = { autoSetup, hashPassword, generatePassword };