@jlongo78/agent-spaces 0.7.6 → 0.8.0

package/.next/standalone/README.md

@@ -0,0 +1,131 @@
+<p align="center">
+  <img src="public/spaces_logo.png" alt="Spaces" width="420" />
+</p>
+
+<h3 align="center">The workspace manager for AI coding agents</h3>
+
+<p align="center">
+  Run Claude Code, Codex CLI, Gemini CLI, Aider, or any agent side-by-side<br/>
+  in a browser-based terminal grid. Totally free. Totally open source.
+</p>
+
+<p align="center">
+  <a href="#quick-start">Quick Start</a> &middot;
+  <a href="#features">Features</a> &middot;
+  <a href="docs/getting-started.md">Full Docs</a>
+</p>
+
+<p align="center">
+  <a href="https://www.npmjs.com/package/@jlongo78/agent-spaces"><img src="https://img.shields.io/npm/v/@jlongo78/agent-spaces?style=flat-square&color=cb3837" alt="npm" /></a>
+  <a href="https://github.com/jlongo78/spaces/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/jlongo78/spaces/ci.yml?style=flat-square&label=CI" alt="CI" /></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" alt="MIT License" /></a>
+  <img src="https://img.shields.io/badge/node-%3E%3D20.9-brightgreen?style=flat-square" alt="Node 20.9+" />
+  <img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux%20%7C%20ARM64-lightgrey?style=flat-square" alt="Platforms" />
+</p>
+
+<p align="center">
+  <img src="public/demo.gif" alt="Spaces demo" width="800" />
+</p>
+
+---
+
+## What is Spaces?
+
+Most AI coding agents are powerful but isolated — one terminal, one session, one agent at a time. **Spaces** changes that.
+
+Open your browser and get a full terminal grid where every pane is a real PTY. Spin up Claude in one pane, Codex in another, a plain shell in a third. Group them into named workspaces. Search across every session you've ever had. See your usage stats at a glance.
+
+Everything runs locally. Your data never leaves your machine.
+
+## Quick Start
+
+### Install from npm (recommended)
+
+```bash
+npm install -g @jlongo78/agent-spaces
+spaces
+```
+
+### Or build from source
+
+```bash
+git clone https://github.com/jlongo78/spaces.git
+cd spaces
+npm install
+npm run build
+npm start
+```
+
+Open [http://localhost:3457](http://localhost:3457) and start adding panes.
+
+## Features
+
+### Terminal Multiplexer
+Split your browser into a grid of terminal panes. Each one runs a real PTY streamed over WebSocket to xterm.js — not a toy emulator.
+
+### Agent-Agnostic
+First-class support for **Claude Code**, **Codex CLI**, **Gemini CLI**, **Aider**, any custom command, and plain shell. Pick your agent per-pane from a dropdown.
+
+### Workspaces
+Group panes into named, color-coded spaces. Working on the frontend and the API at the same time? Give each its own workspace and switch instantly.
+
+### Session Browser
+Every agent session (Claude, Codex, Gemini, Aider) is indexed automatically. Browse, search, and filter with full-text search powered by SQLite FTS5. Jump back into any conversation.
+
+### Dashboard & Analytics
+Session counts, token usage breakdown by model, activity heatmap, and cost estimates — all computed locally from your `~/.claude/` data.
+
+### Everything Local
+Zero cloud dependencies. No accounts. No telemetry by default. All data lives in `~/.claude/` (read-only) and `~/.spaces/` (auto-created). Fully offline-capable.
+
+## Advanced Tiers
+
+The Community edition above is fully open source (MIT) and free forever. For teams and organizations, Spaces also supports multi-user auth, admin panels, federated node networks, and remote workspaces through optional paid tiers.
+
+| | Community | Server | Team | Federation |
+|---|:---------:|:------:|:----:|:----------:|
+| Multi-pane terminals | Yes | Yes | Yes | Yes |
+| Session browser & search | Yes | Yes | Yes | Yes |
+| Dashboard & analytics | Yes | Yes | Yes | Yes |
+| Browser access | Yes | Yes | Yes | Yes |
+| Login & TOTP auth | - | Yes | Yes | Yes |
+| Multi-user accounts | - | - | Yes | Yes |
+| Admin panel | - | - | Yes | Yes |
+| Federated node network | - | - | - | Yes |
+| Remote workspaces | - | - | - | Yes |
+| mDNS auto-discovery | - | - | - | Yes |
+
+See [docs/tiers.md](docs/tiers.md) for details.
+
+## Tech Stack
+
+| Layer | Technology |
+|-------|------------|
+| Framework | Next.js 16 (App Router) |
+| UI | React 19, Tailwind CSS, Lucide icons |
+| Database | SQLite via better-sqlite3, FTS5 full-text search |
+| Terminal | xterm.js + node-pty over WebSocket |
+| Runtime | Node.js (CLI) |
+
+## Configuration
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `SPACES_PORT` | `3457` | Web UI port |
+| `SPACES_WS_PORT` | `3458` | Terminal WebSocket port |
+| `NEXT_PUBLIC_TIER` | `community` | Product tier |
+
+Data lives in:
+- **`~/.claude/`** — Claude Code sessions (read-only)
+- **`~/.codex/`** — Codex CLI sessions (read-only)
+- **`~/.gemini/`** — Gemini CLI sessions (read-only)
+- **`.aider.chat.history.md`** — Aider sessions in each project directory (read-only)
+- **`~/.spaces/`** — Spaces database and config (auto-created)
+
+## Contributing
+
+Contributions are welcome. Please open an issue first to discuss what you'd like to change.
+
+## License
+
+[MIT](LICENSE)

package/.next/standalone/bin/cortex-hook.sh

@@ -1,62 +1,62 @@
-#!/bin/bash
-# Cortex RAG hook for Claude Code
-# Receives user prompt via stdin JSON, queries Cortex for relevant context,
-# returns it as additionalContext so Claude sees it alongside the prompt.
-set -e
-
-# Read JSON input from stdin
-INPUT=$(cat)
-
-PROMPT=$(echo "$INPUT" | jq -r '.prompt // empty')
-CWD=$(echo "$INPUT" | jq -r '.cwd // empty')
-
-# Skip empty or very short prompts (not worth a RAG search)
-if [ -z "$PROMPT" ] || [ ${#PROMPT} -lt 10 ]; then
-  exit 0
-fi
-
-# Resolve API port and auth
-API_PORT="${SPACES_PORT:-3457}"
-SECRET="${SPACES_SESSION_SECRET:-}"
-INTERNAL_TOKEN="${SECRET:0:16}"
-
-# URL-encode the prompt (basic: replace spaces and common chars)
-ENCODED_PROMPT=$(python3 -c "import urllib.parse, sys; print(urllib.parse.quote(sys.argv[1]))" "$PROMPT" 2>/dev/null \
-  || node -e "process.stdout.write(encodeURIComponent(process.argv[1]))" "$PROMPT" 2>/dev/null \
-  || echo "$PROMPT" | sed 's/ /%20/g')
-
-# Query Cortex search API
-RESPONSE=$(curl -s -m 5 \
-  -H "x-spaces-internal: ${INTERNAL_TOKEN}" \
-  "http://localhost:${API_PORT}/api/cortex/search/?q=${ENCODED_PROMPT}&limit=5" 2>/dev/null || echo '{}')
-
-# Check if we got results
-RESULT_COUNT=$(echo "$RESPONSE" | jq -r '.results | length // 0' 2>/dev/null || echo "0")
-
-if [ "$RESULT_COUNT" = "0" ] || [ "$RESULT_COUNT" = "null" ]; then
-  exit 0
-fi
-
-# Format the results into readable context
-CONTEXT=$(echo "$RESPONSE" | jq -r '
-  .results[:5] | to_entries | map(
-    .value |
-    "[" + (.type // "context") + "] " +
-    (if .source_timestamp then (.source_timestamp | split("T")[0]) + ": " else "" end) +
-    .text
-  ) | join("\n\n")
-' 2>/dev/null || echo "")
-
-if [ -z "$CONTEXT" ]; then
-  exit 0
-fi
-
-# Return as additionalContext
-jq -n --arg context "$CONTEXT" '{
-  "hookSpecificOutput": {
-    "hookEventName": "UserPromptSubmit",
-    "additionalContext": ("<cortex-context>\nRelevant knowledge from your workspace history:\n\n" + $context + "\n</cortex-context>")
-  }
-}'
-
-exit 0
+#!/bin/bash
+# Cortex RAG hook for Claude Code
+# Receives user prompt via stdin JSON, queries Cortex for relevant context,
+# returns it as additionalContext so Claude sees it alongside the prompt.
+set -e
+
+# Read JSON input from stdin
+INPUT=$(cat)
+
+PROMPT=$(echo "$INPUT" | jq -r '.prompt // empty')
+CWD=$(echo "$INPUT" | jq -r '.cwd // empty')
+
+# Skip empty or very short prompts (not worth a RAG search)
+if [ -z "$PROMPT" ] || [ ${#PROMPT} -lt 10 ]; then
+  exit 0
+fi
+
+# Resolve API port and auth
+API_PORT="${SPACES_PORT:-3457}"
+SECRET="${SPACES_SESSION_SECRET:-}"
+INTERNAL_TOKEN="${SECRET:0:16}"
+
+# URL-encode the prompt (basic: replace spaces and common chars)
+ENCODED_PROMPT=$(python3 -c "import urllib.parse, sys; print(urllib.parse.quote(sys.argv[1]))" "$PROMPT" 2>/dev/null \
+  || node -e "process.stdout.write(encodeURIComponent(process.argv[1]))" "$PROMPT" 2>/dev/null \
+  || echo "$PROMPT" | sed 's/ /%20/g')
+
+# Query Cortex search API
+RESPONSE=$(curl -s -m 5 \
+  -H "x-spaces-internal: ${INTERNAL_TOKEN}" \
+  "http://localhost:${API_PORT}/api/cortex/search/?q=${ENCODED_PROMPT}&limit=5" 2>/dev/null || echo '{}')
+
+# Check if we got results
+RESULT_COUNT=$(echo "$RESPONSE" | jq -r '.results | length // 0' 2>/dev/null || echo "0")
+
+if [ "$RESULT_COUNT" = "0" ] || [ "$RESULT_COUNT" = "null" ]; then
+  exit 0
+fi
+
+# Format the results into readable context
+CONTEXT=$(echo "$RESPONSE" | jq -r '
+  .results[:5] | to_entries | map(
+    .value |
+    "[" + (.type // "context") + "] " +
+    (if .source_timestamp then (.source_timestamp | split("T")[0]) + ": " else "" end) +
+    .text
+  ) | join("\n\n")
+' 2>/dev/null || echo "")
+
+if [ -z "$CONTEXT" ]; then
+  exit 0
+fi
+
+# Return as additionalContext
+jq -n --arg context "$CONTEXT" '{
+  "hookSpecificOutput": {
+    "hookEventName": "UserPromptSubmit",
+    "additionalContext": ("<cortex-context>\nRelevant knowledge from your workspace history:\n\n" + $context + "\n</cortex-context>")
+  }
+}'
+
+exit 0

package/.next/standalone/bin/cortex-mcp.js

@@ -1,60 +1,60 @@
-#!/usr/bin/env node
-'use strict';
-
-const readline = require('readline');
-
-const SPACES_URL = process.env.SPACES_URL || 'http://localhost:3457';
-const INTERNAL_TOKEN = process.env.SPACES_INTERNAL_TOKEN || '';
-
-const rl = readline.createInterface({ input: process.stdin });
-
-rl.on('line', async (line) => {
-  let msg;
-  try { msg = JSON.parse(line); } catch { return; }
-
-  if (msg.method === 'initialize') {
-    respond(msg.id, {
-      protocolVersion: '2024-11-05',
-      capabilities: { tools: { listChanged: false } },
-      serverInfo: { name: 'cortex', version: '1.0.0' },
-    });
-    return;
-  }
-
-  if (msg.method === 'notifications/initialized') return;
-
-  if (msg.method === 'tools/list') {
-    const tools = await fetchJSON('/api/cortex/mcp/tools');
-    respond(msg.id, { tools: tools || [] });
-    return;
-  }
-
-  if (msg.method === 'tools/call') {
-    const { name, arguments: args } = msg.params;
-    const result = await fetchJSON('/api/cortex/mcp/call', {
-      method: 'POST',
-      body: JSON.stringify({ name, args }),
-    });
-    respond(msg.id, result || { content: [{ type: 'text', text: 'Error calling tool' }], isError: true });
-    return;
-  }
-
-  respond(msg.id, null, { code: -32601, message: `Method not found: ${msg.method}` });
-});
-
-function respond(id, result, error) {
-  const msg = { jsonrpc: '2.0', id };
-  if (error) msg.error = error;
-  else msg.result = result;
-  process.stdout.write(JSON.stringify(msg) + '\n');
-}
-
-async function fetchJSON(path, opts = {}) {
-  try {
-    const headers = { 'Content-Type': 'application/json' };
-    if (INTERNAL_TOKEN) headers['x-spaces-internal'] = INTERNAL_TOKEN;
-    const res = await fetch(`${SPACES_URL}${path}`, { ...opts, headers: { ...headers, ...opts.headers } });
-    if (res.ok) return await res.json();
-    return null;
-  } catch { return null; }
-}
+#!/usr/bin/env node
+'use strict';
+
+const readline = require('readline');
+
+const SPACES_URL = process.env.SPACES_URL || 'http://localhost:3457';
+const INTERNAL_TOKEN = process.env.SPACES_INTERNAL_TOKEN || '';
+
+const rl = readline.createInterface({ input: process.stdin });
+
+rl.on('line', async (line) => {
+  let msg;
+  try { msg = JSON.parse(line); } catch { return; }
+
+  if (msg.method === 'initialize') {
+    respond(msg.id, {
+      protocolVersion: '2024-11-05',
+      capabilities: { tools: { listChanged: false } },
+      serverInfo: { name: 'cortex', version: '1.0.0' },
+    });
+    return;
+  }
+
+  if (msg.method === 'notifications/initialized') return;
+
+  if (msg.method === 'tools/list') {
+    const tools = await fetchJSON('/api/cortex/mcp/tools');
+    respond(msg.id, { tools: tools || [] });
+    return;
+  }
+
+  if (msg.method === 'tools/call') {
+    const { name, arguments: args } = msg.params;
+    const result = await fetchJSON('/api/cortex/mcp/call', {
+      method: 'POST',
+      body: JSON.stringify({ name, args }),
+    });
+    respond(msg.id, result || { content: [{ type: 'text', text: 'Error calling tool' }], isError: true });
+    return;
+  }
+
+  respond(msg.id, null, { code: -32601, message: `Method not found: ${msg.method}` });
+});
+
+function respond(id, result, error) {
+  const msg = { jsonrpc: '2.0', id };
+  if (error) msg.error = error;
+  else msg.result = result;
+  process.stdout.write(JSON.stringify(msg) + '\n');
+}
+
+async function fetchJSON(path, opts = {}) {
+  try {
+    const headers = { 'Content-Type': 'application/json' };
+    if (INTERNAL_TOKEN) headers['x-spaces-internal'] = INTERNAL_TOKEN;
+    const res = await fetch(`${SPACES_URL}${path}`, { ...opts, headers: { ...headers, ...opts.headers } });
+    if (res.ok) return await res.json();
+    return null;
+  } catch { return null; }
+}

package/.next/standalone/bin/fix-standalone-externals.js

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+
+// Turbopack mangles serverExternalPackages names with a hash suffix
+// (e.g. "better-sqlite3-90e2652d1716b047"). This script scans the
+// standalone build output, finds all mangled require() calls, and
+// creates proxy modules so the standalone server can resolve them.
+
+const fs = require('fs');
+const path = require('path');
+
+const chunksDir = path.join(__dirname, '..', '.next', 'standalone', '.next', 'server', 'chunks');
+const standaloneModules = path.join(__dirname, '..', '.next', 'standalone', 'node_modules');
+
+if (!fs.existsSync(chunksDir)) {
+  console.log('[fix-externals] No standalone chunks found, skipping.');
+  process.exit(0);
+}
+
+// Scan all JS chunk files for mangled external requires
+const re = /require\("([a-z@][a-z0-9@/_.-]*)-([0-9a-f]{16})"\)/g;
+const aliases = new Map(); // mangled name -> real package name
+
+const files = fs.readdirSync(chunksDir).filter(f => f.endsWith('.js'));
+for (const file of files) {
+  const content = fs.readFileSync(path.join(chunksDir, file), 'utf-8');
+  let match;
+  while ((match = re.exec(content)) !== null) {
+    const mangledName = `${match[1]}-${match[2]}`;
+    const realName = match[1];
+    aliases.set(mangledName, realName);
+  }
+}
+
+if (aliases.size === 0) {
+  console.log('[fix-externals] No mangled externals found.');
+  process.exit(0);
+}
+
+for (const [alias, real] of aliases) {
+  const aliasDir = path.join(standaloneModules, alias);
+  if (fs.existsSync(aliasDir)) continue;
+
+  fs.mkdirSync(aliasDir, { recursive: true });
+  fs.writeFileSync(
+    path.join(aliasDir, 'index.js'),
+    `module.exports = require(${JSON.stringify(real)});\n`
+  );
+  fs.writeFileSync(
+    path.join(aliasDir, 'package.json'),
+    JSON.stringify({ name: alias, version: '1.0.0', main: 'index.js' }) + '\n'
+  );
+  console.log(`[fix-externals] Created alias: ${alias} -> ${real}`);
+}
+
+// Remove native modules from the standalone bundle.
+// Next.js standalone mode copies all traced dependencies into
+// .next/standalone/node_modules/, including pre-compiled native addons.
+// These binaries are built for the CI Node version and will fail on
+// machines running a different Node version (NODE_MODULE_VERSION mismatch).
+// Removing them forces resolution to the parent node_modules/ where
+// the postinstall `npm rebuild` compiles them for the user's Node version.
+const nativeModules = ['better-sqlite3', 'node-pty'];
+for (const mod of nativeModules) {
+  const modDir = path.join(standaloneModules, mod);
+  if (fs.existsSync(modDir)) {
+    fs.rmSync(modDir, { recursive: true, force: true });
+    console.log(`[fix-externals] Removed native module from standalone: ${mod}`);
+  }
+}
+
+// Also remove transitive native dependencies that Next.js may have copied
+const nativeTransitive = ['bindings', 'file-uri-to-path', 'detect-libc'];
+for (const mod of nativeTransitive) {
+  const modDir = path.join(standaloneModules, mod);
+  if (fs.existsSync(modDir)) {
+    fs.rmSync(modDir, { recursive: true, force: true });
+    console.log(`[fix-externals] Removed transitive native dep from standalone: ${mod}`);
+  }
+}

package/.next/standalone/bin/lib/auto-setup.js

@@ -0,0 +1,110 @@
+// Non-interactive first-time setup for Spaces federation edition.
+// Called automatically when @spaces/pro is detected but admin.db or session_secret are missing.
+// For interactive customization, use: spaces --setup
+
+const Database = require('better-sqlite3');
+const crypto = require('crypto');
+const path = require('path');
+const fs = require('fs');
+const os = require('os');
+
+function hashPassword(password) {
+  const salt = crypto.randomBytes(16).toString('hex');
+  const hash = crypto.scryptSync(password, salt, 64).toString('hex');
+  return `${salt}:${hash}`;
+}
+
+function generatePassword() {
+  const chars = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghjkmnpqrstuvwxyz23456789';
+  let password = '';
+  const bytes = crypto.randomBytes(16);
+  for (let i = 0; i < 16; i++) {
+    password += chars[bytes[i] % chars.length];
+  }
+  return password;
+}
+
+function autoSetup({ SPACES_DIR, SESSION_SECRET_PATH, ADMIN_DB_PATH, CONFIG_PATH, tier, port, basePath }) {
+  // Ensure ~/.spaces directory
+  if (!fs.existsSync(SPACES_DIR)) {
+    fs.mkdirSync(SPACES_DIR, { recursive: true });
+  }
+
+  // Generate session secret
+  let sessionSecret;
+  if (fs.existsSync(SESSION_SECRET_PATH)) {
+    sessionSecret = fs.readFileSync(SESSION_SECRET_PATH, 'utf-8').trim();
+  }
+  if (!sessionSecret) {
+    sessionSecret = crypto.randomBytes(32).toString('hex');
+    fs.writeFileSync(SESSION_SECRET_PATH, sessionSecret, { mode: 0o600 });
+  }
+
+  // Create admin DB and user
+  let generatedPassword = null;
+  if (!fs.existsSync(ADMIN_DB_PATH)) {
+    const db = new Database(ADMIN_DB_PATH);
+    db.pragma('journal_mode = WAL');
+    db.pragma('synchronous = NORMAL');
+    db.pragma('foreign_keys = ON');
+
+    db.exec(`
+      CREATE TABLE IF NOT EXISTS users (
+        id TEXT PRIMARY KEY,
+        username TEXT NOT NULL UNIQUE,
+        password_hash TEXT NOT NULL,
+        display_name TEXT NOT NULL DEFAULT '',
+        shell_user TEXT NOT NULL,
+        role TEXT NOT NULL DEFAULT 'user',
+        totp_secret TEXT,
+        totp_enabled INTEGER DEFAULT 0,
+        created TEXT DEFAULT (datetime('now'))
+      );
+    `);
+
+    generatedPassword = generatePassword();
+    let shellUser = os.userInfo().username;
+    // When running as SYSTEM (Windows service), resolve to the actual user
+    // from the USERPROFILE env var set in the service wrapper script
+    if (process.platform === 'win32' && shellUser.toUpperCase() === 'SYSTEM' && process.env.USERPROFILE) {
+      const candidate = path.basename(process.env.USERPROFILE);
+      // Validate: must be a plausible Windows username (no path traversal or special chars)
+      if (/^[a-zA-Z0-9][a-zA-Z0-9 ._-]{0,63}$/.test(candidate)) {
+        shellUser = candidate;
+      }
+    }
+    const id = crypto.randomUUID();
+    const passwordHash = hashPassword(generatedPassword);
+
+    db.prepare(`
+      INSERT INTO users (id, username, password_hash, display_name, shell_user, role)
+      VALUES (?, ?, ?, ?, ?, 'admin')
+    `).run(id, 'admin', passwordHash, 'Admin', shellUser);
+
+    db.close();
+  }
+
+  // Save server.json if it doesn't exist
+  if (!fs.existsSync(CONFIG_PATH)) {
+    const config = { tier, port: port || 3457, basePath: basePath || '' };
+    fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2));
+  }
+
+  // Print credentials box
+  if (generatedPassword) {
+    console.log('');
+    console.log('  ┌──────────────────────────────────────────┐');
+    console.log('  │  First-time setup complete                │');
+    console.log('  │                                           │');
+    console.log('  │  Username:  admin                         │');
+    console.log(`  │  Password:  ${generatedPassword}                │`);
+    console.log('  │                                           │');
+    console.log('  │  Run `spaces --setup` to customize.       │');
+    console.log('  └──────────────────────────────────────────┘');
+    console.log('');
+  }
+
+  return { sessionSecret, generatedPassword };
+}
+
+module.exports = { autoSetup, hashPassword, generatePassword };