@kdonev/termscape 0.1.0

package/dist/cli.js

@@ -0,0 +1,200 @@
+#!/usr/bin/env node
+import { mkdirSync, rmSync, writeFileSync } from 'node:fs';
+import { parseArgs } from 'node:util';
+import { Hub, HUB_VERSION } from './hub.js';
+import { serve, MEMORABLE_PORTS } from './server.js';
+import { mintClientToken } from './agents/tokens.js';
+import { paths } from './paths.js';
+import { resolveBindHost } from './remote/lan.js';
+import { joinCanvas } from './remote/join.js';
+import { openInBrowser } from './browser.js';
+import { ProfileRegistry } from './agents/profiles.js';
+import { which } from './agents/resolve.js';
+/**
+ * Warn when no agent CLI is installed.
+ *
+ * Without this the first thing a new user does - start an agent - fails inside
+ * a terminal window on the canvas, where the error is easy to miss and reads
+ * like the hub is broken. Checking every profile that wires up MCP, rather
+ * than "claude" specifically, keeps a custom ~/.termscape/agents.toml counted.
+ */
+function preflightAgents() {
+    const agents = ProfileRegistry.load()
+        .list()
+        .filter((profile) => profile.mcp);
+    if (agents.length === 0)
+        return;
+    if (agents.some((profile) => which(profile.command)))
+        return;
+    const names = agents.map((profile) => profile.command).join(', ');
+    console.error(`[warn] no agent CLI found on PATH (looked for: ${names})`);
+    console.error('       install one - https://claude.com/claude-code - or set');
+    console.error('       an absolute "command" in ~/.termscape/agents.toml.');
+    console.error('       Terminals with the "shell" profile still work.');
+    console.error('');
+}
+async function main() {
+    const { values } = parseArgs({
+        options: {
+            port: { type: 'string' },
+            headless: { type: 'boolean', default: false },
+            token: { type: 'string' },
+            listen: { type: 'string' },
+            join: { type: 'string' },
+            'join-token': { type: 'string' },
+            label: { type: 'string' },
+            open: { type: 'boolean', default: false },
+            // parseArgs has no --no-x negation, so the opt-out is its own flag.
+            'no-open': { type: 'boolean', default: false },
+            version: { type: 'boolean', default: false },
+            help: { type: 'boolean', default: false },
+        },
+        strict: true,
+    });
+    if (values.version) {
+        console.log(HUB_VERSION);
+        return;
+    }
+    if (values.help) {
+        console.log(`termscape ${HUB_VERSION}
+
+  --port <n>        port to bind; 0 lets the OS pick. Default: the first
+                    free memorable port (7777, 4242, ...)
+  --listen <addr>   bind address; "lan" picks this machine's own address so
+                    other machines can open the join page. Default: loopback
+  --headless        serve no web UI; used when running as a remote hub
+  --token <t>       client token to use instead of generating one
+  --open            open the UI in the browser even when not on a terminal
+  --no-open         do not open the browser; just print the url
+
+Joining another machine's canvas:
+
+  --join <url>      dial that hub and put this machine on its canvas
+  --join-token <t>  single-use token from its join page; not needed once
+                    this machine has enrolled once
+  --label <name>    how to name this machine there (default: hostname)
+`);
+        return;
+    }
+    preflightAgents();
+    mkdirSync(paths.home(), { recursive: true });
+    const clientToken = values.token ?? mintClientToken();
+    writeFileSync(paths.tokenFile(), clientToken, { mode: 0o600 });
+    // The join installer reads this to stop a previous hub before replacing its
+    // files; on Windows a loaded .node cannot be deleted while it runs.
+    writeFileSync(paths.pidFile(), String(process.pid));
+    const bindHost = values.listen ? resolveBindHost(values.listen) : undefined;
+    const hub = new Hub();
+    const { app, origin, enrollOrigin, enrollAltOrigin, port, peerServer } = await serve({
+        hub,
+        host: bindHost,
+        // The join page has to be typed by hand on another machine, so prefer a
+        // port worth remembering unless one was asked for explicitly.
+        port: values.port === undefined ? MEMORABLE_PORTS : Number(values.port),
+        clientToken,
+        headless: values.headless,
+    });
+    const url = `${origin}/?token=${clientToken}`;
+    // A remote hub is parsed by the deployer, so keep this line machine-readable.
+    console.log(`termscape hub ${HUB_VERSION} listening on ${origin}`);
+    console.log(`TERMSCAPE_PORT=${port}`);
+    if (!values.headless)
+        console.log(`\n  open:   ${url}`);
+    // The canvas is worth opening from a phone or a second screen, and that
+    // needs the token too - so offer the whole URL, not just the host.
+    if (!values.headless && enrollOrigin) {
+        console.log(`       or ${enrollOrigin}/?token=${clientToken}`);
+    }
+    if (enrollOrigin) {
+        // Say plainly what binding wider actually did. Every other route still
+        // requires the token, but the hub is on the network either way now.
+        console.log(`  enroll: ${enrollOrigin}/join`);
+        // If the name does not resolve on the other machine, the IP always will.
+        if (enrollAltOrigin)
+            console.log(`       or ${enrollAltOrigin}/join`);
+        console.log(`          reachable from your network — anyone who can load`);
+        console.log(`          that page can attach a machine to this canvas`);
+    }
+    if (!values.headless)
+        console.log('');
+    /*
+     * Opening the canvas is the default, not a flag.
+     *
+     * The URL carries a token, so it is long and cannot be retyped - leaving
+     * the user to copy it out of scrollback is most of the friction in a
+     * one-command install. A headless hub has no UI to open, and a hub started
+     * by a script or a supervisor has nobody watching, which is what the TTY
+     * check stands in for. --open overrides that check; --no-open beats both.
+     */
+    const wantsBrowser = !values.headless &&
+        !values['no-open'] &&
+        (values.open || process.stdout.isTTY === true);
+    if (wantsBrowser)
+        openInBrowser(url);
+    // The canvas hub asks us to stop when the user drops this host, so the
+    // machine does not keep a hub running that belongs to nobody.
+    // A join that was refused cannot be retried into working, and this hub was
+    // started only to join. Stopping frees its install for a re-run.
+    hub.on('joinFailed', (message) => {
+        console.error(`[join] cannot join: ${message}`);
+        void shutdown('join failed');
+    });
+    hub.on('peerShutdown', () => {
+        console.log('\n[peer] the canvas dropped this host; stopping');
+        void shutdown('peer');
+    });
+    let link = null;
+    if (values.join) {
+        link = joinCanvas({
+            hub,
+            peerServer,
+            hubUrl: values.join,
+            joinToken: values['join-token'],
+            label: values.label,
+        });
+    }
+    let shuttingDown = false;
+    const shutdown = async (signal) => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        console.log(`\n[${signal}] saving state...`);
+        // Snapshots are forced here: this is the write that makes a clean restart
+        // come back with the right screens.
+        link?.stop();
+        hub.shutdown();
+        try {
+            rmSync(paths.pidFile(), { force: true });
+        }
+        catch {
+            // Best effort; a stale pid file is handled by whoever reads it.
+        }
+        try {
+            await app.close();
+        }
+        catch {
+            // Server already down.
+        }
+        // node-pty on ConPTY keeps handles that can hold the loop open past close.
+        process.exit(0);
+    };
+    for (const sig of ['SIGINT', 'SIGTERM']) {
+        process.on(sig, () => void shutdown(sig));
+    }
+    process.on('uncaughtException', (err) => {
+        console.error('[fatal]', err);
+        void shutdown('uncaughtException');
+    });
+    // Node escalates an unhandled rejection to uncaughtException, which above
+    // stops the hub. A peer refusing a request is a normal thing that must not
+    // cost the user every agent running on this machine, so it is logged and
+    // survived instead. Call sites still catch their own; this is the net.
+    process.on('unhandledRejection', (reason) => {
+        console.error('[unhandled]', reason instanceof Error ? reason.message : reason);
+    });
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAiB,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAE5C;;;;;;;GAOG;AACH,SAAS,eAAe;IACtB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE;SAClC,IAAI,EAAE;SACN,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO;IAE7D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,KAAK,CAAC,kDAAkD,KAAK,GAAG,CAAC,CAAC;IAC1E,OAAO,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC9E,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC3E,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YACzC,oEAAoE;YACpE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC9C,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;SAC1C;QACD,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,aAAa,WAAW;;;;;;;;;;;;;;;;;CAiBvC,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,eAAe,EAAE,CAAC;IAElB,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;IACtD,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,4EAA4E;IAC5E,oEAAoE;IACpE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,KAAK,CAAC;QACnF,GAAG;QACH,IAAI,EAAE,QAAQ;QACd,wEAAwE;QACxE,8DAA8D;QAC9D,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QACvE,WAAW;QACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,GAAG,MAAM,WAAW,WAAW,EAAE,CAAC;IAC9C,8EAA8E;IAC9E,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAW,iBAAiB,MAAM,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;IACxD,wEAAwE;IACxE,mEAAmE;IACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,aAAa,YAAY,WAAW,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,uEAAuE;QACvE,oEAAoE;QACpE,OAAO,CAAC,GAAG,CAAC,aAAa,YAAY,OAAO,CAAC,CAAC;QAC9C,yEAAyE;QACzE,IAAI,eAAe;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,eAAe,OAAO,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEtC;;;;;;;;OAQG;IACH,MAAM,YAAY,GAChB,CAAC,MAAM,CAAC,QAAQ;QAChB,CAAC,MAAM,CAAC,SAAS,CAAC;QAClB,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACjD,IAAI,YAAY;QAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAErC,uEAAuE;IACvE,8DAA8D;IAC9D,2EAA2E;IAC3E,iEAAiE;IACjE,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,OAAe,EAAE,EAAE;QACvC,OAAO,CAAC,KAAK,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QAChD,KAAK,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QAC1B,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,IAAI,IAAI,GAAoB,IAAI,CAAC;IACjC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,IAAI,GAAG,UAAU,CAAC;YAChB,GAAG;YACH,UAAU;YACV,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,mBAAmB,CAAC,CAAC;QAC7C,0EAA0E;QAC1E,oCAAoC;QACpC,IAAI,EAAE,IAAI,EAAE,CAAC;QACb,GAAG,CAAC,QAAQ,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,2EAA2E;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/db/index.d.ts

@@ -0,0 +1,14 @@
+import Database from 'better-sqlite3';
+import { LATEST_VERSION, runMigrations } from './migrations.js';
+export type Db = Database.Database;
+/**
+ * Open (creating if needed) the hub database.
+ *
+ * WAL + synchronous=NORMAL is the right trade here: we accept losing the last
+ * few milliseconds of writes on power loss, in exchange for snapshot writes
+ * that never stall the PTY read loop. A hard kill still leaves a recoverable
+ * database, which the restore path depends on.
+ */
+export declare function openDb(path: string): Db;
+export { LATEST_VERSION, runMigrations };
+//# sourceMappingURL=index.d.ts.map

package/dist/db/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAGtC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhE,MAAM,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC;AAEnC;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,EAAE,CAQvC;AAED,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC"}

package/dist/db/index.js

@@ -0,0 +1,24 @@
+import Database from 'better-sqlite3';
+import { mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { LATEST_VERSION, runMigrations } from './migrations.js';
+/**
+ * Open (creating if needed) the hub database.
+ *
+ * WAL + synchronous=NORMAL is the right trade here: we accept losing the last
+ * few milliseconds of writes on power loss, in exchange for snapshot writes
+ * that never stall the PTY read loop. A hard kill still leaves a recoverable
+ * database, which the restore path depends on.
+ */
+export function openDb(path) {
+    if (path !== ':memory:')
+        mkdirSync(dirname(path), { recursive: true });
+    const db = new Database(path);
+    db.pragma('journal_mode = WAL');
+    db.pragma('synchronous = NORMAL');
+    db.pragma('foreign_keys = ON');
+    runMigrations(db);
+    return db;
+}
+export { LATEST_VERSION, runMigrations };
+//# sourceMappingURL=index.js.map

package/dist/db/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIhE;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,IAAI,KAAK,UAAU;QAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAClC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC"}

package/dist/db/migrations.d.ts

@@ -0,0 +1,15 @@
+import type { Database } from 'better-sqlite3';
+/**
+ * Numbered, append-only migrations. Each runs once, in order, inside a
+ * transaction; `schema_meta` records the high-water mark. Never edit a
+ * migration that has shipped — add a new one.
+ */
+export interface Migration {
+    version: number;
+    name: string;
+    up: string;
+}
+export declare const MIGRATIONS: Migration[];
+export declare function runMigrations(db: Database): number;
+export declare const LATEST_VERSION: number;
+//# sourceMappingURL=migrations.d.ts.map

package/dist/db/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,eAAO,MAAM,UAAU,EAAE,SAAS,EA2JjC,CAAC;AAEF,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,GAAG,MAAM,CA+BlD;AAED,eAAO,MAAM,cAAc,QAG1B,CAAC"}

package/dist/db/migrations.js

@@ -0,0 +1,176 @@
+export const MIGRATIONS = [
+    {
+        version: 1,
+        name: 'initial',
+        up: `
+      CREATE TABLE host (
+        id            TEXT PRIMARY KEY,
+        label         TEXT NOT NULL,
+        ssh_host      TEXT NOT NULL,
+        ssh_user      TEXT NOT NULL,
+        ssh_port      INTEGER NOT NULL DEFAULT 22,
+        key_ref       TEXT,
+        hub_version   TEXT,
+        state         TEXT NOT NULL DEFAULT 'disconnected',
+        last_seen_at  INTEGER,
+        error         TEXT
+      );
+
+      CREATE TABLE workspace (
+        id          TEXT PRIMARY KEY,
+        name        TEXT NOT NULL UNIQUE,
+        kind        TEXT NOT NULL CHECK (kind IN ('local','remote')),
+        root_path   TEXT NOT NULL,
+        host_id     TEXT REFERENCES host(id) ON DELETE CASCADE,
+        color       TEXT NOT NULL,
+        created_at  INTEGER NOT NULL,
+        archived_at INTEGER
+      );
+
+      CREATE TABLE session (
+        id                 TEXT PRIMARY KEY,
+        workspace_id       TEXT NOT NULL REFERENCES workspace(id) ON DELETE CASCADE,
+        name               TEXT NOT NULL,
+        profile            TEXT NOT NULL,
+        cwd                TEXT NOT NULL,
+        agent_session_uuid TEXT,
+        argv_json          TEXT NOT NULL,
+        env_json           TEXT NOT NULL,
+        spawned_by         TEXT REFERENCES session(id) ON DELETE SET NULL,
+        state              TEXT NOT NULL,
+        status_text        TEXT,
+        title              TEXT,
+        pid                INTEGER,
+        exit_code          INTEGER,
+        cols               INTEGER NOT NULL DEFAULT 80,
+        rows               INTEGER NOT NULL DEFAULT 24,
+        created_at         INTEGER NOT NULL,
+        exited_at          INTEGER,
+        last_active_at     INTEGER NOT NULL,
+        UNIQUE (workspace_id, name)
+      );
+
+      CREATE TABLE session_snapshot (
+        session_id  TEXT PRIMARY KEY REFERENCES session(id) ON DELETE CASCADE,
+        serialized  TEXT NOT NULL,
+        cols        INTEGER NOT NULL,
+        rows        INTEGER NOT NULL,
+        captured_at INTEGER NOT NULL
+      );
+
+      CREATE TABLE window (
+        session_id TEXT PRIMARY KEY REFERENCES session(id) ON DELETE CASCADE,
+        x          REAL NOT NULL,
+        y          REAL NOT NULL,
+        w          REAL NOT NULL,
+        h          REAL NOT NULL,
+        z          INTEGER NOT NULL DEFAULT 0,
+        collapsed  INTEGER NOT NULL DEFAULT 0
+      );
+
+      CREATE TABLE viewport (
+        id    INTEGER PRIMARY KEY CHECK (id = 1),
+        pan_x REAL NOT NULL,
+        pan_y REAL NOT NULL,
+        zoom  REAL NOT NULL
+      );
+
+      CREATE TABLE message (
+        id             TEXT PRIMARY KEY,
+        from_addr      TEXT NOT NULL,
+        to_addr        TEXT NOT NULL,
+        body           TEXT NOT NULL,
+        sent_at        INTEGER NOT NULL,
+        delivered_at   INTEGER,
+        delivery_state TEXT NOT NULL,
+        error          TEXT
+      );
+
+      CREATE INDEX idx_session_workspace ON session(workspace_id);
+      CREATE INDEX idx_message_sent_at   ON message(sent_at);
+      CREATE INDEX idx_workspace_host    ON workspace(host_id);
+    `,
+    },
+    {
+        version: 2,
+        name: 'remote_windows',
+        up: `
+      -- Canvas layout for sessions that live on a peer hub.
+      --
+      -- Remote session state is deliberately NOT cached locally: the peer
+      -- owns its sessions and their snapshots. But the layout is the user's
+      -- view of their own canvas, so it belongs here, keyed by address rather
+      -- than by a session id this database does not have.
+      CREATE TABLE remote_window (
+        address    TEXT PRIMARY KEY,
+        host_id    TEXT NOT NULL REFERENCES host(id) ON DELETE CASCADE,
+        x          REAL NOT NULL,
+        y          REAL NOT NULL,
+        w          REAL NOT NULL,
+        h          REAL NOT NULL,
+        z          INTEGER NOT NULL DEFAULT 0,
+        collapsed  INTEGER NOT NULL DEFAULT 0
+      );
+
+      CREATE INDEX idx_remote_window_host ON remote_window(host_id);
+    `,
+    },
+    {
+        version: 3,
+        name: 'enrolled_hosts',
+        up: `
+      -- A host that ran the join installer dialled us; we hold no SSH
+      -- credentials for it and cannot reach it on our own.
+      --
+      -- ssh_host and ssh_user are NOT NULL from migration 1 and enrolled rows
+      -- have neither. They are written as '' and mapped back to null in the
+      -- store. Rebuilding the table to relax the constraint would mean
+      -- dropping it while workspace.host_id and remote_window.host_id hold
+      -- cascading references to it, which is far more risk than a sentinel.
+      ALTER TABLE host ADD COLUMN kind          TEXT NOT NULL DEFAULT 'ssh';
+      -- The durable credential an enrolled host presents on every reconnect.
+      -- Server-side only, like key_ref: it is never sent to the browser.
+      ALTER TABLE host ADD COLUMN host_token    TEXT;
+      ALTER TABLE host ADD COLUMN platform      TEXT;
+    `,
+    },
+    {
+        version: 4,
+        name: 'pending_removals',
+        up: `
+      -- A window the user closed while its host was unreachable.
+      --
+      -- The intent outlives the disconnection. Without this the removal is
+      -- lost with the process and the peer reports the session again on its
+      -- next connection, which is what made closed terminals come back after
+      -- a restart. Replayed the moment that host is reachable again.
+      CREATE TABLE pending_removal (
+        address      TEXT PRIMARY KEY,
+        host_id      TEXT NOT NULL REFERENCES host(id) ON DELETE CASCADE,
+        requested_at INTEGER NOT NULL
+      );
+
+      CREATE INDEX idx_pending_removal_host ON pending_removal(host_id);
+    `,
+    },
+];
+export function runMigrations(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS schema_meta (
+      version    INTEGER PRIMARY KEY,
+      applied_at INTEGER NOT NULL
+    );
+  `);
+    const current = db.prepare('SELECT MAX(version) AS v FROM schema_meta').get().v ?? 0;
+    const pending = MIGRATIONS.filter((m) => m.version > current).sort((a, b) => a.version - b.version);
+    for (const m of pending) {
+        const apply = db.transaction(() => {
+            db.exec(m.up);
+            db.prepare('INSERT INTO schema_meta (version, applied_at) VALUES (?, ?)').run(m.version, Date.now());
+        });
+        apply();
+    }
+    return LATEST_VERSION;
+}
+export const LATEST_VERSION = MIGRATIONS.reduce((max, m) => Math.max(max, m.version), 0);
+//# sourceMappingURL=migrations.js.map

package/dist/db/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,SAAS;QACf,EAAE,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAuFH;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE;;;;;;;;;;;;;;;;;;;KAmBH;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,gBAAgB;QACtB,EAAE,EAAE;;;;;;;;;;;;;;KAcH;KACF;IACD;QACE,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,kBAAkB;QACxB,EAAE,EAAE;;;;;;;;;;;;;;KAcH;KACF;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,EAAY;IACxC,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,OAAO,GAET,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,EAG5D,CAAC,CAAC,IAAI,CAAC,CAAC;IAEX,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,IAAI,CAChE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAChC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAChC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACd,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAC3E,CAAC,CAAC,OAAO,EACT,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;IACV,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAC7C,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EACpC,CAAC,CACF,CAAC"}

package/dist/db/store.d.ts

@@ -0,0 +1,71 @@
+import { type Host, type Message, type Session, type Viewport, type WindowRect, type Workspace } from '../protocol/index.js';
+import type { Db } from './index.js';
+export declare const DEFAULT_WINDOW: WindowRect;
+/** Persisted fields that live only in the DB, not on the wire Session. */
+export interface SessionLaunchSpec {
+    argv: string[];
+    env: Record<string, string>;
+}
+export declare class Store {
+    private readonly db;
+    constructor(db: Db);
+    listHosts(): Host[];
+    getHost(id: string): Host | null;
+    upsertHost(h: Host & {
+        keyRef?: string | null;
+        hostToken?: string | null;
+    }): void;
+    removeHost(id: string): void;
+    hostKeyRef(id: string): string | null;
+    /**
+     * Match an enrolled host by the durable token it presents on reconnect.
+     * Server-side only — like key_ref, this never travels to the browser.
+     */
+    hostByToken(token: string): Host | null;
+    listWorkspaces(): Workspace[];
+    getWorkspace(id: string): Workspace | null;
+    getWorkspaceByName(name: string): Workspace | null;
+    insertWorkspace(w: Workspace): void;
+    removeWorkspace(id: string): void;
+    private rowToSession;
+    private readonly selectSession;
+    listSessions(isResumable: (profile: string) => boolean): Session[];
+    getSession(id: string, isResumable: (profile: string) => boolean): Session | null;
+    namesInWorkspace(workspaceId: string): string[];
+    insertSession(s: Session, spec: SessionLaunchSpec): void;
+    /** Fields that change over a session's life. Layout is written separately. */
+    updateSession(id: string, patch: Partial<Pick<Session, 'state' | 'pid' | 'exitCode' | 'statusText' | 'title' | 'cols' | 'rows' | 'exitedAt' | 'lastActiveAt' | 'agentSessionUuid'>>): void;
+    getLaunchSpec(id: string): SessionLaunchSpec | null;
+    setLaunchSpec(id: string, spec: SessionLaunchSpec): void;
+    removeSession(id: string): void;
+    saveWindow(sessionId: string, rect: WindowRect): void;
+    getViewport(): Viewport;
+    saveViewport(v: Viewport): void;
+    /**
+     * Layout for peer-hosted sessions, keyed by address. Remote session state
+     * itself is never cached here; the peer owns it.
+     */
+    getRemoteWindows(): Map<string, WindowRect>;
+    saveRemoteWindow(address: string, hostId: string, rect: WindowRect): void;
+    removeRemoteWindow(address: string): void;
+    /**
+     * Addresses the user closed while their host was unreachable, kept until
+     * that host can be told. Keyed by address for the same reason remote_window
+     * is: the owning hub's session id means nothing in this database.
+     */
+    pendingRemovals(hostId?: string): {
+        address: string;
+        hostId: string;
+    }[];
+    addPendingRemoval(address: string, hostId: string): void;
+    clearPendingRemoval(address: string): void;
+    saveSnapshot(sessionId: string, serialized: string, cols: number, rows: number): void;
+    getSnapshot(sessionId: string): {
+        serialized: string;
+        cols: number;
+        rows: number;
+    } | null;
+    listMessages(limit?: number): Message[];
+    insertMessage(m: Message): void;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/db/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/db/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,IAAI,EACT,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAgCrC,eAAO,MAAM,cAAc,EAAE,UAO5B,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,qBAAa,KAAK;IACJ,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,EAAE;IAInC,SAAS,IAAI,IAAI,EAAE;IAmBnB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAIhC,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAwBjF,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAI5B,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAOrC;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IASvC,cAAc,IAAI,SAAS,EAAE;IAgB7B,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAI1C,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAIlD,eAAe,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI;IASnC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAMjC,OAAO,CAAC,YAAY;IAmCpB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAM5B;IAEF,YAAY,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,EAAE;IAOlE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,GAAG,IAAI;IAOjF,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE;IAQ/C,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,IAAI;IAuCxD,8EAA8E;IAC9E,aAAa,CACX,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CACZ,IAAI,CACF,OAAO,EACP,OAAO,GAAG,KAAK,GAAG,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,cAAc,GAAG,kBAAkB,CAC3H,CACF,GACA,IAAI;IAqBP,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAQnD,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,IAAI;IAMxD,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAM/B,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI;IAWrD,WAAW,IAAI,QAAQ;IAOvB,YAAY,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI;IAW/B;;;OAGG;IACH,gBAAgB,IAAI,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;IAU3C,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI;IAWzE,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAMzC;;;;OAIG;IACH,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE;IASvE,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAUxD,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAM1C,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAWrF,WAAW,CACT,SAAS,EAAE,MAAM,GAChB;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAS5D,YAAY,CAAC,KAAK,SAAM,GAAG,OAAO,EAAE;IAkBpC,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI;CAQhC"}