@miraj181/ipingyou 1.0.2 → 2.0.1

package/README.md

@@ -1,133 +1,106 @@
-# 🔗 iPingYou — SecureLink CLI
+<div align="center">
+  <h1>🔗 iPingYou — SecureLink CLI v2.0</h1>
+  <p><strong>Military-Grade, Zero-Knowledge P2P Remote Access & Collaboration Tool</strong></p>
 
-Secure peer-to-peer remote access via SSH & Cloudflare Tunnels. A Node.js CLI tool that lets two machines establish an encrypted SSH connection through Cloudflare's network, coordinated by a lightweight broker.
+  [![npm version](https://img.shields.io/npm/v/@miraj181/ipingyou.svg?style=flat-square)](https://www.npmjs.com/package/@miraj181/ipingyou)
+  [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=flat-square)](https://opensource.org/licenses/MIT)
+  [![Node.js Version](https://img.shields.io/node/v/@miraj181/ipingyou.svg?style=flat-square)](https://nodejs.org)
+</div>
 
-## Architecture
+---
 
-```
- Host Machine                  Broker (Express.js)              Client Machine
-┌──────────────┐   POST       ┌──────────────────┐   GET       ┌──────────────┐
-│ cloudflared  │──/register──▶│  In-Memory Map   │◀─/resolve──│  ipingyou    │
-│ tunnel :22   │   {uid,url}  │  AES-256-CBC     │   /:uid     │  connect     │
-│              │              │  1hr TTL expiry   │             │              │
-│  SSH daemon  │◀─────────────│──────────────────│─────────────│  SSH via     │
-│              │  cloudflared │                   │ ProxyCmd    │  ProxyCmd    │
-└──────────────┘  TCP proxy   └──────────────────┘             └──────────────┘
-```
+**iPingYou** is a zero-configuration Node.js CLI that establishes AES-encrypted, peer-to-peer SSH tunnels using Cloudflare's Edge network. Version 2.0 introduces **End-to-End Encrypted WebSockets**, **Terminal Mirroring**, **Passwordless Ephemeral Keys**, and **Background Daemonization**.
 
-### Flow
-1. **Host** starts `ipingyou host` → generates an 8-char UID, spins up `cloudflared` tunnel, registers with broker
-2. **Host** shares UID with the client (verbally, chat, etc.)
-3. **Client** runs `ipingyou connect` → enters UID, broker resolves it to tunnel URL → SSH connects via cloudflared proxy
-4. On `Ctrl+C`, all spawned processes are killed via `tree-kill` and the UID is revoked from the broker
+No firewalls to configure. No port forwarding. No plaintext leakage.
 
-## Quick Start
+## ✨ God-Tier Features (New in v2.0)
 
-### 1. Start the Broker (self-hosted or Render)
+* 🔐 **Ephemeral Passwordless Auth**: The Host automatically injects a temporary `Ed25519` key into `authorized_keys`. Clients connect instantly without knowing the machine's actual root/user password. Keys are purged immediately on exit.
+* 💬 **E2E Web Crypto Chat Room**: A real-time, browser-based chat UI using native Web Crypto API (`AES-GCM`). Your chat keys are passed via URL fragments (`#password`) so they never touch a server—not even the Host machine's Node server!
+* 📺 **Terminal Mirroring**: Wrap client SSH sessions in a multiplexed `tmux` terminal. The Host can spectate connected clients in real-time right from the dashboard to audit or assist.
+* 🔄 **Reverse Port Forwarding (`ssh -R`)**: Clients can expose their *local* `localhost` development ports back to the Host through the secure tunnel.
+* 📡 **Hardware Telemetry Verification**: Clients silently generate hardware footprint reports (OS, RAM, CPU, IP), encrypt them locally with the session password, and send them to the Host for authorization.
+* 🚨 **Panic Kill-Switch**: Type `ipingyou panic` to instantly vaporize all associated keys, wipe all alias configs, and send a `SIGKILL` to every active tunnel and SSH shell.
+* 👻 **Daemonization**: Run `ipingyou service install` to quietly install and run the Host listener in the background (survives system reboots using PM2).
 
-```bash
-cd ipingyou
-cp .env.example .env
-npm install
-npm run broker
-# Broker: http://localhost:4000
-```
+---
 
-### 2. Host Mode (Machine being accessed)
+## 🚀 Quick Start
 
+You don't need to download any code. `iPingYou` runs natively from the global npm registry.
+
+### The "On-the-Fly" Way (Recommended)
 ```bash
-npx ipingyou host
-# or interactively:
-npx ipingyou
-```
+# Start the interactive wizard
+npx @miraj181/ipingyou
 
-### 3. Client Mode (Machine accessing)
+# Instantly spin up your machine as a Host
+npx @miraj181/ipingyou host
 
-```bash
-npx ipingyou connect
-# or interactively:
-npx ipingyou
+# Connect to a remote machine using a session UID
+npx @miraj181/ipingyou connect
 ```
 
-## CLI Commands
+### Global Install
+```bash
+npm install -g @miraj181/ipingyou
 
+# Execute globally using aliases:
+ipingyou
+# or
+securelink
 ```
-ipingyou                    Interactive mode (prompts for host/client)
-ipingyou host               Start as host — allow remote access
-ipingyou connect            Start as client — access a remote machine
-ipingyou broker             Start the central broker server
-ipingyou broker -p 5000     Start broker on custom port
-```
-
-## Prerequisites
 
-| Tool | Required | Install |
-|------|----------|---------|
-| Node.js ≥18 | ✅ | [nodejs.org](https://nodejs.org) |
-| `ssh` | ✅ | Ships with macOS/Linux; `winget install Microsoft.OpenSSH.Client` on Windows |
-| `cloudflared` | ✅ | `brew install cloudflared` / [download](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/) |
+---
 
-The CLI auto-detects your OS and will attempt to install missing dependencies on Linux (apt/pacman) and guide you on macOS/Windows.
+## 🔒 Zero-Knowledge Architecture
 
-## Project Structure
+The public broker server exists solely to rendezvous connections. It is fundamentally a **"Dumb Pipe"**.
 
+```mermaid
+graph LR
+    H[Host CLI] -->|AES-256-CBC Encrypted Payload| B((Broker Relay))
+    B -->|Encrypted Payload| C[Client CLI]
+    C -->|Locally Decrypts Password| C
+    C -->|Direct Cloudflare SSH| H
+    C -->|E2E AES-GCM WebSockets| H
 ```
-ipingyou/
-├── src/
-│   ├── cli.js              ← Main CLI entry (npx-ready, shebang)
-│   ├── server.js           ← Central Broker (Express.js)
-│   ├── lib/
-│   │   ├── cleanup.js      ← Graceful shutdown + tree-kill
-│   │   ├── crypto.js       ← AES-256-CBC encrypt/decrypt
-│   │   ├── platform.js     ← OS detection + dependency check
-│   │   └── uid.js          ← Random 8-char UID generator (nanoid)
-│   └── modes/
-│       ├── host.js         ← Host mode logic
-│       └── client.js       ← Client mode logic
-├── .env.example
-├── .gitignore
-├── package.json
-├── render.yaml             ← One-click Render deploy
-└── README.md
-```
 
-## Security
+1. **Host** starts up, spawns `cloudflared` tunnels for SSH and Chat, and generates a random, offline **AES-256 Session Password**.
+2. **Host** encrypts the tunnel data with the password and sends the *ciphertext* to the Broker alongside a short UID.
+3. **Client** runs `ipingyou connect`, enters the UID and Password.
+4. **Client** fetches the ciphertext, decrypts it locally, and connects directly via SSH and WebSockets.
+5. On `Ctrl+C`, `tree-kill` initiates a graceful shutdown, revokes the UID from the broker, and scrubs `/tmp` memory.
+
+---
+
+## 🛠 Prerequisites
 
-- **AES-256-CBC** — Tunnel URLs are encrypted at rest in the broker's memory
-- **Random UIDs** — 8-char nanoid, not hardware-based; session dies = door locked forever
-- **1-hour TTL** — Broker auto-expires entries; no stale data
-- **Auto-revoke** — On `Ctrl+C`, UID is deleted from broker before exit
-- **tree-kill** — All child processes (cloudflared, SSH) are recursively killed on shutdown
-- **No persistence** — Broker uses in-memory Map only; server restart = clean slate
+| Tool | Required | Installation Guide |
+|------|----------|--------------------|
+| **Node.js ≥18** | ✅ | [nodejs.org](https://nodejs.org) |
+| **`ssh`** | ✅ | Ships native on macOS/Linux. Windows: `winget install Microsoft.OpenSSH.Client` |
+| **`cloudflared`** | ✅ | `brew install cloudflared` or [Download Here](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/) |
+| **`tmux`** | 〰️ | *Optional*. Required on Host machine if you want to use **Terminal Mirroring**. |
 
-## Deploy Broker to Render (Free)
+*(Note: The CLI auto-detects your OS and will attempt to guide you on how to install any missing dependencies!)*
 
-1. Push this repo to GitHub
-2. Go to [render.com/new](https://render.com/new)
-3. Click **"New Web Service"** → connect your repo
-4. Render auto-detects `render.yaml` → click **Deploy**
-5. Set `SECRET_KEY` in Render Dashboard → Environment
-6. Set `BROKER_URL` in your local `.env` to your Render URL
+---
 
-## Environment Variables
+## 📖 CLI Command Reference
 
-| Variable | Default | Description |
-|----------|---------|-------------|
-| `SECRET_KEY` | Dev key | AES-256 hex key (64 chars) |
-| `BROKER_URL` | `http://localhost:4000` | Broker endpoint for CLI |
-| `BROKER_PORT` | `4000` | Port for broker server |
+| Command | Description |
+|---------|-------------|
+| `ipingyou` | Interactive CLI dashboard wizard. |
+| `ipingyou host` | Start hosting and exposing your local machine securely. |
+| `ipingyou connect -u <UID>` | Connect directly to a specific UID. |
+| `ipingyou panic` | 🚨 Self-destruct mode. Wipes configs, memory, and kills all processes. |
+| `ipingyou service install` | 👻 Installs Host mode as an always-on background daemon. |
+| `ipingyou service stop` | Stops and removes the background daemon. |
 
-## Differences from remote-penitrator
+---
 
-| Aspect | remote-penitrator | iPingYou |
-|--------|-------------------|----------|
-| Interface | Shell scripts + web dashboard | Interactive Node.js CLI |
-| Direction | One-way (runner → C2) | Peer-to-peer (host ↔ client) |
-| UID System | Hardcoded PC IDs | Random per-session UIDs |
-| Process Mgmt | Manual | tree-kill auto-cleanup |
-| Install | Copy scripts | `npx ipingyou` |
-| Modes | Reporter only | Host + Client + Broker |
+## 📜 License
 
-## License
+[MIT License](LICENSE) © Sk Mirajul Islam
 
-MIT

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "1.0.2",
+  "version": "2.0.1",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {
@@ -45,10 +45,15 @@
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
     "execa": "^9.5.2",
+    "express": "^5.2.1",
+    "express-rate-limit": "^8.5.2",
+    "helmet": "^8.1.0",
     "inquirer": "^12.3.2",
     "nanoid": "^5.0.9",
+    "open": "^11.0.0",
     "ora": "^8.1.1",
-    "tree-kill": "^1.2.2"
+    "tree-kill": "^1.2.2",
+    "ws": "^8.20.1"
   },
   "devDependencies": {
     "nodemon": "^3.1.4"
@@ -57,4 +62,4 @@
     "node": ">=18.0.0"
   },
   "type": "module"
-}
+}

package/src/cli.js

@@ -23,9 +23,14 @@ import inquirer from 'inquirer';
 import chalk from 'chalk';
 
 import { detectOS, checkDependencies } from './lib/platform.js';
-import { installShutdownHandlers } from './lib/cleanup.js';
+import { installShutdownHandlers, executePanicMode } from './lib/cleanup.js';
 import { startHostMode } from './modes/host.js';
 import { startClientMode } from './modes/client.js';
+import { execa } from 'execa';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
 // ─── ASCII Banner ────────────────────────────────────────────
 function showBanner() {
@@ -67,10 +72,20 @@ function showRichHelp() {
   console.log(`    • The Broker never sees your plaintext URL, only ciphertext.`);
   console.log('');
 
+  console.log(chalk.bold.white('  🔥 Advanced Features:'));
+  console.log(`    • ${chalk.green('Terminal Mirroring')}   : Host can spectate connected SSH clients in real-time.`);
+  console.log(`    • ${chalk.green('Reverse Forwarding')} : Clients can expose their local localhost ports back to the Host.`);
+  console.log(`    • ${chalk.green('E2E Chat Room')}      : Real-time Web Crypto AES-GCM secure chat UI for Host & Clients.`);
+  console.log(`    • ${chalk.green('Daemonization')}      : Run Host mode as a background service via PM2.`);
+  console.log(`    • ${chalk.green('Panic Kill-Switch')}  : Instantly purge all processes, configurations, and traces.`);
+  console.log('');
+
   console.log(chalk.bold.white('  💡 Examples:'));
-  console.log(`    $ npx ipingyou          ${chalk.dim('# Interactive wizard (Recommended)')}`);
-  console.log(`    $ npx ipingyou host     ${chalk.dim('# Quick start as Host')}`);
-  console.log(`    $ npx ipingyou connect  ${chalk.dim('# Quick start as Client')}`);
+  console.log(`    $ npx ipingyou                  ${chalk.dim('# Interactive wizard (Recommended)')}`);
+  console.log(`    $ npx ipingyou host             ${chalk.dim('# Quick start as Host')}`);
+  console.log(`    $ npx ipingyou connect          ${chalk.dim('# Quick start as Client')}`);
+  console.log(`    $ npx ipingyou panic            ${chalk.dim('# Self-destruct and wipe memory/traces')}`);
+  console.log(`    $ npx ipingyou service install  ${chalk.dim('# Install Host mode as a background daemon')}`);
   console.log('');
 }
 
@@ -91,6 +106,16 @@ function fatal(context, err) {
   process.exit(1);
 }
 
+// ─── Process-Level Error Catching ────────────────────────────
+process.on('uncaughtException', (err) => {
+  fatal('uncaughtException', err);
+});
+
+process.on('unhandledRejection', (reason) => {
+  const err = reason instanceof Error ? reason : new Error(String(reason));
+  fatal('unhandledRejection', err);
+});
+
 // ─── Interactive Mode Selection ──────────────────────────────
 async function interactiveMode() {
   showBanner();
@@ -158,6 +183,7 @@ program
   .name('ipingyou')
   .description('SecureLink-CLI — Secure P2P remote access via SSH & Cloudflare Tunnels')
   .version('1.0.0')
+  .option('-b, --broker <url>', 'Override the central broker URL')
   .addHelpText('beforeAll', () => {
     showBanner();
     showRichHelp();
@@ -169,6 +195,9 @@ program
   .description('Start host mode — allow remote access to this machine')
   .action(async () => {
     try {
+      const opts = program.opts();
+      if (opts.broker) process.env.BROKER_URL = opts.broker;
+
       showBanner();
       showSystemInfo();
       installShutdownHandlers();
@@ -185,6 +214,9 @@ program
   .option('-u, --uid <uid>', 'The remote host UID')
   .action(async () => {
     try {
+      const opts = program.opts();
+      if (opts.broker) process.env.BROKER_URL = opts.broker;
+
       showBanner();
       showSystemInfo();
       installShutdownHandlers();
@@ -195,9 +227,57 @@ program
     }
   });
 
+program
+  .command('panic')
+  .description('🚨 Self-destruct mode: wipe all configs, kill tunnels, and remove traces')
+  .action(async () => {
+    try {
+      showBanner();
+      await executePanicMode();
+    } catch (err) {
+      fatal('panic', err);
+    }
+  });
+
+program
+  .command('service <action>')
+  .description('👻 Manage background daemon (actions: install, stop, status)')
+  .action(async (action) => {
+    try {
+      showBanner();
+      console.log(chalk.bold.cyan('  👻 Background Service Manager'));
+      console.log(chalk.dim('  ──────────────────────────────────────'));
+      
+      const { execaCommand } = await import('execa');
+      
+      if (action === 'install') {
+        console.log(chalk.dim('  Installing PM2 globally and starting host...'));
+        await execaCommand('npm install -g pm2', { stdio: 'inherit' });
+        await execaCommand('pm2 start ipingyou --name "ipingyou-host" -- host', { stdio: 'inherit' });
+        await execaCommand('pm2 save', { stdio: 'inherit' });
+        await execaCommand('pm2 startup', { stdio: 'inherit' });
+        console.log(chalk.green('\n  ✅ Service installed and running in the background.'));
+      } else if (action === 'stop') {
+        await execaCommand('pm2 stop ipingyou-host', { stdio: 'inherit' });
+        await execaCommand('pm2 delete ipingyou-host', { stdio: 'inherit' });
+        await execaCommand('pm2 save', { stdio: 'inherit' });
+        console.log(chalk.green('\n  ✅ Service stopped and removed.'));
+      } else if (action === 'status') {
+        await execaCommand('pm2 status ipingyou-host', { stdio: 'inherit' });
+      } else {
+        console.log(chalk.red(`  ❌ Unknown action: ${action}. Use install, stop, or status.`));
+      }
+    } catch (err) {
+      fatal('service', err);
+    }
+  });
+
 // ─── Default: interactive mode ──────────────────────────────
 program.action(async () => {
   try {
+    const opts = program.opts();
+    if (opts.broker) process.env.BROKER_URL = opts.broker;
+
     installShutdownHandlers();
     await interactiveMode();
   } catch (err) {