@nordbyte/nordrelay 0.6.0 → 0.7.0

package/dist/webui-assets/dashboard.js

@@ -20,6 +20,14 @@
     { re: /^\/api\/agent-update\/[^\/]+\/input$/, methods: ["POST"] },
     { re: /^\/api\/agent-update\/[^\/]+\/cancel$/, methods: ["POST"] },
     { path: "/api/adapters/health", methods: ["GET"] },
+    { path: "/api/peers", methods: ["GET", "POST"] },
+    { path: "/api/peers/invite", methods: ["POST"] },
+    { path: "/api/peers/pair", methods: ["POST"] },
+    { path: "/api/peers/global-sessions", methods: ["GET"] },
+    { re: /^\/api\/peers\/[^\/]+\/health$/, methods: ["GET"] },
+    { re: /^\/api\/peers\/[^\/]+$/, methods: ["PATCH", "DELETE"] },
+    { re: /^\/api\/peers\/[^\/]+\/proxy$/, methods: ["POST"] },
+    { re: /^\/api\/peers\/[^\/]+\/events$/, methods: ["GET"] },
     { path: "/api/permissions", methods: ["GET"] },
     { path: "/api/users", methods: ["GET", "POST"] },
     { re: /^\/api\/users\/[^\/]+$/, methods: ["PATCH"] },
@@ -84,6 +92,32 @@
     const method = normalizeMethod(options.method, options.body);
     const url = apiUrl(path, options.query);
     assertApiRoute(url.pathname, method);
+    if (!options.local && shouldProxyApi(url.pathname)) {
+      const peerId = selectedPeerTarget();
+      const proxyBody = JSON.stringify({
+        method,
+        path: url.pathname,
+        query: queryObject(url),
+        body: bodyObject(options.body),
+        contextKey: "web:dashboard"
+      });
+      const res2 = await fetch("/api/peers/" + encodeURIComponent(peerId) + "/proxy", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: proxyBody
+      });
+      if (res2.status === 401) {
+        location.reload();
+        return (
+          /** @type {never} */
+          void 0
+        );
+      }
+      const text2 = await res2.text();
+      const data2 = text2 ? JSON.parse(text2) : {};
+      if (!res2.ok) throw new Error(data2.error || res2.statusText);
+      return data2;
+    }
     const body = normalizeBody(options.body);
     const headers = {
       ...body !== void 0 && shouldSendJsonHeader(options.body) ? { "content-type": "application/json" } : {},
@@ -102,6 +136,46 @@
     if (!res.ok) throw new Error(data.error || res.statusText);
     return data;
   }
+  function shouldProxyApi(path) {
+    const peerId = selectedPeerTarget();
+    if (!peerId || peerId === "local") return false;
+    if (!path.startsWith("/api/")) return false;
+    return !(path === "/api/auth/me" || path === "/api/dashboard/logout" || path === "/api/peers" || path === "/api/peers/invite" || path === "/api/peers/pair" || /^\/api\/peers\/[^/]+(?:\/events|\/proxy)?$/.test(path) || isLocalAdminApi(path));
+  }
+  function isLocalAdminApi(path) {
+    return path === "/api/permissions" || path === "/api/settings" || path === "/api/audit" || path === "/api/locks" || path === "/api/users" || path === "/api/groups" || path === "/api/telegram-chats" || path === "/api/discord-channels" || /^\/api\/users\//.test(path) || /^\/api\/groups\//.test(path) || /^\/api\/telegram-chats\//.test(path) || /^\/api\/discord-channels\//.test(path);
+  }
+  function selectedPeerTarget() {
+    const runtimeState = (
+      /** @type {{ NORDRELAY_WEBUI_RUNTIME_STATE?: { selectedPeer?: string } }} */
+      globalThis.NORDRELAY_WEBUI_RUNTIME_STATE
+    );
+    return runtimeState?.selectedPeer || "local";
+  }
+  function queryObject(url) {
+    const result = {};
+    for (const [key, value] of url.searchParams.entries()) {
+      if (result[key] === void 0) result[key] = value;
+      else if (Array.isArray(result[key])) result[key].push(value);
+      else result[key] = [result[key], value];
+    }
+    return result;
+  }
+  function bodyObject(body) {
+    if (body === void 0 || body === null) return {};
+    if (typeof body === "string") {
+      try {
+        return body ? JSON.parse(body) : {};
+      } catch {
+        return { value: body };
+      }
+    }
+    if (isNativeBody(body)) return {};
+    return (
+      /** @type {Record<string, unknown>} */
+      body
+    );
+  }
   function apiUrl(path, query) {
     const url = new URL(path, location.origin);
     if (query) {
@@ -148,7 +222,8 @@
       throw new Error("Unsupported WebUI API method: " + method + " " + path);
     }
   }
-  const state = { snapshot: null, controls: null, newSessionControls: null, enabledAgents: [], auth: null, permissions: [], settings: [], currentPage: "overview", settingsGroup: null, accessTab: "users", logsPlain: "", logTimer: null, toastTimer: null, cliStatusActive: false, selectedArtifactTurns: /* @__PURE__ */ new Set(), mediaRecorder: null, recordedChunks: [], events: null, reconnectTimer: null, notifications: false, toolTooltipTimer: null, toolTooltipTarget: null, agentUpdateJobs: [], sessionsRequestId: 0, activeSessionsTimer: null };
+  const state = { snapshot: null, controls: null, newSessionControls: null, enabledAgents: [], auth: null, permissions: [], settings: [], currentPage: "overview", settingsGroup: null, accessTab: "users", logsPlain: "", logTimer: null, toastTimer: null, cliStatusActive: false, selectedArtifactTurns: /* @__PURE__ */ new Set(), mediaRecorder: null, recordedChunks: [], events: null, reconnectTimer: null, notifications: false, toolTooltipTimer: null, toolTooltipTarget: null, agentUpdateJobs: [], sessionsRequestId: 0, activeSessions: null, peers: null, selectedPeer: localStorage.getItem("nordrelayPeerTarget") || "local" };
+  globalThis.NORDRELAY_WEBUI_RUNTIME_STATE = state;
   function toast(msg, options = {}) {
     const el = document.getElementById("toast");
     el.textContent = msg;
@@ -249,6 +324,7 @@
       ["#updateBtn", "updates.run"],
       ["#clearLogsBtn", "logs.clear"],
       ["#createUserBtn,#createGroupBtn,#createChatBtn,#createDiscordChannelBtn", "users.write"],
+      ["#createPeerInviteBtn,#addPeerBtn,[data-peer-edit],[data-peer-toggle],[data-peer-revoke]", "peers.write"],
       ["#lockSessionBtn,#unlockSessionBtn", "sessions.write"],
       ["[data-switch]", "sessions.write"],
       ["[data-queue],[data-q]", "queue.write"],
@@ -311,6 +387,7 @@
     if (name === "tasks") await loadTasks();
     if (name === "metrics") await loadMetrics();
     if (name === "adapters") await loadAdapterHealth();
+    if (name === "peers") await loadPeers();
     if (name === "access") await loadAccess();
     if (name === "version") await loadVersion();
   }
@@ -354,9 +431,11 @@
   }
   const sessionsPager = createPaginator("sessionsPager", () => loadSessions(false), 50);
   async function loadBootstrap() {
-    const data = await api("/api/bootstrap");
-    state.auth = data.auth || null;
-    state.permissions = data.auth?.permissions || [];
+    const local = await api("/api/bootstrap", { local: true });
+    state.auth = local.auth || null;
+    state.permissions = local.auth?.permissions || [];
+    await loadPeerSelector();
+    const data = state.selectedPeer && state.selectedPeer !== "local" ? await api("/api/bootstrap") : local;
     state.snapshot = data.status.snapshot;
     state.controls = data.controls;
     state.enabledAgents = data.enabledAgents || [];
@@ -368,7 +447,7 @@
     renderAdapters(data.channels, data.agentAdapters);
     document.getElementById("footerVersion").textContent = "NordRelay " + (data.status.health?.version || "");
     document.getElementById("footerHealth").textContent = "Health: " + (data.status.health?.state?.status || "unknown");
-    document.getElementById("footerUser").textContent = "User: " + (data.auth?.user?.email || "-");
+    document.getElementById("footerUser").textContent = "User: " + (local.auth?.user?.email || "-") + (state.selectedPeer && state.selectedPeer !== "local" ? " / target peer" : "");
     const agentSelect = document.getElementById("agentSelect");
     agentSelect.innerHTML = data.enabledAgents.map((a) => '<option value="' + a + '">' + a + "</option>").join("");
     agentSelect.value = state.snapshot.session.agentId;
@@ -385,6 +464,35 @@
     });
     applyPermissions();
   }
+  async function loadPeerSelector() {
+    const peerSelect = document.getElementById("peerSelect");
+    if (!peerSelect) return;
+    if (!can("peers.read")) {
+      peerSelect.innerHTML = '<option value="local">Local</option>';
+      peerSelect.value = "local";
+      state.selectedPeer = "local";
+      return;
+    }
+    try {
+      const peers = await api("/api/peers", { local: true });
+      state.peers = peers;
+      const available = (peers.peers || []).filter((p) => p.enabled && p.url);
+      peerSelect.innerHTML = '<option value="local">Local node</option>' + available.map((p) => '<option value="' + attr(p.id) + '">' + esc(p.name) + "</option>").join("");
+      if (state.selectedPeer !== "local" && !available.some((p) => p.id === state.selectedPeer)) state.selectedPeer = "local";
+      peerSelect.value = state.selectedPeer;
+      peerSelect.onchange = () => safe(async () => {
+        state.selectedPeer = peerSelect.value || "local";
+        localStorage.setItem("nordrelayPeerTarget", state.selectedPeer);
+        connectEvents();
+        toast(state.selectedPeer === "local" ? "Target: local" : "Target: " + peerSelect.options[peerSelect.selectedIndex].text);
+        await loadBootstrap();
+        await reloadCurrentPage();
+      });
+    } catch {
+      peerSelect.innerHTML = '<option value="local">Local node</option>';
+      peerSelect.value = "local";
+    }
+  }
   function renderSnapshot(s) {
     document.getElementById("sessionLine").textContent = (s.session.agentLabel || "Agent") + " / " + (s.session.model || "default") + " / " + (s.session.threadId || "not started");
     document.getElementById("metrics").innerHTML = [
@@ -409,6 +517,7 @@
     renderActiveSessions(data.sessions || []);
   }
   function renderActiveSessions(items) {
+    state.activeSessions = { sessions: items || [], updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
     const box = document.getElementById("activeSessions");
     if (!box) return;
     box.innerHTML = (items || []).map(activeSessionCard).join("") || '<div class="item">No active sessions.</div>';
@@ -552,9 +661,6 @@
     if (status === "running") return "planned";
     return "disabled";
   }
-  state.activeSessionsTimer = setInterval(() => {
-    if (state.currentPage === "overview") safe(loadActiveSessions);
-  }, 5e3);
   function scrollChatToBottom() {
     const box = document.getElementById("messages");
     if (!box) return;
@@ -600,7 +706,8 @@
   let currentAgentMessage = null;
   function connectEvents() {
     if (state.events) state.events.close();
-    const events = new EventSource("/api/events");
+    const eventsUrl = state.selectedPeer && state.selectedPeer !== "local" ? "/api/peers/" + encodeURIComponent(state.selectedPeer) + "/events?contextKey=" + encodeURIComponent("web:dashboard") : "/api/events";
+    const events = new EventSource(eventsUrl);
     state.events = events;
     setConnection("Connecting", "warn");
     events.onopen = () => {
@@ -618,6 +725,11 @@
     });
     events.addEventListener("chat_history", (e) => renderChatMessages(JSON.parse(e.data).messages || []));
     events.addEventListener("activity_update", (e) => renderActivity(JSON.parse(e.data).events || []));
+    events.addEventListener("active_sessions_update", (e) => {
+      const d = JSON.parse(e.data);
+      state.activeSessions = d.active || null;
+      if (state.currentPage === "overview") renderActiveSessions(state.activeSessions?.sessions || []);
+    });
     events.addEventListener("session_update", (e) => {
       loadBootstrap();
       loadChatHistory();
@@ -1212,6 +1324,99 @@
       throw err;
     }
   }
+  function isRemotePeerTarget() {
+    return Boolean(state.selectedPeer && state.selectedPeer !== "local");
+  }
+  function artifactFileHref(turnId, path) {
+    return isRemotePeerTarget() ? "#" : "/api/artifacts/file?turnId=" + encodeURIComponent(turnId) + "&path=" + encodeURIComponent(path);
+  }
+  function artifactZipHref(turnId) {
+    return isRemotePeerTarget() ? "#" : "/api/artifacts/zip?turnId=" + encodeURIComponent(turnId);
+  }
+  async function downloadArtifactFile(turnId, path) {
+    const file = await api("/api/artifacts/file", { query: { turnId, path } });
+    downloadBase64(file.name || path, file.dataBase64 || "", file.mimeType || "application/octet-stream");
+  }
+  async function downloadArtifactZip(turnId) {
+    const file = await api("/api/artifacts/zip", { query: { turnId } });
+    downloadBase64(file.name || "nordrelay-artifacts-" + turnId + ".zip", file.dataBase64 || "", file.mimeType || "application/zip");
+  }
+  async function artifactDataUrl(turnId, path) {
+    const file = await api("/api/artifacts/file", { query: { turnId, path } });
+    return "data:" + (file.mimeType || "application/octet-stream") + ";base64," + (file.dataBase64 || "");
+  }
+  function renderArtifacts() {
+    const query = (document.getElementById("artifactSearch").value || "").toLowerCase();
+    const kind = document.getElementById("artifactKind").value;
+    const reports = state.artifactReports || [];
+    document.getElementById("artifactList").innerHTML = reports.map((r) => {
+      const files = (r.artifacts || []).filter((a) => artifactMatches(a, kind, query));
+      if (files.length === 0) return "";
+      const gallery = files.map((a) => {
+        const href = artifactFileHref(r.turnId, a.relativePath);
+        const isImage = /\.(png|jpe?g|gif|webp|svg)$/i.test(a.name);
+        const img = isImage && !isRemotePeerTarget() ? '<img src="' + href + '">' : "<pre>" + esc(a.name.split(".").pop() || "file") + "</pre>";
+        return '<div class="artifact-card"><label><input type="checkbox" data-artifact-select="' + attr(r.turnId) + '" ' + (state.selectedArtifactTurns.has(r.turnId) ? "checked" : "") + "> " + esc(short(a.name, 32)) + "</label>" + img + "<small>" + esc(fmtBytes(a.sizeBytes)) + '</small><div class="row"><a href="' + href + '" data-open-artifact="' + attr(r.turnId) + '" data-open-path="' + attr(a.relativePath) + '">Open</a><button class="secondary" data-preview-turn="' + attr(r.turnId) + '" data-preview-path="' + attr(a.relativePath) + '">Preview</button></div></div>';
+      }).join("");
+      return '<div class="item"><strong>' + esc(r.turnId) + " - " + files.length + "/" + r.fileCount + " files - " + fmtBytes(r.totalSizeBytes) + "</strong><small>" + fmtDate(r.updatedAt) + " / " + esc(r.source || "turn") + '</small><div class="row"><a href="' + artifactZipHref(r.turnId) + '" data-zip-artifact="' + attr(r.turnId) + '">Download ZIP</a><button data-del-art="' + esc(r.turnId) + '" class="danger"' + disabledAttr("files.write") + '>Delete</button></div><div class="gallery">' + gallery + "</div></div>";
+    }).join("") || '<div class="item">No artifacts.</div>';
+    document.querySelectorAll("[data-artifact-select]").forEach((c) => c.onchange = () => {
+      if (c.checked) state.selectedArtifactTurns.add(c.dataset.artifactSelect);
+      else state.selectedArtifactTurns.delete(c.dataset.artifactSelect);
+    });
+    document.querySelectorAll("[data-open-artifact]").forEach((a) => a.onclick = (e) => {
+      if (!isRemotePeerTarget()) return;
+      e.preventDefault();
+      safe(() => downloadArtifactFile(a.dataset.openArtifact, a.dataset.openPath));
+    });
+    document.querySelectorAll("[data-zip-artifact]").forEach((a) => a.onclick = (e) => {
+      if (!isRemotePeerTarget()) return;
+      e.preventDefault();
+      safe(() => downloadArtifactZip(a.dataset.zipArtifact));
+    });
+    document.querySelectorAll("[data-del-art]").forEach((b) => b.onclick = () => safe(async () => {
+      if (!can("files.write")) {
+        toast("Permission required: files.write");
+        return;
+      }
+      if (confirm("Delete artifact turn " + b.dataset.delArt + "?")) {
+        await api("/api/artifacts", { method: "DELETE", query: { turnId: b.dataset.delArt } });
+        state.selectedArtifactTurns.delete(b.dataset.delArt);
+        loadArtifacts();
+      }
+    }));
+    document.querySelectorAll("[data-preview-turn]").forEach((b) => b.onclick = () => safe(() => previewArtifact(b.dataset.previewTurn, b.dataset.previewPath)));
+    applyPermissions();
+  }
+  document.getElementById("zipSelectedArtifactsBtn").onclick = () => {
+    const turnIds = [...state.selectedArtifactTurns];
+    if (turnIds.length === 0) {
+      toast("No artifact turns selected");
+      return;
+    }
+    turnIds.forEach((turnId) => isRemotePeerTarget() ? safe(() => downloadArtifactZip(turnId)) : window.open("/api/artifacts/zip?turnId=" + encodeURIComponent(turnId), "_blank"));
+  };
+  async function previewArtifact(turnId, path) {
+    const target = document.getElementById("artifactPreview");
+    target.innerHTML = '<div class="panel">' + loadingHtml("Loading preview...") + "</div>";
+    target.scrollIntoView({ block: "start", behavior: "smooth" });
+    try {
+      const data = await api("/api/artifacts/preview", { query: { turnId, path } });
+      if (data.kind === "image") {
+        const src = isRemotePeerTarget() ? await artifactDataUrl(turnId, path) : "/api/artifacts/file?turnId=" + encodeURIComponent(turnId) + "&path=" + encodeURIComponent(path);
+        target.innerHTML = '<div class="panel"><h2>' + esc(data.name) + '</h2><img src="' + src + '"></div>';
+        return;
+      }
+      if (data.kind === "text") {
+        target.innerHTML = '<div class="panel"><h2>' + esc(data.name) + " " + fmtBytes(data.sizeBytes) + "</h2><pre>" + highlightCode(data.text || "") + "</pre>" + (data.truncated ? "<small>Preview truncated.</small>" : "") + "</div>";
+        return;
+      }
+      target.innerHTML = '<div class="panel"><h2>' + esc(data.name) + "</h2><p>" + esc(data.detail || "Preview unavailable") + "</p></div>";
+    } catch (err) {
+      target.innerHTML = '<div class="panel"><h2>Preview failed</h2><p>' + esc(err.message || String(err)) + "</p></div>";
+      throw err;
+    }
+  }
   async function loadTasks() {
     setLoading("tasksList", "Loading tasks...");
     const [d, jobs] = await Promise.all([api("/api/tasks"), api("/api/jobs")]);
@@ -1296,6 +1501,29 @@
       ["Aborted", jobs.aborted]
     ];
   }
+  function metricProcessRows(d) {
+    const p = d.process || {};
+    const memory = p.memory || {};
+    const cpu = p.cpu || {};
+    const loop = p.eventLoop || {};
+    return [
+      ["PID", p.pid],
+      ["Node", p.nodeVersion],
+      ["Platform", [p.platform, p.arch].filter(Boolean).join(" ")],
+      ["Uptime", fmtDuration(p.uptimeMs)],
+      ["Started", fmtDate(p.startedAt)],
+      ["RSS", fmtBytes(memory.rssBytes || 0)],
+      ["Heap used", fmtBytes(memory.heapUsedBytes || 0)],
+      ["Heap total", fmtBytes(memory.heapTotalBytes || 0)],
+      ["CPU total", fmtDuration(cpu.totalMs)],
+      ["CPU avg", cpu.percentSinceStart === null || cpu.percentSinceStart === void 0 ? "-" : cpu.percentSinceStart + "%"],
+      ["Event loop p95", formatMs(loop.delayP95Ms)],
+      ["Event loop max", formatMs(loop.delayMaxMs)]
+    ];
+  }
+  function formatMs(value) {
+    return value === null || value === void 0 ? "-" : value + "ms";
+  }
   function rateRows(name, rate) {
     return [
       ["Queued", rate?.queued ?? 0],
@@ -1311,7 +1539,7 @@
   }
   function renderMetrics(d) {
     const adapters = d.adapters || {};
-    document.getElementById("metricsPanel").innerHTML = '<div class="metrics-grid">' + card("Runtime", metricStatusRows(d)) + card("Jobs", metricJobRows(d)) + card("Telegram rate limits", rateRows("", adapters.telegram).map(([k, v]) => [String(k).trim(), v])) + card("Discord rate limits", rateRows("", adapters.discord).map(([k, v]) => [String(k).trim(), v])) + "</div>";
+    document.getElementById("metricsPanel").innerHTML = '<div class="metrics-grid">' + card("Runtime", metricStatusRows(d)) + card("Process", metricProcessRows(d)) + card("Jobs", metricJobRows(d)) + card("Telegram rate limits", rateRows("", adapters.telegram).map(([k, v]) => [String(k).trim(), v])) + card("Discord rate limits", rateRows("", adapters.discord).map(([k, v]) => [String(k).trim(), v])) + "</div>";
   }
   document.getElementById("reloadMetricsBtn").onclick = () => safe(loadMetrics);
   function activityQuery() {
@@ -1366,7 +1594,7 @@
     state.settings = data.settings;
     renderSettings();
   }
-  const settingsGroupOrder = ["Agents", "Codex", "Pi", "Hermes", "OpenClaw", "Claude Code", "Telegram", "Discord", "Operations", "Artifacts", "Workspace", "Voice", "Dashboard"];
+  const settingsGroupOrder = ["Agents", "Codex", "Pi", "Hermes", "OpenClaw", "Claude Code", "Telegram", "Discord", "Operations", "Artifacts", "Workspace", "Peers", "Voice", "Dashboard"];
   const agentSettingGroups = ["Codex", "Pi", "Hermes", "OpenClaw", "Claude Code"];
   function orderedSettingsGroups(groups) {
     const known = settingsGroupOrder.filter((name) => groups[name]);
@@ -1873,6 +2101,97 @@
       toast("Cleared " + target + " log");
     }
   });
+  async function loadPeers() {
+    if (!can("peers.read")) {
+      document.getElementById("peersList").innerHTML = '<div class="item">Permission required: peers.read</div>';
+      return;
+    }
+    setLoading("peersList", "Loading peers...");
+    const d = await api("/api/peers", { local: true });
+    state.peers = d;
+    document.getElementById("peerStatus").innerHTML = card("Local peer identity", [["Peer server", d.enabled ? "enabled" : "disabled"], ["Listen URL", d.listenUrl], ["Require TLS", d.requireTls ? "yes" : "no"], ["Node ID", d.identity?.nodeId], ["Fingerprint", d.identity?.fingerprint]]);
+    document.getElementById("peersList").innerHTML = (d.peers || []).map(peerCard).join("") || '<div class="item">No peers configured.</div>';
+    document.getElementById("peerInvites").innerHTML = (d.invitations || []).map((i) => '<div class="item"><strong>' + esc(i.name) + ' <span class="chip">' + esc(new Date(i.expiresAt) > /* @__PURE__ */ new Date() && !i.usedAt ? "open" : "closed") + "</span></strong><small>" + esc("Expires: " + fmtDate(i.expiresAt)) + "</small><small>" + esc("Scopes: " + (i.scopes || []).join(", ")) + "</small><small>" + esc("Agents: " + ((i.allowedAgents || []).join(", ") || "all")) + "</small>" + (i.usedAt ? "<small>" + esc("Used: " + fmtDate(i.usedAt) + " by " + (i.usedByNodeId || "-")) + "</small>" : "") + "</div>").join("") || '<div class="item">No open invitations.</div>';
+    bindPeerButtons();
+    await loadPeerSelector();
+    applyPermissions();
+  }
+  function peerCard(p) {
+    const selected = state.selectedPeer === p.id ? ' <span class="chip">selected</span>' : "";
+    return '<div class="item"><strong>' + esc(p.name) + ' <span class="adapter-status ' + (p.enabled ? "enabled" : "disabled") + '">' + (p.enabled ? "enabled" : "disabled") + "</span>" + selected + "</strong><small>" + esc("URL: " + (p.url || "-")) + "</small><small>" + esc("Node: " + p.nodeId + " / " + p.fingerprint) + "</small>" + (p.tlsFingerprint ? "<small>" + esc("TLS: " + p.tlsFingerprint) + "</small>" : "") + "<small>" + esc("Direction: " + p.direction + " / scopes " + (p.scopes || []).join(", ")) + "</small><small>" + esc("Agents: " + ((p.allowedAgents || []).join(", ") || "all")) + "</small><small>" + esc("Workspaces: " + ((p.allowedWorkspaceRoots || []).join(", ") || "all")) + "</small>" + (p.lastSeenAt ? "<small>" + esc("Last seen: " + fmtDate(p.lastSeenAt)) + "</small>" : "") + (p.lastError ? '<small class="error">' + esc("Last error: " + p.lastError) + "</small>" : "") + '<div class="row"><button data-peer-select="' + attr(p.id) + '">Use target</button><button class="secondary" data-peer-test="' + attr(p.id) + '">Test</button><button class="secondary" data-peer-edit="' + attr(p.id) + '"' + disabledAttr("peers.write") + '>Edit</button><button class="secondary" data-peer-toggle="' + attr(p.id) + '"' + disabledAttr("peers.write") + ">" + (p.enabled ? "Disable" : "Enable") + '</button><button class="danger" data-peer-revoke="' + attr(p.id) + '"' + disabledAttr("peers.write") + ">Revoke</button></div></div>";
+  }
+  function bindPeerButtons() {
+    document.querySelectorAll("[data-peer-select]").forEach((b) => b.onclick = () => safe(async () => {
+      state.selectedPeer = b.dataset.peerSelect || "local";
+      localStorage.setItem("nordrelayPeerTarget", state.selectedPeer);
+      connectEvents();
+      await loadBootstrap();
+      toast("Peer target selected");
+    }));
+    document.querySelectorAll("[data-peer-test]").forEach((b) => b.onclick = () => safe(async () => {
+      const r = await api("/api/peers/" + encodeURIComponent(b.dataset.peerTest) + "/proxy", { method: "POST", body: JSON.stringify({ method: "GET", path: "/api/health", query: {}, body: {} }), local: true });
+      toast("Peer reachable: " + (r.health?.state?.status || r.state?.status || "ok"), { duration: 6e3 });
+      loadPeers();
+    }));
+    document.querySelectorAll("[data-peer-edit]").forEach((b) => b.onclick = () => {
+      const p = (state.peers?.peers || []).find((x) => x.id === b.dataset.peerEdit);
+      if (p) openPeerDialog(p);
+    });
+    document.querySelectorAll("[data-peer-toggle]").forEach((b) => b.onclick = () => safe(async () => {
+      const p = (state.peers?.peers || []).find((x) => x.id === b.dataset.peerToggle);
+      if (!p) return;
+      await api("/api/peers/" + encodeURIComponent(p.id), { method: "PATCH", body: JSON.stringify({ enabled: !p.enabled }), local: true });
+      toast("Peer updated");
+      loadPeers();
+    }));
+    document.querySelectorAll("[data-peer-revoke]").forEach((b) => b.onclick = () => safe(async () => {
+      if (confirm("Revoke this peer?")) {
+        await api("/api/peers/" + encodeURIComponent(b.dataset.peerRevoke), { method: "DELETE", local: true });
+        if (state.selectedPeer === b.dataset.peerRevoke) {
+          state.selectedPeer = "local";
+          localStorage.setItem("nordrelayPeerTarget", "local");
+        }
+        toast("Peer revoked");
+        loadPeers();
+      }
+    }));
+  }
+  function openPeerDialog(p) {
+    adminDialog("Edit peer", '<label>Name<input id="dlgPeerName" value="' + attr(p.name || "") + '"></label><label>URL<input id="dlgPeerUrl" value="' + attr(p.url || "") + '"></label><label class="checkbox"><input id="dlgPeerEnabled" type="checkbox" ' + (p.enabled ? "checked" : "") + '> Enabled</label><label class="full-span">Scopes<input id="dlgPeerScopes" value="' + attr((p.scopes || []).join(", ")) + '"></label><label class="full-span">Allowed agents<input id="dlgPeerAgents" value="' + attr((p.allowedAgents || []).join(", ")) + '"></label><label class="full-span">Allowed workspace roots<input id="dlgPeerWorkspaces" value="' + attr((p.allowedWorkspaceRoots || []).join(", ")) + '"></label>', async () => {
+      await api("/api/peers/" + encodeURIComponent(p.id), { method: "PATCH", body: JSON.stringify({ name: val("dlgPeerName"), url: val("dlgPeerUrl"), enabled: document.getElementById("dlgPeerEnabled").checked, scopes: csvToList(val("dlgPeerScopes")), allowedAgents: csvToList(val("dlgPeerAgents")), allowedWorkspaceRoots: csvToList(val("dlgPeerWorkspaces")) }), local: true });
+      toast("Peer updated");
+      await loadPeers();
+    });
+  }
+  function openPeerInviteDialog() {
+    adminDialog("Create peer invite", '<label>Name<input id="dlgPeerInviteName" value="NordRelay peer"></label><label>Expires minutes<input id="dlgPeerInviteExpires" type="number" value="10" min="1"></label><label class="full-span">Scopes<input id="dlgPeerInviteScopes" value="inspect, sessions.read, sessions.write, prompt.send, prompt.abort, queue.read, queue.write, files.read, files.write, diagnostics.read, logs.read"></label><label class="full-span">Allowed agents<input id="dlgPeerInviteAgents" value="codex, pi, hermes, openclaw, claude-code"></label><label class="full-span">Allowed workspace roots<input id="dlgPeerInviteWorkspaces" placeholder="empty means all"></label>', async () => {
+      const r = await api("/api/peers/invite", { method: "POST", body: JSON.stringify({ name: val("dlgPeerInviteName"), expiresMinutes: Number(val("dlgPeerInviteExpires") || 10), scopes: csvToList(val("dlgPeerInviteScopes")), allowedAgents: csvToList(val("dlgPeerInviteAgents")), allowedWorkspaceRoots: csvToList(val("dlgPeerInviteWorkspaces")) }), local: true });
+      toast("Pairing code: " + r.code + "\\n" + r.command, { duration: 2e4 });
+      await loadPeers();
+    });
+  }
+  function openPeerAddDialog() {
+    adminDialog("Add peer", '<label>Peer URL<input id="dlgPeerAddUrl" placeholder="https://host:31979"></label><label>Pairing code<input id="dlgPeerAddCode"></label><label>Name<input id="dlgPeerAddName" placeholder="optional local label"></label><label>Public URL for this node<input id="dlgPeerAddPublicUrl" placeholder="optional"></label>', async () => {
+      const r = await api("/api/peers/pair", { method: "POST", body: JSON.stringify({ url: val("dlgPeerAddUrl"), code: val("dlgPeerAddCode"), name: val("dlgPeerAddName") || void 0, publicUrl: val("dlgPeerAddPublicUrl") || void 0 }), local: true });
+      toast("Added peer " + (r.peer?.name || ""));
+      await loadPeers();
+    });
+  }
+  document.getElementById("loadPeersBtn").onclick = () => loadPeers();
+  document.getElementById("createPeerInviteBtn").onclick = () => {
+    if (!can("peers.write")) {
+      toast("Permission required: peers.write");
+      return;
+    }
+    openPeerInviteDialog();
+  };
+  document.getElementById("addPeerBtn").onclick = () => {
+    if (!can("peers.write")) {
+      toast("Permission required: peers.write");
+      return;
+    }
+    openPeerAddDialog();
+  };
   async function loadAdapterHealth() {
     setLoading("adapterHealth", "Loading adapters...");
     const d = await api("/api/adapters/health");
@@ -2035,13 +2354,28 @@
     document.getElementById("diagnostics").innerHTML = diagnosticsHtml(data);
   }
   const exportDiagnosticsBundleBtn = document.getElementById("exportDiagnosticsBundleBtn");
-  if (exportDiagnosticsBundleBtn) exportDiagnosticsBundleBtn.onclick = () => {
+  if (exportDiagnosticsBundleBtn) exportDiagnosticsBundleBtn.onclick = () => safe(async () => {
     if (!can("diagnostics.read")) {
       toast("Permission required: diagnostics.read");
       return;
     }
-    window.open("/api/diagnostics/bundle", "_blank");
-  };
+    if (!state.selectedPeer || state.selectedPeer === "local") {
+      window.open("/api/diagnostics/bundle", "_blank");
+      return;
+    }
+    const bundle = await api("/api/diagnostics/bundle");
+    downloadBase64(bundle.name || "nordrelay-support-bundle.zip", bundle.dataBase64 || "", bundle.mimeType || "application/zip");
+    toast("Remote diagnostics bundle downloaded");
+  });
+  function downloadBase64(name, dataBase64, mimeType) {
+    const bytes = Uint8Array.from(atob(dataBase64), (c) => c.charCodeAt(0));
+    const blob = new Blob([bytes], { type: mimeType });
+    const a = document.createElement("a");
+    a.href = URL.createObjectURL(blob);
+    a.download = name;
+    a.click();
+    URL.revokeObjectURL(a.href);
+  }
   function diagnosticsHtml(d) {
     const h = d.health || {};
     const s = d.snapshot?.session || {};
@@ -2058,4 +2392,83 @@
     Promise.resolve().then(fn).catch((err) => toast(err.message || String(err)));
   }
   loadBootstrap().then(() => connectEvents()).catch((err) => toast(err.message));
+  const loadPeersBase = loadPeers;
+  loadPeers = async function() {
+    await loadPeersBase();
+    ensureGlobalPeerSessionsPanel();
+  };
+  function ensureGlobalPeerSessionsPanel() {
+    if (document.getElementById("globalPeerSessionsPanel")) return;
+    const anchor = document.getElementById("peersList");
+    if (!anchor) return;
+    anchor.insertAdjacentHTML("afterend", '<h2>Global sessions</h2><div id="globalPeerSessionsPanel" class="list"><div class="item"><div class="row"><input id="globalPeerSessionSearch" placeholder="Search sessions across peers"><button id="loadGlobalPeerSessionsBtn">Load global sessions</button></div><div id="globalPeerSessionsList"></div></div></div>');
+    document.getElementById("loadGlobalPeerSessionsBtn").onclick = () => safe(loadGlobalPeerSessions);
+  }
+  async function loadGlobalPeerSessions() {
+    const target = document.getElementById("globalPeerSessionsList");
+    target.innerHTML = loadingHtml("Loading global sessions...");
+    const q = document.getElementById("globalPeerSessionSearch").value || "";
+    const d = await api("/api/peers/global-sessions", { local: true, query: { query: q, agent: state.snapshot?.session?.agentId || void 0, limit: 50 } });
+    target.innerHTML = (d.targets || []).map((t) => '<div class="item"><strong>' + esc(t.peerName + " (" + t.peerId + ")") + ' <span class="adapter-status ' + (t.ok ? "enabled" : "disabled") + '">' + (t.ok ? "ok" : "error") + "</span></strong>" + (t.ok ? (t.data?.sessions || []).slice(0, 8).map((s) => "<small>" + esc(short(s.id, 48) + " | " + short(s.cwd || "", 80) + " | " + fmtDate(s.updatedAt)) + "</small>").join("") || "<small>No sessions.</small>" : '<small class="error">' + esc(t.error || "failed") + "</small>") + "</div>").join("") || '<div class="item">No peer sessions found.</div>';
+  }
+  function peerCard(p) {
+    const selected = state.selectedPeer === p.id ? ' <span class="chip">selected</span>' : "";
+    const health = p.remoteStatus || p.lastSeenAt ? "Health: " + (p.remoteStatus || "seen") + (p.lastLatencyMs !== void 0 ? " / " + p.lastLatencyMs + "ms" : "") + (p.remoteVersion ? " / v" + p.remoteVersion : "") : "Health: unchecked";
+    const aliases = Object.entries(p.workspaceAliases || {}).map(([a, w]) => a + "=" + w).join(", ");
+    return '<div class="item"><strong>' + esc(p.name) + ' <span class="adapter-status ' + (p.enabled ? "enabled" : "disabled") + '">' + (p.enabled ? "enabled" : "disabled") + "</span>" + selected + "</strong><small>" + esc("URL: " + (p.url || "-")) + "</small><small>" + esc("Node: " + p.nodeId + " / " + p.fingerprint) + "</small>" + (p.tlsFingerprint ? "<small>" + esc("TLS: " + p.tlsFingerprint) + "</small>" : "") + "<small>" + esc("Direction: " + p.direction + " / scopes " + (p.scopes || []).join(", ")) + "</small><small>" + esc("Agents: " + ((p.allowedAgents || []).join(", ") || "all")) + "</small><small>" + esc("Workspaces: " + ((p.allowedWorkspaceRoots || []).join(", ") || "all")) + "</small>" + (aliases ? "<small>" + esc("Aliases: " + aliases) + "</small>" : "") + "<small>" + esc(health) + "</small>" + (p.lastCheckedAt ? "<small>" + esc("Checked: " + fmtDate(p.lastCheckedAt)) + "</small>" : "") + (p.lastSeenAt ? "<small>" + esc("Last seen: " + fmtDate(p.lastSeenAt)) + "</small>" : "") + (p.lastError ? '<small class="error">' + esc("Last error: " + p.lastError) + "</small>" : "") + '<div class="row"><button data-peer-select="' + attr(p.id) + '">Use target</button><button class="secondary" data-peer-test="' + attr(p.id) + '">Test</button><button class="secondary" data-peer-edit="' + attr(p.id) + '"' + disabledAttr("peers.write") + '>Edit</button><button class="secondary" data-peer-toggle="' + attr(p.id) + '"' + disabledAttr("peers.write") + ">" + (p.enabled ? "Disable" : "Enable") + '</button><button class="danger" data-peer-revoke="' + attr(p.id) + '"' + disabledAttr("peers.write") + ">Revoke</button></div></div>";
+  }
+  function openPeerDialog(p) {
+    const aliases = Object.entries(p.workspaceAliases || {}).map(([a, w]) => a + "=" + w).join(", ");
+    adminDialog("Edit peer", '<label>Name<input id="dlgPeerName" value="' + attr(p.name || "") + '"></label><label>URL<input id="dlgPeerUrl" value="' + attr(p.url || "") + '"></label><label class="checkbox"><input id="dlgPeerEnabled" type="checkbox" ' + (p.enabled ? "checked" : "") + '> Enabled</label><label class="full-span">Scopes<input id="dlgPeerScopes" value="' + attr((p.scopes || []).join(", ")) + '"></label><label class="full-span">Allowed agents<input id="dlgPeerAgents" value="' + attr((p.allowedAgents || []).join(", ")) + '"></label><label class="full-span">Allowed workspace roots<input id="dlgPeerWorkspaces" value="' + attr((p.allowedWorkspaceRoots || []).join(", ")) + '"></label><label class="full-span">Workspace aliases<input id="dlgPeerAliases" placeholder="project=/srv/project, demo=/home/me/demo" value="' + attr(aliases) + '"></label>', async () => {
+      await api("/api/peers/" + encodeURIComponent(p.id), { method: "PATCH", body: JSON.stringify({ name: val("dlgPeerName"), url: val("dlgPeerUrl"), enabled: document.getElementById("dlgPeerEnabled").checked, scopes: csvToList(val("dlgPeerScopes")), allowedAgents: csvToList(val("dlgPeerAgents")), allowedWorkspaceRoots: csvToList(val("dlgPeerWorkspaces")), workspaceAliases: aliasMap(val("dlgPeerAliases")) }), local: true });
+      toast("Peer updated");
+      await loadPeers();
+    });
+  }
+  function openPeerInviteDialog() {
+    adminDialog("Create peer invite", '<label>Name<input id="dlgPeerInviteName" value="NordRelay peer"></label><label>Expires minutes<input id="dlgPeerInviteExpires" type="number" value="10" min="1" max="1440"></label><label class="full-span">Scopes<input id="dlgPeerInviteScopes" value="inspect, sessions.read, sessions.write, prompt.send, prompt.abort, queue.read, queue.write, files.read, files.write, diagnostics.read, logs.read"></label><label class="full-span">Allowed agents<input id="dlgPeerInviteAgents" value="codex, pi, hermes, openclaw, claude-code"></label><label class="full-span">Allowed workspace roots<input id="dlgPeerInviteWorkspaces" placeholder="empty means all"></label><label class="full-span">Workspace aliases<input id="dlgPeerInviteAliases" placeholder="project=/srv/project, demo=/home/me/demo"></label>', async () => {
+      const r = await api("/api/peers/invite", { method: "POST", body: JSON.stringify({ name: val("dlgPeerInviteName"), expiresMinutes: Number(val("dlgPeerInviteExpires") || 10), scopes: csvToList(val("dlgPeerInviteScopes")), allowedAgents: csvToList(val("dlgPeerInviteAgents")), allowedWorkspaceRoots: csvToList(val("dlgPeerInviteWorkspaces")), workspaceAliases: aliasMap(val("dlgPeerInviteAliases")) }), local: true });
+      toast("Pairing code: " + r.code + "\\n" + r.command, { duration: 2e4 });
+      await loadPeers();
+    });
+  }
+  function aliasMap(text) {
+    return Object.fromEntries((text || "").split(",").map((item) => item.split("=", 2).map((part) => part.trim())).filter(([a, w]) => a && w));
+  }
+  function bindPeerButtons() {
+    document.querySelectorAll("[data-peer-select]").forEach((b) => b.onclick = () => safe(async () => {
+      state.selectedPeer = b.dataset.peerSelect || "local";
+      localStorage.setItem("nordrelayPeerTarget", state.selectedPeer);
+      connectEvents();
+      await loadBootstrap();
+      toast("Peer target selected");
+    }));
+    document.querySelectorAll("[data-peer-test]").forEach((b) => b.onclick = () => safe(async () => {
+      const r = await api("/api/peers/" + encodeURIComponent(b.dataset.peerTest) + "/health", { local: true });
+      toast("Peer reachable: " + (r.data?.version ? "v" + r.data.version : "ok"), { duration: 6e3 });
+      loadPeers();
+    }));
+    document.querySelectorAll("[data-peer-edit]").forEach((b) => b.onclick = () => {
+      const p = (state.peers?.peers || []).find((x) => x.id === b.dataset.peerEdit);
+      if (p) openPeerDialog(p);
+    });
+    document.querySelectorAll("[data-peer-toggle]").forEach((b) => b.onclick = () => safe(async () => {
+      const p = (state.peers?.peers || []).find((x) => x.id === b.dataset.peerToggle);
+      if (!p) return;
+      await api("/api/peers/" + encodeURIComponent(p.id), { method: "PATCH", body: JSON.stringify({ enabled: !p.enabled }), local: true });
+      toast("Peer updated");
+      loadPeers();
+    }));
+    document.querySelectorAll("[data-peer-revoke]").forEach((b) => b.onclick = () => safe(async () => {
+      if (confirm("Revoke this peer?")) {
+        await api("/api/peers/" + encodeURIComponent(b.dataset.peerRevoke), { method: "DELETE", local: true });
+        if (state.selectedPeer === b.dataset.peerRevoke) {
+          state.selectedPeer = "local";
+          localStorage.setItem("nordrelayPeerTarget", "local");
+        }
+        toast("Peer revoked");
+        loadPeers();
+      }
+    }));
+  }
 })();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nordbyte/nordrelay",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Remote control plane for coding agents across messaging channels.",
   "type": "module",
   "author": "Ricardo",
@@ -61,11 +61,12 @@
     "webui:check": "tsc -p tsconfig.webui.json"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.2.140",
+    "@anthropic-ai/claude-agent-sdk": "^0.2.141",
     "@grammyjs/auto-retry": "^2.0.2",
     "@openai/codex-sdk": "^0.130.0",
     "discord.js": "^14.26.4",
     "grammy": "^1.41.1",
+    "selfsigned": "^3.0.1",
     "zod": "^4.4.3"
   },
   "devDependencies": {