@threadbase-sh/streamer 1.30.0 → 1.31.0

package/dist/cli.cjs

@@ -137480,7 +137480,7 @@ function isLocalRequest(remoteAddr) {
   const addr = remoteAddr ?? "";
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-var PUBLIC_PATHS = /* @__PURE__ */ new Set(["/healthz", "/ws"]);
+var PUBLIC_PATHS = /* @__PURE__ */ new Set(["/healthz"]);
 var LOCAL_ONLY_PATHS = /* @__PURE__ */ new Set(["/api/logs", "/api/logs/meta"]);
 var PUBLIC_POST_PATHS = /* @__PURE__ */ new Set(["/api/pair/exchange", "/api/__update"]);
 var PUBLIC_POST_PREFIXES = ["/internal/sessions/"];
@@ -137935,7 +137935,7 @@ function verifySignature(rawBody, signature, secret) {
   }
 }
 function isWithinSkew(timestampHeader, skewSeconds) {
-  if (!timestampHeader) return false;
+  if (!timestampHeader) return true;
   const t = Number(timestampHeader);
   if (!Number.isFinite(t)) return false;
   const now = Math.floor(Date.now() / 1e3);
@@ -138146,21 +138146,18 @@ var createSessionRoutes = (deps) => {
 };
 
 // src/api/routes/ws.routes.ts
-init_auth();
 var createWsRoutes = (deps, upgradeWebSocket) => {
   const app = new Hono2();
   app.get(
     "/ws",
-    upgradeWebSocket((c) => {
-      const key = c.req.query("key");
-      const preAuthed = typeof key === "string" && validateApiKey(key, deps.apiKey);
+    upgradeWebSocket(() => {
       let openWs = null;
       return {
         onOpen(_evt, ws2) {
           const raw2 = ws2.raw;
           if (!raw2) return;
           openWs = raw2;
-          deps.handleWsOpen(raw2, preAuthed);
+          deps.handleWsOpen(raw2);
         },
         onMessage(evt, _ws) {
           if (openWs) deps.handleWsMessage(openWs, evt.data);
@@ -140064,6 +140061,7 @@ function debounce(fn, waitMs) {
 
 // src/codex-pty-runner.ts
 var OUTPUT_BUFFER_MAX = 65536;
+var INPUT_HISTORY_MAX = 50;
 var PTY_COLS = 120;
 var PTY_ROWS = 40;
 var SCREEN_SCROLLBACK = 1e3;
@@ -140144,6 +140142,7 @@ var CodexPtyRunner = class {
   onPermissionChange;
   onLiveQuestion;
   onLiveQuestionGone;
+  onUserMessage;
   log;
   // Tracks sessions whose PTY has spawned but Codex hasn't yet reached its
   // "Ready" status bar — i.e. onReady hasn't fired.
@@ -140174,6 +140173,7 @@ var CodexPtyRunner = class {
     this.onPermissionChange = options.onPermissionChange;
     this.onLiveQuestion = options.onLiveQuestion;
     this.onLiveQuestionGone = options.onLiveQuestionGone;
+    this.onUserMessage = options.onUserMessage;
     this.log = options.logger ?? getLogger("codex-pty");
   }
   // Resume an existing Codex session. sessionId is the Codex-persisted
@@ -140217,7 +140217,8 @@ var CodexPtyRunner = class {
       lastOutput: "",
       process: proc,
       outputBuffer: Buffer.alloc(0),
-      screen: createScreen()
+      screen: createScreen(),
+      inputHistory: []
     };
     this.sessions.set(sessionId, session);
     this.pendingReady.add(sessionId);
@@ -140263,7 +140264,8 @@ var CodexPtyRunner = class {
       lastOutput: "",
       process: proc,
       outputBuffer: Buffer.alloc(0),
-      screen: createScreen()
+      screen: createScreen(),
+      inputHistory: []
     };
     this.sessions.set(sessionId, session);
     this.pendingReady.add(sessionId);
@@ -140381,6 +140383,7 @@ var CodexPtyRunner = class {
   // confirmed Codex accepts plain keystrokes), then submit \r after a short
   // delay so Codex's TUI gets an event-loop tick to process the input first.
   writeSubmit(sessionId, session, input, path2, promptCount) {
+    this.recordUserMessage(session, input);
     this.log.info(
       `[codex.input.write] ${sessionId.slice(0, 8)} promptCount=${promptCount} bytes=${input.length} digest=${digestBytes(input)}`,
       {
@@ -140510,6 +140513,19 @@ var CodexPtyRunner = class {
     }
     return lines.slice(-maxLines);
   }
+  getInputHistory(sessionId) {
+    return this.sessions.get(sessionId)?.inputHistory ?? [];
+  }
+  // Record a submitted user message as ground truth and fire onUserMessage.
+  // Called from writeSubmit (direct and flush paths) — never from sendKeys.
+  recordUserMessage(session, text) {
+    const ts2 = Date.now();
+    session.inputHistory.push({ text, ts: ts2 });
+    if (session.inputHistory.length > INPUT_HISTORY_MAX) {
+      session.inputHistory.shift();
+    }
+    this.onUserMessage?.(session.id, text, ts2);
+  }
   getSession(sessionId) {
     const session = this.sessions.get(sessionId);
     return session ? toPublicSession(session) : null;
@@ -140888,6 +140904,7 @@ function detectShellPrompt(lines) {
 
 // src/pty-manager.ts
 var OUTPUT_BUFFER_MAX2 = 65536;
+var INPUT_HISTORY_MAX2 = 50;
 var PTY_COLS2 = 120;
 var PTY_ROWS2 = 40;
 var SCREEN_SCROLLBACK2 = 1e3;
@@ -140946,6 +140963,7 @@ var PTYManager = class {
   onPermissionChange;
   onLiveQuestion;
   onLiveQuestionGone;
+  onUserMessage;
   // Per-session permission-gate state. True between an OSC 777 (gate open) and
   // the next prompt-ready without a fresh 777 (gate closed). Prevents
   // re-broadcasting open/close on every chunk.
@@ -140991,6 +141009,7 @@ var PTYManager = class {
     this.onPermissionChange = options.onPermissionChange;
     this.onLiveQuestion = options.onLiveQuestion;
     this.onLiveQuestionGone = options.onLiveQuestionGone;
+    this.onUserMessage = options.onUserMessage;
     this.log = options.logger ?? getLogger("pty");
   }
   // Resume an existing Claude conversation. sessionId is the JSONL UUID.
@@ -141053,7 +141072,8 @@ var PTYManager = class {
       lastOutput: "",
       process: proc,
       outputBuffer: Buffer.alloc(0),
-      screen: createScreen2()
+      screen: createScreen2(),
+      inputHistory: []
     };
     this.sessions.set(sessionId, session);
     this.pendingReady.add(sessionId);
@@ -141104,7 +141124,8 @@ var PTYManager = class {
       lastOutput: "",
       process: proc,
       outputBuffer: Buffer.alloc(0),
-      screen: createScreen2()
+      screen: createScreen2(),
+      inputHistory: []
     };
     this.sessions.set(sessionId, session);
     this.pendingReady.add(sessionId);
@@ -141184,6 +141205,7 @@ var PTYManager = class {
   // step gives the TUI as many extra ticks as it needs, capped at
   // SUBMIT_MAX_WAIT_MS so a silent/wedged PTY still gets its \r eventually.
   writeSubmit(sessionId, session, input, path2, promptCount) {
+    this.recordUserMessage(session, input);
     const pasteBytes = buildPasteBytes(input);
     this.log.info(
       `[pty.input.write] ${sessionId.slice(0, 8)} promptCount=${promptCount} bytes=${pasteBytes.length} digest=${digestBytes2(pasteBytes)}`,
@@ -141314,6 +141336,20 @@ var PTYManager = class {
     }
     return lines.slice(-maxLines);
   }
+  getInputHistory(sessionId) {
+    return this.sessions.get(sessionId)?.inputHistory ?? [];
+  }
+  // Record a submitted user message as ground truth and fire onUserMessage.
+  // Called from writeSubmit (both direct and flush paths) — never from
+  // sendKeys, so raw keystrokes aren't logged as messages.
+  recordUserMessage(session, text) {
+    const ts2 = Date.now();
+    session.inputHistory.push({ text, ts: ts2 });
+    if (session.inputHistory.length > INPUT_HISTORY_MAX2) {
+      session.inputHistory.shift();
+    }
+    this.onUserMessage?.(session.id, text, ts2);
+  }
   getSession(sessionId) {
     const session = this.sessions.get(sessionId);
     return session ? toPublicSession2(session) : null;
@@ -141610,6 +141646,9 @@ var LiveSessionManager = class {
   getOutputLines(sessionId, maxLines) {
     return this.runnerFor(sessionId).getOutputLines(sessionId, maxLines);
   }
+  getInputHistory(sessionId) {
+    return this.runnerFor(sessionId).getInputHistory(sessionId);
+  }
   getSession(sessionId) {
     for (const runner of this.runners.values()) {
       const session = runner.getSession(sessionId);
@@ -143833,13 +143872,6 @@ function deriveProjectChatTitle(input) {
   return `Untitled \xB7 ${input.id.slice(0, 8)}`;
 }
 
-// src/services/questions/permissionAnswerKeys.ts
-var ANSWER_KEYS_ALLOWLIST = /^(?:\r|[yn]\r|\x03|\d+\r)$/;
-function sanitizeAnswerKeys(keys) {
-  if (keys === void 0) return void 0;
-  return ANSWER_KEYS_ALLOWLIST.test(keys) ? keys : void 0;
-}
-
 // src/services/questions/detectAskUserQuestion.ts
 function normalizeContent2(raw2) {
   if (Array.isArray(raw2)) return raw2;
@@ -144682,8 +144714,6 @@ var WSHub = class {
 var BROWSE_SYSTEM_PROMPT = (browseRoot) => `You are working within the project boundary: ${browseRoot}. Do not read, write, or execute commands that access files or directories outside this boundary.`;
 var DEFAULT_SYSTEM_PROMPT = "When presenting options or choices to the user, limit the options to at most 3.";
 var DEFAULT_PTY_GRACE_PERIOD_MS = 27e4;
-var DEFAULT_WS_AUTH_TIMEOUT_MS = 5e3;
-var WS_CLOSE_UNAUTHORIZED = 4401;
 var REFRESH_TTL_MS = 2e3;
 var START_READY_TIMEOUT_MS = 1e4;
 function parseIncludeAgentsEnv(raw2) {
@@ -144774,14 +144804,6 @@ var StreamerServer = class {
   clientIdToWs = /* @__PURE__ */ new Map();
   // Reverse map for cleanup on close
   wsToClientId = /* @__PURE__ */ new Map();
-  // M1 — WS auth. Sockets that have authenticated (via ?key= at upgrade OR a
-  // { type: "auth", token } first message). Only authed sockets are added to
-  // the hub and receive broadcasts.
-  // Plan: https://github.com/RonenMars/threadbase-streamer/blob/a251353bfa417bd48ce3f15086bc336a2c622629/docs/plans/2026-06-24-security-hardening.md#L40
-  wsAuthed = /* @__PURE__ */ new Set();
-  // Keyless sockets awaiting their first-message auth handshake → close timer.
-  wsAuthPending = /* @__PURE__ */ new Map();
-  wsAuthTimeoutMs;
   cache = null;
   projectsRepo = null;
   conversationsRepo = null;
@@ -144821,7 +144843,6 @@ var StreamerServer = class {
     this.scanProfiles = config2.scanProfiles;
     this.codexRoots = config2.codexRoots ?? [(0, import_path23.join)((0, import_os11.homedir)(), ".codex", "sessions")];
     this.ptyGracePeriodMs = config2.ptyGracePeriodMs ?? DEFAULT_PTY_GRACE_PERIOD_MS;
-    this.wsAuthTimeoutMs = config2.wsAuthTimeoutMs ?? DEFAULT_WS_AUTH_TIMEOUT_MS;
     this.defaultSystemPrompt = config2.defaultSystemPrompt ?? DEFAULT_SYSTEM_PROMPT;
     this.defaultPermissionMode = config2.defaultPermissionMode ?? loadDefaultPermissionMode() ?? "acceptEdits";
     this.cacheDir = config2.cacheDir ?? loadCacheDir() ?? (0, import_path23.join)((0, import_os11.homedir)(), ".threadbase", "cache");
@@ -144950,6 +144971,9 @@ var StreamerServer = class {
       onOutput: (sessionId, data) => {
         this.wsHub.broadcast({ type: "terminal_output", sessionId, data });
       },
+      onUserMessage: (sessionId, text, ts2) => {
+        this.wsHub.broadcast({ type: "user_message", sessionId, text, ts: ts2 });
+      },
       onPermissionChange: (sessionId, gate) => {
         this.handlePermissionChange(sessionId, gate);
       },
@@ -145079,39 +145103,17 @@ var StreamerServer = class {
       handlePairExchange: (req, res) => this.handlePairExchange(req, res),
       handleBrowse: (url2, res) => this.handleBrowse(url2, res),
       handleMkdir: (req, res) => this.handleMkdir(req, res),
-      handleWsOpen: (ws2, preAuthed) => {
-        if (preAuthed) {
-          this.completeWsAuth(ws2);
-          return;
+      handleWsOpen: (ws2) => {
+        this.wsHub.addClient(ws2);
+        const sessions = this.sessionStore.list(this.ptyAttachedIds());
+        ws2.send(JSON.stringify({ type: "session_list", sessions }));
+        if (this.cacheReady) {
+          ws2.send(JSON.stringify({ type: "cache_ready" }));
         }
-        const timer = setTimeout(() => {
-          this.wsAuthPending.delete(ws2);
-          try {
-            ws2.close(WS_CLOSE_UNAUTHORIZED, "auth timeout");
-          } catch {
-          }
-        }, this.wsAuthTimeoutMs);
-        this.wsAuthPending.set(ws2, timer);
       },
       handleWsMessage: async (ws2, raw2) => {
         try {
           const msg = JSON.parse(String(raw2));
-          if (!this.wsAuthed.has(ws2)) {
-            if (msg.type === "auth" && typeof msg.token === "string") {
-              const t = this.wsAuthPending.get(ws2);
-              if (t) clearTimeout(t);
-              this.wsAuthPending.delete(ws2);
-              if (validateApiKey(msg.token, this.apiKey)) {
-                this.completeWsAuth(ws2);
-              } else {
-                try {
-                  ws2.close(WS_CLOSE_UNAUTHORIZED, "unauthorized");
-                } catch {
-                }
-              }
-            }
-            return;
-          }
           if (msg.type === "register" && typeof msg.clientId === "string") {
             const oldClientId = this.wsToClientId.get(ws2);
             if (oldClientId) this.clientIdToWs.delete(oldClientId);
@@ -145122,7 +145124,15 @@ var StreamerServer = class {
             this.addSessionSubscriber(msg.sessionId, ws2);
             if (this.ptyManager.hasSession(msg.sessionId)) {
               const lines = await this.ptyManager.getOutputLines(msg.sessionId, 200);
-              ws2.send(JSON.stringify({ type: "terminal_replay", sessionId: msg.sessionId, lines }));
+              const userMessages = this.ptyManager.getInputHistory(msg.sessionId);
+              ws2.send(
+                JSON.stringify({
+                  type: "terminal_replay",
+                  sessionId: msg.sessionId,
+                  lines,
+                  userMessages
+                })
+              );
             }
             const pendingGate = this.pendingPermission.get(msg.sessionId);
             if (pendingGate) {
@@ -145158,20 +145168,12 @@ var StreamerServer = class {
             }
           }
           if (msg.type === "hold_session" && typeof msg.sessionId === "string") {
-            if (this.sessionSubscribers.get(msg.sessionId)?.has(ws2)) {
-              this.startGraceTimer(msg.sessionId, 0);
-            }
+            this.startGraceTimer(msg.sessionId, 0);
           }
         } catch {
         }
       },
       handleWsClose: (ws2) => {
-        const pendingTimer = this.wsAuthPending.get(ws2);
-        if (pendingTimer) {
-          clearTimeout(pendingTimer);
-          this.wsAuthPending.delete(ws2);
-        }
-        this.wsAuthed.delete(ws2);
         const clientId = this.wsToClientId.get(ws2);
         if (clientId) {
           this.clientIdToWs.delete(clientId);
@@ -145241,20 +145243,6 @@ var StreamerServer = class {
       this.wsHub.broadcast(payload);
     }
   }
-  // M1: finalize a WebSocket auth (via ?key= at upgrade or a first-message
-  // handshake) — register it with the hub and send the initial snapshot. Only
-  // authed sockets reach this, so no unauthenticated client ever receives a
-  // broadcast.
-  // Plan: https://github.com/RonenMars/threadbase-streamer/blob/a251353bfa417bd48ce3f15086bc336a2c622629/docs/plans/2026-06-24-security-hardening.md#L40
-  completeWsAuth(ws2) {
-    this.wsAuthed.add(ws2);
-    this.wsHub.addClient(ws2);
-    const sessions = this.sessionStore.list(this.ptyAttachedIds());
-    ws2.send(JSON.stringify({ type: "session_list", sessions }));
-    if (this.cacheReady) {
-      ws2.send(JSON.stringify({ type: "cache_ready" }));
-    }
-  }
   addSessionSubscriber(sessionId, ws2) {
     let subs = this.sessionSubscribers.get(sessionId);
     if (!subs) {
@@ -145541,9 +145529,6 @@ var StreamerServer = class {
     this.ptyManager.dispose();
     this.fileWatcher.dispose();
     this.wsHub.dispose();
-    for (const timer of this.wsAuthPending.values()) clearTimeout(timer);
-    this.wsAuthPending.clear();
-    this.wsAuthed.clear();
     this.pairTokens.dispose();
     if (this.dbPool) {
       await this.dbPool.end();
@@ -146670,10 +146655,6 @@ var StreamerServer = class {
       return;
     }
     this.pendingPermission.set(sessionId, gate);
-    const safeOptions = gate.options.map((o) => {
-      const answerKeys = sanitizeAnswerKeys(o.answerKeys);
-      return answerKeys === void 0 ? { index: o.index, label: o.label } : { ...o, answerKeys };
-    });
     const subscriberCount = this.sessionSubscribers.get(sessionId)?.size ?? 0;
     this.log.info(
       `[ws.broadcast_permission] ${sessionId.slice(0, 8)} subscribers=${subscriberCount}`,
@@ -146684,7 +146665,7 @@ var StreamerServer = class {
       sessionId,
       ...gate.prompt ? { prompt: gate.prompt } : {},
       ...gate.detail ? { detail: gate.detail } : {},
-      options: safeOptions,
+      options: gate.options,
       ...gate.cursor !== void 0 ? { cursor: gate.cursor } : {}
     });
   }
@@ -147782,8 +147763,11 @@ var import_node_path13 = require("path");
 function stampVersionTxt(destDir, version2) {
   const distDir = (0, import_node_path13.join)(destDir, "dist");
   (0, import_node_fs10.mkdirSync)(distDir, { recursive: true });
-  (0, import_node_fs10.writeFileSync)((0, import_node_path13.join)(distDir, "version.txt"), `${version2}+update
-`);
+  (0, import_node_fs10.writeFileSync)((0, import_node_path13.join)(distDir, "version.txt"), versionStamp(version2));
+}
+function versionStamp(version2) {
+  return `${version2}+update
+`;
 }
 
 // src/updater/swap.ts
@@ -147805,6 +147789,7 @@ function swapCurrent(version2) {
     }
     (0, import_node_fs11.renameSync)(tmp, CURRENT_SYMLINK);
     (0, import_node_fs11.copyFileSync)((0, import_node_path14.join)(CURRENT_SYMLINK, "dist", "cli.cjs"), (0, import_node_path14.join)(THREADBASE_ROOT, "cli.js"));
+    publishVersionTxt(target, version2);
     return;
   }
   const tmpLink = `${CURRENT_SYMLINK}.new`;
@@ -147818,6 +147803,15 @@ function swapCurrent(version2) {
   if ((0, import_node_fs11.existsSync)(tmpCliJs) || lstatSafeIsSymlink(tmpCliJs)) (0, import_node_fs11.unlinkSync)(tmpCliJs);
   (0, import_node_fs11.symlinkSync)((0, import_node_path14.join)(target, "dist", "cli.cjs"), tmpCliJs);
   (0, import_node_fs11.renameSync)(tmpCliJs, cliJs);
+  publishVersionTxt(target, version2);
+}
+function publishVersionTxt(target, version2) {
+  const dest = (0, import_node_path14.join)(THREADBASE_ROOT, "version.txt");
+  try {
+    (0, import_node_fs11.copyFileSync)((0, import_node_path14.join)(target, "dist", "version.txt"), dest);
+  } catch {
+    (0, import_node_fs11.writeFileSync)(dest, versionStamp(version2));
+  }
 }
 function lstatSafeIsSymlink(path2) {
   try {