@threadbase-sh/streamer 1.47.0 → 1.47.2

package/README.md

@@ -43,7 +43,9 @@ npm and Homebrew installs can auto-update: [docs/guides/auto-update.md](docs/gui
 
 ## Remote Access
 
-The server only binds to `127.0.0.1:8766` by default. To let the mobile app reach it from outside your LAN, expose it via a tunnel — the fastest is a Cloudflare quick-tunnel (no account needed):
+The server listens on port 8766 on all interfaces, so devices on the same LAN can already reach it. To let the mobile app reach it from *outside* your LAN, expose it via a tunnel — the fastest is a Cloudflare quick-tunnel (no account needed):
+
+> **Before you do this, read [Security](#security--read-this-before-exposing-the-server).** A tunnel makes the server reachable from the public internet, and the API key is the only thing between a stranger and a shell on this machine.
 
 ```bash
 bash scripts/remote-access/cloudflare.sh      # macOS/Linux/WSL/Git Bash
@@ -64,9 +66,47 @@ npm run migrate           # apply SQLite migrations
 npm run db:validate       # check for missing/duplicate/orphaned project_id data
 ```
 
+## Security — read this before exposing the server
+
+**The API key is equivalent to a shell on this machine.** The streamer exists to start Claude Code sessions and type into them, so anyone holding the key can run commands as your user, in any project the server can reach. Treat it like an SSH private key, not like a web session token.
+
+The key lives at `~/.threadbase/server.yaml` as plaintext (`chmod 0600`), which is the same posture as `~/.aws/credentials` or `~/.npmrc`. Rotate it with `POST /api/auth/rotate` if it leaks; re-pair your devices afterwards.
+
+**The server listens on all network interfaces**, not just loopback — `httpServer.listen(port)` is called without a host, which is Node's listen-everywhere default, and there is currently no flag to narrow it. So every device on your LAN can already reach port 8766, and the API key is the only thing stopping them. On a home network that is usually fine; on café Wi-Fi, a co-working space, or a corporate VLAN it is not.
+
+**A tunnel extends that to the entire internet.** From that moment the key is the only thing between a stranger and your filesystem.
+
+If you need it strictly local today, bind it yourself at the firewall or run it inside a network namespace — the server will not do it for you. Tracked as [#517](https://github.com/RonenMars/threadbase-streamer/issues/517).
+
+### There is no spend limit
+
+Nothing in this server caps what a session costs. There is no per-session, per-day, or total ceiling, and no way to configure one — a runaway agent bills your provider account until you stop it. (`--max-budget-usd` is not a workaround: it only applies to `claude --print`, which this server never uses, so it was silently inert and has been removed.)
+
+The practical bound is that a session waits for input between turns. Auto-resume and bypass modes both weaken that bound — see below.
+
+### Permission modes decide how much a session can do unattended
+
+Sessions spawn with `--permission-mode`, default `acceptEdits`: file edits are auto-approved, shell commands still prompt. The first-run prompt offers only `acceptEdits` and `manual`, so the unattended modes are never something you pick by accident.
+
+`bypassPermissions` and `dontAsk` are available through `--default-permission-mode` and `PUT /api/config/claude-flags`, and they remove the confirmation step entirely. **A session in either mode is unattended arbitrary code execution**: a leaked key no longer stops at a human-in-the-loop prompt. `--add-dir` compounds this by widening filesystem scope beyond the project.
+
+If you enable one, you are accepting that the auth boundary is the *only* remaining control. Two guardrails exist and neither is a substitute for that judgement: `PUT /api/config/claude-flags` is refused with 403 while `--local-no-auth` is active, and every flag change is logged with its old and new value.
+
+### Auto-resume starts agents without you
+
+`auto_resume_on_boot` in `server.yaml` re-starts sessions that a previous run was interrupted mid-flight. It defaults to `false` and is never enabled implicitly — it is the one setting that lets the streamer start an agent nobody asked for in that moment, and combined with a bypass permission mode that is unattended code execution after a reboot.
+
+Leave it off unless you have a reason, and do not combine it with a bypass mode unless you fully trust everything that can reach the API.
+
+### Reporting a vulnerability
+
+See [SECURITY.md](https://github.com/RonenMars/threadbase/blob/main/SECURITY.md) in the umbrella repo.
+
 ## Persistence
 
-Conversation metadata is cached in SQLite at `~/.threadbase/cache/cache.db`, created and migrated automatically — no setup needed. Sessions are in-memory: a restart drops live PTYs, but history is on disk and any session can be resumed with `POST /api/sessions/resume`.
+Conversation metadata is cached in SQLite at `~/.threadbase/cache/cache.db`, created and migrated automatically — no setup needed.
+
+Live PTYs do not survive a restart, but sessions are not lost: the managed-session registry (`~/.threadbase/runtime.db`) brings interrupted sessions back in `GET /api/sessions` as resumable stubs, and any conversation can be resumed with `POST /api/sessions/resume`. History itself is always on disk, written by the provider.
 
 PostgreSQL is optional and only stores upload records today. Enable it by setting `THREADBASE_DATABASE_URL`; migrations run automatically.
 

package/dist/cli.cjs

@@ -3604,7 +3604,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package();
     var { EventEmitter: EventEmitter5 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join30 } = require("path");
+    var { join: join29 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -3655,7 +3655,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join30(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join29(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         name: opts.workerOpts?.name || "thread-stream",
@@ -4123,7 +4123,7 @@ var require_transport = __commonJS({
     var { createRequire } = require("module");
     var { existsSync: existsSync16 } = require("fs");
     var getCallers = require_caller();
-    var { join: join30, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
+    var { join: join29, isAbsolute: isAbsolute2, sep: sep3 } = require("path");
     var { fileURLToPath: fileURLToPath3 } = require("url");
     var sleep = require_atomic_sleep();
     var onExit = require_on_exit_leak_free();
@@ -4276,7 +4276,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join30(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join29(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -4294,7 +4294,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline2) {
-        target = bundlerOverrides["pino-worker"] || join30(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join29(__dirname, "worker.js");
         options.pipelines = [pipeline2.map((dest) => {
           return {
             ...dest,
@@ -4317,7 +4317,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join30(__dirname, "..", "file.js");
+          return join29(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -5298,7 +5298,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join30 = ",";
+            let join29 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -5312,7 +5312,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join30 = `,
+                join29 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -5320,13 +5320,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join30;
+                res += join29;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join30}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join29}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -5347,7 +5347,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join30 = `,
+              join29 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -5361,13 +5361,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join30;
+                separator = join29;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join30;
+              separator = join29;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -5408,7 +5408,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join30 = ",";
+            let join29 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -5421,7 +5421,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join30 = `,
+                join29 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -5429,13 +5429,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join30;
+                res += join29;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join30}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join29}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -5448,7 +5448,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join30 = `,
+              join29 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -5457,7 +5457,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join30;
+                separator = join29;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -5515,20 +5515,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join31 = `,
+              const join30 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join31;
+                res2 += join30;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join31}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join30}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -5544,16 +5544,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join30 = `,
+            const join29 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join30, maximumBreadth);
+              res += stringifyTypedArray(value, join29, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join30;
+              separator = join29;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -5564,13 +5564,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join30;
+                separator = join29;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join30;
+              separator = join29;
             }
             if (separator !== "") {
               res = `
@@ -28983,6 +28983,10 @@ function markerPath() {
 function prefsPath() {
   return (0, import_node_path3.join)(installDir(), "dev-prefs.json");
 }
+function logPaths() {
+  const dir = (0, import_node_path3.join)(installDir(), "logs");
+  return { stdout: (0, import_node_path3.join)(dir, "stdout.log"), stderr: (0, import_node_path3.join)(dir, "stderr.log") };
+}
 var import_node_os2, import_node_path3, LAUNCHD_LABEL, TASK_NAME;
 var init_constants = __esm({
   "src/lifecycle/constants.ts"() {
@@ -126967,8 +126971,7 @@ function darwinPlistPath() {
   return `${process.env.HOME}/Library/LaunchAgents/${resolveLoadedLabel()}.plist`;
 }
 function getLogPaths() {
-  const dir = (0, import_node_path25.join)(installDir(), "logs");
-  return { stdout: (0, import_node_path25.join)(dir, "stdout.log"), stderr: (0, import_node_path25.join)(dir, "stderr.log") };
+  return logPaths();
 }
 function getAgentPid() {
   try {
@@ -126988,12 +126991,11 @@ function getAgentPid() {
     return null;
   }
 }
-var import_node_child_process6, import_node_path25, BREW_LAUNCHD_LABEL2;
+var import_node_child_process6, BREW_LAUNCHD_LABEL2;
 var init_launchd = __esm({
   "src/lifecycle/launchd.ts"() {
     "use strict";
     import_node_child_process6 = require("child_process");
-    import_node_path25 = require("path");
     init_constants();
     BREW_LAUNCHD_LABEL2 = "homebrew.mxcl.tb-streamer";
   }
@@ -127032,7 +127034,7 @@ function readMarker() {
 }
 function writeMarker(marker) {
   MarkerSchema.parse(marker);
-  (0, import_node_fs22.mkdirSync)((0, import_node_path26.dirname)(markerPath()), { recursive: true });
+  (0, import_node_fs22.mkdirSync)((0, import_node_path25.dirname)(markerPath()), { recursive: true });
   const tmp = `${markerPath()}.tmp`;
   (0, import_node_fs22.writeFileSync)(tmp, `${JSON.stringify(marker, null, 2)}
 `, { mode: 384 });
@@ -127041,12 +127043,12 @@ function writeMarker(marker) {
 function clearMarker() {
   if ((0, import_node_fs22.existsSync)(markerPath())) (0, import_node_fs22.rmSync)(markerPath());
 }
-var import_node_fs22, import_node_path26, log8;
+var import_node_fs22, import_node_path25, log8;
 var init_marker = __esm({
   "src/lifecycle/marker.ts"() {
     "use strict";
     import_node_fs22 = require("fs");
-    import_node_path26 = require("path");
+    import_node_path25 = require("path");
     init_logger();
     init_constants();
     init_marker_schema();
@@ -127096,9 +127098,7 @@ function kickstartAgent2() {
   ps2(`Start-ScheduledTask -TaskName '${TASK_NAME}' -ErrorAction Stop`);
 }
 function getLogPaths2() {
-  throw new Error(
-    "prod logs is not yet wired on Windows \u2014 launch.cmd does not currently redirect stdout/stderr to a file. Track the fix in docs/troubleshooting.md."
-  );
+  return logPaths();
 }
 function getAgentPid2() {
   try {
@@ -127188,7 +127188,7 @@ __export(log_cap_exports, {
   LOG_CAP_BYTES: () => LOG_CAP_BYTES,
   truncateOversizedLogs: () => truncateOversizedLogs
 });
-function truncateOversizedLogs(maxBytes = LOG_CAP_BYTES, paths = Object.values(getLogPaths())) {
+function truncateOversizedLogs(maxBytes = LOG_CAP_BYTES, paths = Object.values(logPaths())) {
   const truncated = [];
   for (const file2 of paths) {
     try {
@@ -127205,7 +127205,7 @@ var init_log_cap = __esm({
   "src/lifecycle/log-cap.ts"() {
     "use strict";
     import_node_fs24 = require("fs");
-    init_launchd();
+    init_constants();
     LOG_CAP_BYTES = 32 * 1024 * 1024;
   }
 });
@@ -127300,7 +127300,7 @@ function readPrefs() {
 }
 function savePrefs(p2) {
   const path2 = prefsPath();
-  (0, import_node_fs25.mkdirSync)((0, import_node_path27.dirname)(path2), { recursive: true });
+  (0, import_node_fs25.mkdirSync)((0, import_node_path26.dirname)(path2), { recursive: true });
   const tmp = `${path2}.tmp`;
   (0, import_node_fs25.writeFileSync)(tmp, `${JSON.stringify(p2, null, 2)}
 `, { mode: 384 });
@@ -127327,12 +127327,12 @@ function forgetAll() {
   const path2 = prefsPath();
   if ((0, import_node_fs25.existsSync)(path2)) (0, import_node_fs25.rmSync)(path2);
 }
-var import_node_fs25, import_node_path27, log10, PrefsSchema;
+var import_node_fs25, import_node_path26, log10, PrefsSchema;
 var init_prefs = __esm({
   "src/lifecycle/prefs.ts"() {
     "use strict";
     import_node_fs25 = require("fs");
-    import_node_path27 = require("path");
+    import_node_path26 = require("path");
     init_zod();
     init_logger();
     init_constants();
@@ -142973,6 +142973,7 @@ init_providers();
 
 // src/services/providers/providerHealth.ts
 var import_child_process2 = require("child_process");
+init_platform();
 init_providers();
 
 // src/services/providers/capabilities.ts
@@ -143013,11 +143014,18 @@ function parseVersionOutput(output) {
   return match2 ? match2[0] : null;
 }
 function runVersion(exe) {
+  const viaShell = isWindows2 && /\.(?:cmd|bat)$/i.test(exe);
+  const file2 = viaShell ? `"${exe}"` : exe;
   return new Promise((resolve4) => {
-    (0, import_child_process2.execFile)(exe, ["--version"], { timeout: VERSION_TIMEOUT_MS }, (err, stdout2, stderr) => {
-      if (err && !stdout2 && !stderr) return resolve4(null);
-      resolve4(parseVersionOutput(`${stdout2}${stderr}`));
-    });
+    (0, import_child_process2.execFile)(
+      file2,
+      ["--version"],
+      { timeout: VERSION_TIMEOUT_MS, shell: viaShell, windowsHide: true },
+      (err, stdout2, stderr) => {
+        if (err && !stdout2 && !stderr) return resolve4(null);
+        resolve4(parseVersionOutput(`${stdout2}${stderr}`));
+      }
+    );
   });
 }
 function compareToVerified(version2, verified) {
@@ -143080,7 +143088,12 @@ async function providerHealth(name, resolveExe, detect = runVersion) {
       ]
     };
   }
-  const version2 = await detect(exe);
+  let version2 = null;
+  try {
+    version2 = await detect(exe);
+  } catch {
+    version2 = null;
+  }
   const warning = compareToVerified(version2, verifiedAgainst);
   return {
     name,
@@ -156914,6 +156927,9 @@ async function runProdDoctor(opts, deps = {}) {
   }
   return { findings, repairs, ...ptyHost ? { ptyHost } : {} };
 }
+function toPowerShellLiteral(value) {
+  return `'${value.replace(/'/g, "''")}'`;
+}
 var defaultSpawnTail = ({ files, lines, follow }) => {
   const existing = files.filter((f2) => (0, import_node_fs23.existsSync)(f2));
   if (existing.length === 0) {
@@ -156922,11 +156938,18 @@ var defaultSpawnTail = ({ files, lines, follow }) => {
       message: `no log files found at: ${files.join(", ")}. The streamer may not have started yet, or the deploy uses a different log layout.`
     });
   }
-  const args = ["-n", String(lines)];
-  if (follow) args.push("-F");
-  args.push(...existing);
+  const isWindows3 = process.platform === "win32";
+  const args = isWindows3 ? [
+    "-NoLogo",
+    "-NoProfile",
+    "-NonInteractive",
+    "-Command",
+    `Get-Content -LiteralPath @(${existing.map(toPowerShellLiteral).join(", ")}) -Tail ${lines}${follow ? " -Wait" : ""}`
+  ] : ["-n", String(lines), ...follow ? ["-F"] : [], ...existing];
   return new Promise((resolve4) => {
-    const child = (0, import_node_child_process8.spawn)("tail", args, { stdio: ["ignore", "inherit", "inherit"] });
+    const child = (0, import_node_child_process8.spawn)(isWindows3 ? "powershell.exe" : "tail", args, {
+      stdio: ["ignore", "inherit", "inherit"]
+    });
     child.on("error", (err) => resolve4({ ok: false, message: `tail failed: ${err.message}` }));
     child.on("exit", (code) => resolve4({ ok: code === 0 }));
   });
@@ -157313,8 +157336,8 @@ program2.command("cache").description("Manage the local SQLite conversation cach
     `${process.env.HOME}/.threadbase/cache`
   ).action((opts) => {
     const { rmSync: rmSync6, existsSync: existsSync16 } = require("fs");
-    const { join: join30 } = require("path");
-    const dbPath = join30(opts.cacheDir, "cache.db");
+    const { join: join29 } = require("path");
+    const dbPath = join29(opts.cacheDir, "cache.db");
     for (const suffix of ["", "-shm", "-wal"]) {
       const f2 = dbPath + suffix;
       if (existsSync16(f2)) {