@winding-labs/glow 0.1.12 → 0.1.13

package/bin/glow.mjs

@@ -156,6 +156,12 @@ async function setup(o) {
   console.log(`Found: ${agents.map((a) => AGENTS[a].label).join(', ')}`);
 
   let cfg = readConfig();
+  // What this computer chose itself outlives a new pairing with the same Glow: the phone it trusts (so a pairing Glow
+  // forces with a 401 can't swap it; only `glow phone trust` at this terminal can), the repos it ignores, and its
+  // message and recipe choices. --fresh starts from nothing.
+  const kept = cfg && !o.fresh && apiBase(cfg.api) === apiBase(o.api)
+    ? Object.fromEntries(['phone', 'ignored', 'messages', 'recipes'].filter((k) => cfg[k] !== undefined).map((k) => [k, cfg[k]]))
+    : {};
   if (cfg && (o.fresh || apiBase(cfg.api) !== apiBase(o.api))) {
     await api(cfg, 'DELETE', '/api/v1/agent/computer', undefined, 5_000);
     cfg = null;
@@ -175,7 +181,7 @@ async function setup(o) {
 
   if (!cfg) {
     const paired = await pair(o, agents);
-    cfg = { api: apiBase(o.api), ...(o.dev ? { dev: true } : {}), key: paired.key, computer: paired.computer, workspace: paired.workspace, repos: paired.repos, repos_at: Date.now(), agents, version: VERSION };
+    cfg = { ...kept, api: apiBase(o.api), ...(o.dev ? { dev: true } : {}), key: paired.key, computer: paired.computer, workspace: paired.workspace, repos: paired.repos, repos_at: Date.now(), agents, version: VERSION };
     writeConfig(cfg);
     info = { computer: { ...paired.computer, paused: false }, workspace: paired.workspace, repos: paired.repos };
     console.log('');

package/lib/core.mjs

@@ -17,7 +17,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 
-export const VERSION = '0.1.12';
+export const VERSION = '0.1.13';
 export const DEFAULT_API = 'https://app.meetglow.ai';
 export const dir = () => path.join(os.homedir(), '.glow');
 export const configPath = () => path.join(dir(), 'config.json');
@@ -181,15 +181,18 @@ const KEY_SHAPES = [
   /\beyJ[0-9A-Za-z_-]{8,}\.[0-9A-Za-z_-]{8,}\.[0-9A-Za-z_-]{8,}/g,
   /\bglowc?_[0-9A-Za-z_-]{40,}/g,
 ];
-const LABELLED = /(\b(?:api[_ -]?key|secret|token|password|passwd|pwd|access[_ -]?key|client[_ -]?secret|private[_ -]?key|auth(?:orization)?)["']?\s*[:=]\s*["']?(?:bearer\s+|basic\s+)?)([^\s"',;&#[\]<>]{8,})/gi;
+/** A label may follow `_` or `-` too (refresh_token, DB_PASSWORD, x-auth-token: `\b` never matches there). */
+const LABELLED = /((?<![A-Za-z0-9])(?:api[_ -]?key|secret|token|password|passwd|pwd|access[_ -]?key|client[_ -]?secret|private[_ -]?key|auth(?:orization)?)["']?\s*[:=]\s*["']?(?:bearer\s+|basic\s+)?)([^\s"',;&#[\]<>]{8,})/gi;
 const BEARER = /\b(bearer\s+)([0-9A-Za-z._~+/-]{16,}=*)/gi;
-const URL_CREDS = /\b(https?:\/\/)[^\s/@:]+:[^\s/@]+@/gi;
+/** user:password@ in a URL of any scheme (https, postgres, redis, mongodb+srv…), and curl's -u user:password. */
+const URL_CREDS = /\b([a-z][a-z0-9+.-]{1,20}:\/\/)[^\s/@:]*:[^\s/@]+@/gi;
+const USER_PASS = /((?:^|\s)(?:-u|--user)[=\s]+["']?[^\s"':]+:)[^\s"']+/g;
 
 /** Keys, tokens, passwords and credentials in URLs → [masked]. The server scrubs again before any model sees it. */
 export function mask(text) {
   let s = String(text);
   for (const re of KEY_SHAPES) s = s.replace(re, '[masked]');
-  return s.replace(LABELLED, '$1[masked]').replace(BEARER, '$1[masked]').replace(URL_CREDS, '$1[masked]@');
+  return s.replace(LABELLED, '$1[masked]').replace(BEARER, '$1[masked]').replace(URL_CREDS, '$1[masked]@').replace(USER_PASS, '$1[masked]');
 }
 
 // ---------- the request a reply answers ----------
@@ -439,12 +442,15 @@ export function pinPhone(cfg, glowPhone, say = () => undefined) {
   return cfg;
 }
 
-/** Each signature once: a file named after it in ~/.glow/seen, made only if it isn't there. Old ones are cleared. */
-function once(sig) {
+/** Each signed thing once: a file named after what was signed (the payload, which names the session or message) in
+ *  ~/.glow/seen, made only if it isn't there. Not after the signature's text: base64 has many spellings of one signature
+ *  (padding, whitespace, the URL alphabet) and ECDSA a second valid one, so that let a resent copy through. Old ones
+ *  are cleared. */
+function once(signedText) {
   const seen = path.join(dir(), 'seen');
   try {
     fs.mkdirSync(seen, { recursive: true, mode: 0o700 });
-    fs.writeFileSync(path.join(seen, createHash('sha256').update(sig).digest('hex').slice(0, 40)), '', { flag: 'wx', mode: 0o600 });
+    fs.writeFileSync(path.join(seen, createHash('sha256').update(signedText).digest('hex').slice(0, 40)), '', { flag: 'wx', mode: 0o600 });
   } catch (e) {
     if (e?.code === 'EEXIST') return false;
     return true; // a read-only home: the runner's own memory of ids still holds
@@ -463,6 +469,9 @@ function once(sig) {
   return true;
 }
 
+/** A phone's signature as Glow takes it from the phone (core SIGNATURE_RE): plain base64 of a DER ECDSA signature. */
+const SIGNATURE = /^[A-Za-z0-9+/]{80,100}={0,2}$/;
+
 /**
  * Did this computer's Glow phone sign exactly this, recently, for the first time? null when it did, else why not:
  * `untrusted_phone` (none pinned, or another phone), `not_signed` (no signature, or too old or too new), `bad_signature`
@@ -476,12 +485,13 @@ export function checkSigned(cfg, signed, payloadAt, ttlS, now = Date.now() / 100
   if (!signed || typeof signed !== 'object' || typeof signed.sig !== 'string' || !Number.isSafeInteger(signed.at)) return 'not_signed';
   if (signed.phone !== pinned.fingerprint) return 'untrusted_phone';
   if (signed.at > now + SIGN_SKEW_S || signed.at < now - ttlS - SIGN_SKEW_S) return 'not_signed';
+  const payload = payloadAt(signed.at);
   let ok = false;
   try {
-    ok = signed.sig.length <= 200 && verify('sha256', Buffer.from(payloadAt(signed.at), 'utf8'), { key: createPublicKey({ key, format: 'der', type: 'spki' }), dsaEncoding: 'der' }, Buffer.from(signed.sig, 'base64'));
+    ok = SIGNATURE.test(signed.sig) && verify('sha256', Buffer.from(payload, 'utf8'), { key: createPublicKey({ key, format: 'der', type: 'spki' }), dsaEncoding: 'der' }, Buffer.from(signed.sig, 'base64'));
   } catch {
     ok = false;
   }
   if (!ok) return 'bad_signature';
-  return once(signed.sig) ? null : 'bad_signature';
+  return once(payload) ? null : 'bad_signature';
 }

package/lib/runner.mjs

@@ -22,7 +22,7 @@
 //    (--disallowedTools DENY, which holds even then: it can't turn Glow off, stop the runner or read the computer's
 //    key). It's told it runs unattended, in zsh, with no Grep tool, and to finish the job live: your Run is the yes, so
 //    it merges, deploys and changes campaigns itself, inside the limits it's given (UNATTENDED); pnpm and yarn work even where only corepack is installed (toolchain). The model it says it runs on
-//    and how much of your Claude plan is used go to Glow, and its tool calls are counted (how many failed).
+//    and how much of your Claude plan is used go to Glow, and its turns and tool calls are counted (how many failed).
 //  - Inside a session `glow` refuses to change anything (GLOW_RUN_SESSION in its environment, a session's Claude Code
 //    among its parents, or a session's process group: inRunnerSession).
 //  - Its stream says what it's doing: the last tool or command goes to Glow, short and masked (core activityOf), at
@@ -48,7 +48,8 @@ const POLL_MS = Math.max(50, Number(process.env.GLOW_RUN_POLL_MS) || 5000);
 const UPDATE_MS = Math.min(POLL_MS, 4000);
 const REPOS_EVERY_MS = 5 * 60_000;
 const MAX_MS = 3 * 3600_000;
-const AT_ONCE = 3;
+/** Sessions at once (core SESSIONS_AT_ONCE): it tells Glow how many more it has room for. */
+const AT_ONCE = 5;
 const KILL_AFTER_MS = 5000;
 const MESSAGE_MAX = 20_000;
 const IDLE_AFTER_MS = 10 * 60_000;
@@ -307,7 +308,7 @@ export const UNATTENDED = [
   STANDING_ORDER,
   "The Bash tool runs zsh, where an unmatched glob is an error: quote globs in arguments (grep -rn x --include='*.ts' .).",
   'There is no Grep or Glob tool here: search with rg or grep, and find files with rg --files or find, in Bash.',
-  "Glow's own CLI and ~/.glow are off limits.",
+  "Glow's own CLI and ~/.glow (this computer's Glow key) are off limits. Glow reads the product's numbers itself after you finish, so check them at their source (PostHog, GA4, Stripe, the database), and don't call \"not checked in Glow\" a blocker.",
 ].join(' ');
 
 /** What a session gets on stdin: the prompt, checked against the phone's signature first, with the standing order on the
@@ -406,6 +407,9 @@ export function planOf(e) {
   return window ? { used: Math.min(1, Math.max(0, w.utilization)), window } : null;
 }
 
+/** A session in runner.log, where several run at once: its repo's name and the end of its id (mechy·5x6c). */
+const tagOf = (s) => `${printable(s.repo.split('/').pop(), 30)}·${String(s.id).slice(-4).toLowerCase()}`;
+
 const clock = () => new Date().toLocaleTimeString([], { hour: '2-digit', minute: '2-digit', second: '2-digit' });
 
 /**
@@ -443,17 +447,18 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
   });
 
   let phoneAt = 0;
-  /** Glow's word on the Glow phone: pinned here the first time, else only reported (core pinPhone). */
+  /** Glow's config for this computer, with its word on the Glow phone: pinned here the first time, else only reported
+   *  (core pinPhone). */
   const refreshPhone = async () => {
     phoneAt = Date.now();
     const res = await api(cfg, 'GET', '/api/v1/agent/config', undefined, 10_000);
     if (res.status === 200) cfg = { ...pinPhone(readConfig() ?? cfg, res.json?.phone, say), repos: cfg.repos };
+    return res;
   };
   const agentVersions = {};
   const refreshRepos = async () => {
     readAgentVersions(agentVersions);
-    const res = await api(cfg, 'GET', '/api/v1/agent/config', undefined, 10_000);
-    if (res.status === 200) cfg = { ...pinPhone(readConfig() ?? cfg, res.json?.phone, say), repos: cfg.repos };
+    const res = await refreshPhone();
     if (res.status === 200 && Array.isArray(res.json?.repos)) {
       try {
         writeConfig({ ...(readConfig() ?? cfg), repos: res.json.repos.filter((r) => typeof r === 'string').slice(0, 200), repos_at: Date.now() });
@@ -525,7 +530,7 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
     const window = x.window ?? windows.get(x.model);
     return {
       body: {
-        status, ...(x.sessionId ? { session_id: x.sessionId } : {}), ...(x.model ? { model: x.model } : {}), ...(x.activity ? { activity: x.activity } : {}), turns: x.result?.turns ?? x.turns,
+        status, ...(x.sessionId ? { session_id: x.sessionId } : {}), ...(x.model ? { model: x.model } : {}), ...(x.activity ? { activity: x.activity } : {}), turns: x.turns,
         ...(x.context ? { context_tokens: x.context } : {}), ...(window ? { context_window: window } : {}),
         ...(x.toolCalls ? { tool_calls: x.toolCalls, tool_errors: x.toolErrors } : {}),
         ...(batch.length ? { log: batch, log_from: x.logSent } : {}),
@@ -602,12 +607,12 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
     fs.writeFileSync(marker, s.id, { mode: 0o600 });
     const child = spawn(claude, argsFor(flags, sessionId, s.title), { cwd: workdir, env: childEnv(shims), stdio: ['pipe', 'pipe', 'pipe'], detached: true });
     const x = {
-      ...s, cwd, workdir, child, sessionId: flags.sessionId ? sessionId : null, marker, model: '', activity: '', turns: 0, dirty: false, sending: false, done: false, stopWhy: null, result: null, err: '',
+      ...s, cwd, workdir, child, sessionId: flags.sessionId ? sessionId : null, marker, model: '', activity: '', turns: 0, tag: tagOf(s), dirty: false, sending: false, done: false, stopWhy: null, result: null, err: '',
       log: [], logSent: 0, context: 0, window: undefined, tools: new Map(), toolCalls: 0, toolErrors: 0,
     };
     sessions.set(s.id, x);
     writeState();
-    say(`${clock()} ▶ ${s.repo} · ${printable(s.title, 80)}${s.auto ? ' (from your queue)' : ''}`);
+    say(`${clock()} ▶ ${x.tag} · ${printable(s.title, 80)}${s.auto ? ' (from your queue)' : ''}`);
     child.on('error', () => undefined);
     child.stdin.on('error', () => undefined);
     child.stdin.end(promptFor(s.prompt));
@@ -644,10 +649,14 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
       x.dirty = true;
       progress(x);
     } else if (e.type === 'assistant' && Array.isArray(e.message?.content)) {
-      // One event per content block; a turn is one message (its id), or each event when there's no id.
+      // One event per content block; a turn is one of its own messages (its id), or each event when there's no id. Counted
+      // here, not taken from a result's num_turns: a session that waits on a monitor or a wakeup ends several queries,
+      // each with its own result and count (2026-11-05: "11 turns" for 224 tool calls).
       const mid = typeof e.message.id === 'string' ? e.message.id : null;
-      if (!mid || mid !== x.lastMessage) x.turns += 1;
-      x.lastMessage = mid;
+      if (!e.parent_tool_use_id && (!mid || mid !== x.lastMessage)) {
+        x.turns += 1;
+        x.lastMessage = mid;
+      }
       const u = e.message.usage;
       if (u && !e.parent_tool_use_id) x.context = [u.input_tokens, u.cache_creation_input_tokens, u.cache_read_input_tokens, u.output_tokens].reduce((a, n) => a + (Number.isFinite(n) ? n : 0), 0);
       for (const c of e.message.content) {
@@ -658,7 +667,7 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
         // The transcript shows a command whole (masked); the status line only its program.
         note(x, 'tool', c.name === 'Bash' && typeof c.input?.command === 'string' ? `$ ${c.input.command}` : x.activity);
         if (typeof c.id === 'string') x.tools.set(c.id, c.name);
-        say(`${clock()}   ${x.activity}`);
+        say(`${clock()}   ${x.tag} ${x.activity}`);
       }
       x.dirty = true;
     } else if (e.type === 'user' && Array.isArray(e.message?.content)) {
@@ -685,7 +694,6 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
       x.result = {
         error: e.is_error === true || (typeof e.subtype === 'string' && e.subtype.startsWith('error')),
         text: typeof e.result === 'string' ? e.result : '',
-        turns: Number.isInteger(e.num_turns) ? e.num_turns : x.turns,
         cost: Number.isFinite(e.total_cost_usd) ? e.total_cost_usd : undefined,
         denied: Array.isArray(e.permission_denials) ? e.permission_denials.length : 0,
         tokens: { in: n(u.input_tokens) + n(u.cache_creation_input_tokens) + n(u.cache_read_input_tokens), out: n(u.output_tokens) },
@@ -737,7 +745,7 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
       });
     }
     const tail = status === 'failed' && !r && x.err.trim() ? ` (${printable(mask(x.err.trim().split('\n').pop()), 160)})` : '';
-    say(`${clock()} ${status === 'done' ? '✓' : status === 'stopped' ? '■' : '✗'} ${x.repo} · ${printable(x.title, 80)}: ${status}${error && error !== status ? ` (${error})` : ''}${r ? ` · ${r.turns} turns` : ''}${r?.cost !== undefined ? ` · $${r.cost.toFixed(2)}` : ''}${r?.denied ? ` · ${r.denied} turned down` : ''}${tail}${code !== null && code !== 0 && !x.stopWhy ? ` · exit ${code}` : ''}`);
+    say(`${clock()} ${status === 'done' ? '✓' : status === 'stopped' ? '■' : '✗'} ${x.tag} · ${printable(x.title, 80)}: ${status}${error && error !== status ? ` (${error})` : ''}${x.turns ? ` · ${x.turns} turns` : ''}${r?.cost !== undefined ? ` · $${r.cost.toFixed(2)}` : ''}${r?.denied ? ` · ${r.denied} turned down` : ''}${tail}${code !== null && code !== 0 && !x.stopWhy ? ` · exit ${code}` : ''}`);
     // The reply becomes the session's post in Glow, masked, like a hooked session's.
     if (!quiet && r?.text?.trim() && x.sessionId) {
       const now = readConfig() ?? cfg;
@@ -782,7 +790,8 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
         }
         cfg = { ...now, repos: cfg.repos };
         if (Date.now() - reposAt > REPOS_EVERY_MS) await refreshRepos();
-        const res = await api(cfg, 'POST', '/api/v1/agent/runner', { repos: [...repos.keys()], running: [...sessions.keys()], version: VERSION, ...(Object.keys(agentVersions).length ? { agent_versions: agentVersions } : {}) }, 15_000);
+        // room: how many more it takes now (Glow hands over at most that many; one before 0.1.13 got 3 minus what ran).
+        const res = await api(cfg, 'POST', '/api/v1/agent/runner', { repos: [...repos.keys()], running: [...sessions.keys()], room: Math.max(0, AT_ONCE - sessions.size), version: VERSION, ...(Object.keys(agentVersions).length ? { agent_versions: agentVersions } : {}) }, 15_000);
         if (res.status === 401) {
           say('This computer’s key no longer works (removed in Glow). Pair again: npx @winding-labs/glow');
           await shutdown('revoked');
@@ -808,7 +817,7 @@ export function startRunner({ roots, say = console.log, allow = new Map() }) {
         for (const id of Array.isArray(res.json?.stop) ? res.json.stop : []) {
           const x = sessions.get(id);
           if (x) {
-            say(`${clock()} ■ Stop from Glow: ${x.repo} · ${printable(x.title, 80)}`);
+            say(`${clock()} ■ Stop from Glow: ${x.tag} · ${printable(x.title, 80)}`);
             stop(x, 'stopped');
           }
         }

package/marketplace/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
       "name": "glow",
       "source": "./glow",
       "description": "See what Glow sends from this computer, stop or start a repo sending to Glow, and let Glow start Claude Code sessions here",
-      "version": "0.1.12"
+      "version": "0.1.13"
     }
   ]
 }

package/marketplace/glow/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "glow",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "See what Glow sends from this computer, stop or start a repo sending to Glow, and let Glow start Claude Code sessions here",
   "author": { "name": "Glow", "url": "https://meetglow.ai" },
   "homepage": "https://meetglow.ai",

package/marketplace/glow/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "glow",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "See what Glow sends from this computer, stop or start a repo sending to Glow, and let Glow start Claude Code sessions here",
   "author": { "name": "Glow", "email": "hi@winding.ai", "url": "https://meetglow.ai" },
   "homepage": "https://meetglow.ai",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@winding-labs/glow",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "Send what your coding agents (Claude Code, Codex) do to your Glow channels, message them back, and start Claude Code sessions from Glow.",
   "type": "module",
   "bin": { "glow": "bin/glow.mjs" },