cchost 0.4.4 → 0.6.0

package/lib/profiles.js

@@ -102,20 +102,30 @@ function addProfile(name) {
   return { dir };
 }
 
-function readEmail(dir) {
+// Single read/parse of a profile's .claude.json. Missing or malformed JSON is
+// treated as absent state so one bad profile cannot break `cchost list`.
+function readClaudeJson(dir) {
   try {
     const raw = fs.readFileSync(path.join(dir, '.claude.json'), 'utf8');
-    if (!raw.trim()) return '';
+    if (!raw.trim()) return null;
     const data = JSON.parse(raw);
-    if (data && data.oauthAccount && typeof data.oauthAccount.emailAddress === 'string') {
-      return data.oauthAccount.emailAddress;
-    }
-    return '';
+    return data && typeof data === 'object' && !Array.isArray(data) ? data : null;
   } catch {
-    return '';
+    return null;
   }
 }
 
+function emailFromClaude(data) {
+  if (data && data.oauthAccount && typeof data.oauthAccount.emailAddress === 'string') {
+    return data.oauthAccount.emailAddress;
+  }
+  return '';
+}
+
+function readEmail(dir) {
+  return emailFromClaude(readClaudeJson(dir));
+}
+
 function hasCredentials(dir) {
   try {
     return fs.existsSync(path.join(dir, '.credentials.json'));
@@ -124,7 +134,33 @@ function hasCredentials(dir) {
   }
 }
 
-function listProfiles() {
+// Where this profile's Claude Code credentials live:
+//   'file'     — .credentials.json in the profile (Windows/Linux)
+//   'keychain' — inferred from .claude.json on macOS; the token is in a
+//                Keychain entry namespaced by the profile's exact path
+//   'none'     — no sign of a login
+function credentialSourceFrom(hasFile, data, platform) {
+  if (hasFile) return 'file';
+  if (platform === 'darwin' && data && data.oauthAccount != null) return 'keychain';
+  return 'none';
+}
+
+function credentialSource(dir, platform = process.platform) {
+  return credentialSourceFrom(hasCredentials(dir), readClaudeJson(dir), platform);
+}
+
+// Everything `cchost list` needs about one profile, read from one parse.
+function readProfile(dir, platform = process.platform) {
+  const data = readClaudeJson(dir);
+  const credentialSource = credentialSourceFrom(hasCredentials(dir), data, platform);
+  return {
+    loggedIn: credentialSource !== 'none',
+    credentialSource,
+    email: emailFromClaude(data),
+  };
+}
+
+function listProfiles(platform = process.platform) {
   const base = baseDir();
   if (!fs.existsSync(base)) return [];
   let entries;
@@ -138,12 +174,7 @@ function listProfiles() {
     if (!ent.isDirectory()) continue;
     const name = ent.name;
     const dir = path.join(base, name);
-    out.push({
-      name,
-      dir,
-      loggedIn: hasCredentials(dir),
-      email: readEmail(dir),
-    });
+    out.push({ name, dir, ...readProfile(dir, platform) });
   }
   out.sort((a, b) => a.name.localeCompare(b.name));
   return out;
@@ -159,6 +190,8 @@ module.exports = {
   ensureProfileDir,
   readEmail,
   hasCredentials,
+  credentialSource,
+  readProfile,
   listProfiles,
   addProfile,
 };

package/lib/share.js

@@ -180,6 +180,76 @@ function createResourceLink(target, link, resource) {
   }
 }
 
+// <profile>/.cc-private.json records resources the user made private on
+// purpose (`cchost add --private`, `cchost unlink`), so an empty or absent
+// private resource is not mistaken for a missing link and re-shared by
+// `cchost doctor --fix`. `cchost link` removes entries. Never shared.
+const PRIVATE_FILE = '.cc-private.json';
+
+function readPrivate(profileDir) {
+  try {
+    const data = JSON.parse(fs.readFileSync(path.join(profileDir, PRIVATE_FILE), 'utf8'));
+    const list = data && Array.isArray(data.private) ? data.private : [];
+    return new Set(list.filter((r) => SHARED_RESOURCES.includes(r)));
+  } catch {
+    return new Set();
+  }
+}
+
+function writePrivate(profileDir, set) {
+  const p = path.join(profileDir, PRIVATE_FILE);
+  const list = SHARED_RESOURCES.filter((r) => set.has(r));
+  if (list.length === 0) {
+    fs.rmSync(p, { force: true });
+    return;
+  }
+  fs.writeFileSync(p, JSON.stringify({ private: list }, null, 2) + '\n');
+}
+
+function markPrivate(profileDir, resources) {
+  const set = readPrivate(profileDir);
+  const before = set.size;
+  for (const r of resources) set.add(r);
+  if (set.size !== before) writePrivate(profileDir, set);
+}
+
+function unmarkPrivate(profileDir, resources) {
+  const set = readPrivate(profileDir);
+  let changed = false;
+  for (const r of resources) changed = set.delete(r) || changed;
+  if (changed) writePrivate(profileDir, set);
+}
+
+function isMarkedPrivate(profileDir, resource) {
+  return readPrivate(profileDir).has(resource);
+}
+
+// Where one resource of a profile currently stands. Returns one of:
+//   'shared'       — linked to ~/.claude/ (symlink, junction, or hard link)
+//   'private'      — a real file/dir with content, or one recorded as private
+//                    on purpose in .cc-private.json (even if empty or absent)
+//   'empty'        — a real but empty file/dir (link would replace it)
+//   'missing'      — nothing at the path
+//   'foreign-link' — a symlink pointing somewhere other than ~/.claude/
+function resourceState(profileDir, resource) {
+  const p = path.join(profileDir, resource);
+  if (isSharedResource(profileDir, resource)) return 'shared';
+  if (isLink(p)) return 'foreign-link';
+  if (isMarkedPrivate(profileDir, resource)) return 'private';
+  let st;
+  try {
+    st = fs.statSync(p);
+  } catch {
+    return 'missing';
+  }
+  try {
+    const hasContent = st.isDirectory() ? fs.readdirSync(p).length > 0 : st.size > 0;
+    return hasContent ? 'private' : 'empty';
+  } catch {
+    return 'private';
+  }
+}
+
 // Link each requested resource of a profile into the shared pool (~/.claude/).
 // Each resource is attempted independently — one failure doesn't abort the
 // rest. Returns [{ resource, status, ... }]; status ∈
@@ -188,18 +258,21 @@ function createResourceLink(target, link, resource) {
 // 'refused' is the v0.4.1 behavior when the profile holds private content at
 // the resource path: we do NOT auto-move it into the pool (was the v0.4.0
 // behavior for dirs). The user must move/remove it manually.
+//
+// opts.dryRun reports the same statuses without touching the filesystem.
 function shareLink(profileName, opts = {}) {
+  const dryRun = Boolean(opts.dryRun);
   profiles.validateProfileName(profileName);
   const pdir = profiles.profileDir(profileName);
   if (!fs.existsSync(pdir)) {
     const err = new Error(
-      `Profile "${profileName}" does not exist. Create it with \`cc add ${profileName}\` first.`,
+      `Profile "${profileName}" does not exist. Create it with \`cchost add ${profileName}\` first.`,
     );
     err.exitCode = 1;
     throw err;
   }
   const subset = resolveSubset(opts);
-  ensurePoolResources(subset);
+  if (!dryRun) ensurePoolResources(subset);
   const pool = poolDir();
   const legacyPool = profiles.sharedDir();
   const results = [];
@@ -217,13 +290,22 @@ function shareLink(profileName, opts = {}) {
         }
         if (resolved === path.join(legacyPool, resource)) {
           // Legacy v0.3 pointer — silently relink to the new pool location.
+          if (dryRun) {
+            results.push({ resource, status: 'linked', relinkedFromLegacy: true });
+            continue;
+          }
           removeLink(link);
           const r = createResourceLink(target, link, resource);
           results.push({ resource, status: 'linked', relinkedFromLegacy: true, kind: r.kind });
           continue;
         }
-        // Points somewhere unexpected — don't touch it.
-        results.push({ resource, status: 'already-linked' });
+        // Points somewhere unexpected — don't touch it, but report it as not
+        // shared so callers don't claim the resource is linked.
+        results.push({
+          resource,
+          status: 'foreign-link',
+          message: `symlink points to ${resolved}, not ${target} — left untouched`,
+        });
         continue;
       }
 
@@ -246,20 +328,34 @@ function shareLink(profileName, opts = {}) {
             status: 'refused',
             message:
               `private content exists at ${link} — move or remove it manually, ` +
-              `then re-run \`cc link ${profileName}\``,
+              `then re-run \`cchost link ${profileName}\``,
           });
           continue;
         }
         // Empty private dir — safe to remove and replace with a symlink.
-        try { fs.rmdirSync(link); } catch { /* fall through; create will fail clearly */ }
+        if (!dryRun) {
+          try { fs.rmdirSync(link); } catch { /* fall through; create will fail clearly */ }
+        }
       }
 
+      if (dryRun) {
+        results.push({ resource, status: 'linked' });
+        continue;
+      }
       const r = createResourceLink(target, link, resource);
       results.push({ resource, status: 'linked', kind: r.kind });
     } catch (err) {
       results.push({ resource, status: 'failed', message: err.message });
     }
   }
+  if (!dryRun) {
+    unmarkPrivate(
+      pdir,
+      results
+        .filter((r) => r.status === 'linked' || r.status === 'already-linked')
+        .map((r) => r.resource),
+    );
+  }
   return results;
 }
 
@@ -268,7 +364,12 @@ function shareLink(profileName, opts = {}) {
 // collisions, defensive) so the profile keeps its current view.
 // Returns [{ resource, status, ... }]; status ∈
 //   'unlinked' | 'not-linked' | 'failed'
+//
+// opts.dryRun reports the same statuses without touching the filesystem; dir
+// results then carry `items`, the number of top-level entries that would be
+// copied into the profile.
 function shareUnlink(profileName, opts = {}) {
+  const dryRun = Boolean(opts.dryRun);
   profiles.validateProfileName(profileName);
   const pdir = profiles.profileDir(profileName);
   if (!fs.existsSync(pdir)) {
@@ -290,6 +391,15 @@ function shareUnlink(profileName, opts = {}) {
         continue;
       }
 
+      if (dryRun) {
+        const r = { resource, status: 'unlinked' };
+        if (!isFileResource(resource)) {
+          try { r.items = fs.readdirSync(target).length; } catch { r.items = 0; }
+        }
+        results.push(r);
+        continue;
+      }
+
       // Read pool content BEFORE removing the link (in case the link is the
       // only path to it... well, not really — target is reachable directly —
       // but reading first means we can fail without leaving a deleted link).
@@ -329,6 +439,9 @@ function shareUnlink(profileName, opts = {}) {
       results.push({ resource, status: 'failed', message: err.message });
     }
   }
+  if (!dryRun) {
+    markPrivate(pdir, results.filter((r) => r.status === 'unlinked').map((r) => r.resource));
+  }
   return results;
 }
 
@@ -783,6 +896,11 @@ module.exports = {
   isFileResource,
   isLink,
   isSharedResource,
+  resourceState,
+  PRIVATE_FILE,
+  markPrivate,
+  unmarkPrivate,
+  isMarkedPrivate,
   removeLink,
   shareLink,
   shareUnlink,

package/lib/spawn.js

@@ -155,7 +155,7 @@ function platformSpawn(bin, args, opts) {
   return spawn(bin, args, opts);
 }
 
-function spawnClaude({ args = [], profileDir = null, extraEnv = {} } = {}) {
+function spawnClaude({ args = [], profileDir = null, extraEnv = {}, unsetEnv = [] } = {}) {
   const bin = findClaude();
   if (!bin) {
     const err = new Error(
@@ -169,6 +169,7 @@ function spawnClaude({ args = [], profileDir = null, extraEnv = {} } = {}) {
   warnIfOld(bin);
 
   const childEnv = { ...process.env, ...extraEnv };
+  for (const name of unsetEnv) delete childEnv[name];
   if (profileDir) {
     childEnv.CLAUDE_CONFIG_DIR = profileDir;
   } else {

package/lib/ui/login.html

@@ -0,0 +1,117 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="color-scheme" content="light dark">
+<link rel="icon" href="data:,">
+<title>Sign in · cchost</title>
+<style nonce="__NONCE__">
+/*__TOKENS__*/
+* { box-sizing: border-box; }
+html, body { margin: 0; min-height: 100%; }
+body {
+  min-height: 100vh; display: grid; place-items: center; padding: 24px 16px;
+  background: var(--bg); color: var(--text); font: 14px/1.5 var(--sans);
+  -webkit-font-smoothing: antialiased;
+}
+::selection { background: color-mix(in srgb, var(--primary) 28%, transparent); }
+.card {
+  width: min(380px, 100%); display: grid; gap: 20px; padding: 28px;
+  background: var(--surface); border: 1px solid var(--border); border-radius: 10px; box-shadow: var(--shadow-sm);
+  animation: enter 420ms var(--ease) both;
+}
+@keyframes enter { from { opacity: 0; transform: translateY(6px); } to { opacity: 1; transform: none; } }
+.brand { display: flex; align-items: center; gap: 10px; font-weight: 650; font-size: 15px; }
+.brand svg { width: 22px; height: 22px; }
+.brand .mark { fill: var(--primary); opacity: 0.9; }
+.brand small { margin-left: auto; color: var(--text-3); font-weight: 500; font-size: 12px; }
+h1 { margin: 0; font-size: 17px; font-weight: 650; letter-spacing: -0.01em; }
+.lede { margin: 4px 0 0; color: var(--text-2); font-size: 13px; }
+form { display: grid; gap: 14px; }
+label { display: grid; gap: 6px; font-size: 13px; font-weight: 550; }
+.input {
+  height: 36px; padding: 0 10px; border-radius: 6px; border: 1px solid var(--border-strong);
+  background: var(--surface); color: var(--text); font: inherit; font-weight: 400;
+  transition: border-color 120ms, box-shadow 120ms;
+}
+.input:focus-visible { outline: none; border-color: var(--focus); box-shadow: 0 0 0 3px color-mix(in srgb, var(--focus) 25%, transparent); }
+.input[aria-invalid="true"] { border-color: var(--err); }
+.btn {
+  height: 36px; border-radius: 6px; border: 1px solid var(--primary); background: var(--primary); color: var(--primary-fg);
+  font: inherit; font-weight: 550; cursor: pointer; transition: background 120ms, transform 120ms;
+}
+.btn:hover { background: var(--primary-hover); }
+.btn:active { transform: translateY(1px); }
+.btn:disabled { opacity: 0.6; cursor: progress; }
+.btn:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
+.err { min-height: 20px; margin: 0; color: var(--err-fg); font-size: 13px; }
+.err.shake { animation: shake 320ms var(--ease); }
+@keyframes shake { 0%, 100% { transform: none; } 25% { transform: translateX(-4px); } 75% { transform: translateX(4px); } }
+.hint { margin: 0; padding-top: 16px; border-top: 1px solid var(--border); color: var(--text-3); font-size: 12.5px; }
+code { font-family: var(--mono); font-size: 12px; color: var(--text-2); }
+@media (prefers-reduced-motion: reduce) {
+  .card, .err.shake { animation: none; }
+}
+</style>
+</head>
+<body>
+<main class="card">
+  <div class="brand">
+    <svg viewBox="0 0 24 24" aria-hidden="true"><rect x="2.5" y="6.5" width="12" height="12" rx="3" fill="none" stroke="currentColor" stroke-width="1.75"/><rect class="mark" x="9.5" y="2.5" width="12" height="12" rx="3"/></svg>
+    cchost <small>v__VERSION__</small>
+  </div>
+  <div>
+    <h1>Sign in</h1>
+    <p class="lede" id="lede">Use the username and password printed in the terminal where you ran <code>cchost ui</code>.</p>
+  </div>
+  <form id="form" novalidate>
+    <label>Username<input class="input" id="user" name="user" autocomplete="username" spellcheck="false" value="cchost" required></label>
+    <label>Password<input class="input" id="pass" name="pass" type="password" autocomplete="current-password" spellcheck="false" required autofocus aria-describedby="err"></label>
+    <p class="err" id="err" role="alert"></p>
+    <button class="btn" id="go" type="submit">Sign in</button>
+  </form>
+  <p class="hint">The password changes every time <code>cchost ui</code> starts, and only this machine can reach this page.</p>
+</main>
+<script nonce="__NONCE__">
+(() => {
+  'use strict';
+  const $ = (id) => document.getElementById(id);
+  try {
+    const t = localStorage.getItem('cchost-theme');
+    if (t === 'light' || t === 'dark') document.documentElement.setAttribute('data-theme', t);
+  } catch { /* storage blocked */ }
+  if (new URLSearchParams(location.search).has('expired')) {
+    $('lede').textContent = 'That sign-in link was already used or has expired. Sign in with the password from the terminal.';
+    history.replaceState(null, '', '/');
+  }
+  $('form').addEventListener('submit', async (ev) => {
+    ev.preventDefault();
+    const err = $('err');
+    err.textContent = '';
+    err.classList.remove('shake');
+    $('go').disabled = true;
+    $('go').textContent = 'Signing in…';
+    try {
+      const res = await fetch('/api/login', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'X-CCHost': '1' },
+        body: JSON.stringify({ user: $('user').value, pass: $('pass').value }),
+      });
+      if (res.ok) { location.replace('/'); return; }
+      const json = await res.json().catch(() => ({}));
+      err.textContent = json.error || `Sign-in failed (${res.status}).`;
+    } catch {
+      err.textContent = 'Cannot reach cchost ui — is it still running?';
+    }
+    void err.offsetWidth;
+    err.classList.add('shake');
+    $('pass').setAttribute('aria-invalid', 'true');
+    $('pass').select();
+    $('go').disabled = false;
+    $('go').textContent = 'Sign in';
+  });
+})();
+</script>
+</body>
+</html>