claudeck 1.1.1 → 1.3.0

package/README.md

@@ -8,6 +8,10 @@
   A browser-based UI for <a href="https://docs.anthropic.com/en/docs/claude-code">Claude Code</a> — chat, workflows, agents, cost tracking, and more.
 </p>
 
+<p align="center">
+  <a href="https://www.producthunt.com/products/claudeck?embed=true&utm_source=badge-featured&utm_medium=badge&utm_campaign=badge-claudeck" target="_blank" rel="noopener noreferrer"><img alt="Claudeck on Product Hunt" width="250" height="54" src="https://api.producthunt.com/widgets/embed-image/v1/featured.svg?post_id=1105387&theme=light&t=1774340505179" /></a>
+</p>
+
 <p align="center">
   <a href="https://www.npmjs.com/package/claudeck"><img src="https://img.shields.io/npm/v/claudeck?color=cb3837&label=npm" alt="npm version" /></a>
   <a href="https://github.com/hamedafarag/claudeck/blob/main/LICENSE"><img src="https://img.shields.io/npm/l/claudeck?color=blue" alt="license" /></a>
@@ -27,6 +31,9 @@ npx claudeck
 # Custom port
 npx claudeck --port 3000
 
+# Enable authentication (for remote access via Cloudflare Tunnel, etc.)
+npx claudeck --auth
+
 # Or install globally
 npm install -g claudeck
 claudeck
@@ -42,10 +49,11 @@ User data lives in `~/.claudeck/` (config, database, plugins) — safe for NPX u
 
 ## Why Claudeck?
 
-- **Zero-framework** — Vanilla JS, 6 npm dependencies, no build step
+- **Zero-framework** — Vanilla JS + Web Components, 6 npm dependencies, no build step
 - **Full agent orchestration** — Chains, DAGs, orchestrator, and monitoring dashboard
 - **Persistent memory** — Cross-session project knowledge with FTS5 search and AI optimization
 - **Cost visibility** — Per-session tracking, daily charts, token breakdowns
+- **Secure remote access** — Token-based auth for Cloudflare Tunnel or reverse proxy setups
 - **Works everywhere** — PWA, mobile responsive, Telegram AFK approval
 - **Extensible** — Full-stack plugin system with auto-discovery
 
@@ -59,6 +67,8 @@ User data lives in `~/.claudeck/` (config, database, plugins) — safe for NPX u
 - **Parallel mode** — 2x2 grid of 4 independent conversations
 - Background sessions that keep running when you switch away
 - Session search, pinning, auto-generated titles
+- **Session branching** — fork any conversation at an assistant message to explore alternatives
+- **Message recall** — press `↑` on empty input to cycle through previous messages, or click the history button to browse and re-use
 - Voice input via Web Speech API (Chrome/Safari)
 
 ### Autonomous Agents
@@ -78,7 +88,9 @@ User data lives in `~/.claudeck/` (config, database, plugins) — safe for NPX u
 ### Code & Files
 
 - **File Explorer** — Lazy tree, syntax-highlighted preview, drag-to-chat
-- **Git Panel** — Branch switching, staging, commit, log
+- **File Picker** — Attach files with type dots, binary detection, search, selected chips
+- **Git Panel** — Branch switching, staging, commit, log, inline diff viewer
+- **Git Worktrees** — Run any chat/agent task in an isolated worktree; merge, diff, or discard results
 - **Repos Manager** — Organize repos in nested groups with GitHub links
 - Code diff viewer with LCS-based line highlighting
 
@@ -97,6 +109,25 @@ User data lives in `~/.claudeck/` (config, database, plugins) — safe for NPX u
 - AI-powered optimization (consolidation via Claude Haiku)
 - Memory panel in right sidebar with search, filtering, and inline editing
 
+### Notifications
+
+- **Notification Bell** — Persistent notification history with unread badge in the header
+- Background session events (completed, errored, input needed) logged automatically
+- Agent completion/error notifications with cost and duration metrics
+- Full history modal with type/status filters, bulk actions, and pagination
+- 4 read strategies: explicit click, mark all, auto-read on view, click-through to session
+- Real-time cross-tab sync via WebSocket broadcasts
+
+### Skills Marketplace
+
+- **SkillsMP Integration** — Browse and install agent skills from the [SkillsMP](https://skillsmp.com/) registry
+- Keyword search and AI semantic search with mode toggle
+- Install skills globally (`~/.claude/skills/`) or per-project (`.claude/skills/`)
+- Enable/disable skills via toggle (renames `SKILL.md` ↔ `SKILL.md.disabled`)
+- Installed skills auto-register as `/` slash commands
+- "Skill used" system messages in chat for both user-invoked and model-invoked skills
+- Token-gated — enter your free SkillsMP API key to activate
+
 ### Integrations
 
 - **MCP Manager** — Add/edit/remove MCP servers (global + per-project)
@@ -119,8 +150,9 @@ User data lives in `~/.claudeck/` (config, database, plugins) — safe for NPX u
 | **Confirm All** | Prompt for every tool call |
 | **Plan Mode** | No execution, planning only |
 
-### UI & Experience
+### Security & UI
 
+- **Authentication** — `--auth` flag enables token-based auth with login page, HttpOnly cookies, and WebSocket verification. Localhost bypasses auth by default (auto-detected proxy headers like `X-Forwarded-For` disable the bypass for tunneled requests).
 - Dark theme (terminal CRT aesthetic) and light theme
 - Installable as a PWA with offline fallback
 - Mobile responsive with tablet/mobile breakpoints
@@ -138,7 +170,10 @@ browser ──── WebSocket ──── server.js ──── Claude Code S
                           server/agent-loop.js     ├── config/     (JSON configs)
                           server/orchestrator.js   ├── plugins/    (user plugins)
                           server/dag-executor.js   ├── data.db     (SQLite + memories)
-                          server/memory-optimizer.js └── .env      (VAPID keys)
+                          server/notification-logger.js
+                          server/utils/git-worktree.js
+                          server/auth.js
+                          server/memory-optimizer.js └── .env      (VAPID keys, auth token)
                           plugins/
 ```
 
@@ -148,7 +183,8 @@ browser ──── WebSocket ──── server.js ──── Claude Code S
 | Backend | Express 4, WebSocket (ws 8), web-push 3 |
 | AI SDK | @anthropic-ai/claude-code |
 | Database | SQLite via better-sqlite3 (WAL mode) |
-| Frontend | Vanilla JS ES modules, CSS custom properties |
+| Frontend | Vanilla JS ES modules + Web Components (Light DOM), CSS custom properties |
+| Testing | Vitest + happy-dom (2,400+ unit tests, 55% coverage) + WS perf benchmarks |
 | Rendering | highlight.js, Mermaid (diagrams) — CDN |
 
 ---
@@ -158,7 +194,7 @@ browser ──── WebSocket ──── server.js ──── Claude Code S
 ```
 /clear /new /parallel /export /theme /shortcuts       App
 /costs /analytics                                      Dashboards
-/files /git /repos /events /mcp /tips                  Panels
+/files /git /repos /events /mcp /tips /skills           Panels
 /remember                                              Memory
 /review-pr /onboard-repo /migration-plan /code-health  Workflows
 /agent-pr-reviewer /agent-bug-hunter /agent-test-writer Agents
@@ -177,8 +213,9 @@ browser ──── WebSocket ──── server.js ──── Claude Code S
 | `Cmd+N` | New session |
 | `Cmd+B` | Toggle right panel |
 | `Cmd+/` | Show all shortcuts |
-| `Cmd+Shift+E/G/R/V/T` | Files / Git / Repos / Events / Tips |
+| `Cmd+Shift+E/G/R/V/T` | Files / Git / Repos / Events / Tips  |
 | `Cmd+1`-`4` | Focus parallel pane |
+| `↑` / `↓` | Recall previous/next message (empty input) |
 
 ---
 
@@ -197,10 +234,11 @@ All user data lives in `~/.claudeck/` (override with `CLAUDECK_HOME`):
 │   ├── agent-dags.json       Dependency graphs
 │   ├── repos.json            Repository groups
 │   ├── bot-prompt.json       Assistant bot prompt
-│   └── telegram-config.json  Telegram config
+│   ├── telegram-config.json  Telegram config
+│   └── skillsmp-config.json  Skills Marketplace config
 ├── plugins/                  User-installed plugins
 ├── data.db                   SQLite database
-└── .env                      VAPID keys, port config
+└── .env                      VAPID keys, port, auth token
 ```
 
 Defaults are copied on first run. User edits are never overwritten on upgrade.
@@ -246,6 +284,52 @@ npx skills add https://github.com/hamedafarag/claudeck-skills
 
 ---
 
+## Testing
+
+```bash
+npm test              # Run all 2,400+ tests
+npm test -- --coverage  # With coverage report
+npm run test:perf     # WebSocket performance benchmarks
+```
+
+| Layer | Tests | Coverage |
+|-------|-------|----------|
+| **components/** (Web Components) | 170+ | 100% |
+| **core/** | 110+ | 90% |
+| **ui/** | 280+ | 65% |
+| **features/** | 210+ | 22% |
+| **panels/** | 150+ | 35% |
+| **server/** | 1,350+ | 95% |
+
+19 Web Components in `public/js/components/` — each is a self-contained Custom Element (Light DOM) that owns its HTML, testable with zero mocks.
+
+### Performance Benchmarks
+
+The `test:perf` suite measures WebSocket relay performance with real TCP connections over localhost (no mocked sockets). Results from 4 scenarios:
+
+**Approval Round-Trip Latency** — server sends `permission_request` → client responds → server receives:
+
+| Concurrent Sessions | p50 | p95 | p99 |
+|---|---|---|---|
+| 1 | 70 µs | 132 µs | 196 µs |
+| 5 | 187 µs | 222 µs | 244 µs |
+| 10 | 300 µs | 466 µs | 721 µs |
+| 25 | 382 µs | 570 µs | 764 µs |
+
+**Message Throughput** — streaming text chunks to connected clients:
+
+| Clients | Total msg/s |
+|---|---|
+| 1 | ~295k |
+| 10 | ~393k |
+| 50 | ~435k |
+
+**Connection Scaling** — 100 simultaneous connections: p50 establish time 156 µs, ~35 KB memory per connection.
+
+**Broadcast Fan-Out** — notification delivery to all connected clients: p50 under 1 ms even at 100 clients.
+
+---
+
 ## Contributing
 
 Contributions are welcome! Fork the repo, make your changes, and open a PR.
@@ -255,6 +339,7 @@ git clone https://github.com/hamedafarag/claudeck.git
 cd claudeck
 npm install
 npm start
+npm test    # Run tests before submitting
 ```
 
 See [DOCUMENTATION.md](docs/DOCUMENTATION.md) for architecture details and [CONFIGURATION.md](docs/CONFIGURATION.md) for the config system.

package/cli.js

@@ -3,6 +3,7 @@ import { homedir } from "os";
 import { join } from "path";
 import { readFileSync, writeFileSync, mkdirSync } from "fs";
 import { createInterface } from "readline";
+import crypto from "crypto";
 
 const DEFAULT_PORT = 9009;
 const envDir = process.env.CLAUDECK_HOME || join(homedir(), ".claudeck");
@@ -13,16 +14,21 @@ function readEnv() {
   try { return readFileSync(envPath, "utf-8"); } catch { return ""; }
 }
 
-function savePort(port) {
+function saveEnvVar(key, value) {
   let content = readEnv();
-  if (/^PORT=.*/m.test(content)) {
-    content = content.replace(/^PORT=.*/m, `PORT=${port}`);
+  const re = new RegExp(`^${key}=.*`, "m");
+  if (re.test(content)) {
+    content = content.replace(re, `${key}=${value}`);
   } else {
-    content = content.trimEnd() + `\nPORT=${port}\n`;
+    content = content.trimEnd() + `\n${key}=${value}\n`;
   }
   writeFileSync(envPath, content);
 }
 
+function savePort(port) {
+  saveEnvVar("PORT", port);
+}
+
 function getSavedPort() {
   const match = readEnv().match(/^PORT=(\d+)/m);
   return match ? match[1] : null;
@@ -35,7 +41,50 @@ function ask(question) {
   });
 }
 
+function handleAuthFlags() {
+  // --no-auth: explicitly disable for this run
+  if (process.argv.includes("--no-auth")) {
+    process.env.CLAUDECK_AUTH = "false";
+    return;
+  }
+
+  // --token <value> or --token=<value>: set custom token + enable auth
+  const tokenArg = process.argv.find(a => a.startsWith("--token"));
+  if (tokenArg) {
+    const token = tokenArg.includes("=")
+      ? tokenArg.split("=")[1]
+      : process.argv[process.argv.indexOf(tokenArg) + 1];
+    if (token) {
+      process.env.CLAUDECK_TOKEN = token;
+      process.env.CLAUDECK_AUTH = "true";
+      saveEnvVar("CLAUDECK_TOKEN", token);
+      saveEnvVar("CLAUDECK_AUTH", "true");
+      console.log(`\x1b[2m  Auth token set and saved to ~/.claudeck/.env\x1b[0m`);
+    }
+    return;
+  }
+
+  // --auth: enable auth, auto-generate token if missing
+  if (process.argv.includes("--auth")) {
+    process.env.CLAUDECK_AUTH = "true";
+    const envContent = readEnv();
+    const existingToken = envContent.match(/^CLAUDECK_TOKEN=(.+)/m);
+    if (existingToken) {
+      process.env.CLAUDECK_TOKEN = existingToken[1];
+    } else {
+      const token = crypto.randomBytes(32).toString("hex");
+      process.env.CLAUDECK_TOKEN = token;
+      saveEnvVar("CLAUDECK_TOKEN", token);
+      saveEnvVar("CLAUDECK_AUTH", "true");
+      console.log(`\x1b[2m  Generated auth token and saved to ~/.claudeck/.env\x1b[0m`);
+    }
+  }
+}
+
 async function main() {
+  // Handle auth flags before anything else
+  handleAuthFlags();
+
   // --port flag takes priority
   const portArg = process.argv.find(a => a.startsWith('--port'));
   if (portArg) {

package/config/skillsmp-config.json

@@ -0,0 +1,5 @@
+{
+  "apiKey": "",
+  "defaultScope": "project",
+  "searchMode": "keyword"
+}

package/db.js

@@ -81,6 +81,9 @@ try { db.exec(`ALTER TABLE sessions ADD COLUMN summary TEXT DEFAULT NULL`); } ca
 try { db.exec(`ALTER TABLE todos ADD COLUMN archived INTEGER DEFAULT 0`); } catch { /* exists */ }
 // Todo priority (0=none, 1=low, 2=medium, 3=high)
 try { db.exec(`ALTER TABLE todos ADD COLUMN priority INTEGER DEFAULT 0`); } catch { /* exists */ }
+// Session branching / conversation forking
+try { db.exec(`ALTER TABLE sessions ADD COLUMN parent_session_id TEXT DEFAULT NULL`); } catch { /* exists */ }
+try { db.exec(`ALTER TABLE sessions ADD COLUMN fork_message_id INTEGER DEFAULT NULL`); } catch { /* exists */ }
 
 // Agent context (shared memory between agents in a chain/orchestration run)
 db.exec(`
@@ -167,6 +170,41 @@ db.exec(`
   END;
 `);
 
+// ── Notifications table ──────────────────────────────────
+db.exec(`
+  CREATE TABLE IF NOT EXISTS notifications (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    type TEXT NOT NULL,
+    title TEXT NOT NULL,
+    body TEXT,
+    metadata TEXT,
+    source_session_id TEXT,
+    source_agent_id TEXT,
+    read_at INTEGER DEFAULT NULL,
+    created_at INTEGER DEFAULT (unixepoch())
+  );
+  CREATE INDEX IF NOT EXISTS idx_notif_created ON notifications(created_at DESC);
+  CREATE INDEX IF NOT EXISTS idx_notif_unread ON notifications(read_at) WHERE read_at IS NULL;
+`);
+
+// ── Worktrees table ──────────────────────────────────────
+db.exec(`
+  CREATE TABLE IF NOT EXISTS worktrees (
+    id TEXT PRIMARY KEY,
+    session_id TEXT,
+    project_path TEXT NOT NULL,
+    worktree_path TEXT NOT NULL,
+    branch_name TEXT NOT NULL,
+    base_branch TEXT NOT NULL,
+    status TEXT DEFAULT 'active',
+    user_prompt TEXT,
+    created_at INTEGER DEFAULT (unixepoch()),
+    completed_at INTEGER DEFAULT NULL
+  );
+  CREATE INDEX IF NOT EXISTS idx_wt_project ON worktrees(project_path);
+  CREATE INDEX IF NOT EXISTS idx_wt_status ON worktrees(status);
+`);
+
 // Backfill content_hash for existing rows
 const unhashed = db.prepare(`SELECT id, project_path, content FROM memories WHERE content_hash IS NULL`).all();
 if (unhashed.length > 0) {
@@ -208,6 +246,7 @@ db.exec(`
   CREATE INDEX IF NOT EXISTS idx_costs_created_at ON costs(created_at);
   CREATE INDEX IF NOT EXISTS idx_sessions_project_path ON sessions(project_path);
   CREATE INDEX IF NOT EXISTS idx_sessions_pinned_last_used ON sessions(pinned DESC, last_used_at DESC);
+  CREATE INDEX IF NOT EXISTS idx_sessions_parent ON sessions(parent_session_id) WHERE parent_session_id IS NOT NULL;
 `);
 
 // Deduplicated mode CASE subquery — used in 4 session listing queries
@@ -289,6 +328,22 @@ const stmts = {
     `SELECT s.*, ${MODE_CASE}
      FROM sessions s WHERE (s.title LIKE ? OR s.project_name LIKE ?) ORDER BY s.pinned DESC, s.last_used_at DESC LIMIT ?`
   ),
+  // Session branching
+  getMessagesByIdRange: db.prepare(
+    `SELECT role, content, created_at FROM messages WHERE session_id = ? AND id <= ? AND chat_id IS NULL ORDER BY id ASC`
+  ),
+  getLastMessageId: db.prepare(
+    `SELECT MAX(id) as maxId FROM messages WHERE session_id = ? AND chat_id IS NULL`
+  ),
+  getBranches: db.prepare(
+    `SELECT s.*, ${MODE_CASE} FROM sessions s WHERE s.parent_session_id = ? ORDER BY s.created_at DESC`
+  ),
+  getBranchCount: db.prepare(
+    `SELECT COUNT(*) as count FROM sessions WHERE parent_session_id = ?`
+  ),
+  orphanChildren: db.prepare(
+    `UPDATE sessions SET parent_session_id = NULL WHERE parent_session_id = ?`
+  ),
   getSessionCosts: db.prepare(
     `SELECT s.id, s.title, s.project_name, s.last_used_at,
             COALESCE(SUM(c.cost_usd), 0) AS total_cost,
@@ -460,12 +515,74 @@ export function searchSessions(query, limit = 20, projectPath) {
 }
 
 export const deleteSession = db.transaction((id) => {
+  // Orphan child forks before deleting parent
+  stmts.orphanChildren.run(id);
   db.prepare("DELETE FROM claude_sessions WHERE session_id = ?").run(id);
   db.prepare("DELETE FROM costs WHERE session_id = ?").run(id);
   db.prepare("DELETE FROM messages WHERE session_id = ?").run(id);
   db.prepare("DELETE FROM sessions WHERE id = ?").run(id);
 });
 
+// ── Session Branching / Forking ─────────────────────────
+export const forkSession = db.transaction((parentSessionId, forkMessageId) => {
+  const parent = stmts.getSession.get(parentSessionId);
+  if (!parent) throw new Error("Session not found");
+
+  if (!forkMessageId) {
+    const last = stmts.getLastMessageId.get(parentSessionId);
+    forkMessageId = last?.maxId;
+    if (!forkMessageId) throw new Error("No messages to fork");
+  }
+
+  const newId = createHash("sha256")
+    .update(parentSessionId + Date.now() + Math.random())
+    .digest("hex")
+    .slice(0, 36);
+  const title = `Fork of: ${parent.title || parent.project_name || "Untitled"}`;
+
+  db.prepare(
+    `INSERT INTO sessions (id, project_name, project_path, title, parent_session_id, fork_message_id)
+     VALUES (?, ?, ?, ?, ?, ?)`
+  ).run(newId, parent.project_name, parent.project_path, title, parentSessionId, forkMessageId);
+
+  const messages = stmts.getMessagesByIdRange.all(parentSessionId, forkMessageId);
+  const insertMsg = db.prepare(
+    "INSERT INTO messages (session_id, role, content, created_at) VALUES (?, ?, ?, ?)"
+  );
+  for (const msg of messages) {
+    insertMsg.run(newId, msg.role, msg.content, msg.created_at);
+  }
+
+  return stmts.getSession.get(newId);
+});
+
+export function getSessionBranches(sessionId) {
+  return stmts.getBranches.all(sessionId);
+}
+
+export function getSessionBranchCount(sessionId) {
+  return stmts.getBranchCount.get(sessionId).count;
+}
+
+export function getSessionLineage(sessionId) {
+  const ancestors = [];
+  let current = stmts.getSession.get(sessionId);
+  while (current && current.parent_session_id) {
+    const parent = stmts.getSession.get(current.parent_session_id);
+    if (!parent) break;
+    ancestors.unshift(parent);
+    current = parent;
+  }
+  // Get siblings (other forks of the same parent)
+  const session = stmts.getSession.get(sessionId);
+  let siblings = [];
+  if (session?.parent_session_id) {
+    siblings = stmts.getBranches.all(session.parent_session_id)
+      .filter(s => s.id !== sessionId);
+  }
+  return { ancestors, siblings };
+}
+
 export function getSessionCosts(projectPath) {
   if (projectPath) {
     return stmts.getSessionCosts.all(projectPath);
@@ -1263,6 +1380,137 @@ export function getAgentRunsDaily() {
   return runStmts.dailyRuns.all();
 }
 
+// ── Notifications ────────────────────────────────────────
+const notifStmts = {
+  insert: db.prepare(
+    `INSERT INTO notifications (type, title, body, metadata, source_session_id, source_agent_id)
+     VALUES (?, ?, ?, ?, ?, ?)`
+  ),
+  history: db.prepare(
+    `SELECT * FROM notifications ORDER BY created_at DESC LIMIT ? OFFSET ?`
+  ),
+  historyUnread: db.prepare(
+    `SELECT * FROM notifications WHERE read_at IS NULL ORDER BY created_at DESC LIMIT ? OFFSET ?`
+  ),
+  historyByType: db.prepare(
+    `SELECT * FROM notifications WHERE type = ? ORDER BY created_at DESC LIMIT ? OFFSET ?`
+  ),
+  historyByTypeUnread: db.prepare(
+    `SELECT * FROM notifications WHERE type = ? AND read_at IS NULL ORDER BY created_at DESC LIMIT ? OFFSET ?`
+  ),
+  unreadCount: db.prepare(
+    `SELECT COUNT(*) as count FROM notifications WHERE read_at IS NULL`
+  ),
+  markRead: db.prepare(
+    `UPDATE notifications SET read_at = unixepoch() WHERE id = ? AND read_at IS NULL`
+  ),
+  markAllRead: db.prepare(
+    `UPDATE notifications SET read_at = unixepoch() WHERE read_at IS NULL`
+  ),
+  markReadBefore: db.prepare(
+    `UPDATE notifications SET read_at = unixepoch() WHERE read_at IS NULL AND created_at < ?`
+  ),
+  purgeOld: db.prepare(
+    `DELETE FROM notifications WHERE created_at < unixepoch() - (? * 86400)`
+  ),
+  markStaleRead: db.prepare(
+    `UPDATE notifications SET read_at = unixepoch() WHERE read_at IS NULL AND created_at < unixepoch() - (7 * 86400)`
+  ),
+};
+
+export function createNotification(type, title, body = null, metadata = null, sourceSessionId = null, sourceAgentId = null) {
+  const result = notifStmts.insert.run(type, title, body, metadata, sourceSessionId, sourceAgentId);
+  return {
+    id: result.lastInsertRowid,
+    type, title, body, metadata,
+    source_session_id: sourceSessionId,
+    source_agent_id: sourceAgentId,
+    read_at: null,
+    created_at: Math.floor(Date.now() / 1000),
+  };
+}
+
+export function getNotificationHistory(limit = 20, offset = 0, unreadOnly = false, type = null) {
+  if (type && unreadOnly) return notifStmts.historyByTypeUnread.all(type, limit, offset);
+  if (type) return notifStmts.historyByType.all(type, limit, offset);
+  if (unreadOnly) return notifStmts.historyUnread.all(limit, offset);
+  return notifStmts.history.all(limit, offset);
+}
+
+export function getUnreadNotificationCount() {
+  return notifStmts.unreadCount.get().count;
+}
+
+export function markNotificationsRead(ids) {
+  const tx = db.transaction((idList) => {
+    for (const id of idList) notifStmts.markRead.run(id);
+  });
+  tx(ids);
+}
+
+export function markAllNotificationsRead() {
+  notifStmts.markAllRead.run();
+}
+
+export function markNotificationsReadBefore(timestamp) {
+  notifStmts.markReadBefore.run(timestamp);
+}
+
+export function purgeOldNotifications(days = 90) {
+  notifStmts.markStaleRead.run();
+  notifStmts.purgeOld.run(days);
+}
+
+// ── Worktrees ─────────────────────────────────────────────
+const wtStmts = {
+  create: db.prepare(
+    `INSERT INTO worktrees (id, session_id, project_path, worktree_path, branch_name, base_branch, status, user_prompt)
+     VALUES (?, ?, ?, ?, ?, ?, 'active', ?)`
+  ),
+  get: db.prepare(`SELECT * FROM worktrees WHERE id = ?`),
+  listByProject: db.prepare(
+    `SELECT * FROM worktrees WHERE project_path = ? ORDER BY created_at DESC`
+  ),
+  listActive: db.prepare(
+    `SELECT * FROM worktrees WHERE status IN ('active', 'completed') ORDER BY created_at DESC`
+  ),
+  updateStatus: db.prepare(
+    `UPDATE worktrees SET status = ?, completed_at = unixepoch() WHERE id = ?`
+  ),
+  updateSession: db.prepare(
+    `UPDATE worktrees SET session_id = ? WHERE id = ?`
+  ),
+  delete: db.prepare(`DELETE FROM worktrees WHERE id = ?`),
+};
+
+export function createWorktreeRecord(id, sessionId, projectPath, worktreePath, branchName, baseBranch, userPrompt) {
+  wtStmts.create.run(id, sessionId, projectPath, worktreePath, branchName, baseBranch, userPrompt);
+}
+
+export function getWorktreeRecord(id) {
+  return wtStmts.get.get(id);
+}
+
+export function listWorktreesByProject(projectPath) {
+  return wtStmts.listByProject.all(projectPath);
+}
+
+export function listActiveWorktrees() {
+  return wtStmts.listActive.all();
+}
+
+export function updateWorktreeStatus(id, status) {
+  wtStmts.updateStatus.run(status, id);
+}
+
+export function updateWorktreeSession(id, sessionId) {
+  wtStmts.updateSession.run(sessionId, id);
+}
+
+export function deleteWorktreeRecord(id) {
+  wtStmts.delete.run(id);
+}
+
 // ── Memories (persistent cross-session context) ──────────
 function hashContent(projectPath, content) {
   return createHash("sha256").update(`${projectPath}:${content}`).digest("hex");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudeck",
-  "version": "1.1.1",
+  "version": "1.3.0",
   "type": "module",
   "description": "A browser-based UI for Claude Code — chat, run workflows, manage MCP servers, track costs, and orchestrate autonomous agents from a local web interface. Installable as a PWA.",
   "main": "server.js",
@@ -42,7 +42,11 @@
     "node": ">=18.0.0"
   },
   "scripts": {
-    "start": "node server.js"
+    "start": "node server.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "test:perf": "vitest run --config vitest.config.perf.js"
   },
   "dependencies": {
     "@anthropic-ai/claude-code": "^1.0.128",
@@ -51,5 +55,11 @@
     "express": "^4",
     "web-push": "^3.6.7",
     "ws": "^8"
+  },
+  "devDependencies": {
+    "@vitest/coverage-v8": "^4.1.0",
+    "happy-dom": "^20.8.4",
+    "supertest": "^7.2.2",
+    "vitest": "^4.1.0"
   }
 }

package/public/css/core/responsive.css

@@ -150,8 +150,8 @@ body.sidebar-open #sidebar-backdrop {
     padding: 6px 8px;
   }
 
-  /* Hide toolbox/agent/workflow buttons on mobile */
-  .input-bar > .toolbox-toggle {
+  /* Hide toolbox strip on mobile */
+  .toolbox-strip {
     display: none;
   }