cmux-ssh-here 0.3.0 → 0.4.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Viktor Silakov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -15,7 +15,9 @@ Output:
   https://cmux.com/deeplink/ssh?host=192.168.1.42&port=52968&user=wudUKicRFRw3&host-key-policy=accept-new&title=your-mac
 ```
 
-Open the link — cmux connects on its own. `Ctrl-C` in the terminal stops the server.
+Open the link — cmux connects on its own. The server terminal shows a live dashboard: the current link, a countdown until it regenerates, and the list of connected sessions. `Ctrl-C` stops the server.
+
+The link (and its token) is valid for **3 minutes**, then a fresh one is generated — already-connected sessions stay alive; only new connections need the new link.
 
 ## How it works
 
@@ -40,4 +42,5 @@ Open the link — cmux connects on its own. `Ctrl-C` in the terminal stops the s
 ## Options
 
 - `PORT=2222 npx cmux-ssh-here` — fixed port (random free port by default).
-- `CMUX_SSH_DEBUG=1 npx cmux-ssh-here` — log incoming auth/env/exec/shell requests to stderr (troubleshooting).
+- `CMUX_SSH_TTL=600 npx cmux-ssh-here` — link/token lifetime in seconds before regeneration (default 180).
+- `CMUX_SSH_DEBUG=1 npx cmux-ssh-here` — log incoming auth/env/exec/shell requests to stderr (disables the live dashboard).

package/bin.js

@@ -31,7 +31,18 @@ const { default: pty } = await import("node-pty");
 
 // ponytail: hex (not base64url) — cmux rejects a user that starts with "-",
 // and an ssh client treats a leading-dash username as a flag. Hex is URL/ssh-safe.
-const token = randomBytes(12).toString("hex"); // secret carried in user=<token>
+const TTL_SECONDS = Number(process.env.CMUX_SSH_TTL) || 180; // link/token lifetime before regeneration
+let token; // secret carried in user=<token>; rotated every TTL_SECONDS
+let remaining; // seconds until the next regeneration
+const regenerateToken = () => {
+  token = randomBytes(12).toString("hex");
+  remaining = TTL_SECONDS;
+};
+regenerateToken();
+
+// Active authenticated connections, shown live in the server terminal.
+const sessions = new Map();
+let nextSid = 0;
 const { privateKey } = generateKeyPairSync("rsa", {
   // ponytail: rsa PEM parses cleanly in ssh2 (ed25519 PKCS8 is hit-or-miss)
   modulusLength: 2048,
@@ -233,11 +244,21 @@ function attachSFTP(accept) {
 
 const serverCfg = { hostKeys: [privateKey] };
 if (process.env.CMUX_SSH2_DEBUG) serverCfg.debug = (m) => { if (/SFTP|CHANNEL|EOF|CLOSE/.test(m)) console.error("[ssh2]", m); };
-const server = new Server(serverCfg, (client) => {
+let render = () => {}; // assigned once the server is listening (knows ip/port)
+const server = new Server(serverCfg, (client, info) => {
   client.on("authentication", (ctx) => {
     debug("auth", ctx.method, ctx.username);
     return ctx.username === token ? ctx.accept() : ctx.reject();
   });
+  client.on("ready", () => {
+    const id = nextSid++;
+    sessions.set(id, { ip: info?.ip || "?", since: Date.now() });
+    render();
+    client.on("close", () => {
+      sessions.delete(id);
+      render();
+    });
+  });
   client.on("session", (accept) => {
     const session = accept();
     const term = { term: "xterm-256color", cols: 80, rows: 24, env: {} };
@@ -289,14 +310,77 @@ server.listen(PORT, "0.0.0.0", function () {
     process.exit(1);
   }
   const port = this.address().port;
-  const params = new URLSearchParams({
-    host: ip,
-    port: String(port),
-    user: token,
-    "host-key-policy": "accept-new",
-    title: os.hostname(),
-  });
-  console.log(`\n  Connect to this machine via cmux over the LAN`);
-  console.log(`  (shell as ${os.userInfo().username}; Ctrl-C here to stop):\n`);
-  console.log(`  https://cmux.com/deeplink/ssh?${params}\n`);
+  const user = os.userInfo().username;
+  const buildLink = () => {
+    const params = new URLSearchParams({
+      host: ip,
+      port: String(port),
+      user: token,
+      "host-key-policy": "accept-new",
+      title: os.hostname(),
+    });
+    return `https://cmux.com/deeplink/ssh?${params}`;
+  };
+
+  // ponytail: in debug mode skip the dashboard so logs stay readable.
+  const liveUI = !process.env.CMUX_SSH_DEBUG;
+  const ago = (since) => `${Math.floor((Date.now() - since) / 1000)}s`;
+
+  // ponytail: never clear the whole screen (that wipes the user's selection and
+  // makes the link impossible to copy). Repaint the static block only on real
+  // events (link rotation, session add/remove); the per-second countdown rewrites
+  // just its own line via "\r", leaving the link above untouched and selectable.
+  const countdownLine = () => `  ↻ Link regenerates in ${remaining}s — copy it above. Ctrl-C to stop.`;
+
+  // Collapse the raw SSH connections (cmux opens several from one machine:
+  // ControlMaster, the daemon channel, short-lived probes) into one row per IP.
+  const sessionRows = () => {
+    const byIp = new Map();
+    for (const s of sessions.values()) {
+      const e = byIp.get(s.ip);
+      if (e) { e.count++; e.since = Math.min(e.since, s.since); }
+      else byIp.set(s.ip, { count: 1, since: s.since });
+    }
+    return [...byIp.entries()].map(
+      ([ipAddr, e]) => `    • ${ipAddr}  connected ${ago(e.since)} ago${e.count > 1 ? `  (${e.count} connections)` : ""}`
+    );
+  };
+
+  const block = () => {
+    const lines = [
+      "",
+      `  cmux-ssh-here — shell as ${user} over the LAN`,
+      "",
+      "  Open in cmux:",
+      `  ${buildLink()}`,
+      "",
+    ];
+    const rows = sessionRows();
+    if (rows.length) lines.push(`  Connected (${rows.length}):`, ...rows);
+    else lines.push("  No active sessions yet.");
+    lines.push("");
+    return lines.join("\n");
+  };
+
+  // Repaint the block, then leave the cursor parked on the countdown line.
+  render = () => {
+    if (!liveUI) return;
+    process.stdout.write(`\n${block()}\n${countdownLine()}`);
+  };
+
+  if (liveUI) render();
+  else console.log(`\n  Open in cmux (regenerates in ${remaining}s):\n  ${buildLink()}\n`);
+
+  setInterval(() => {
+    remaining--;
+    if (remaining <= 0) {
+      regenerateToken();
+      // Link changed: repaint the whole block (rare — once per TTL).
+      if (liveUI) render();
+      else console.log(`\n  [link regenerated]\n  ${buildLink()}\n`);
+      return;
+    }
+    // Common case: rewrite only the countdown line in place — no screen churn.
+    if (liveUI) process.stdout.write(`\r\x1b[2K${countdownLine()}`);
+  }, 1000);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cmux-ssh-here",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "description": "Spin up a token-auth SSH server and print a cmux deep link to connect over LAN",
   "type": "module",
   "bin": {
@@ -18,6 +18,14 @@
     "remote"
   ],
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/viktor-silakov/cmux-ssh-here.git"
+  },
+  "homepage": "https://github.com/viktor-silakov/cmux-ssh-here#readme",
+  "bugs": {
+    "url": "https://github.com/viktor-silakov/cmux-ssh-here/issues"
+  },
   "engines": {
     "node": ">=18"
   },