fied 0.2.7 → 0.2.8

package/dist/bin.js

@@ -274,7 +274,15 @@ async function share(options) {
     console.log(`  Size:     ${cols}x${rows}`);
     console.log("");
   }
-  const bridge = new RelayBridge(relayTarget, cryptoKey, keyFragment, pty, options.background, options.sessionId);
+  const bridge = new RelayBridge(
+    relayTarget,
+    cryptoKey,
+    keyFragment,
+    pty,
+    options.background,
+    options.showReadonlyLink,
+    options.sessionId
+  );
   const onUrl = (url) => {
     if (options.background) {
       const sessionId = bridge.getSessionId();
@@ -352,19 +360,27 @@ async function createSession(relayHttpBase) {
     throw new Error(`Failed to create session: ${res.status} ${res.statusText}`);
   }
   const data = await res.json();
-  return data.sessionId;
+  if (typeof data.sessionId !== "string" || typeof data.viewerAccessToken !== "string" || typeof data.readonlyAccessToken !== "string") {
+    throw new Error("Invalid session creation response");
+  }
+  return {
+    sessionId: data.sessionId,
+    viewerAccessToken: data.viewerAccessToken,
+    readonlyAccessToken: data.readonlyAccessToken
+  };
 }
 var WS_CONNECT_TIMEOUT_MS = 1e4;
 function typeAAD(type) {
   return new Uint8Array([type & 255]);
 }
 var RelayBridge = class {
-  constructor(relayTarget, key, keyFragment, pty, silent = false, sessionId) {
+  constructor(relayTarget, key, keyFragment, pty, silent = false, showReadonlyLink = false, sessionId) {
     this.relayTarget = relayTarget;
     this.key = key;
     this.keyFragment = keyFragment;
     this.pty = pty;
     this.silent = silent;
+    this.showReadonlyLink = showReadonlyLink;
     this.sessionId = sessionId ?? null;
     this.pty.onData((data) => {
       if (this.ws?.readyState === WebSocket.OPEN) {
@@ -380,6 +396,8 @@ var RelayBridge = class {
   encoder = new TextEncoder();
   decoder = new TextDecoder();
   sessionId = null;
+  viewerAccessToken = null;
+  readonlyAccessToken = null;
   onUrl = null;
   invalidResizeFrames = 0;
   invalidInputFrames = 0;
@@ -395,19 +413,29 @@ var RelayBridge = class {
     }
     if (!this.sessionId) {
       try {
-        this.sessionId = await createSession(this.relayTarget.httpBase);
+        const created = await createSession(this.relayTarget.httpBase);
+        this.sessionId = created.sessionId;
+        this.viewerAccessToken = created.viewerAccessToken;
+        this.readonlyAccessToken = created.readonlyAccessToken;
       } catch {
         if (!this.silent) console.error("  \x1B[31mRelay unreachable, retrying...\x1B[0m");
         this.scheduleReconnect();
         return;
       }
       const shareUrl = new URL(`s/${this.sessionId}`, this.relayTarget.httpBase);
+      if (!this.viewerAccessToken || !this.readonlyAccessToken) {
+        throw new Error("missing access tokens");
+      }
+      shareUrl.searchParams.set("token", this.viewerAccessToken);
       const interactiveUrl = `${shareUrl.toString()}#${this.keyFragment}`;
       const readonlyShareUrl = new URL(`${shareUrl.pathname.replace(/\/$/, "")}/v`, shareUrl);
+      readonlyShareUrl.searchParams.set("token", this.readonlyAccessToken);
       const readonlyUrl = `${readonlyShareUrl.toString()}#${this.keyFragment}`;
       if (!this.silent) {
         await printShareLinkWithQr("interactive", interactiveUrl);
-        await printShareLinkWithQr("view-only", readonlyUrl);
+        if (this.showReadonlyLink) {
+          await printShareLinkWithQr("view-only", readonlyUrl);
+        }
         console.log("");
         console.log("  \x1B[2mThe encryption key is in the URL fragment (#) \u2014 the server never sees it.\x1B[0m");
         console.log("  \x1B[2mPress Ctrl+C to stop sharing.\x1B[0m");
@@ -661,12 +689,14 @@ if (args.includes("--help") || args.includes("-h")) {
   \x1B[1mOptions:\x1B[0m
     --session, -s <name>   tmux session to share (auto-detected if only one)
     --relay <url>          relay server URL (default: https://fied.app)
+    --view-only            print a separate view-only share link
     --allow-insecure-relay allow http://localhost relay (dev only)
     --help, -h             show this help
 
   \x1B[1mExamples:\x1B[0m
     npx fied                       share the only tmux session
     npx fied -s mysession          share a specific session
+    npx fied --view-only           include a view-only link
     npx fied --relay http://localhost:8787   use a local relay
 `);
   process.exit(0);
@@ -680,6 +710,8 @@ if (args.includes("--__daemon")) {
       options.relay = args[++i];
     } else if (args[i] === "--allow-insecure-relay") {
       options.allowInsecureRelay = true;
+    } else if (args[i] === "--view-only") {
+      options.showReadonlyLink = true;
     } else if (args[i] === "--__session-id" && args[i + 1]) {
       options.sessionId = args[++i];
     } else if (args[i] === "--__key" && args[i + 1]) {
@@ -697,6 +729,8 @@ async function main() {
   let relay;
   let session;
   let allowInsecureRelay = false;
+  let showReadonlyLink = false;
+  let showReadonlyLinkExplicit = false;
   for (let i = 0; i < args.length; i++) {
     if ((args[i] === "--session" || args[i] === "-s") && args[i + 1]) {
       session = args[++i];
@@ -704,6 +738,9 @@ async function main() {
       relay = args[++i];
     } else if (args[i] === "--allow-insecure-relay") {
       allowInsecureRelay = true;
+    } else if (args[i] === "--view-only") {
+      showReadonlyLink = true;
+      showReadonlyLinkExplicit = true;
     } else if (!args[i].startsWith("-")) {
       continue;
     } else {
@@ -763,10 +800,14 @@ async function main() {
   if (!session) {
     throw new Error("No tmux session selected");
   }
+  if (!showReadonlyLinkExplicit && process.stdin.isTTY && process.stderr.isTTY) {
+    showReadonlyLink = await confirm("Enable view-only share link?");
+  }
   await share({
     session,
     relay,
     allowInsecureRelay,
+    showReadonlyLink,
     onShareUrl: async (url) => {
       const background = await confirm("Run in background?");
       if (!background) {

package/package.json

@@ -1,11 +1,9 @@
 {
   "name": "fied",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "description": "Share your tmux session in the browser with end-to-end encryption",
   "type": "module",
-  "bin": {
-    "fied": "./dist/bin.js"
-  },
+  "bin": "dist/bin.js",
   "files": [
     "dist/bin.js",
     "README.md"