herdr-remote-relay 0.3.18 → 0.3.20

package/dist/protocol/messages.d.ts

@@ -9,8 +9,11 @@ export declare const CAPABILITY: {
     readonly idleHeartbeat: "idle_heartbeat";
     /** The host routes output by 16-bit stream index (v2 frames). */
     readonly binaryFrameV2: "binary_frame_v2";
+    /** The host can open an elevated PowerShell as a tab of its Windows Herdr. */
+    readonly adminTabs: "admin_tabs";
 };
 export type ClientRole = 'controller' | 'viewer';
+export type HostShellProfile = 'posix' | 'cmd' | 'powershell' | 'git-bash';
 export interface ClientHelloMessage {
     type: 'hello';
     protocol: 1;
@@ -49,6 +52,13 @@ export interface ClientPasteFileMessage {
 export interface ClientHerdrStartMessage {
     type: 'herdr_start';
 }
+/**
+ * Open an elevated PowerShell as a new tab of the workstation's Herdr. Carries
+ * nothing: the host decides what runs, through its own pre-authorized broker.
+ */
+export interface ClientAdminTabOpenMessage {
+    type: 'admin_tab_open';
+}
 /** One slice of an announced font file, by the file's hash. */
 export interface ClientHostFontChunkRequestMessage {
     type: 'host_font_chunk_request';
@@ -66,13 +76,17 @@ export interface ClientHostFontSubsetRequestMessage {
 export interface ClientHostFontRefreshMessage {
     type: 'host_font_refresh';
 }
-export type ClientJsonMessage = ClientHelloMessage | ClientHostFontChunkRequestMessage | ClientHostFontSubsetRequestMessage | ClientHostFontRefreshMessage | ClientClaimControlMessage | ClientReleaseControlMessage | ClientResizeMessage | ClientPingMessage | ClientPasteFileMessage | ClientHerdrStartMessage;
+export type ClientJsonMessage = ClientHelloMessage | ClientHostFontChunkRequestMessage | ClientHostFontSubsetRequestMessage | ClientHostFontRefreshMessage | ClientClaimControlMessage | ClientReleaseControlMessage | ClientResizeMessage | ClientPingMessage | ClientPasteFileMessage | ClientHerdrStartMessage | ClientAdminTabOpenMessage;
 export interface ServerReadyMessage {
     type: 'ready';
     role: ClientRole;
     controllerId?: string | null;
     hostId?: string;
     hostname?: string;
+    platform?: string;
+    shellProfile?: HostShellProfile;
+    /** The relay and Windows host can both open an administrator terminal tab. */
+    adminTerminalSupported?: boolean;
     clientId?: string;
     terminalPalette?: HostTerminalPalette | null;
     terminalFont?: HostTerminalFont | null;
@@ -110,6 +124,9 @@ export interface ServerSessionRestartedMessage {
     cols?: number;
     rows?: number;
     hostname?: string;
+    platform?: string;
+    shellProfile?: HostShellProfile;
+    adminTerminalSupported?: boolean;
     terminalPalette?: HostTerminalPalette | null;
     terminalFont?: HostTerminalFont | null;
 }
@@ -210,6 +227,7 @@ export interface HostHelloMessage {
     password?: string | null;
     hostname?: string;
     platform?: string;
+    shellProfile?: HostShellProfile;
     arch?: string;
     terminalPalette?: HostTerminalPalette | null;
     terminalFont?: HostTerminalFont | null;
@@ -292,6 +310,9 @@ export interface RelayResizeMessage extends StreamAddressed {
 export interface RelayHerdrStartMessage extends StreamAddressed {
     type: 'herdr_start';
 }
+export interface RelayAdminTabOpenMessage extends StreamAddressed {
+    type: 'admin_tab_open';
+}
 export interface RelayHostFontRefreshMessage extends StreamAddressed {
     type: 'host_font_refresh';
 }
@@ -317,5 +338,5 @@ export interface RelayErrorMessage {
     code: string;
     message: string;
 }
-export type RelayToHostMessage = RelayHostReadyMessage | RelayClientCountMessage | RelaySessionStartMessage | RelaySessionStopMessage | RelayResizeMessage | RelayHerdrStartMessage | RelayHostFontRefreshMessage | RelayHostFontChunkRequestMessage | RelayHostFontSubsetRequestMessage | RelayPasteFileMessage | RelayErrorMessage;
+export type RelayToHostMessage = RelayHostReadyMessage | RelayClientCountMessage | RelaySessionStartMessage | RelaySessionStopMessage | RelayResizeMessage | RelayHerdrStartMessage | RelayAdminTabOpenMessage | RelayHostFontRefreshMessage | RelayHostFontChunkRequestMessage | RelayHostFontSubsetRequestMessage | RelayPasteFileMessage | RelayErrorMessage;
 export {};

package/dist/protocol/messages.js

@@ -15,4 +15,6 @@ export const CAPABILITY = {
     idleHeartbeat: 'idle_heartbeat',
     /** The host routes output by 16-bit stream index (v2 frames). */
     binaryFrameV2: 'binary_frame_v2',
+    /** The host can open an elevated PowerShell as a tab of its Windows Herdr. */
+    adminTabs: 'admin_tabs',
 };

package/dist/server/client-channel.js

@@ -10,6 +10,8 @@ import { enqueueDelayedSend, notifyHostClientCount } from './transport.js';
 const HERDR_START_REPEAT_MS = 3_000;
 /** A window asks its workstation to re-read the terminal font at most this often. */
 const FONT_REFRESH_REPEAT_MS = 2_000;
+/** A window opens an administrator tab at most this often. */
+const ADMIN_TAB_REPEAT_MS = 1_000;
 function verifyImageMagicBytes(mime, dataBase64) {
     if (typeof dataBase64 !== 'string' || dataBase64.length === 0)
         return false;
@@ -136,6 +138,9 @@ export function handleClientConnection(relay, ws, req) {
                 controllerId: null,
                 hostId: host.id,
                 hostname: host.hostname,
+                platform: host.platform,
+                ...(host.shellProfile ? { shellProfile: host.shellProfile } : {}),
+                adminTerminalSupported: host.adminTabsAvailable,
                 clientId: client.id,
                 // Delivered with `ready`, before the first PTY byte, so the terminal
                 // is painted in the host's colors from its very first frame.
@@ -255,6 +260,30 @@ function handleClientMessage(relay, client, raw, isBinary) {
             });
         }
     }
+    else if (message.type === 'admin_tab_open') {
+        // Routed like herdr_start. The host runs the fixed elevated PowerShell of
+        // its own broker; nothing in this message chooses what starts.
+        if (!client.session || !isOpen(host.ws))
+            return;
+        if (!host.adminTabsAvailable) {
+            jsonSend(client.ws, {
+                type: 'error',
+                code: 'admin_terminal_unsupported',
+                message: 'Update the host connector to open administrator terminals.',
+            });
+            return;
+        }
+        // A double tap is one request; a second tab needs a second, later tap.
+        const now = Date.now();
+        if (client.adminTabAt && now - client.adminTabAt < ADMIN_TAB_REPEAT_MS)
+            return;
+        client.adminTabAt = now;
+        jsonSend(host.ws, {
+            type: 'admin_tab_open',
+            clientId: client.session.streamId,
+            streamId: client.session.streamId,
+        });
+    }
     else if (message.type === 'host_font_chunk_request') {
         requestFontChunk(host, client, message);
     }

package/dist/server/host-channel.js

@@ -15,6 +15,8 @@ function createHostRecord(message, ws, pending, clients = new Set()) {
         ws,
         hostname: typeof message.hostname === 'string' ? message.hostname.slice(0, 128) : os.hostname(),
         platform: typeof message.platform === 'string' ? message.platform.slice(0, 32) : process.platform,
+        ...(message.shellProfile === 'git-bash' ? { shellProfile: message.shellProfile } : {}),
+        adminTabsAvailable: capabilities.includes(CAPABILITY.adminTabs),
         arch: typeof message.arch === 'string' ? message.arch.slice(0, 32) : process.arch,
         connectedAt: new Date(pending.connectedAt).toISOString(),
         connectedAtMs: pending.connectedAt,

package/dist/server/sessions.js

@@ -66,6 +66,9 @@ export function startSession(relay, host, client, { restarted = false } = {}) {
             cols: client.cols,
             rows: client.rows,
             hostname: host.hostname,
+            platform: host.platform,
+            ...(host.shellProfile ? { shellProfile: host.shellProfile } : {}),
+            adminTerminalSupported: host.adminTabsAvailable,
             terminalPalette: host.terminalPalette || null,
             terminalFont: host.terminalFont || null,
         });

package/dist/server/types.d.ts

@@ -1,7 +1,7 @@
 import type { WebSocket } from 'ws';
 import type { AuthStore } from '../auth-store.js';
 import type { RelayMetrics } from '../metrics.js';
-import type { ClientRole, HostPtySummary, ServerAgentStatusMessage, ServerUpdateStatusMessage } from '../protocol/messages.js';
+import type { ClientRole, HostPtySummary, ServerAgentStatusMessage, ServerUpdateStatusMessage, HostShellProfile } from '../protocol/messages.js';
 import type { HostTerminalFont, HostTerminalPalette } from '../protocol/terminal.js';
 import type { RelayConfig } from '../relay-config.js';
 /** A WebSocket plus the liveness flag the heartbeat keeps on it. */
@@ -23,6 +23,9 @@ export interface RelayHost {
     ws: RelaySocket | null;
     hostname: string;
     platform: string;
+    shellProfile?: HostShellProfile;
+    /** The host can open an administrator terminal as a Herdr tab. */
+    adminTabsAvailable: boolean;
     arch: string;
     connectedAt: string;
     connectedAtMs: number;
@@ -72,6 +75,7 @@ export interface RelayClient {
     cols: number;
     rows: number;
     herdrStartAt?: number;
+    adminTabAt?: number;
     fontRefreshAt?: number;
     /** When each outstanding font chunk request was sent. */
     fontChunkRequests?: number[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "herdr-remote-relay",
-  "version": "0.3.18",
+  "version": "0.3.20",
   "description": "Standalone relay server and web terminal for Herdr Remote",
   "license": "MIT",
   "type": "module",