kennel 0.2.25 → 0.2.27

package/dist/cli/dispatch.js

@@ -54,8 +54,8 @@ export async function dispatch(argv) {
         await viewer(['--static', ...args]);
         return;
     }
-    if (command === 'share') {
-        // Deliberate remote share (LAN default; --tailscale for outside the
+    if (command === 'share' || command === 'display') {
+        // Deliberate remote display (LAN default; --tailscale for outside the
         // house). Runs a second remote-scoped static server; the plain 5180
         // viewer stays loopback-only.
         const { share } = await import('../package/preview.js');

package/dist/cli/usage.js

@@ -13,7 +13,7 @@ export function usage() {
   kennel open|o [folder] [--open] [--host <host>] [--port <port>] [--dry-run]
   knl <plugin-id|alias> [folder] [--item <id>] [--open] [--dry-run]
   kennel serve [folder] [--host <host>] [--port <port>] [--lan|--tailscale]
-  kennel share [folder] [--lan|--tailscale] [--port <port>] [--dry-run]
+  kennel share|display [folder] [--lan|--tailscale] [--port <port>] [--dry-run]
   kennel dev [path] [--config <json-file>] [--port <port>] [--script <script>] [--dry-run] [-- <args...>]
   kennel extension install
   kennel mcp generate [path] [--config <json-file>] [--data-only|--function-only]
@@ -25,6 +25,12 @@ export function usage() {
   kennel deploy [path] [--config <json-file>] [legacy alias for publish]
   kennel dp [path] [--config <json-file>] [legacy alias for publish]
 
+In a terminal, the viewer shows the folder name, repository name, and an action menu.
+Use Up/Down to move and Enter to choose.
+Shortcuts: o open, s share to mobile, q exit.
+Esc or Ctrl+C also exits.
+Without an interactive terminal, the viewer prints its URL without a menu.
+
 Installed plugin ids are commands, for example knl tasks or knl calendar.
 Plugins can declare extra aliases, for example knl mail for plugin id email.
 Use --item <id> for a plugin detail view. Built-in commands take priority.

package/dist/package/preview.d.ts

@@ -7,3 +7,7 @@
  * sources, while staying type-checked against that source of truth.
  */
 export declare function share(input: string[]): Promise<void>;
+export declare function startLanShare(target: {
+    root: string;
+    target?: string;
+}): Promise<import("kennel-preview/terminal").PreviewShare>;

package/dist/package/preview.js

@@ -211,9 +211,9 @@ var init_document_kinds = __esm(() => {
 });
 
 // packages/preview/src/terminal.ts
-import { execFile } from "node:child_process";
+import { execFile, execFileSync } from "node:child_process";
 import { basename } from "node:path";
-import { emitKeypressEvents } from "node:readline";
+import { clearScreenDown, cursorTo, emitKeypressEvents } from "node:readline";
 function openPreview(url) {
   const command = process.platform === "darwin" ? "/usr/bin/open" : process.platform === "win32" ? "explorer.exe" : "xdg-open";
   execFile(command, [url], (error) => {
@@ -221,17 +221,39 @@ function openPreview(url) {
       console.error(`Could not open browser: ${error.message}`);
   });
 }
-function previewTerminal(url, target) {
+function copyPreviewLink(url) {
+  const command = process.platform === "darwin" ? "/usr/bin/pbcopy" : process.platform === "win32" ? "clip" : process.env.WAYLAND_DISPLAY ? "wl-copy" : "xclip";
+  const args = command === "xclip" ? ["-selection", "clipboard"] : [];
+  return new Promise((done, fail) => {
+    const child = execFile(command, args, (error) => error ? fail(error) : done());
+    child.stdin?.on("error", fail);
+    child.stdin?.end(url);
+  });
+}
+function repositoryName(folder) {
+  try {
+    const root = execFileSync("git", ["-C", folder, "rev-parse", "--show-toplevel"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 1000
+    });
+    return terminalText(basename(root.trim()));
+  } catch {
+    return;
+  }
+}
+function previewTerminal(url, target, startShare) {
   url = new URL(url).href;
   const input = process.stdin;
   const output = process.stdout;
   const terminal = Boolean(output.isTTY && process.env.TERM !== "dumb");
   const interactive = terminal && Boolean(input.isTTY);
-  const name = (basename(target.target ?? target.root) || target.root).replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
-  const label = `(open ${name})`;
+  const name = terminalText(basename(target.target ?? target.root) || target.root);
+  const title = terminalText(basename(target.root) || target.root);
+  const repository = interactive ? repositoryName(target.root) : undefined;
   const color = terminal && process.env.NO_COLOR === undefined && output.hasColors();
-  const accent = (text) => color ? `\x1B[36m${text}\x1B[39m` : text;
-  const link = terminal ? `\x1B]8;;${url}\x1B\\${accent(label)}\x1B]8;;\x1B\\` : `${label}
+  const accent = (text) => color ? `\x1B[32m${text}\x1B[39m` : text;
+  const link = (label) => terminal ? `\x1B]8;;${url}\x1B\\${accent(label)}\x1B]8;;\x1B\\` : `${label}
   ${url}`;
   const wasRaw = Boolean(input.isRaw);
   const wasFlowing = input.readableFlowing === true;
@@ -240,6 +262,74 @@ function previewTerminal(url, target) {
     resolveClosed = resolve;
   });
   let finished = false;
+  let busy = false;
+  let selected = 0;
+  let status = "";
+  let share;
+  const render = () => {
+    if (!interactive || finished)
+      return;
+    cursorTo(output, 0, 0);
+    clearScreenDown(output);
+    const width = Math.max(1, (output.columns || 80) - 5);
+    const fit = (text) => {
+      const characters = Array.from(terminalText(text));
+      return characters.length > width ? characters.slice(0, width - 1).join("") + "…" : characters.join("");
+    };
+    const count = Math.max(1, Math.min(8, (output.rows || 24) - 12));
+    const start = Math.max(0, Math.min(selected - Math.floor(count / 2), actions.length - count));
+    const choices = actions.slice(start, start + count).map((item, index) => {
+      const label = fit(item.shortcut ? `[${item.shortcut}] ${item.label}` : item.label);
+      return start + index === selected ? accent(`  › ${label}`) : `    ${label}`;
+    });
+    output.write([
+      `  \x1B[1m${link(fit(title))}\x1B[22m`,
+      ...repository ? [`  ${color ? "\x1B[2m" : ""}${fit(repository)}${color ? "\x1B[22m" : ""}`] : [],
+      ...target.target ? [`  File: ${fit(name)}`] : [],
+      "",
+      ...choices,
+      "",
+      "  ↑ ↓ to move · Enter to choose · Esc or Ctrl+C to exit",
+      ...actions.length > count ? [`  ${selected + 1} / ${actions.length}`] : [],
+      ...status ? ["", `  ${status}`] : [],
+      ""
+    ].join(`
+`));
+  };
+  const shareFolder = async () => {
+    status = "Preparing a password-protected Wi-Fi link…";
+    render();
+    try {
+      share ??= startShare();
+      let active;
+      try {
+        active = await share;
+      } catch (error) {
+        share = undefined;
+        throw error;
+      }
+      if (finished)
+        return;
+      status = `Wi-Fi link: ${active.url}
+  Username: ${active.username} · Password: ${active.password}
+  Password required. Send the password separately. Same Wi-Fi only.
+  Self-signed HTTPS (24 hours): expect a certificate warning.
+  Verify SHA-256 before trusting the certificate:
+  ${active.fingerprint}
+  Keep this command running. Ctrl+C stops sharing.`;
+      render();
+      try {
+        await copyPreviewLink(active.url);
+        status += `
+  Wi-Fi link copied to clipboard (without the password).`;
+      } catch (error) {
+        status += `
+  Could not copy link: ${terminalText(error instanceof Error ? error.message : String(error))}`;
+      }
+    } catch (error) {
+      status = `Could not share folder: ${terminalText(error instanceof Error ? error.message : String(error))}`;
+    }
+  };
   const close = () => {
     if (finished)
       return;
@@ -250,39 +340,83 @@ function previewTerminal(url, target) {
     if (interactive) {
       input.off("keypress", keypress);
       input.off("end", close);
+      output.off("resize", render);
+      output.write("\x1B[?25h\x1B[?1049l");
       input.setRawMode(wasRaw);
       if (!wasFlowing)
         input.pause();
     }
-    resolveClosed();
+    if (share) {
+      share.then((active) => active.close()).catch((error) => {
+        console.error(`  Wi-Fi share stopped: ${error instanceof Error ? error.message : error}`);
+      }).finally(() => resolveClosed());
+    } else
+      resolveClosed();
+  };
+  const actions = [
+    { label: "Open in browser", shortcut: "o", run: () => {
+      openPreview(url);
+      status = "Browser open requested.";
+    } },
+    { label: "Share to another device", shortcut: "s", run: shareFolder },
+    { label: "Exit", shortcut: "q", run: close }
+  ];
+  const activate = async () => {
+    busy = true;
+    try {
+      await actions[selected].run();
+    } catch (error) {
+      status = `Could not complete action: ${terminalText(error instanceof Error ? error.message : String(error))}`;
+    } finally {
+      busy = false;
+      render();
+    }
   };
   const keypress = (_text, key) => {
-    if (key.ctrl && (key.name === "c" || key.name === "d"))
+    if (key.name === "escape" || key.ctrl && (key.name === "c" || key.name === "d")) {
       close();
-    else if (key.name === "o" && !key.ctrl && !key.meta)
-      openPreview(url);
+      return;
+    }
+    if (busy || finished)
+      return;
+    const shortcut = !key.ctrl && !key.meta ? actions.findIndex((item) => item.shortcut === key.name) : -1;
+    if (shortcut !== -1) {
+      selected = shortcut;
+      activate();
+      return;
+    }
+    if (key.name === "up")
+      selected = (selected - 1 + actions.length) % actions.length;
+    else if (key.name === "down")
+      selected = (selected + 1) % actions.length;
+    else if (key.name === "return") {
+      activate();
+      return;
+    } else
+      return;
+    render();
   };
   process.once("SIGINT", close);
   process.once("SIGTERM", close);
   process.once("exit", close);
   if (interactive) {
+    output.write("\x1B[?1049h\x1B[?25l");
+    output.on("resize", render);
     emitKeypressEvents(input);
     input.setRawMode(true);
     input.on("keypress", keypress);
     input.once("end", close);
     input.resume();
   }
-  console.log(`
-  ${link}
-`);
-  if (interactive) {
-    console.log(`  shortcuts:
-    ${accent("o")} - open in browser
-    ctrl+c - exit
+  if (interactive)
+    render();
+  else
+    console.log(`
+  ${link(name)}
 `);
-  }
   return { close, closed, interactive };
 }
+var terminalText = (text) => text.replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
 var init_terminal = () => {};
 
 // node_modules/.bun/openapi-fetch@0.17.0/node_modules/openapi-fetch/dist/index.mjs
@@ -6090,7 +6224,7 @@ var init_src = __esm(() => {
 });
 
 // packages/preview/src/hot-viewer.ts
-import { execFileSync, spawn } from "node:child_process";
+import { execFileSync as execFileSync2, spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { existsSync } from "node:fs";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
@@ -6139,13 +6273,13 @@ function startupLock(host, port) {
   return resolve(tmpdir(), `kennel-hot-viewer-${name}.lock`);
 }
 function lanHost() {
-  const route = execFileSync("/sbin/route", ["-n", "get", "default"], {
+  const route = execFileSync2("/sbin/route", ["-n", "get", "default"], {
     encoding: "utf8"
   });
   const device = route.match(/interface:\s+(\S+)/)?.[1];
   if (!device)
     throw new Error("kennel could not find the local network interface");
-  const host = execFileSync("/usr/sbin/ipconfig", ["getifaddr", device], {
+  const host = execFileSync2("/usr/sbin/ipconfig", ["getifaddr", device], {
     encoding: "utf8"
   }).trim();
   if (!host)
@@ -6206,7 +6340,10 @@ async function hotViewer(options) {
     return;
   }
   const reuse = async () => {
-    const terminal = previewTerminal(viewerUrl, options);
+    const terminal = previewTerminal(viewerUrl, options, async () => {
+      await Promise.resolve().then(() => init_share());
+      return startLanShare(options);
+    });
     if (options.open)
       openPreview(viewerUrl);
     try {
@@ -6262,7 +6399,10 @@ async function hotViewer(options) {
     },
     stdio: ["ignore", "inherit", "inherit"]
   });
-  const terminal = previewTerminal(viewerUrl, options);
+  const terminal = previewTerminal(viewerUrl, options, async () => {
+    await Promise.resolve().then(() => init_share());
+    return startLanShare(options);
+  });
   terminal.closed.then(() => {
     if (child.exitCode === null && child.signalCode === null)
       child.kill("SIGTERM");
@@ -40336,24 +40476,12 @@ var init_server4 = __esm(() => {
   };
 });
 
-// packages/preview/src/share.ts
-import { resolve as resolve15 } from "node:path";
-import { existsSync as existsSync7 } from "node:fs";
-
 // packages/preview/src/viewer.ts
-init_document_kinds();
-init_terminal();
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync6, realpathSync as realpathSync3, statSync as statSync3 } from "node:fs";
 import { createServer as createServer2 } from "node:net";
 import { dirname as dirname11, isAbsolute as isAbsolute8, relative as relative13, resolve as resolve14 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
-var loopbackHosts = new Set([
-  "127.0.0.1",
-  "::1",
-  "::ffff:127.0.0.1",
-  "localhost"
-]);
 function isLoopbackHost(host) {
   return loopbackHosts.has(host) || host.startsWith("127.");
 }
@@ -40528,13 +40656,13 @@ async function availableViewerPort(start, host) {
   throw new Error(`Kennel could not find a free port at or above ${start}`);
 }
 function lanHost2() {
-  const route = execFileSync2("/sbin/route", ["-n", "get", "default"], {
+  const route = execFileSync3("/sbin/route", ["-n", "get", "default"], {
     encoding: "utf8"
   });
   const device = route.match(/interface:\s+(\S+)/)?.[1];
   if (!device)
     throw new Error("kennel could not find the local network interface");
-  const host = execFileSync2("/usr/sbin/ipconfig", ["getifaddr", device], {
+  const host = execFileSync3("/usr/sbin/ipconfig", ["getifaddr", device], {
     encoding: "utf8"
   }).trim();
   if (!host)
@@ -40542,7 +40670,7 @@ function lanHost2() {
   return host;
 }
 function tailscaleHost() {
-  const status = JSON.parse(execFileSync2("tailscale", ["status", "--json"], { encoding: "utf8" }));
+  const status = JSON.parse(execFileSync3("tailscale", ["status", "--json"], { encoding: "utf8" }));
   const host = typeof status.Self?.DNSName === "string" ? status.Self.DNSName.replace(/\.$/, "") : "";
   if (host)
     return host;
@@ -40573,7 +40701,10 @@ async function viewer(input) {
   const existing = await runningViewer(initialViewerUrl);
   if (existing && isSameOrDescendant(existing.root, options.root)) {
     const viewerUrl = popUrl(displayHost, options.port, options);
-    const terminal = previewTerminal(viewerUrl, options);
+    const terminal = previewTerminal(viewerUrl, options, async () => {
+      await Promise.resolve().then(() => init_share());
+      return startLanShare(options);
+    });
     if (options.open)
       openPreview(viewerUrl);
     try {
@@ -40598,10 +40729,13 @@ async function viewer(input) {
   try {
     await api.listen(Number(options.port));
     if (options.tailscale) {
-      execFileSync2("tailscale", ["serve", "--bg", "--yes", options.port]);
+      execFileSync3("tailscale", ["serve", "--bg", "--yes", options.port]);
     }
     const viewerUrl = popUrl(displayHost, options.port, options);
-    const terminal = previewTerminal(viewerUrl, options);
+    const terminal = previewTerminal(viewerUrl, options, async () => {
+      await Promise.resolve().then(() => init_share());
+      return startLanShare(options);
+    });
     if (options.open)
       openPreview(viewerUrl);
     try {
@@ -40613,12 +40747,132 @@ async function viewer(input) {
     await api.close();
   }
   if (options.tailscale) {
-    execFileSync2("tailscale", ["serve", "--https=443", "off"]);
+    execFileSync3("tailscale", ["serve", "--https=443", "off"]);
+  }
+}
+var loopbackHosts;
+var init_viewer = __esm(() => {
+  init_document_kinds();
+  init_terminal();
+  loopbackHosts = new Set([
+    "127.0.0.1",
+    "::1",
+    "::ffff:127.0.0.1",
+    "localhost"
+  ]);
+});
+
+// packages/preview/src/protected-share.ts
+import { execFile as execFile6 } from "node:child_process";
+import { createHash as createHash6, randomBytes, timingSafeEqual, X509Certificate } from "node:crypto";
+import { mkdtemp, readFile as readFile11, rm as rm2 } from "node:fs/promises";
+import { createServer as createServer3 } from "node:https";
+import { isIP as isIP2 } from "node:net";
+import { tmpdir as tmpdir2 } from "node:os";
+import { join as join5 } from "node:path";
+import { promisify } from "node:util";
+async function previewCertificate(host) {
+  if (!isIP2(host))
+    throw new Error("The Wi-Fi share requires an IP address");
+  const directory = await mkdtemp(join5(tmpdir2(), "kennel-preview-tls-"));
+  const keyFile = join5(directory, "key.pem");
+  const certFile = join5(directory, "cert.pem");
+  try {
+    await run("openssl", [
+      "req",
+      "-x509",
+      "-newkey",
+      "rsa:2048",
+      "-nodes",
+      "-days",
+      "1",
+      "-keyout",
+      keyFile,
+      "-out",
+      certFile,
+      "-subj",
+      "/CN=Kennel Wi-Fi preview",
+      "-addext",
+      `subjectAltName=IP:${host}`
+    ]);
+    const [key, cert] = await Promise.all([readFile11(keyFile), readFile11(certFile)]);
+    return { key, cert, fingerprint: new X509Certificate(cert).fingerprint256 };
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      throw new Error("Password-protected sharing requires OpenSSL on PATH");
+    }
+    throw error;
+  } finally {
+    await rm2(directory, { recursive: true, force: true });
+  }
+}
+async function startProtectedShare(host, handle) {
+  const { key, cert, fingerprint } = await previewCertificate(host);
+  const username = "kennel";
+  const password = randomBytes(12).toString("base64url");
+  const authorization = `Basic ${Buffer.from(`${username}:${password}`).toString("base64")}`;
+  const expected = createHash6("sha256").update(authorization).digest();
+  const attempts = new Map;
+  const server = createServer3({ key, cert, minVersion: "TLSv1.2" }, (request, response) => {
+    response.setHeader("Cache-Control", "no-store");
+    response.setHeader("X-Content-Type-Options", "nosniff");
+    const address = request.socket.remoteAddress ?? "unknown";
+    const now = Date.now();
+    for (const [ip, attempt] of attempts) {
+      if (attempt.expires <= now)
+        attempts.delete(ip);
+    }
+    const attempt = attempts.get(address);
+    if (attempt && attempt.count >= 10 || !attempt && attempts.size >= 1024) {
+      response.writeHead(429, { "Retry-After": "60" });
+      response.end("Too many sign-in attempts. Try again in one minute.");
+      return;
+    }
+    const supplied = createHash6("sha256").update(request.headers.authorization ?? "").digest();
+    if (!timingSafeEqual(supplied, expected)) {
+      attempts.set(address, { count: (attempt?.count ?? 0) + 1, expires: attempt?.expires ?? now + 60000 });
+      response.writeHead(401, {
+        "WWW-Authenticate": 'Basic realm="Kennel shared preview", charset="UTF-8"'
+      });
+      response.end("Sign in to the shared preview.");
+      return;
+    }
+    handle(request, response);
+  });
+  const close = async () => {
+    attempts.clear();
+    await new Promise((done) => {
+      server.close(() => done());
+      server.closeAllConnections();
+    });
+  };
+  try {
+    await new Promise((done, fail) => {
+      server.once("error", fail);
+      server.listen(0, host, () => {
+        server.off("error", fail);
+        done();
+      });
+    });
+    const address = server.address();
+    if (!address || typeof address === "string")
+      throw new Error("No Wi-Fi server address");
+    return { port: address.port, username, password, authorization, cert, fingerprint, close };
+  } catch (error) {
+    await close();
+    throw error;
   }
 }
+var run;
+var init_protected_share = __esm(() => {
+  run = promisify(execFile6);
+});
 
 // packages/preview/src/share.ts
-var plainViewerPort = "5180";
+import { dirname as dirname12, resolve as resolve15 } from "node:path";
+import { existsSync as existsSync7, realpathSync as realpathSync4 } from "node:fs";
+import { fileURLToPath as fileURLToPath4 } from "node:url";
+import { get } from "node:https";
 function splitShareArgs(input) {
   const options = {
     folder: undefined,
@@ -40687,6 +40941,89 @@ async function runningViewerRoot(port = plainViewerPort) {
   }
   return;
 }
+async function startLanShare(target) {
+  const root = realpathSync4(target.root);
+  const web = resolve15(dirname12(fileURLToPath4(import.meta.url)), "../../web");
+  if (!existsSync7(resolve15(web, "index.html"))) {
+    throw new Error("Kennel web app not found. Run the CLI build first.");
+  }
+  const host = lanHost2();
+  await Promise.resolve().then(() => init_server4());
+  process.env.KENNEL_VIEWER_HOSTS = [process.env.KENNEL_VIEWER_HOSTS, host].filter(Boolean).join(",");
+  const api = createKennelApi({
+    root,
+    host: "0.0.0.0",
+    remoteAccess: true,
+    restrictToRoot: true,
+    lockedFile: target.target ? realpathSync4(target.target) : undefined,
+    webRoot: web
+  });
+  let shared;
+  const close = async () => {
+    try {
+      await api.close();
+    } finally {
+      await shared?.close();
+    }
+  };
+  try {
+    shared = await startProtectedShare(host, (request, response) => {
+      api.handle(request, response);
+    });
+    const url = new URL(popUrl(host, String(shared.port), {
+      dryRun: false,
+      host: "0.0.0.0",
+      hot: false,
+      lan: true,
+      open: false,
+      root,
+      port: String(shared.port),
+      tailscale: false,
+      watch: false,
+      target: target.target
+    }));
+    url.protocol = "https:";
+    const { cert, authorization } = shared;
+    const health = await new Promise((done, fail) => {
+      const request = get(new URL("/api/health", url), {
+        ca: cert,
+        agent: false,
+        headers: { Authorization: authorization }
+      }, (response) => {
+        let body = "";
+        response.setEncoding("utf8");
+        response.on("error", fail);
+        response.on("data", (chunk) => {
+          body += chunk;
+        });
+        response.on("end", () => {
+          try {
+            if (response.statusCode !== 200)
+              throw new Error("The Wi-Fi server did not respond");
+            done(JSON.parse(body));
+          } catch (error) {
+            fail(error);
+          }
+        });
+      });
+      request.setTimeout(5000, () => request.destroy(new Error("The Wi-Fi server did not respond")));
+      request.on("error", fail);
+    });
+    if (health.viewer !== "kennel-core" || health.root !== root) {
+      throw new Error("The Wi-Fi server is not serving the selected folder");
+    }
+    return {
+      url: url.href,
+      username: shared.username,
+      password: shared.password,
+      fingerprint: shared.fingerprint,
+      close
+    };
+  } catch (error) {
+    await close();
+    throw error;
+  }
+}
 async function share(input) {
   const options = splitShareArgs(input);
   const folder = options.folder ?? await runningViewerRoot();
@@ -40708,9 +41045,17 @@ async function share(input) {
     folder
   ]);
 }
+var plainViewerPort = "5180";
+var init_share = __esm(() => {
+  init_viewer();
+  init_protected_share();
+});
+init_share();
+
 export {
   plainViewerPort,
   runningViewerRoot,
   share,
-  splitShareArgs
+  splitShareArgs,
+  startLanShare
 };

package/dist/site/terminal.d.ts

@@ -1 +1,9 @@
-export { openPreview, previewTerminal } from "kennel-preview/terminal";
+export { openPreview } from "kennel-preview/terminal";
+export declare function previewTerminal(url: string, target: {
+    root: string;
+    target?: string;
+}): {
+    close: () => void;
+    closed: Promise<void>;
+    interactive: boolean;
+};

package/dist/site/terminal.js

@@ -1,7 +1,7 @@
 // packages/preview/src/terminal.ts
-import { execFile } from "node:child_process";
+import { execFile, execFileSync } from "node:child_process";
 import { basename } from "node:path";
-import { emitKeypressEvents } from "node:readline";
+import { clearScreenDown, cursorTo, emitKeypressEvents } from "node:readline";
 function openPreview(url) {
   const command = process.platform === "darwin" ? "/usr/bin/open" : process.platform === "win32" ? "explorer.exe" : "xdg-open";
   execFile(command, [url], (error) => {
@@ -9,17 +9,40 @@ function openPreview(url) {
       console.error(`Could not open browser: ${error.message}`);
   });
 }
-function previewTerminal(url, target) {
+function copyPreviewLink(url) {
+  const command = process.platform === "darwin" ? "/usr/bin/pbcopy" : process.platform === "win32" ? "clip" : process.env.WAYLAND_DISPLAY ? "wl-copy" : "xclip";
+  const args = command === "xclip" ? ["-selection", "clipboard"] : [];
+  return new Promise((done, fail) => {
+    const child = execFile(command, args, (error) => error ? fail(error) : done());
+    child.stdin?.on("error", fail);
+    child.stdin?.end(url);
+  });
+}
+var terminalText = (text) => text.replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
+function repositoryName(folder) {
+  try {
+    const root = execFileSync("git", ["-C", folder, "rev-parse", "--show-toplevel"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 1000
+    });
+    return terminalText(basename(root.trim()));
+  } catch {
+    return;
+  }
+}
+function previewTerminal(url, target, startShare) {
   url = new URL(url).href;
   const input = process.stdin;
   const output = process.stdout;
   const terminal = Boolean(output.isTTY && process.env.TERM !== "dumb");
   const interactive = terminal && Boolean(input.isTTY);
-  const name = (basename(target.target ?? target.root) || target.root).replace(/[\u0000-\u001f\u007f-\u009f]/g, "");
-  const label = `(open ${name})`;
+  const name = terminalText(basename(target.target ?? target.root) || target.root);
+  const title = terminalText(basename(target.root) || target.root);
+  const repository = interactive ? repositoryName(target.root) : undefined;
   const color = terminal && process.env.NO_COLOR === undefined && output.hasColors();
-  const accent = (text) => color ? `\x1B[36m${text}\x1B[39m` : text;
-  const link = terminal ? `\x1B]8;;${url}\x1B\\${accent(label)}\x1B]8;;\x1B\\` : `${label}
+  const accent = (text) => color ? `\x1B[32m${text}\x1B[39m` : text;
+  const link = (label) => terminal ? `\x1B]8;;${url}\x1B\\${accent(label)}\x1B]8;;\x1B\\` : `${label}
   ${url}`;
   const wasRaw = Boolean(input.isRaw);
   const wasFlowing = input.readableFlowing === true;
@@ -28,6 +51,74 @@ function previewTerminal(url, target) {
     resolveClosed = resolve;
   });
   let finished = false;
+  let busy = false;
+  let selected = 0;
+  let status = "";
+  let share;
+  const render = () => {
+    if (!interactive || finished)
+      return;
+    cursorTo(output, 0, 0);
+    clearScreenDown(output);
+    const width = Math.max(1, (output.columns || 80) - 5);
+    const fit = (text) => {
+      const characters = Array.from(terminalText(text));
+      return characters.length > width ? characters.slice(0, width - 1).join("") + "…" : characters.join("");
+    };
+    const count = Math.max(1, Math.min(8, (output.rows || 24) - 12));
+    const start = Math.max(0, Math.min(selected - Math.floor(count / 2), actions.length - count));
+    const choices = actions.slice(start, start + count).map((item, index) => {
+      const label = fit(item.shortcut ? `[${item.shortcut}] ${item.label}` : item.label);
+      return start + index === selected ? accent(`  › ${label}`) : `    ${label}`;
+    });
+    output.write([
+      `  \x1B[1m${link(fit(title))}\x1B[22m`,
+      ...repository ? [`  ${color ? "\x1B[2m" : ""}${fit(repository)}${color ? "\x1B[22m" : ""}`] : [],
+      ...target.target ? [`  File: ${fit(name)}`] : [],
+      "",
+      ...choices,
+      "",
+      "  ↑ ↓ to move · Enter to choose · Esc or Ctrl+C to exit",
+      ...actions.length > count ? [`  ${selected + 1} / ${actions.length}`] : [],
+      ...status ? ["", `  ${status}`] : [],
+      ""
+    ].join(`
+`));
+  };
+  const shareFolder = async () => {
+    status = "Preparing a password-protected Wi-Fi link…";
+    render();
+    try {
+      share ??= startShare();
+      let active;
+      try {
+        active = await share;
+      } catch (error) {
+        share = undefined;
+        throw error;
+      }
+      if (finished)
+        return;
+      status = `Wi-Fi link: ${active.url}
+  Username: ${active.username} · Password: ${active.password}
+  Password required. Send the password separately. Same Wi-Fi only.
+  Self-signed HTTPS (24 hours): expect a certificate warning.
+  Verify SHA-256 before trusting the certificate:
+  ${active.fingerprint}
+  Keep this command running. Ctrl+C stops sharing.`;
+      render();
+      try {
+        await copyPreviewLink(active.url);
+        status += `
+  Wi-Fi link copied to clipboard (without the password).`;
+      } catch (error) {
+        status += `
+  Could not copy link: ${terminalText(error instanceof Error ? error.message : String(error))}`;
+      }
+    } catch (error) {
+      status = `Could not share folder: ${terminalText(error instanceof Error ? error.message : String(error))}`;
+    }
+  };
   const close = () => {
     if (finished)
       return;
@@ -38,40 +129,91 @@ function previewTerminal(url, target) {
     if (interactive) {
       input.off("keypress", keypress);
       input.off("end", close);
+      output.off("resize", render);
+      output.write("\x1B[?25h\x1B[?1049l");
       input.setRawMode(wasRaw);
       if (!wasFlowing)
         input.pause();
     }
-    resolveClosed();
+    if (share) {
+      share.then((active) => active.close()).catch((error) => {
+        console.error(`  Wi-Fi share stopped: ${error instanceof Error ? error.message : error}`);
+      }).finally(() => resolveClosed());
+    } else
+      resolveClosed();
+  };
+  const actions = [
+    { label: "Open in browser", shortcut: "o", run: () => {
+      openPreview(url);
+      status = "Browser open requested.";
+    } },
+    { label: "Share to another device", shortcut: "s", run: shareFolder },
+    { label: "Exit", shortcut: "q", run: close }
+  ];
+  const activate = async () => {
+    busy = true;
+    try {
+      await actions[selected].run();
+    } catch (error) {
+      status = `Could not complete action: ${terminalText(error instanceof Error ? error.message : String(error))}`;
+    } finally {
+      busy = false;
+      render();
+    }
   };
   const keypress = (_text, key) => {
-    if (key.ctrl && (key.name === "c" || key.name === "d"))
+    if (key.name === "escape" || key.ctrl && (key.name === "c" || key.name === "d")) {
       close();
-    else if (key.name === "o" && !key.ctrl && !key.meta)
-      openPreview(url);
+      return;
+    }
+    if (busy || finished)
+      return;
+    const shortcut = !key.ctrl && !key.meta ? actions.findIndex((item) => item.shortcut === key.name) : -1;
+    if (shortcut !== -1) {
+      selected = shortcut;
+      activate();
+      return;
+    }
+    if (key.name === "up")
+      selected = (selected - 1 + actions.length) % actions.length;
+    else if (key.name === "down")
+      selected = (selected + 1) % actions.length;
+    else if (key.name === "return") {
+      activate();
+      return;
+    } else
+      return;
+    render();
   };
   process.once("SIGINT", close);
   process.once("SIGTERM", close);
   process.once("exit", close);
   if (interactive) {
+    output.write("\x1B[?1049h\x1B[?25l");
+    output.on("resize", render);
     emitKeypressEvents(input);
     input.setRawMode(true);
     input.on("keypress", keypress);
     input.once("end", close);
     input.resume();
   }
-  console.log(`
-  ${link}
-`);
-  if (interactive) {
-    console.log(`  shortcuts:
-    ${accent("o")} - open in browser
-    ctrl+c - exit
+  if (interactive)
+    render();
+  else
+    console.log(`
+  ${link(name)}
 `);
-  }
   return { close, closed, interactive };
 }
+
+// packages/cli/src/site/terminal.ts
+function previewTerminal2(url, target) {
+  return previewTerminal(url, target, async () => {
+    const { startLanShare } = await import(new URL("../package/preview.js", import.meta.url).href);
+    return startLanShare(target);
+  });
+}
 export {
   openPreview,
-  previewTerminal
+  previewTerminal2 as previewTerminal
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kennel",
-  "version": "0.2.25",
+  "version": "0.2.27",
   "description": "Open-source pop-up previews for AI output: markdown, HTML artifacts, email, images, code, tables, notes, and calendars, from the terminal or your agent session.",
   "type": "module",
   "license": "MIT",