kennel 0.2.36 → 0.2.37

package/dist/cli/usage.js

@@ -17,7 +17,7 @@ export function usage() {
   kennel notes bind <uuid> [folder] [--json] [--remote <name>] [--replace] [--no-alias]
   kennel notes new-identity [folder] [--json] [--remote <name>]
   kennel serve [folder] [--host <host>] [--port <port>] [--lan|--tailscale]
-  kennel share|display [folder] [--lan|--tailscale] [--port <port>] [--dry-run]
+  kennel share|display [folder] [--lan|--tailscale] [--password] [--port <port>] [--dry-run]
   kennel dev [path] [--config <json-file>] [--port <port>] [--script <script>] [--dry-run] [-- <args...>]
   kennel extension install
   kennel mcp generate [path] [--config <json-file>] [--data-only|--function-only]

package/dist/package/preview.d.ts

@@ -10,4 +10,5 @@ export declare function share(input: string[]): Promise<void>;
 export declare function startPreviewShare(target: {
     root: string;
     target?: string;
+    password?: boolean;
 }): Promise<import("kennel-preview/terminal").PreviewShare>;

package/dist/package/preview.js

@@ -296,11 +296,11 @@ function previewTerminal(url, target, startShare) {
     ].join(`
 `));
   };
-  const shareFolder = async () => {
+  const shareFolder = async (password = false) => {
     status = "Preparing a private Tailscale link…";
     render();
     try {
-      share ??= startShare();
+      share ??= startShare(password);
       let active;
       try {
         active = await share;
@@ -310,11 +310,14 @@ function previewTerminal(url, target, startShare) {
       }
       if (finished)
         return;
-      status = `Tailscale link: ${active.url}
+      status = active.password ? `Tailscale link: ${active.url}
   Username: ${active.username} · Password: ${active.password}
   Password required. Send the password separately.
   Connect Tailscale on your phone to the same tailnet.
   Trusted HTTPS; no certificate installation required.
+  Keep this command running. Ctrl+C stops sharing.` : `Tailscale link: ${active.url}
+  Connect Tailscale on your phone to the same tailnet.
+  Trusted HTTPS; no password required on the tailnet.
   Keep this command running. Ctrl+C stops sharing.`;
       render();
       try {
@@ -357,7 +360,8 @@ function previewTerminal(url, target, startShare) {
       openPreview(url);
       status = "Browser open requested.";
     } },
-    { label: "Share to another device", shortcut: "s", run: shareFolder },
+    { label: "Share to another device", shortcut: "s", run: () => shareFolder(false) },
+    { label: "Share link with password", shortcut: "p", run: () => shareFolder(true) },
     { label: "Exit", shortcut: "q", run: close }
   ];
   const activate = async () => {
@@ -40843,6 +40847,10 @@ function splitViewerArgs(input) {
       options.open = true;
       continue;
     }
+    if (arg === "--password") {
+      options.password = true;
+      continue;
+    }
     if (arg === "--no-open") {
       options.open = false;
       continue;
@@ -41197,7 +41205,9 @@ var init_tailscale_share = __esm(() => {
 });
 
 // packages/preview/src/share.ts
-import { dirname as dirname13, resolve as resolve16 } from "node:path";
+import { dirname as dirname13, resolve as resolve16, join as join6 } from "node:path";
+import { homedir as homedir5 } from "node:os";
+import { readFileSync as readFileSync2 } from "node:fs";
 import { existsSync as existsSync7, realpathSync as realpathSync4 } from "node:fs";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 function splitShareArgs(input) {
@@ -41206,7 +41216,8 @@ function splitShareArgs(input) {
     lan: false,
     tailscale: false,
     port: undefined,
-    dryRun: false
+    dryRun: false,
+    password: false
   };
   let folder;
   for (let index = 0;index < input.length; index += 1) {
@@ -41215,6 +41226,10 @@ function splitShareArgs(input) {
       options.dryRun = true;
       continue;
     }
+    if (arg === "--password") {
+      options.password = true;
+      continue;
+    }
     if (arg === "--lan") {
       options.lan = true;
       continue;
@@ -41270,6 +41285,13 @@ async function runningViewerRoot(port = plainViewerPort) {
 }
 async function startPreviewShare(target) {
   const root = realpathSync4(target.root);
+  const configPath = join6(process.env.XDG_CONFIG_HOME?.trim() || join6(homedir5(), ".config"), "kennel", "config.json");
+  let configuredPassword = false;
+  try {
+    const config = JSON.parse(readFileSync2(configPath, "utf8"));
+    configuredPassword = config.linkSharing?.password === true;
+  } catch {}
+  const password = target.password ?? configuredPassword;
   const web = resolve16(dirname13(fileURLToPath4(import.meta.url)), "../../web");
   if (!existsSync7(resolve16(web, "index.html"))) {
     throw new Error("Kennel web app not found. Run the CLI build first.");
@@ -41287,37 +41309,58 @@ async function startPreviewShare(target) {
   });
   let shared;
   let proxy;
+  let localClose;
   const close = async () => {
     try {
       await proxy?.close();
     } finally {
       try {
-        await shared?.close();
+        await localClose?.();
       } finally {
         await api.close();
       }
     }
   };
   try {
-    shared = await startProtectedShare((request, response) => {
+    const handler = (request, response) => {
       api.handle(request, response);
-    });
-    proxy = await startTailscaleProxy(host, shared.port);
-    const path = new URL(popUrl(host, String(shared.port), {
+    };
+    const local = password ? await startProtectedShare(handler) : await (async () => {
+      const { createServer } = await import("node:http");
+      const server = createServer(handler);
+      await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => resolve());
+      });
+      const address = server.address();
+      if (!address || typeof address === "string")
+        throw new Error("No share server address");
+      return { port: address.port, close: async () => {
+        await new Promise((resolve) => {
+          server.close(() => resolve());
+          server.closeAllConnections();
+        });
+      } };
+    })();
+    localClose = local.close;
+    shared = password ? local : { port: local.port, close: local.close };
+    proxy = await startTailscaleProxy(host, local.port);
+    const path = new URL(popUrl(host, String(local.port), {
       dryRun: false,
       host: "127.0.0.1",
       hot: false,
       lan: false,
       open: false,
       root,
-      port: String(shared.port),
+      port: String(local.port),
       tailscale: false,
       watch: false,
+      password: false,
       target: target.target
     })).pathname;
     const url = new URL(path, proxy.origin);
-    const response = await fetch(new URL("/api/health", url), {
-      headers: { Authorization: shared.authorization },
+    const response = await fetch(`http://127.0.0.1:${shared.port}/api/health`, {
+      ...shared.authorization ? { headers: { Authorization: shared.authorization } } : {},
       signal: AbortSignal.timeout(30000)
     });
     if (!response.ok)
@@ -41326,7 +41369,7 @@ async function startPreviewShare(target) {
     if (health.viewer !== "kennel-core" || health.root !== root) {
       throw new Error("The Tailscale share is not serving the selected folder");
     }
-    return { url: url.href, username: shared.username, password: shared.password, close };
+    return { url: url.href, username: shared?.username, password: shared?.password, close };
   } catch (error) {
     await close();
     throw error;
@@ -41341,14 +41384,15 @@ async function share(input) {
   console.log(`Sharing ${folder}`);
   if (options.dryRun) {
     const port = options.port ?? "5181";
-    const url = options.tailscale ? `https://<tailnet-name>.ts.net/folder/${Buffer.from(folder).toString("base64url")}/notes` : popUrl(lanHost2(), port, { dryRun: true, host: "0.0.0.0", hot: false, lan: true, open: false, root: folder, port, tailscale: false, watch: false });
+    const url = options.tailscale ? `https://<tailnet-name>.ts.net/folder/${Buffer.from(folder).toString("base64url")}/notes` : popUrl(lanHost2(), port, { dryRun: true, host: "0.0.0.0", hot: false, lan: true, open: false, root: folder, port, tailscale: false, watch: false, password: false });
     console.log(url);
-    console.log(`kennel serve --static ${options.tailscale ? "--tailscale" : "--lan"}${options.port ? ` --port ${options.port}` : ""} ${folder}`);
+    console.log(`kennel serve --static ${options.tailscale ? "--tailscale" : "--lan"}${options.password ? " --password" : ""}${options.port ? ` --port ${options.port}` : ""} ${folder}`);
     return;
   }
   await viewer([
     "--static",
     options.tailscale ? "--tailscale" : "--lan",
+    ...options.password ? ["--password"] : [],
     ...options.port ? ["--port", options.port] : [],
     folder
   ]);

package/dist/site/terminal.js

@@ -85,11 +85,11 @@ function previewTerminal(url, target, startShare) {
     ].join(`
 `));
   };
-  const shareFolder = async () => {
+  const shareFolder = async (password = false) => {
     status = "Preparing a private Tailscale link…";
     render();
     try {
-      share ??= startShare();
+      share ??= startShare(password);
       let active;
       try {
         active = await share;
@@ -99,11 +99,14 @@ function previewTerminal(url, target, startShare) {
       }
       if (finished)
         return;
-      status = `Tailscale link: ${active.url}
+      status = active.password ? `Tailscale link: ${active.url}
   Username: ${active.username} · Password: ${active.password}
   Password required. Send the password separately.
   Connect Tailscale on your phone to the same tailnet.
   Trusted HTTPS; no certificate installation required.
+  Keep this command running. Ctrl+C stops sharing.` : `Tailscale link: ${active.url}
+  Connect Tailscale on your phone to the same tailnet.
+  Trusted HTTPS; no password required on the tailnet.
   Keep this command running. Ctrl+C stops sharing.`;
       render();
       try {
@@ -146,7 +149,8 @@ function previewTerminal(url, target, startShare) {
       openPreview(url);
       status = "Browser open requested.";
     } },
-    { label: "Share to another device", shortcut: "s", run: shareFolder },
+    { label: "Share to another device", shortcut: "s", run: () => shareFolder(false) },
+    { label: "Share link with password", shortcut: "p", run: () => shareFolder(true) },
     { label: "Exit", shortcut: "q", run: close }
   ];
   const activate = async () => {
@@ -207,9 +211,9 @@ function previewTerminal(url, target, startShare) {
 
 // packages/cli/src/site/terminal.ts
 function previewTerminal2(url, target) {
-  return previewTerminal(url, target, async () => {
+  return previewTerminal(url, target, async (password = false) => {
     const { startPreviewShare } = await import(new URL("../package/preview.js", import.meta.url).href);
-    return startPreviewShare(target);
+    return startPreviewShare({ ...target, ...password ? { password: true } : {} });
   });
 }
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kennel",
-  "version": "0.2.36",
+  "version": "0.2.37",
   "description": "Open-source pop-up previews for AI output: markdown, HTML artifacts, email, images, code, tables, notes, and calendars, from the terminal or your agent session.",
   "type": "module",
   "license": "MIT",

package/schemas/config.schema.json

@@ -21,6 +21,15 @@
       "type": "array",
       "items": { "$ref": "#/$defs/externalPlugin" }
     },
+    "linkSharing": {
+      "description": "Preferred settings for sharing a viewer link.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "mode": { "type": "string", "enum": ["tailscale", "lan"] },
+        "password": { "type": "boolean" }
+      }
+    },
     "repositoryNotes": {
       "description": "Opt-in Markdown notes per Git repository, stored in $XDG_CONFIG_HOME/kennel/repos/<uuid>/ and shown in that repository's Notes view. `kennel notes path` registers a repository only when enabled is true.",
       "type": "object",