kryptheon 0.1.31 → 0.1.33

package/bin/kryptheon.js

@@ -2321,7 +2321,9 @@ function recheckCommand(id) {
 // One page on this machine for everything Kryptheon knows about this project
 // (kryptheon-dashboard.js). Runs until Ctrl+C.
 
-const DASHBOARD_PORT = 4789;
+// KRYPTHEON_DASHBOARD_PORT is for the checks, which must not use the port of
+// a dashboard the person has open.
+const DASHBOARD_PORT = Number(process.env.KRYPTHEON_DASHBOARD_PORT) || 4789;
 
 /**
  * Runs a command and hands every line it prints to `say`, as it prints it -
@@ -2511,12 +2513,52 @@ function openInBrowser(url) {
   }
 }
 
+/**
+ * Whether this project's dashboard is already running on the usual port -
+ * started at sign-in, most likely - by asking it which project it shows.
+ * Never fatal: no answer, a slow one, or another project's means no.
+ */
+function dashboardAlreadyRunning(port) {
+  return new Promise((resolve) => {
+    const req = require('http').get({ host: '127.0.0.1', port: port, path: '/api/state', headers: { host: '127.0.0.1:' + port }, timeout: 2000 }, (res) => {
+      let body = '';
+      res.setEncoding('utf8');
+      res.on('data', (chunk) => { if (body.length < 5000000) body += chunk; });
+      res.on('end', () => {
+        try {
+          const root = JSON.parse(body).project.root;
+          const same = (a) => (process.platform === 'win32' ? path.resolve(a).toLowerCase() : path.resolve(a));
+          resolve(res.statusCode === 200 && typeof root === 'string' && same(root) === same(USER_DIR));
+        } catch (err) {
+          resolve(false);
+        }
+      });
+    });
+    req.on('timeout', () => req.destroy());
+    req.on('error', () => resolve(false));
+  });
+}
+
 async function dashboardCommand() {
   const here = project.inspectProject(USER_DIR);
   if (!here.ok) {
     for (const line of project.noProjectLines(here)) console.error(line);
     return 1;
   }
+  // Running already: open that one rather than a second, which would watch
+  // the same project twice. Exit code 0 is how the launcher knows.
+  if (await dashboardAlreadyRunning(DASHBOARD_PORT)) {
+    const address = 'http://127.0.0.1:' + DASHBOARD_PORT + '/';
+    const shown = openInBrowser(address);
+    console.log('');
+    console.log('  The Kryptheon dashboard for ' + path.basename(USER_DIR) + ' is already running:');
+    console.log('');
+    console.log('    ' + address);
+    console.log('');
+    console.log(shown ? '  It is opening in your browser.' : '  Open that address in your browser.');
+    console.log('');
+    return 0;
+  }
   const opened = openStore();
   if (!opened) return 1;
   const dash = require(path.join(PACKAGE_DIR, 'kryptheon-dashboard.js'));

package/kryptheon-autostart.js

@@ -0,0 +1,148 @@
+'use strict';
+
+/*
+ * Start with Windows: the dashboard for one project, started when the person
+ * signs in, so it is watching whenever the laptop is on.
+ *
+ * It is one small .cmd file in the person's own Startup folder - the plainest
+ * way Windows has, seen and removable in Task Manager's Startup apps and in
+ * the folder itself. The file says what it is and runs one thing:
+ * npx kryptheon@latest dashboard, in a minimized window on the taskbar. A
+ * window, not a hidden process: something that starts by itself at sign-in
+ * should be seen, and closing it stops it.
+ *
+ * Only the file this module wrote is ever removed: it is recognised by its
+ * first lines, never by its name alone.
+ */
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+
+const MARK = 'rem Kryptheon - starts the Kryptheon dashboard for this project when you sign in to Windows.';
+const CRLF = '\r\n';
+
+/** The Startup folder, or null where there is none (not Windows). */
+function startupDir(env, platform) {
+  const e = env || process.env;
+  // For the checks: a folder of their own, never the real Startup folder.
+  if (e.KRYPTHEON_STARTUP_DIR) return e.KRYPTHEON_STARTUP_DIR;
+  if ((platform || process.platform) !== 'win32' || !e.APPDATA) return null;
+  return path.join(e.APPDATA, 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Startup');
+}
+
+/** The folder's name as it may be shown in a file name and a window title. */
+function plainName(root) {
+  return path.basename(root).replace(/[^A-Za-z0-9 ._-]/g, '_').slice(0, 40) || 'project';
+}
+
+/**
+ * One file per project, named after the folder and told apart by its full
+ * path - two projects called "app" get two files. Windows paths are compared
+ * without regard to case, so the same folder spelled two ways is one file.
+ */
+function fileFor(root, env, platform) {
+  const dir = startupDir(env, platform);
+  if (!dir) return null;
+  const full = path.resolve(root);
+  const key = (platform || process.platform) === 'win32' ? full.toLowerCase() : full;
+  const id = crypto.createHash('sha256').update(key).digest('hex').slice(0, 8);
+  return path.join(dir, 'Kryptheon dashboard - ' + plainName(root) + ' ' + id + '.cmd');
+}
+
+/**
+ * The file's text. The project's path appears only inside double quotes, so
+ * & ^ ( ) and spaces in it are read as themselves; % is doubled, the one
+ * character cmd still reads inside quotes. The file is UTF-8 and switches
+ * the window to UTF-8 before the path is read, for folder names in any
+ * language.
+ */
+function script(root) {
+  const full = path.resolve(root);
+  const quoted = '"' + full.replace(/%/g, '%%') + '"';
+  const name = plainName(root);
+  return [
+    '@echo off',
+    'chcp 65001 >nul',
+    MARK,
+    'rem   ' + quoted,
+    'rem Put here by "Start with Windows" on the Kryptheon dashboard. To stop it, switch',
+    'rem that off on the dashboard, or delete this file. What it runs:',
+    'rem   npx kryptheon@latest dashboard  - nothing else, in a small window on the taskbar.',
+    'if "%~1"=="run" goto run',
+    // cmd /c, not start's own cmd /k: a window whose file was removed while it
+    // ran - switched off on the dashboard - closes instead of waiting at a prompt.
+    'start "Kryptheon dashboard - ' + name + '" /min cmd /d /c ""%~f0" run"',
+    'exit /b',
+    ':run',
+    'title Kryptheon dashboard - ' + name,
+    'rem npx starts the command "kryptheon": never look for it in the current folder,',
+    'rem where a Kryptheon.cmd launcher may sit, and the browser is not opened at sign-in.',
+    'set NoDefaultCurrentDirectoryInExePath=1',
+    'set KRYPTHEON_LAUNCHER=1',
+    'set KRYPTHEON_NO_OPEN=1',
+    'cd /d ' + quoted + ' || goto gone',
+    'echo.',
+    'echo   Kryptheon dashboard, started when you signed in, for:',
+    'echo     ' + quoted,
+    'echo   Closing this window stops it until you sign in again.',
+    'echo.',
+    'call npx --yes kryptheon@latest dashboard',
+    'if not errorlevel 1 exit',
+    'rem At sign-in the network may not be up yet: then the copy npx already has.',
+    'echo   Trying again with the copy already on this computer...',
+    'call npx --yes --offline kryptheon@latest dashboard',
+    'if not errorlevel 1 exit',
+    'echo.',
+    'echo   The Kryptheon dashboard stopped. The reason, if any, is above.',
+    'pause',
+    'exit',
+    ':gone',
+    'echo.',
+    'echo   This project folder is gone, so its dashboard cannot start:',
+    'echo     ' + quoted,
+    'echo   To stop this message, delete this file:',
+    'echo     "%~f0"',
+    'pause',
+    'exit',
+    '',
+  ].join(CRLF);
+}
+
+/** Whether it is on for this project, and whether it can be at all. */
+function status(root, env, platform) {
+  const file = fileFor(root, env, platform);
+  if (!file) return { available: false, on: false, why: 'Starting with the computer is only on Windows for now.' };
+  let on = false;
+  try {
+    on = fs.readFileSync(file, 'utf8').indexOf(MARK) !== -1;
+  } catch (err) {
+    on = false;
+  }
+  return { available: true, on: on, file: file };
+}
+
+/** Switches it on (writes the file) or off (removes only a file it wrote). */
+function setAutostart(root, on, env, platform) {
+  if (typeof on !== 'boolean') return { ok: false, why: 'on must be true or false' };
+  const file = fileFor(root, env, platform);
+  if (!file) return { ok: false, why: 'Starting with the computer is only on Windows for now.' };
+  try {
+    if (on) {
+      fs.mkdirSync(path.dirname(file), { recursive: true });
+      fs.writeFileSync(file, script(root), 'utf8');
+    } else {
+      let text = null;
+      try { text = fs.readFileSync(file, 'utf8'); } catch (err) { text = null; }
+      if (text !== null) {
+        if (text.indexOf(MARK) === -1) return { ok: false, why: 'the file there was not written by Kryptheon, so it was left alone: ' + file };
+        fs.unlinkSync(file);
+      }
+    }
+  } catch (err) {
+    return { ok: false, why: 'could not ' + (on ? 'write' : 'remove') + ' ' + file + ': ' + err.message };
+  }
+  return Object.assign({ ok: true }, status(root, env, platform));
+}
+
+module.exports = { startupDir, fileFor, script, status, setAutostart, MARK };

package/kryptheon-dashboard-page.js

@@ -103,10 +103,24 @@
     busy = on;
     Array.prototype.forEach.call(document.querySelectorAll('[data-action]'), function (b) { b.disabled = on; });
   }
+  // The clipboard, and when a browser refuses it, the older way: the text
+  // put in a box off the screen, selected and copied.
   function copy(text, done) {
-    navigator.clipboard.writeText(text).then(function () { toast(done); }, function () {
-      toast('Could not copy - select the text instead');
-    });
+    function older() {
+      var box = el('textarea');
+      box.value = text;
+      box.setAttribute('readonly', '');
+      box.style.position = 'fixed';
+      box.style.left = '-9999px';
+      document.body.appendChild(box);
+      box.select();
+      var ok = false;
+      try { ok = document.execCommand('copy'); } catch (e) { ok = false; }
+      document.body.removeChild(box);
+      toast(ok ? done : 'Could not copy - select the text instead');
+    }
+    if (!navigator.clipboard || !navigator.clipboard.writeText) return older();
+    navigator.clipboard.writeText(text).then(function () { toast(done); }, older);
   }
   function button(cls, iconName, text, onClick) {
     var b = el('button', 'btn' + (cls ? ' ' + cls : ''));
@@ -155,33 +169,70 @@
   // lines are what the command printed, already scrubbed of any secret.
   var job = null;
   var lastRecheck = null;
-
+  // Whether the printed lines are shown: null follows the job - shown while it
+  // runs or when it failed, folded away once it finished well - until the
+  // person opens or folds them.
+  var linesOpen = null;
+  // Whether the one prompt for all findings is shown in full.
+  var allPromptOpen = false;
+
+  // The panel sits in the corner of the window, over the page; the page gets
+  // room at its foot so nothing stays hidden under it.
   function renderJob() {
     var box = byId('job');
     clear(box);
-    if (!job) { box.hidden = true; return; }
+    var main = document.querySelector('main');
+    var root = document.documentElement;
+    if (!job) { box.hidden = true; linesOpen = null; main.style.paddingBottom = ''; root.style.removeProperty('--job-room'); return; }
     box.hidden = false;
-    box.className = 'job' + (job.running ? ' on' : job.result && job.result.ok ? ' ok' : ' bad');
+    var ok = !!(job.result && job.result.ok);
+    box.className = 'job' + (job.running ? ' on' : ok ? ' ok' : ' bad');
     var head = el('div', 'job-head');
     if (job.running) head.appendChild(el('span', 'spin'));
     head.appendChild(el('b', null, job.title));
-    head.appendChild(el('span', 'tag ' + (job.running ? 'sun' : job.result && job.result.ok ? 'leaf' : 'ember'),
-      job.running ? 'running' : job.result && job.result.ok ? 'finished' : 'did not finish'));
+    head.appendChild(el('span', 'tag ' + (job.running ? 'sun' : ok ? 'leaf' : 'ember'),
+      job.running ? 'running' : ok ? 'finished' : 'did not finish'));
     if (!job.running) {
-      var close = el('button', 'job-close', 'Hide');
+      var close = el('button', 'job-close', 'Close');
       close.type = 'button';
       close.addEventListener('click', function () { job = null; renderJob(); });
       head.appendChild(close);
     }
     box.appendChild(head);
-    var lines = el('pre', 'job-lines', (job.lines || []).filter(function (l, i, all) { return l || (i && all[i - 1]); }).slice(-60).join('\n') || 'Starting...');
-    box.appendChild(lines);
+    var open = linesOpen === null ? job.running || !ok : linesOpen;
+    var lines = null;
+    if (open) {
+      lines = el('pre', 'job-lines', (job.lines || []).filter(function (l, i, all) { return l || (i && all[i - 1]); }).slice(-60).join('\n') || 'Starting...');
+      box.appendChild(lines);
+    }
     if (!job.running && job.result) {
       var r = job.result;
-      box.appendChild(el('div', 'job-result', r.ok ? 'Result: ' + (r.summary || 'done') : 'It did not finish: ' + (r.why || 'see the lines above')));
+      box.appendChild(el('div', 'job-result', ok ? 'Result: ' + (r.summary || 'done') : 'It did not finish: ' + (r.why || 'see what it printed')));
+    }
+    if (!job.running) {
+      var acts = el('div', 'job-acts');
+      // What it found is on Findings; a recording is on Runs. Setting the
+      // nightly check up, or removing it, finds nothing to go and see.
+      var setUp = job.kind === 'db' && / (un)?install$/.test(job.command || '');
+      var next = !ok || setUp ? null : job.kind === 'record' ? { id: 'runs', label: 'See runs' } : { id: 'findings', label: 'See findings' };
+      if (next && currentView() !== next.id) {
+        var goBtn = el('button', 'go', next.label + ' →');
+        goBtn.type = 'button';
+        goBtn.addEventListener('click', function () { go(next.id); });
+        acts.appendChild(goBtn);
+      }
+      var fold = el('button', null, open ? 'Hide what it printed' : 'Show what it printed');
+      fold.type = 'button';
+      fold.setAttribute('aria-expanded', open ? 'true' : 'false');
+      fold.addEventListener('click', function () { linesOpen = !open; renderJob(); });
+      acts.appendChild(fold);
+      box.appendChild(acts);
     }
     if (job.command) box.appendChild(el('div', 'fallback', 'The same in a terminal:  ' + job.command));
-    lines.scrollTop = lines.scrollHeight;
+    if (lines) lines.scrollTop = lines.scrollHeight;
+    main.style.paddingBottom = (box.offsetHeight + 48) + 'px';
+    // A message pops up above the panel, never over it.
+    root.style.setProperty('--job-room', (box.offsetHeight + 12) + 'px');
   }
 
   function getJob() {
@@ -194,6 +245,7 @@
     setBusy(true);
     return post(path, body).then(function (started) {
       job = started.job;
+      linesOpen = null;
       renderJob();
       return follow();
     }).then(function (done) {
@@ -255,6 +307,8 @@
     byId('viewTitle').textContent = view.title;
     document.title = (id === 'dashboard' ? '' : view.title + ' - ') + 'Kryptheon';
     if (state) renderSide();
+    // Its "See findings" goes once Findings is the page on screen.
+    if (job && !job.running) renderJob();
     window.scrollTo(0, 0);
   }
   window.addEventListener('hashchange', showView);
@@ -528,7 +582,7 @@
       if (!connection) { toast('Paste your connection string in "Connect your database" first.'); dbInput.focus(); return; }
       runJob('/api/db', { action: 'night', connection: connection }).then(function (done) {
         var r = done && done.result;
-        toast(r && r.ok ? 'Read back - see the lines above and Findings' : 'Nothing to read back' + (r && r.why ? ' - ' + r.why : ''));
+        toast(r && r.ok ? 'Read back - see Findings' : 'Nothing to read back' + (r && r.why ? ' - ' + r.why : ''));
       }, function () {});
     });
     see.setAttribute('data-action', 'db');
@@ -724,6 +778,28 @@
       if (lastRecheck.newProblems.length) gone.appendChild(el('span', 'tag ember', plural(lastRecheck.newProblems.length, 'problem') + ' newly broken - marked below'));
       body.appendChild(gone);
     }
+    // Every fix in one paste, with the rules that keep the AI from breaking
+    // something else - whatever the filter shows, it is all of them.
+    if (state.allFixPrompt) {
+      var many = state.findings.filter(function (f) { return f.fixPrompt; }).length;
+      var all = el('div', 'fix-all');
+      var words = el('div', 'fix-all-words');
+      words.appendChild(el('b', null, 'Fix all ' + many + ' at once'));
+      words.appendChild(el('span', null, 'One prompt with every fix, and rules that stop your AI from changing anything else. Then Re-check each one.'));
+      all.appendChild(words);
+      all.appendChild(button('sun', 'copy', 'Copy one prompt for all', function () {
+        copy(state.allFixPrompt, 'One prompt for all ' + many + ' copied - paste it into your AI tool');
+      }));
+      // To read before pasting, or to select by hand. It stays open across
+      // the page's own refresh every few seconds.
+      var whole = el('details', 'fix-all-text');
+      whole.open = allPromptOpen;
+      whole.addEventListener('toggle', function () { allPromptOpen = whole.open; });
+      whole.appendChild(el('summary', null, 'See the prompt'));
+      whole.appendChild(el('pre', null, state.allFixPrompt));
+      all.appendChild(whole);
+      body.appendChild(all);
+    }
     if (!shown.length) {
       body.appendChild(el('p', 'empty', state.findings.length ? 'Nothing matches.' : 'Nothing found by the checks that are on and have run. That is not the same as nothing wrong - see which checks are not built yet.'));
       return;
@@ -960,6 +1036,41 @@
     }, function () {});
   }
 
+  // Start with Windows, and what still runs when the laptop is off.
+  function renderKeep() {
+    var box = byId('keep');
+    clear(box);
+    var a = state.autostart || { available: false, on: false, why: '' };
+    var row = el('div', 'keep-row');
+    if (a.available) {
+      var sw = el('label', 'switch');
+      var input = el('input');
+      input.type = 'checkbox';
+      input.checked = !!a.on;
+      input.setAttribute('aria-label', 'Start with Windows');
+      input.addEventListener('change', function () { setAutostart(input.checked, input); });
+      sw.appendChild(input);
+      sw.appendChild(el('span', 'track'));
+      row.appendChild(sw);
+    }
+    var text = el('div', 'keep-text');
+    var title = el('b', null, 'Start with Windows ');
+    if (a.available) title.appendChild(el('span', 'tag ' + (a.on ? 'leaf' : ''), a.on ? 'on' : 'off'));
+    text.appendChild(title);
+    text.appendChild(el('span', null, !a.available ? (a.why || 'Not on this computer.')
+      : a.on ? 'When you sign in to Windows, this dashboard starts by itself in a small window on the taskbar, with nothing opened. To see it, double-click Kryptheon.cmd as always - it opens the one already running. Closing that taskbar window stops it until you sign in again.'
+      : 'Switch it on and this dashboard starts by itself every time you sign in to Windows, in a small window on the taskbar. Nothing opens - it just watches for changes. Switch it off here any time.'));
+    row.appendChild(text);
+    box.appendChild(row);
+    box.appendChild(el('div', 'keep-off', 'With the laptop off, nothing on it can run. The nightly database check is different: once set up in Start here, it runs inside your database itself, and its result is waiting the next time you open this page.'));
+  }
+  function setAutostart(on, input) {
+    post('/api/autostart', { on: on }).then(function () {
+      toast(on ? 'On: it starts by itself when you sign in to Windows' : 'Off: it no longer starts by itself');
+      return load();
+    }).catch(function (err) { input.checked = !on; toast('Not saved: ' + err.message); });
+  }
+
   function setCheck(id, on, input) {
     post('/api/check', { id: id, on: on }).then(function () {
       toast((on ? 'Switched on: ' : 'Switched off: ') + (CHECK_NAME[id] || id));
@@ -988,6 +1099,7 @@
     renderTop();
     renderNow();
     renderSteps();
+    renderKeep();
     renderStatusFilter();
     renderFindings();
     renderTimeline();
@@ -1012,6 +1124,7 @@
     return getJob().then(function (now) {
       if (!now || !now.running) return;
       job = now;
+      linesOpen = null;
       setBusy(true);
       renderJob();
       return follow().then(function () { setBusy(false); return load(); });

package/kryptheon-dashboard.html

@@ -265,14 +265,22 @@
   @media (max-width: 600px) { .files div { grid-template-columns: minmax(0, 1fr); gap: 2px; } }
 
   /* --- a run in progress, and what it said ---------------------------------- */
-  .job { margin: 0 0 28px; padding: 16px 18px 18px; color: var(--on-dark); background: var(--ink); border-left: 3px solid var(--orange); }
+  /* Pinned to the corner of the window, so it is seen from wherever the button
+     was pressed - never at the top of a page scrolled away from. */
+  .job { position: fixed; right: 24px; bottom: 24px; z-index: 9; display: flex; flex-direction: column; width: min(520px, calc(100vw - 48px)); max-height: calc(100vh - 48px); padding: 16px 18px 18px; color: var(--on-dark); background: var(--ink); border-left: 3px solid var(--orange); box-shadow: 0 18px 50px rgba(11, 14, 20, 0.35); animation: job-in 0.35s var(--ease); }
+  .job[hidden] { display: none; }
   .job.ok { border-left-color: var(--on-dark); }
+  @keyframes job-in { from { opacity: 0; transform: translateY(16px); } }
+  @media (max-width: 600px) { .job { right: 16px; bottom: 16px; width: calc(100vw - 32px); } }
   .job-head { display: flex; align-items: center; gap: 12px; flex-wrap: wrap; }
   .job-head b { font-weight: 800; font-stretch: 74%; font-size: 1.1rem; text-transform: uppercase; overflow-wrap: anywhere; }
   .job-head .tag { color: var(--on-dark); border-color: var(--line-dark); }
   .job-close { margin-left: auto; padding: 4px 10px; font: 10px var(--mono); letter-spacing: 0.12em; text-transform: uppercase; border: 1px solid var(--line-dark); }
-  .job-lines { max-height: 260px; margin: 12px 0 0; overflow: auto; font: 12px/1.6 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; opacity: 0.85; }
+  .job-lines { min-height: 0; max-height: 220px; margin: 12px 0 0; overflow: auto; font: 12px/1.6 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; opacity: 0.85; }
   .job-result { margin-top: 12px; font-weight: 700; }
+  .job-acts { display: flex; flex-wrap: wrap; gap: 10px; margin-top: 12px; }
+  .job-acts button { padding: 6px 12px; font: 10px var(--mono); letter-spacing: 0.12em; text-transform: uppercase; color: var(--on-dark); border: 1px solid var(--line-dark); }
+  .job-acts button.go { color: var(--ink); background: var(--on-dark); border-color: var(--on-dark); }
   .job .fallback { color: rgba(233, 237, 242, 0.6); }
 
   /* --- boxes to type into, the words around them, and the yes -------------- */
@@ -293,9 +301,20 @@
   .fallback { font: 10.5px/1.4 var(--mono); color: var(--muted); overflow-wrap: anywhere; }
   .tag.when { color: var(--on-light); border-style: dotted; }
   .f-quick { display: flex; flex-wrap: wrap; align-items: flex-start; gap: 10px; padding: 0 8px 16px 20px; margin-top: -6px; }
+  .keep-row { display: flex; align-items: flex-start; gap: 16px; padding: 18px 8px 18px 0; }
+  .keep-row .switch { margin-top: 2px; }
+  .keep-text { display: grid; gap: 6px; min-width: 0; font-size: 14px; }
+  .keep-text b { font-weight: 800; }
+  .keep-off { padding-top: 14px; border-top: 1px solid var(--line); font-size: 14px; opacity: 0.8; }
+  .fix-all { display: flex; flex-wrap: wrap; align-items: center; gap: 14px 20px; padding: 16px 8px 16px 20px; border-bottom: 1px solid var(--line); box-shadow: inset 3px 0 0 var(--orange); }
+  .fix-all-words { flex: 1 1 260px; display: grid; gap: 4px; font-size: 14px; }
+  .fix-all-words b { font-weight: 800; font-stretch: 74%; font-size: 1.05rem; text-transform: uppercase; }
+  .fix-all-text { flex: 1 1 100%; min-width: 0; }
+  .fix-all-text summary { width: max-content; font: 11px var(--mono); letter-spacing: 0.12em; text-transform: uppercase; cursor: pointer; opacity: 0.75; }
+  .fix-all-text pre { max-height: 320px; margin: 10px 0 0; padding: 14px 16px; overflow: auto; font: 12px/1.6 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; border: 1px solid var(--line); }
   .rechecked { display: flex; flex-wrap: wrap; align-items: center; gap: 10px; padding: 14px 8px 14px 20px; font-size: 14px; border-bottom: 1px solid var(--line); box-shadow: inset 3px 0 0 var(--on-light); }
 
-  .toast { position: fixed; left: 50%; bottom: 24px; z-index: 10; max-width: calc(100vw - 32px); padding: 14px 20px; font-size: 14px; color: var(--on-dark); background: var(--ink); border-left: 2px solid var(--orange); opacity: 0; transform: translate(-50%, 20px); transition: opacity 0.35s var(--ease), transform 0.35s var(--ease); pointer-events: none; }
+  .toast { position: fixed; left: 50%; bottom: calc(24px + var(--job-room, 0px)); z-index: 10; max-width: calc(100vw - 32px); padding: 14px 20px; font-size: 14px; color: var(--on-dark); background: var(--ink); border-left: 2px solid var(--orange); opacity: 0; transform: translate(-50%, 20px); transition: opacity 0.35s var(--ease), transform 0.35s var(--ease); pointer-events: none; }
   .toast.show { opacity: 1; transform: translate(-50%, 0); }
 
   @media (prefers-reduced-motion: reduce) {
@@ -345,6 +364,10 @@
         <div class="card-head"><div><h3>Start here</h3><div class="c-sub">Do these in order. A step is done only once it has actually run.</div></div></div>
         <div class="steps" id="steps"></div>
       </div>
+      <div class="card gap" id="keepCard">
+        <div class="card-head"><div><h3>Keep it running</h3><div class="c-sub">So it is watching whenever your laptop is on - without opening anything</div></div></div>
+        <div class="keep" id="keep"></div>
+      </div>
       <div class="card gap">
         <div class="card-head"><div><h3>Connect your AI tool</h3><div class="c-sub">Optional - your assistant then checks its own work, and does not call a change done until the check passes</div></div></div>
         <div class="ai">

package/kryptheon-dashboard.js

@@ -24,6 +24,7 @@ const crypto = require('crypto');
 const { spawnSync } = require('child_process');
 const store = require('./kryptheon-store.js');
 const changes = require('./kryptheon-changes.js');
+const autostart = require('./kryptheon-autostart.js');
 
 /**
  * Every check the dashboard knows the name of, in the order the person asked
@@ -284,6 +285,44 @@ function nextAction(findings, steps) {
   return { kind: 'quiet', title: 'Nothing open' };
 }
 
+/**
+ * One prompt that fixes every open finding at once, for pasting into an AI
+ * tool, or '' when fewer than two findings have a prompt (one is its own).
+ * Each finding's own prompt goes in as it is, in the order the page shows
+ * them, most severe first. Around them are the rules that keep a fix from
+ * breaking something else: only what is listed, the smallest change, one at
+ * a time with the app checked between, nothing weakened to make a finding go
+ * away, ask rather than guess. The re-checks come once, at the end.
+ *
+ * items: [{ id, severity, headline, where, prompt }] - prompt without its
+ * re-check line.
+ */
+function combinedPrompt(items) {
+  const withPrompt = items.filter((f) => f.prompt);
+  if (withPrompt.length < 2) return '';
+  const n = withPrompt.length;
+  const lines = [
+    'Kryptheon checked this project and found ' + n + ' problems. Fix all ' + n + ', carefully - not breaking anything matters more than speed.',
+    '',
+    'Rules for every fix:',
+    '1. Fix only the problems listed below. Do not refactor, rename, reformat or "improve" anything else, and do not touch a file a fix does not need.',
+    '2. Make the smallest change that fixes each one. Every feature must keep working exactly as it does now for the people meant to use it.',
+    '3. Never delete or weaken a check, test, validation or security rule to make a problem go away, and never delete or rewrite existing data.',
+    '4. Do them one at a time, in the order below. After each one, make sure the app still builds and its existing tests still pass before starting the next.',
+    '5. If a fix needs a decision only I can make, or you are not sure a change is safe, stop and ask me instead of guessing.',
+    '6. When you are done, list every file you changed and why, one line each.',
+  ];
+  withPrompt.forEach((f, i) => {
+    lines.push('', '======== Problem ' + (i + 1) + ' of ' + n + ' - ' + f.severity + ': ' + f.headline + (f.where ? '  (' + f.where + ')' : ''), '', f.prompt.trim());
+  });
+  lines.push('', '======== When all ' + n + ' are fixed',
+    '',
+    'Prove each fix: run these one at a time (or press Re-check on each finding in the Kryptheon dashboard). A fix counts only when it says FIXED, and a re-check also says if anything else newly broke - if it does, fix that before anything else.',
+    '');
+  withPrompt.forEach((f) => lines.push('  npx kryptheon recheck ' + f.id));
+  return lines.join('\n');
+}
+
 /**
  * One sentence about the nightly run inside the database, or null when
  * kryptheon-night has never been asked. Its four states are four different
@@ -433,9 +472,11 @@ function buildState(root, env) {
   // prove the fix. Added here, where the loop lives, so every check's prompt
   // ends the same way and the detection code itself stays untouched.
   const attempts = readHistory(paths.fixes, 500);
+  const forAll = [];
   for (const f of findings) {
     f.id = changes.findingId(f);
     f.attempts = attempts.filter((a) => a.id === f.id).map((a) => ({ at: a.at, verdict: a.verdict, why: a.why || '', newProblems: (a.newProblems || []).length }));
+    forAll.push({ id: f.id, severity: f.severity, headline: f.headline, where: f.where, prompt: f.fixPrompt || '' });
     if (f.fixPrompt) {
       f.fixPrompt += '\n\nWhen you have fixed it, prove it: run  npx kryptheon recheck ' + f.id +
         '  (or press Re-check on this finding in the Kryptheon dashboard). It is fixed only when that says FIXED.';
@@ -497,6 +538,7 @@ function buildState(root, env) {
     proven: proven,
     checks: checks,
     findings: findings,
+    allFixPrompt: combinedPrompt(forAll),
     runs: history.slice().reverse().map((r) => ({ runAt: r.runAt, status: r.status, passed: r.passed, failed: r.failed, durationMs: r.durationMs })),
     recordings: recordings,
     steps: steps,
@@ -506,6 +548,8 @@ function buildState(root, env) {
     // Part 3 is where a version gets verified. Until then this says so,
     // rather than leaving a blank that could be read either way.
     verification: { state: 'not verified', why: 'Kryptheon Verified is not built yet. No version of this project has been verified.' },
+    // Whether this dashboard starts by itself when the person signs in.
+    autostart: (() => { const s = autostart.status(root, env); return { available: s.available, on: s.on, why: s.why || '' }; })(),
   };
 }
 
@@ -751,6 +795,10 @@ function createServer(root, options) {
           const r = setCheck(store.pathsFor(root, env), String(input.id || ''), input.on);
           return json(res, r.ok ? 200 : 400, r);
         }
+        if (url.pathname === '/api/autostart') {
+          const r = autostart.setAutostart(root, input.on, env);
+          return json(res, r.ok ? 200 : 400, { ok: r.ok, on: !!r.on, why: r.why || '' });
+        }
         // Everything below starts a job: it answers at once with the job, and
         // the page follows it on /api/job. One at a time - two browsers
         // replaying against one app, or two attacks on one database, would
@@ -858,6 +906,7 @@ module.exports = {
   databaseVerdict: databaseVerdict,
   startSteps: startSteps,
   nextAction: nextAction,
+  combinedPrompt: combinedPrompt,
   readConfig: readConfig,
   setCheck: setCheck,
   createServer: createServer,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kryptheon",
-  "version": "0.1.31",
+  "version": "0.1.33",
   "description": "Record what you do in your app and get plain-language reports when it breaks.",
   "license": "MIT",
   "type": "commonjs",
@@ -42,7 +42,8 @@
     "kryptheon-spacemono.woff2",
     "kryptheon-archivo.woff2",
     "kryptheon-changes.js",
-    "kryptheon-look.js"
+    "kryptheon-look.js",
+    "kryptheon-autostart.js"
   ],
   "engines": {
     "node": ">=20.6.0"
@@ -51,11 +52,12 @@
     "@playwright/test": "^1.62.1"
   },
   "scripts": {
-    "check": "node kryptheon-store.check.js && node kryptheon-code.check.js && node kryptheon-constdata.check.js && node kryptheon-accept.check.js && node kryptheon-keys.check.js && node kryptheon-dashboard.check.js && node kryptheon-changes.check.js && node kryptheon-look.check.js && node kryptheon-verify.check.js && node kryptheon-recheck.check.js && node kryptheon-reporter.check.js && node kryptheon-signature.check.js && node kryptheon-signature.stream.check.js && node kryptheon-signature.baseline.check.js && node kryptheon-signature.settle.check.js && node kryptheon-signature.number.check.js && node kryptheon-env.check.js && node kryptheon-watchdog.check.js && node kryptheon-record.check.js && node kryptheon-selectors.check.js && node kryptheon-recordings.check.js && node kryptheon-cleanup.check.js && node kryptheon-orphan.check.js && node kryptheon-project.check.js && node kryptheon-setup.check.js && node kryptheon-browser.check.js && node kryptheon-heal.check.js && node kryptheon-load.check.js && node kryptheon-package.check.js",
+    "check": "node kryptheon-store.check.js && node kryptheon-code.check.js && node kryptheon-constdata.check.js && node kryptheon-accept.check.js && node kryptheon-keys.check.js && node kryptheon-dashboard.check.js && node kryptheon-autostart.check.js && node kryptheon-changes.check.js && node kryptheon-look.check.js && node kryptheon-verify.check.js && node kryptheon-recheck.check.js && node kryptheon-reporter.check.js && node kryptheon-signature.check.js && node kryptheon-signature.stream.check.js && node kryptheon-signature.baseline.check.js && node kryptheon-signature.settle.check.js && node kryptheon-signature.number.check.js && node kryptheon-env.check.js && node kryptheon-watchdog.check.js && node kryptheon-record.check.js && node kryptheon-selectors.check.js && node kryptheon-recordings.check.js && node kryptheon-cleanup.check.js && node kryptheon-orphan.check.js && node kryptheon-project.check.js && node kryptheon-setup.check.js && node kryptheon-browser.check.js && node kryptheon-heal.check.js && node kryptheon-load.check.js && node kryptheon-package.check.js",
     "check:store": "node kryptheon-store.check.js",
     "check:code": "node kryptheon-code.check.js",
     "check:constdata": "node kryptheon-constdata.check.js",
     "check:dashboard": "node kryptheon-dashboard.check.js",
+    "check:autostart": "node kryptheon-autostart.check.js",
     "check:changes": "node kryptheon-changes.check.js",
     "check:look": "node kryptheon-look.check.js",
     "check:verify": "node kryptheon-verify.check.js",