kryptheon 0.1.32 → 0.1.34

package/bin/kryptheon.js

@@ -2321,7 +2321,9 @@ function recheckCommand(id) {
 // One page on this machine for everything Kryptheon knows about this project
 // (kryptheon-dashboard.js). Runs until Ctrl+C.
 
-const DASHBOARD_PORT = 4789;
+// KRYPTHEON_DASHBOARD_PORT is for the checks, which must not use the port of
+// a dashboard the person has open.
+const DASHBOARD_PORT = Number(process.env.KRYPTHEON_DASHBOARD_PORT) || 4789;
 
 /**
  * Runs a command and hands every line it prints to `say`, as it prints it -
@@ -2511,12 +2513,52 @@ function openInBrowser(url) {
   }
 }
 
+/**
+ * Whether this project's dashboard is already running on the usual port -
+ * started at sign-in, most likely - by asking it which project it shows.
+ * Never fatal: no answer, a slow one, or another project's means no.
+ */
+function dashboardAlreadyRunning(port) {
+  return new Promise((resolve) => {
+    const req = require('http').get({ host: '127.0.0.1', port: port, path: '/api/state', headers: { host: '127.0.0.1:' + port }, timeout: 2000 }, (res) => {
+      let body = '';
+      res.setEncoding('utf8');
+      res.on('data', (chunk) => { if (body.length < 5000000) body += chunk; });
+      res.on('end', () => {
+        try {
+          const root = JSON.parse(body).project.root;
+          const same = (a) => (process.platform === 'win32' ? path.resolve(a).toLowerCase() : path.resolve(a));
+          resolve(res.statusCode === 200 && typeof root === 'string' && same(root) === same(USER_DIR));
+        } catch (err) {
+          resolve(false);
+        }
+      });
+    });
+    req.on('timeout', () => req.destroy());
+    req.on('error', () => resolve(false));
+  });
+}
+
 async function dashboardCommand() {
   const here = project.inspectProject(USER_DIR);
   if (!here.ok) {
     for (const line of project.noProjectLines(here)) console.error(line);
     return 1;
   }
+  // Running already: open that one rather than a second, which would watch
+  // the same project twice. Exit code 0 is how the launcher knows.
+  if (await dashboardAlreadyRunning(DASHBOARD_PORT)) {
+    const address = 'http://127.0.0.1:' + DASHBOARD_PORT + '/';
+    const shown = openInBrowser(address);
+    console.log('');
+    console.log('  The Kryptheon dashboard for ' + path.basename(USER_DIR) + ' is already running:');
+    console.log('');
+    console.log('    ' + address);
+    console.log('');
+    console.log(shown ? '  It is opening in your browser.' : '  Open that address in your browser.');
+    console.log('');
+    return 0;
+  }
   const opened = openStore();
   if (!opened) return 1;
   const dash = require(path.join(PACKAGE_DIR, 'kryptheon-dashboard.js'));

package/kryptheon-autostart.js

@@ -0,0 +1,148 @@
+'use strict';
+
+/*
+ * Start with Windows: the dashboard for one project, started when the person
+ * signs in, so it is watching whenever the laptop is on.
+ *
+ * It is one small .cmd file in the person's own Startup folder - the plainest
+ * way Windows has, seen and removable in Task Manager's Startup apps and in
+ * the folder itself. The file says what it is and runs one thing:
+ * npx kryptheon@latest dashboard, in a minimized window on the taskbar. A
+ * window, not a hidden process: something that starts by itself at sign-in
+ * should be seen, and closing it stops it.
+ *
+ * Only the file this module wrote is ever removed: it is recognised by its
+ * first lines, never by its name alone.
+ */
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+
+const MARK = 'rem Kryptheon - starts the Kryptheon dashboard for this project when you sign in to Windows.';
+const CRLF = '\r\n';
+
+/** The Startup folder, or null where there is none (not Windows). */
+function startupDir(env, platform) {
+  const e = env || process.env;
+  // For the checks: a folder of their own, never the real Startup folder.
+  if (e.KRYPTHEON_STARTUP_DIR) return e.KRYPTHEON_STARTUP_DIR;
+  if ((platform || process.platform) !== 'win32' || !e.APPDATA) return null;
+  return path.join(e.APPDATA, 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Startup');
+}
+
+/** The folder's name as it may be shown in a file name and a window title. */
+function plainName(root) {
+  return path.basename(root).replace(/[^A-Za-z0-9 ._-]/g, '_').slice(0, 40) || 'project';
+}
+
+/**
+ * One file per project, named after the folder and told apart by its full
+ * path - two projects called "app" get two files. Windows paths are compared
+ * without regard to case, so the same folder spelled two ways is one file.
+ */
+function fileFor(root, env, platform) {
+  const dir = startupDir(env, platform);
+  if (!dir) return null;
+  const full = path.resolve(root);
+  const key = (platform || process.platform) === 'win32' ? full.toLowerCase() : full;
+  const id = crypto.createHash('sha256').update(key).digest('hex').slice(0, 8);
+  return path.join(dir, 'Kryptheon dashboard - ' + plainName(root) + ' ' + id + '.cmd');
+}
+
+/**
+ * The file's text. The project's path appears only inside double quotes, so
+ * & ^ ( ) and spaces in it are read as themselves; % is doubled, the one
+ * character cmd still reads inside quotes. The file is UTF-8 and switches
+ * the window to UTF-8 before the path is read, for folder names in any
+ * language.
+ */
+function script(root) {
+  const full = path.resolve(root);
+  const quoted = '"' + full.replace(/%/g, '%%') + '"';
+  const name = plainName(root);
+  return [
+    '@echo off',
+    'chcp 65001 >nul',
+    MARK,
+    'rem   ' + quoted,
+    'rem Put here by "Start with Windows" on the Kryptheon dashboard. To stop it, switch',
+    'rem that off on the dashboard, or delete this file. What it runs:',
+    'rem   npx kryptheon@latest dashboard  - nothing else, in a small window on the taskbar.',
+    'if "%~1"=="run" goto run',
+    // cmd /c, not start's own cmd /k: a window whose file was removed while it
+    // ran - switched off on the dashboard - closes instead of waiting at a prompt.
+    'start "Kryptheon dashboard - ' + name + '" /min cmd /d /c ""%~f0" run"',
+    'exit /b',
+    ':run',
+    'title Kryptheon dashboard - ' + name,
+    'rem npx starts the command "kryptheon": never look for it in the current folder,',
+    'rem where a Kryptheon.cmd launcher may sit, and the browser is not opened at sign-in.',
+    'set NoDefaultCurrentDirectoryInExePath=1',
+    'set KRYPTHEON_LAUNCHER=1',
+    'set KRYPTHEON_NO_OPEN=1',
+    'cd /d ' + quoted + ' || goto gone',
+    'echo.',
+    'echo   Kryptheon dashboard, started when you signed in, for:',
+    'echo     ' + quoted,
+    'echo   Closing this window stops it until you sign in again.',
+    'echo.',
+    'call npx --yes kryptheon@latest dashboard',
+    'if not errorlevel 1 exit',
+    'rem At sign-in the network may not be up yet: then the copy npx already has.',
+    'echo   Trying again with the copy already on this computer...',
+    'call npx --yes --offline kryptheon@latest dashboard',
+    'if not errorlevel 1 exit',
+    'echo.',
+    'echo   The Kryptheon dashboard stopped. The reason, if any, is above.',
+    'pause',
+    'exit',
+    ':gone',
+    'echo.',
+    'echo   This project folder is gone, so its dashboard cannot start:',
+    'echo     ' + quoted,
+    'echo   To stop this message, delete this file:',
+    'echo     "%~f0"',
+    'pause',
+    'exit',
+    '',
+  ].join(CRLF);
+}
+
+/** Whether it is on for this project, and whether it can be at all. */
+function status(root, env, platform) {
+  const file = fileFor(root, env, platform);
+  if (!file) return { available: false, on: false, why: 'Starting with the computer is only on Windows for now.' };
+  let on = false;
+  try {
+    on = fs.readFileSync(file, 'utf8').indexOf(MARK) !== -1;
+  } catch (err) {
+    on = false;
+  }
+  return { available: true, on: on, file: file };
+}
+
+/** Switches it on (writes the file) or off (removes only a file it wrote). */
+function setAutostart(root, on, env, platform) {
+  if (typeof on !== 'boolean') return { ok: false, why: 'on must be true or false' };
+  const file = fileFor(root, env, platform);
+  if (!file) return { ok: false, why: 'Starting with the computer is only on Windows for now.' };
+  try {
+    if (on) {
+      fs.mkdirSync(path.dirname(file), { recursive: true });
+      fs.writeFileSync(file, script(root), 'utf8');
+    } else {
+      let text = null;
+      try { text = fs.readFileSync(file, 'utf8'); } catch (err) { text = null; }
+      if (text !== null) {
+        if (text.indexOf(MARK) === -1) return { ok: false, why: 'the file there was not written by Kryptheon, so it was left alone: ' + file };
+        fs.unlinkSync(file);
+      }
+    }
+  } catch (err) {
+    return { ok: false, why: 'could not ' + (on ? 'write' : 'remove') + ' ' + file + ': ' + err.message };
+  }
+  return Object.assign({ ok: true }, status(root, env, platform));
+}
+
+module.exports = { startupDir, fileFor, script, status, setAutostart, MARK };

package/kryptheon-dashboard-page.js

@@ -616,8 +616,11 @@
       steps: ['Run this once, in any terminal. That is the whole set-up.'],
       code: 'claude mcp add kryptheon -- npx -y kryptheon-mcp', file: 'terminal' },
     { id: 'cursor', name: 'Cursor', tested: false,
-      oneClick: { href: 'cursor://anysphere.cursor-deeplink/mcp/install?name=kryptheon&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsImtyeXB0aGVvbi1tY3AiXX0=', label: 'Add to Cursor' },
-      steps: ['Press Add to Cursor. Cursor asks you to confirm - say yes.', 'Or by hand: paste the config into mcp.json in the .cursor folder of your home folder.'],
+      // Cursor's own install page, as on kryptheon.tech: it opens Cursor, and
+      // where Cursor does not open - not installed, or blocked - it shows the
+      // config to paste, rather than a click that does nothing at all.
+      oneClick: { href: 'https://cursor.com/en/install-mcp?name=kryptheon&config=eyJjb21tYW5kIjoibnB4IiwiYXJncyI6WyIteSIsImtyeXB0aGVvbi1tY3AiXX0=', label: 'Add to Cursor' },
+      steps: ['Press Add to Cursor. Cursor\'s page opens and hands it to Cursor, which asks you to confirm - say yes. Cursor has to be installed on this computer.', 'Or by hand: paste the config into mcp.json in the .cursor folder of your home folder.'],
       code: MCP_JSON, file: '~/.cursor/mcp.json' },
     { id: 'vscode', name: 'VS Code', tested: false,
       oneClick: { href: 'vscode:mcp/install?' + encodeURIComponent(JSON.stringify({ name: 'kryptheon', command: 'npx', args: ['-y', 'kryptheon-mcp'] })), label: 'Install in VS Code' },
@@ -663,6 +666,7 @@
       var oc = el('div', 'ai-oneclick');
       var link = el('a', 'btn sun', tool.oneClick.label + ' →');
       link.href = tool.oneClick.href;
+      if (/^https:/.test(tool.oneClick.href)) { link.target = '_blank'; link.rel = 'noopener noreferrer'; }
       oc.appendChild(link);
       oc.appendChild(el('small', null, 'or by hand, below'));
       panel.appendChild(oc);
@@ -1036,6 +1040,41 @@
     }, function () {});
   }
 
+  // Start with Windows, and what still runs when the laptop is off.
+  function renderKeep() {
+    var box = byId('keep');
+    clear(box);
+    var a = state.autostart || { available: false, on: false, why: '' };
+    var row = el('div', 'keep-row');
+    if (a.available) {
+      var sw = el('label', 'switch');
+      var input = el('input');
+      input.type = 'checkbox';
+      input.checked = !!a.on;
+      input.setAttribute('aria-label', 'Start with Windows');
+      input.addEventListener('change', function () { setAutostart(input.checked, input); });
+      sw.appendChild(input);
+      sw.appendChild(el('span', 'track'));
+      row.appendChild(sw);
+    }
+    var text = el('div', 'keep-text');
+    var title = el('b', null, 'Start with Windows ');
+    if (a.available) title.appendChild(el('span', 'tag ' + (a.on ? 'leaf' : ''), a.on ? 'on' : 'off'));
+    text.appendChild(title);
+    text.appendChild(el('span', null, !a.available ? (a.why || 'Not on this computer.')
+      : a.on ? 'When you sign in to Windows, this dashboard starts by itself in a small window on the taskbar, with nothing opened. To see it, double-click Kryptheon.cmd as always - it opens the one already running. Closing that taskbar window stops it until you sign in again.'
+      : 'Switch it on and this dashboard starts by itself every time you sign in to Windows, in a small window on the taskbar. Nothing opens - it just watches for changes. Switch it off here any time.'));
+    row.appendChild(text);
+    box.appendChild(row);
+    box.appendChild(el('div', 'keep-off', 'With the laptop off, nothing on it can run. The nightly database check is different: once set up in Start here, it runs inside your database itself, and its result is waiting the next time you open this page.'));
+  }
+  function setAutostart(on, input) {
+    post('/api/autostart', { on: on }).then(function () {
+      toast(on ? 'On: it starts by itself when you sign in to Windows' : 'Off: it no longer starts by itself');
+      return load();
+    }).catch(function (err) { input.checked = !on; toast('Not saved: ' + err.message); });
+  }
+
   function setCheck(id, on, input) {
     post('/api/check', { id: id, on: on }).then(function () {
       toast((on ? 'Switched on: ' : 'Switched off: ') + (CHECK_NAME[id] || id));
@@ -1064,6 +1103,7 @@
     renderTop();
     renderNow();
     renderSteps();
+    renderKeep();
     renderStatusFilter();
     renderFindings();
     renderTimeline();

package/kryptheon-dashboard.html

@@ -301,6 +301,11 @@
   .fallback { font: 10.5px/1.4 var(--mono); color: var(--muted); overflow-wrap: anywhere; }
   .tag.when { color: var(--on-light); border-style: dotted; }
   .f-quick { display: flex; flex-wrap: wrap; align-items: flex-start; gap: 10px; padding: 0 8px 16px 20px; margin-top: -6px; }
+  .keep-row { display: flex; align-items: flex-start; gap: 16px; padding: 18px 8px 18px 0; }
+  .keep-row .switch { margin-top: 2px; }
+  .keep-text { display: grid; gap: 6px; min-width: 0; font-size: 14px; }
+  .keep-text b { font-weight: 800; }
+  .keep-off { padding-top: 14px; border-top: 1px solid var(--line); font-size: 14px; opacity: 0.8; }
   .fix-all { display: flex; flex-wrap: wrap; align-items: center; gap: 14px 20px; padding: 16px 8px 16px 20px; border-bottom: 1px solid var(--line); box-shadow: inset 3px 0 0 var(--orange); }
   .fix-all-words { flex: 1 1 260px; display: grid; gap: 4px; font-size: 14px; }
   .fix-all-words b { font-weight: 800; font-stretch: 74%; font-size: 1.05rem; text-transform: uppercase; }
@@ -359,6 +364,10 @@
         <div class="card-head"><div><h3>Start here</h3><div class="c-sub">Do these in order. A step is done only once it has actually run.</div></div></div>
         <div class="steps" id="steps"></div>
       </div>
+      <div class="card gap" id="keepCard">
+        <div class="card-head"><div><h3>Keep it running</h3><div class="c-sub">So it is watching whenever your laptop is on - without opening anything</div></div></div>
+        <div class="keep" id="keep"></div>
+      </div>
       <div class="card gap">
         <div class="card-head"><div><h3>Connect your AI tool</h3><div class="c-sub">Optional - your assistant then checks its own work, and does not call a change done until the check passes</div></div></div>
         <div class="ai">

package/kryptheon-dashboard.js

@@ -24,6 +24,7 @@ const crypto = require('crypto');
 const { spawnSync } = require('child_process');
 const store = require('./kryptheon-store.js');
 const changes = require('./kryptheon-changes.js');
+const autostart = require('./kryptheon-autostart.js');
 
 /**
  * Every check the dashboard knows the name of, in the order the person asked
@@ -547,6 +548,8 @@ function buildState(root, env) {
     // Part 3 is where a version gets verified. Until then this says so,
     // rather than leaving a blank that could be read either way.
     verification: { state: 'not verified', why: 'Kryptheon Verified is not built yet. No version of this project has been verified.' },
+    // Whether this dashboard starts by itself when the person signs in.
+    autostart: (() => { const s = autostart.status(root, env); return { available: s.available, on: s.on, why: s.why || '' }; })(),
   };
 }
 
@@ -792,6 +795,10 @@ function createServer(root, options) {
           const r = setCheck(store.pathsFor(root, env), String(input.id || ''), input.on);
           return json(res, r.ok ? 200 : 400, r);
         }
+        if (url.pathname === '/api/autostart') {
+          const r = autostart.setAutostart(root, input.on, env);
+          return json(res, r.ok ? 200 : 400, { ok: r.ok, on: !!r.on, why: r.why || '' });
+        }
         // Everything below starts a job: it answers at once with the job, and
         // the page follows it on /api/job. One at a time - two browsers
         // replaying against one app, or two attacks on one database, would

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kryptheon",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "description": "Record what you do in your app and get plain-language reports when it breaks.",
   "license": "MIT",
   "type": "commonjs",
@@ -42,7 +42,8 @@
     "kryptheon-spacemono.woff2",
     "kryptheon-archivo.woff2",
     "kryptheon-changes.js",
-    "kryptheon-look.js"
+    "kryptheon-look.js",
+    "kryptheon-autostart.js"
   ],
   "engines": {
     "node": ">=20.6.0"
@@ -51,11 +52,12 @@
     "@playwright/test": "^1.62.1"
   },
   "scripts": {
-    "check": "node kryptheon-store.check.js && node kryptheon-code.check.js && node kryptheon-constdata.check.js && node kryptheon-accept.check.js && node kryptheon-keys.check.js && node kryptheon-dashboard.check.js && node kryptheon-changes.check.js && node kryptheon-look.check.js && node kryptheon-verify.check.js && node kryptheon-recheck.check.js && node kryptheon-reporter.check.js && node kryptheon-signature.check.js && node kryptheon-signature.stream.check.js && node kryptheon-signature.baseline.check.js && node kryptheon-signature.settle.check.js && node kryptheon-signature.number.check.js && node kryptheon-env.check.js && node kryptheon-watchdog.check.js && node kryptheon-record.check.js && node kryptheon-selectors.check.js && node kryptheon-recordings.check.js && node kryptheon-cleanup.check.js && node kryptheon-orphan.check.js && node kryptheon-project.check.js && node kryptheon-setup.check.js && node kryptheon-browser.check.js && node kryptheon-heal.check.js && node kryptheon-load.check.js && node kryptheon-package.check.js",
+    "check": "node kryptheon-store.check.js && node kryptheon-code.check.js && node kryptheon-constdata.check.js && node kryptheon-accept.check.js && node kryptheon-keys.check.js && node kryptheon-dashboard.check.js && node kryptheon-autostart.check.js && node kryptheon-changes.check.js && node kryptheon-look.check.js && node kryptheon-verify.check.js && node kryptheon-recheck.check.js && node kryptheon-reporter.check.js && node kryptheon-signature.check.js && node kryptheon-signature.stream.check.js && node kryptheon-signature.baseline.check.js && node kryptheon-signature.settle.check.js && node kryptheon-signature.number.check.js && node kryptheon-env.check.js && node kryptheon-watchdog.check.js && node kryptheon-record.check.js && node kryptheon-selectors.check.js && node kryptheon-recordings.check.js && node kryptheon-cleanup.check.js && node kryptheon-orphan.check.js && node kryptheon-project.check.js && node kryptheon-setup.check.js && node kryptheon-browser.check.js && node kryptheon-heal.check.js && node kryptheon-load.check.js && node kryptheon-package.check.js",
     "check:store": "node kryptheon-store.check.js",
     "check:code": "node kryptheon-code.check.js",
     "check:constdata": "node kryptheon-constdata.check.js",
     "check:dashboard": "node kryptheon-dashboard.check.js",
+    "check:autostart": "node kryptheon-autostart.check.js",
     "check:changes": "node kryptheon-changes.check.js",
     "check:look": "node kryptheon-look.check.js",
     "check:verify": "node kryptheon-verify.check.js",