mindwire 0.1.28 → 0.1.30

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { defaultStateDirectory, superviseComputer, ensureComputer, computerPairingURI, stopComputer, computerClient, SDK_VERSION, readJSON, writeJSON, currentProcessIdentity, processStateAlive, acquireProcessLock, computerPairingQRData } from './chunk-5WYSGXFN.js';
+import { defaultStateDirectory, superviseComputer, ensureComputer, computerPairingURI, stopComputer, computerClient, SDK_VERSION, readJSON, writeJSON, currentProcessIdentity, processStateAlive, acquireProcessLock, computerPairingQRData } from './chunk-RN7ERVJ2.js';
 import './chunk-T6TD76UA.js';
 import { promisify, parseArgs } from 'util';
 import { fileURLToPath, pathToFileURL } from 'url';
@@ -7,10 +7,10 @@ import { realpathSync, mkdtempSync, chmodSync, writeFileSync, rmSync } from 'fs'
 import * as path from 'path';
 import { join } from 'path';
 import { createHash } from 'crypto';
-import { hostname, homedir, tmpdir } from 'os';
 import { createInterface } from 'readline/promises';
 import { setTimeout as setTimeout$1 } from 'timers/promises';
 import { execFile, spawn } from 'child_process';
+import { homedir, tmpdir } from 'os';
 import * as fs from 'fs/promises';
 
 var enterScreen = "\x1B[?1049h\x1B[?25l";
@@ -63,14 +63,14 @@ textarea{width:100%;margin-top:12px;padding:8px;color:inherit;background:#252528
 <div class="code" id="code" role="img" aria-label="Mindwire connection QR code">${svg}</div>
 <p id="expiry" data-expires="${escapeHTML(invitation.expiresAt)}" aria-live="off"></p>
 <div class="steps"><p>${reconnect ? "In Mindwire, open your computer in <strong>Workspaces</strong>, then <strong>Reconnect Computer \u2192 Scan Connection Code</strong>." : "In Mindwire, open <strong>Add computer</strong> and scan."}</p>
-<p>${reconnect ? "Your saved pairing and workspace stay the same. No new approval is needed." : "Then return to the terminal to approve your phone."}</p></div>
+<p>${reconnect ? "Your saved pairing and workspace stay the same. No new approval is needed." : "Saved keys reconnect automatically. Approve on this computer only if asked."}</p></div>
 <button type="button" id="copy">Copy ${reconnect ? "reconnect" : "pairing"} link</button>
 <textarea id="link" readonly hidden aria-label="Pairing link">${escapeHTML(computerPairingURI(invitation))}</textarea>
 <footer>You can close this page after ${reconnect ? "reconnecting" : "pairing"}.</footer>
 </main><script>
 const expiry=document.getElementById('expiry'),code=document.getElementById('code'),copy=document.getElementById('copy'),link=document.getElementById('link');
 function tick(){const seconds=Math.max(0,Math.ceil((Date.parse(expiry.dataset.expires)-Date.now())/1000));
-if(!seconds){code.remove();copy.disabled=true;link.value='';link.hidden=true;expiry.textContent='Code expired. Run mindwire ${reconnect ? "reconnect" : "connect pair"} for a new code.';return;}
+if(!seconds){code.remove();copy.disabled=true;link.value='';link.hidden=true;expiry.textContent='Code expired. Run mindwire connect for a new code.';return;}
 expiry.textContent='Expires in '+Math.floor(seconds/60)+':'+String(seconds%60).padStart(2,'0');}
 tick();setInterval(tick,1000);
 copy.addEventListener('click',async()=>{try{await navigator.clipboard.writeText(link.value);copy.textContent='Copied';}
@@ -96,9 +96,9 @@ async function openBrowser(url) {
 async function showPairingInvitation(invitation, options = {}) {
   const reconnect = "mode" in invitation && invitation.mode === "reconnect";
   const instruction = scanInstruction(invitation);
-  const nextStep = reconnect ? "Scan with a saved phone, then press Enter here." : "Return here to approve your phone.";
+  const nextStep = reconnect ? "Scan with a saved phone." : "Approve on this computer only if asked.";
   const waiting = reconnect ? "Your saved pairing stays the same." : "Waiting for your phone\u2026";
-  const command = reconnect ? "mindwire reconnect" : "mindwire connect pair";
+  const command = "mindwire connect";
   const output = options.output ?? process.stdout;
   const environment = options.environment ?? process.env;
   const mode = options.mode ?? "auto";
@@ -417,23 +417,30 @@ function connectionAction(value) {
   if (value === "resume" || value === "reconnect" || value === "pair") return value;
   throw new Error("Use mindwire connect, mindwire connect resume, mindwire reconnect, or mindwire connect pair.");
 }
-async function chooseConnectionAction(options) {
-  const paired = options.devices.filter((device) => !device.revoked);
-  if (options.requested) {
-    if (options.requested !== "pair" && paired.length === 0) {
-      throw new Error("No saved phones yet. Run mindwire connect to pair one first.");
-    }
-    return options.requested;
+function approvalCommand(pairingId, requestId) {
+  if (![pairingId, requestId].every((id) => /^[A-Za-z0-9_-]{8,128}$/.test(id))) {
+    throw new Error("Invalid phone pairing request. Run mindwire connect to create a new code.");
   }
-  if (paired.length === 0) return "pair";
-  if (!options.question) return "resume";
+  return `mindwire approve -- ${pairingId} ${requestId}`;
+}
+async function chooseConnectionAction(options) {
+  if (options.requested === "pair" || options.requested === "reconnect") return "pair";
+  return options.devices.some((device) => !device.revoked && device.connected) ? "resume" : "pair";
+}
+async function choosePairingDecision(options) {
+  const replacements = options.replacements.filter((device) => !device.revoked);
+  const prompt = replacements.length ? `
+Previous approvals with this name:
+${deviceSummary(replacements, true)}
+
+Allow this phone? [r = replace these approvals, a = add a different phone, N = deny]: ` : "Allow this phone to access this computer? [y/N] ";
   for (; ; ) {
-    const answer = (await options.question(
-      "\n  1  Resume saved connection\n  2  Refresh address on a saved phone (QR)\n  3  Pair another phone\n\nChoose [1]: "
-    )).trim().toLowerCase();
-    if (answer === "" || answer === "1" || answer === "resume") return "resume";
-    if (answer === "2" || answer === "reconnect") return "reconnect";
-    if (answer === "3" || answer === "pair") return "pair";
+    const answer = (await options.question(prompt)).trim().toLowerCase();
+    if (["", "n", "no"].includes(answer)) return { approve: false };
+    if (replacements.length) {
+      if (["r", "replace"].includes(answer)) return { approve: true, replaceDeviceIds: replacements.map((device) => device.id) };
+      if (["a", "add"].includes(answer)) return { approve: true };
+    } else if (["y", "yes"].includes(answer)) return { approve: true };
   }
 }
 async function chooseStartupAction(options) {
@@ -450,20 +457,7 @@ async function chooseStartupAction(options) {
     if (["n", "no"].includes(answer)) return false;
   }
 }
-function reconnectCode(info, name, now = /* @__PURE__ */ new Date()) {
-  if (info.routes.length === 0) throw new Error("No connection address is ready. Run mindwire status and retry once the tunnel is online.");
-  return {
-    version: 1,
-    mode: "reconnect",
-    computerId: info.computerId,
-    registryId: info.registryId,
-    fingerprint: info.fingerprint,
-    name,
-    routes: info.routes,
-    expiresAt: new Date(now.getTime() + 5 * 6e4).toISOString()
-  };
-}
-function deviceSummary(devices) {
+function deviceSummary(devices, showKeys = false) {
   const saved = devices.filter((device) => !device.revoked);
   const names = /* @__PURE__ */ new Map();
   const safeName2 = (device) => device.name.replace(/[\x00-\x1f\x7f-\x9f]/g, "");
@@ -471,7 +465,7 @@ function deviceSummary(devices) {
   return saved.sort((a, b) => a.name.localeCompare(b.name) || a.id.localeCompare(b.id)).map((device) => {
     const name = safeName2(device);
     const status = device.connected === true ? "connected" : "paired";
-    const identity = (names.get(name) ?? 0) > 1 ? ` \xB7 key ${device.id.slice(0, 8)}` : "";
+    const identity = showKeys || (names.get(name) ?? 0) > 1 ? ` \xB7 key ${device.id.slice(0, 8)}` : "";
     return `  ${name} \xB7 ${status}${identity}`;
   }).join("\n");
 }
@@ -480,9 +474,8 @@ function deviceSummary(devices) {
 var help = `Mindwire \u2014 connect this computer to your phone
 
   npm install -g mindwire
-  mindwire connect                       Resume a saved connection, or pair your first phone
-  mindwire connect resume                Resume without creating another pairing
-  mindwire reconnect                     Refresh a saved phone's address with a QR code
+  mindwire connect                       Connect your phone; saved keys reconnect automatically
+  mindwire reconnect                     Show a connection QR again (also repairs a missing pairing)
   mindwire connect pair                  Pair another phone with this computer
   mindwire connect --relay none --host laptop.tailnet  Use your existing VPN
   mindwire connect --relay none           Direct SSH only (reachable network required)
@@ -511,6 +504,7 @@ Options:
   --no-qr                                Print only the pairing link
   --startup                              Enable automatic startup without a prompt
   --no-startup                            Skip automatic startup setup
+  --replace-device DEVICE_ID              With approve: replace a lost phone key (repeatable)
 
 The default works across Wi-Fi and mobile networks. Mindwire privately downloads
 a verified Cloudflare helper when needed. Relays carry encrypted SSH.
@@ -540,7 +534,8 @@ async function main(args = process.argv.slice(2)) {
     version: { type: "string" },
     force: { type: "boolean" },
     startup: { type: "boolean" },
-    "no-startup": { type: "boolean" }
+    "no-startup": { type: "boolean" },
+    "replace-device": { type: "string", multiple: true }
   } });
   const command = positionals[0] ?? "help";
   if (values.help || command === "help") {
@@ -609,7 +604,7 @@ async function main(args = process.argv.slice(2)) {
     const devices = await client2.computer.devices();
     const saved = devices.filter((device) => !device.revoked);
     if (saved.length) emit("saved_devices", { devices: saved }, `
-Saved phones
+Saved approvals on this computer
 ${deviceSummary(saved)}`);
     const question = !values.json && process.stdin.isTTY ? async (prompt) => {
       const input = createInterface({ input: process.stdin, output: process.stderr });
@@ -619,7 +614,7 @@ ${deviceSummary(saved)}`);
         input.close();
       }
     } : void 0;
-    const action = await chooseConnectionAction({ requested: requestedAction, devices, question });
+    const action = await chooseConnectionAction({ requested: requestedAction, devices });
     const startupPreference = await startupStatus(directory);
     const startupAction = await chooseStartupAction({
       state: startupPreference,
@@ -638,33 +633,12 @@ ${deviceSummary(saved)}`);
       emit("startup", startupPreference, startupPreference.enabled ? "Automatic startup is on. Change it with mindwire startup disable." : "Automatic startup is off. Enable it with mindwire startup enable.");
     }
     if (action === "resume") {
-      emit("resumed", { computerId: info.computerId, devices: saved }, "\nReady for your saved phone. Open this computer in Mindwire.");
-      if (info.routes.some((route) => route.kind === "websocket" && new URL(route.url).hostname.endsWith(".trycloudflare.com"))) {
-        emit("reconnect_hint", {}, "If its temporary tunnel address changed, run mindwire reconnect to refresh your phone.");
-      }
-      return;
-    }
-    if (action === "reconnect") {
-      const code = reconnectCode(await client2.computer.info(), hostname());
-      emit("reconnect_code", { code, uri: computerPairingURI(code) });
-      if (values.json) return;
-      emit("reconnect_instructions", {}, "\nOn your iPhone: Workspaces \u2192 your computer \u2192 Reconnect Computer \u2192 Scan Connection Code.\nThis refreshes the saved connection; it does not pair another phone.");
-      const display2 = await showPairingInvitation(code, {
-        mode: values["no-qr"] ? "none" : values.qr ?? "auto"
-      });
-      try {
-        if (question) await question("\nScan with your saved phone, then press Enter to close this code. ");
-        else if (values.qr === "browser") {
-          emit("waiting", {}, "This code stays open until it expires. Press Ctrl+C to close it; Mindwire keeps running.");
-          await setTimeout$1(Math.max(0, Date.parse(code.expiresAt) - Date.now()));
-        }
-      } finally {
-        display2.close();
-      }
-      const connected = (await client2.computer.devices()).filter((device) => !device.revoked && device.connected);
-      emit(connected.length ? "connected" : "waiting_for_phone", { computerId: info.computerId, devices: connected }, connected.length ? `Connected:
+      const connected = saved.filter((device) => device.connected);
+      emit("connected", { computerId: info.computerId, devices: connected }, `
+Connected:
 ${deviceSummary(connected)}
-Mindwire continues running in the background.` : "Mindwire is running. Open Reconnect Computer on your iPhone and scan the code to refresh its address.");
+Mindwire continues running in the background.`);
+      emit("connect_hint", {}, "To scan again or add a phone, run mindwire reconnect.");
       return;
     }
     const invitation = await client2.computer.invite((await client2.computer.info()).routes);
@@ -675,12 +649,31 @@ Mindwire continues running in the background.` : "Mindwire is running. Open Reco
     });
     try {
       let shownRequest;
+      let authorized = false;
       while (Date.now() < Date.parse(invitation.expiresAt)) {
         const pairing = await client2.computer.pairing(invitation.pairingId);
+        if (pairing.status === "waiting" && requestedAction !== "pair" && requestedAction !== "reconnect") {
+          const connected = (await client2.computer.devices()).filter((device) => !device.revoked && device.connected);
+          if (connected.length && ((info.pairingVersion ?? 0) < 2 || (await client2.computer.closeUnusedPairing(invitation.pairingId)).cancelled)) {
+            display?.close();
+            emit("connected", { computerId: info.computerId, devices: connected }, `Connected:
+${deviceSummary(connected)}
+Mindwire continues running in the background.`);
+            return;
+          }
+        }
         if (pairing.status === "approved") {
           display?.close();
-          emit("paired", {}, "Phone connected. You can close this terminal; Mindwire keeps running.");
-          return;
+          if (pairing.completed) {
+            emit("paired", { computerId: info.computerId, completed: true }, "Phone connected and saved. You can close this terminal; Mindwire keeps running.");
+            return;
+          }
+          if (!authorized) {
+            authorized = true;
+            emit("authorized", {}, "Phone authorized. Waiting for it to save the connection\u2026");
+          }
+          await setTimeout$1(750);
+          continue;
         }
         if (pairing.status === "rejected") {
           display?.close();
@@ -692,33 +685,33 @@ Mindwire continues running in the background.` : "Mindwire is running. Open Reco
           shownRequest = pairing.request.id;
           const key = Buffer.from(pairing.request.publicKey.split(" ")[1] ?? "", "base64");
           const fingerprint = "SHA256:" + createHash("sha256").update(key).digest("base64").replace(/=+$/, "");
+          const deviceId = createHash("sha256").update(key).digest("base64url");
+          const replacements = (info.pairingVersion ?? 0) >= 2 ? (await client2.computer.devices()).filter((device) => !device.revoked && device.id !== deviceId && device.name === pairing.request.name) : [];
           emit(
             "approval_required",
-            { pairingId: invitation.pairingId, request: pairing.request, fingerprint },
+            { pairingId: invitation.pairingId, request: pairing.request, fingerprint, replacements },
             `
 ${safeName(pairing.request.name)} wants to connect.
-Device key: ${fingerprint}`
+Device key: ${fingerprint}
+Access: files and commands as your computer account.`
           );
-          if (!process.stdin.isTTY) {
-            emit(
-              "approval_command",
-              { command: `mindwire approve ${invitation.pairingId} ${pairing.request.id}` },
-              `Review this device, then run:
-mindwire approve ${invitation.pairingId} ${pairing.request.id}`
-            );
+          if (!question) {
+            const command2 = approvalCommand(invitation.pairingId, pairing.request.id);
+            emit("approval_command", { command: command2 }, `Review this device, then run:
+${command2}`);
           } else {
-            const input = createInterface({ input: process.stdin, output: process.stderr });
-            try {
-              const answer = await input.question("Allow this phone to access this workspace? [y/N] ");
-              await client2.computer.decide(invitation.pairingId, pairing.request.id, /^y(es)?$/i.test(answer.trim()));
-            } finally {
-              input.close();
-            }
+            const decision = await choosePairingDecision({ replacements, question });
+            await client2.computer.decide(
+              invitation.pairingId,
+              pairing.request.id,
+              decision.approve,
+              decision.replaceDeviceIds ? { replaceDeviceIds: decision.replaceDeviceIds } : {}
+            );
           }
         }
         await setTimeout$1(750);
       }
-      throw new Error("Pairing expired. Run mindwire connect to show a new QR code.");
+      throw new Error(authorized ? "The phone was approved but did not finish saving. Run mindwire connect and scan again; its saved key will be reused." : "Connection code expired. Run mindwire connect to show a new QR code.");
     } finally {
       display?.close();
     }
@@ -762,8 +755,13 @@ ${controller.error}` : ""}`
     case "approve":
     case "reject": {
       if (!positionals[1] || !positionals[2]) throw new Error(`Use mindwire ${command} PAIRING_ID REQUEST_ID.`);
-      await client.computer.decide(positionals[1], positionals[2], command === "approve");
-      emit(command, {}, command === "approve" ? "Phone approved." : "Phone declined.");
+      await client.computer.decide(
+        positionals[1],
+        positionals[2],
+        command === "approve",
+        values["replace-device"] ? { replaceDeviceIds: values["replace-device"] } : {}
+      );
+      emit(command, {}, command === "approve" ? "Phone approved. Waiting for it to save the connection." : "Phone declined.");
       break;
     }
     case "update": {