my-durable 0.0.1 → 0.0.3

package/README.md

@@ -1,10 +1,29 @@
 # Durable Pi: The Durable Agent Network
 
+> [!NOTE]
+> **This repository (`my-durable`) is a fork of [disler/durable-pi](https://github.com/disler/durable-pi) by [IndyDevDan](https://www.youtube.com/@indydevdan), MIT-licensed — see [LICENSE](LICENSE).** All credit for the original architecture, code and docs belongs to the upstream author; upstream history is preserved in the git log. This fork carries the Durable Agent Network hardening work on top: the Gate A security remediation (SSE CRLF coalescing, fail-closed v0 registry preflight with schema-drift refusal, tunnel/pairing/rotation hardening, FE sanitizer policies), the local verification tooling (`scripts/verify.mjs`), and the `my-durable` npm packaging.
+
 > **Proactive agents start working before you sit down. They don't wait for you to work. They work for you, then wait.**
 > Durable pi agents on any machine you own, driven from a web UI, a terminal or one curl.
 
 📺 Watch this video to get the full breakdown of this codebase: **[Pi Durable PROACTIVE Agents](https://youtu.be/DNDYYHsypZg)**
 
+## Quick start (`md`)
+
+```sh
+npm install -g my-durable
+
+md hub                 # web UI + device tunnel server  → http://127.0.0.1:4781
+md device              # device daemon (pairs to a hub, serves this machine)
+md tui                 # terminal admin client
+md --help              # commands, flags and environment variables
+```
+
+`md hub` is the only component that other machines talk to, so it is also the one
+to put behind a TLS proxy or tunnel (it refuses anything that did not arrive over
+HTTPS). Pair a device by opening the hub, pressing **Pair a device**, and entering
+the code — or open the pairing link directly on the machine being added.
+
 <p align="center">
   <img src="images/01_durable_agent_network.svg" alt="Three clients (web UI, dpi-tui, curl) reach durable agents on four devices; the clients disconnect and every device keeps checkpointing its run to SQLite" width="850">
 </p>

package/bin/md.mjs

@@ -0,0 +1,88 @@
+#!/usr/bin/env node
+// `md` — one command for the Durable Pi stack.
+//   md hub    [--port N] [--host H] [--public-host H]   web UI + device tunnel server
+//   md device                                            device-side daemon
+//   md tui                                               terminal admin client
+// Every subcommand runs the TypeScript entry through tsx, so no build step is needed.
+import { access } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+
+/** Subcommand → TypeScript entry, relative to this file. */
+const COMMANDS = {
+  hub: "../apps/dpi-playground/apps/dpi-playground-hub/src/main.ts",
+  device: "../apps/dpi-backend/src/main.ts",
+  tui: "../apps/dpi-tui/src/main.ts",
+};
+
+const HELP = `md — Durable Pi
+
+Usage:
+  md hub [--port 4781] [--host 127.0.0.1] [--public-host <host>]
+      Web UI + device tunnel server (devices dial this).
+  md device
+      Device-side daemon (pairs to a hub, serves one machine's agents).
+  md tui
+      Terminal admin client.
+  md help | md --help | md -h
+  md version | md --version | md -v
+
+Environment (hub):    DPI_HOME, DPI_HUB_PORT, DPI_HUB_HOST, DPI_HUB_PUBLIC_HOST,
+                      DPI_HUB_ORIGIN, DPI_HUB_REQUIRE_TLS
+Environment (device): DPI_HUB_URL, DPI_HOME
+`;
+
+/**
+ * tsx is a dependency of the published package, but a bare repository checkout has it only
+ * inside the per-app node_modules. Try the normal resolution first, then the known local
+ * copies, so `md` works in both places without a root install.
+ */
+async function loadTsx() {
+  try {
+    return await import("tsx/esm/api");
+  } catch (error) {
+    if (error?.code !== "ERR_MODULE_NOT_FOUND") throw error;
+  }
+  const candidates = [
+    "../apps/dpi-playground/node_modules/tsx/dist/esm/api/index.mjs",
+    "../apps/dpi-backend/node_modules/tsx/dist/esm/api/index.mjs",
+    "../apps/dpi-sdk/node_modules/tsx/dist/esm/api/index.mjs",
+    "../apps/dpi-tui/node_modules/tsx/dist/esm/api/index.mjs",
+  ];
+  for (const relative of candidates) {
+    const url = new URL(relative, import.meta.url);
+    try {
+      await access(fileURLToPath(url));
+      return await import(url.href);
+    } catch {
+      // try the next one
+    }
+  }
+  throw new Error(
+    "md: cannot find tsx. Install the package (npm install -g my-durable) or run npm install in an app directory.",
+  );
+}
+
+const [first, ...rest] = process.argv.slice(2);
+
+if (!first || first === "help" || first === "--help" || first === "-h") {
+  process.stdout.write(HELP);
+  process.exit(0);
+}
+
+if (first === "version" || first === "--version" || first === "-v") {
+  const { readFileSync } = await import("node:fs");
+  const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+  process.stdout.write(`md (my-durable) ${pkg.version}\n`);
+  process.exit(0);
+}
+
+if (!Object.hasOwn(COMMANDS, first)) {
+  process.stderr.write(`md: unknown command '${first}'\n\n${HELP}`);
+  process.exit(2);
+}
+
+// The entries parse process.argv.slice(2) themselves: hand them their own args.
+process.argv = [process.argv[0], process.argv[1], ...rest];
+const { register } = await loadTsx();
+register();
+await import(COMMANDS[first]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "my-durable",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "Durable Pi — the durable agent network: hub web UI, device backend daemon, TUI admin and the shared SDK, packaged as one runnable monorepo install",
   "license": "MIT",
   "repository": {
@@ -15,9 +15,7 @@
     "node": ">=22.0.0"
   },
   "bin": {
-    "my-durable-hub": "bin/hub.mjs",
-    "my-durable-device": "bin/device.mjs",
-    "my-durable-tui": "bin/tui.mjs"
+    "md": "bin/md.mjs"
   },
   "scripts": {
     "hub": "tsx apps/dpi-playground/apps/dpi-playground-hub/src/main.ts",

package/bin/device.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-// Run the device daemon TypeScript entry through tsx so `my-durable-device` works without a build step.
-import { register } from "tsx/esm/api";
-register();
-await import("../apps/dpi-backend/src/main.ts");

package/bin/hub.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-// Run the hub TypeScript entry through tsx so `my-durable-hub` works without a build step.
-import { register } from "tsx/esm/api";
-register();
-await import("../apps/dpi-playground/apps/dpi-playground-hub/src/main.ts");

package/bin/tui.mjs

@@ -1,5 +0,0 @@
-#!/usr/bin/env node
-// Run the TUI TypeScript entry through tsx so `my-durable-tui` works without a build step.
-import { register } from "tsx/esm/api";
-register();
-await import("../apps/dpi-tui/src/main.ts");