myrlin-workbook 0.8.10 → 0.9.1

package/README.md

@@ -54,6 +54,8 @@ CWM_PASSWORD=mypassword npx myrlin-workbook
 
 Password lookup order: `CWM_PASSWORD` env var > `~/.myrlin/config.json` > `./state/config.json` > auto-generate.
 
+On startup, the console prints a clickable URL with a one-time token (e.g., `http://127.0.0.1:3456?token=<random>`). Click it to auto-login — the token is single-use and expires after 60 seconds, so it's safe even if it appears in terminal logs. The token is stripped from the URL bar immediately after login.
+
 ### Prerequisites
 
 - **Node.js 18+** ([download](https://nodejs.org))

package/package.json

@@ -1,64 +1,64 @@
-{
-  "name": "myrlin-workbook",
-  "version": "0.8.10",
-  "description": "Browser-based project manager for Claude Code sessions - session discovery, multi-terminal, cost tracking, docs, and kanban board",
-  "main": "src/index.js",
-  "bin": {
-    "myrlin-workbook": "./src/gui.js",
-    "myrlin": "./src/gui.js",
-    "myrlin-tui": "./src/index.js",
-    "cwm": "./src/index.js"
-  },
-  "scripts": {
-    "start": "node src/index.js",
-    "demo": "node src/demo.js",
-    "gui": "node src/supervisor.js",
-    "gui:bare": "node src/gui.js",
-    "gui:demo": "node src/supervisor.js --demo",
-    "test": "node test/run.js",
-    "mcp:visual-qa": "node src/mcp/visual-qa.js",
-    "gui:cdp": "node src/supervisor.js --cdp",
-    "postinstall": "node scripts/postinstall.js",
-    "restart": "bash scripts/restart-gui.sh"
-  },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/therealarthur/myrlin-workbook.git"
-  },
-  "homepage": "https://github.com/therealarthur/myrlin-workbook",
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "keywords": [
-    "claude",
-    "workspace",
-    "manager",
-    "terminal",
-    "tui",
-    "ai",
-    "coding-assistant",
-    "session-manager",
-    "developer-tools",
-    "xterm",
-    "myrlin"
-  ],
-  "author": "Arthur",
-  "license": "AGPL-3.0-only",
-  "dependencies": {
-    "blessed": "^0.1.81",
-    "blessed-contrib": "^4.11.0",
-    "chalk": "^5.6.2",
-    "chrome-remote-interface": "^0.34.0",
-    "express": "^5.2.1",
-    "node-pty": "^1.1.0",
-    "ws": "^8.19.0"
-  },
-  "devDependencies": {
-    "@playwright/test": "^1.58.2",
-    "@xterm/addon-fit": "^0.11.0",
-    "@xterm/addon-web-links": "^0.12.0",
-    "@xterm/xterm": "^6.0.0",
-    "ffmpeg-static": "^5.3.0",
-    "sharp": "^0.34.5"
-  }
-}
+{
+  "name": "myrlin-workbook",
+  "version": "0.9.1",
+  "description": "Browser-based project manager for Claude Code sessions - session discovery, multi-terminal, cost tracking, docs, and kanban board",
+  "main": "src/index.js",
+  "bin": {
+    "myrlin-workbook": "./src/gui.js",
+    "myrlin": "./src/gui.js",
+    "myrlin-tui": "./src/index.js",
+    "cwm": "./src/index.js"
+  },
+  "scripts": {
+    "start": "node src/index.js",
+    "demo": "node src/demo.js",
+    "gui": "node src/supervisor.js",
+    "gui:bare": "node src/gui.js",
+    "gui:demo": "node src/supervisor.js --demo",
+    "test": "node test/run.js",
+    "mcp:visual-qa": "node src/mcp/visual-qa.js",
+    "gui:cdp": "node src/supervisor.js --cdp",
+    "postinstall": "node scripts/postinstall.js",
+    "restart": "bash scripts/restart-gui.sh"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/therealarthur/myrlin-workbook.git"
+  },
+  "homepage": "https://github.com/therealarthur/myrlin-workbook",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "keywords": [
+    "claude",
+    "workspace",
+    "manager",
+    "terminal",
+    "tui",
+    "ai",
+    "coding-assistant",
+    "session-manager",
+    "developer-tools",
+    "xterm",
+    "myrlin"
+  ],
+  "author": "Arthur",
+  "license": "AGPL-3.0-only",
+  "dependencies": {
+    "blessed": "^0.1.81",
+    "blessed-contrib": "^4.11.0",
+    "chalk": "^5.6.2",
+    "chrome-remote-interface": "^0.34.0",
+    "express": "^5.2.1",
+    "node-pty": "^1.1.0",
+    "ws": "^8.19.0"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.58.2",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/addon-web-links": "^0.12.0",
+    "@xterm/xterm": "^6.0.0",
+    "ffmpeg-static": "^5.3.0",
+    "sharp": "^0.34.5"
+  }
+}

package/src/gui.js

@@ -16,6 +16,7 @@
 const { getStore } = require('./state/store');
 const { startServer, getPtyManager } = require('./web/server');
 const { backupFrontend } = require('./web/backup');
+const { generateStartupToken } = require('./web/auth');
 
 // ─── Initialize Store ──────────────────────────────────────
 
@@ -92,7 +93,9 @@ const port = parseInt(process.env.PORT, 10) || 3456;
 const host = process.env.CWM_HOST || '127.0.0.1';
 const server = startServer(port, host);
 
-console.log(`CWM GUI running at http://${host}:${port}`);
+const startupToken = generateStartupToken();
+const authUrl = `http://${host}:${port}?token=${encodeURIComponent(startupToken)}`;
+console.log(`CWM GUI running at ${authUrl}`);
 console.log('Press Ctrl+C to stop.');
 
 // Snapshot frontend files as "last known good" on successful start
@@ -167,7 +170,7 @@ function openBrowserWithCDP(url, cdpPort) {
 if (!process.env.CWM_NO_OPEN) {
   const cdpEnabled = process.argv.includes('--cdp');
   const cdpPort = parseInt(process.env.CDP_PORT, 10) || 9222;
-  const url = `http://localhost:${port}`;
+  const url = authUrl;
 
   if (cdpEnabled) {
     openBrowserWithCDP(url, cdpPort);