offsite 0.0.29 → 0.0.31

package/apps/server/dist/main.mjs

@@ -1,16 +1,16 @@
 import { createHash, randomBytes, randomUUID } from "node:crypto";
-import { chmodSync, closeSync, createReadStream, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, watch, writeFileSync } from "node:fs";
-import { createServer } from "node:http";
+import { chmodSync, closeSync, createReadStream, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, readlinkSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, watch, writeFileSync } from "node:fs";
+import http, { createServer } from "node:http";
 import path from "node:path";
 import { consola } from "consola";
 import { WebSocketServer } from "ws";
+import { z } from "zod";
 import os from "node:os";
 import { deleteSession, forkSession, getSessionMessages, getSubagentMessages, listSessions, query, renameSession } from "@anthropic-ai/claude-agent-sdk";
 import { execFile, spawn } from "node:child_process";
 import readline from "node:readline";
-import { lstat, mkdir, open, readFile, readdir, readlink, stat, writeFile } from "node:fs/promises";
-import { z } from "zod";
 import { Command } from "@commander-js/extra-typings";
+import { lstat, mkdir, open, readFile, readdir, readlink, stat, writeFile } from "node:fs/promises";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { OpenCode } from "@opencode/client";
 import { ensure, headers } from "@opencode/client/service";
@@ -23,7 +23,29 @@ import { migrate } from "drizzle-orm/node-sqlite/migrator";
 import { integer, snakeCase, text } from "drizzle-orm/sqlite-core";
 import { promisify } from "node:util";
 import webPush from "web-push";
+import { createProxyServer } from "http-proxy-3";
 import { spawn as spawn$1 } from "@lydell/node-pty";
+//#region ../core/src/media.ts
+const mediaTypes = /* @__PURE__ */ new Map([
+	[".png", "image/png"],
+	[".jpg", "image/jpeg"],
+	[".jpeg", "image/jpeg"],
+	[".gif", "image/gif"],
+	[".webp", "image/webp"],
+	[".svg", "image/svg+xml"],
+	[".mp4", "video/mp4"],
+	[".m4v", "video/mp4"],
+	[".webm", "video/webm"],
+	[".mov", "video/quicktime"],
+	[".mp3", "audio/mpeg"],
+	[".wav", "audio/wav"],
+	[".ogg", "audio/ogg"],
+	[".opus", "audio/ogg"],
+	[".m4a", "audio/mp4"],
+	[".aac", "audio/aac"],
+	[".flac", "audio/flac"]
+]);
+//#endregion
 //#region src/constants.ts
 const deprecatedModels = {
 	claude: [
@@ -59,6 +81,140 @@ function broadcast(event) {
 	for (const client of clients) client.send(event);
 }
 //#endregion
+//#region src/args.ts
+let command = "web";
+let name = null;
+const program = new Command("offsite").description("Starts the server and the web app").option("--host <host>", "Address to listen on", "127.0.0.1").option("--port <port>", "Port to listen on", "47841").option("--dir <dir>", "Folder for settings and accounts", path.join(os.homedir(), ".offsite")).option("--no-auth", "Accept connections without pairing").option("--no-pair", "Don't create a pairing code or print pairing links").option("--pwa", "Serve the web app as an installable app that works offline").configureHelp({ showGlobalOptions: true });
+program.command("web", { isDefault: true }).description("Starts the server and the web app, same as offsite");
+program.command("serve").description("Starts only the server, without the web app").action(() => {
+	command = "serve";
+});
+program.command("pair").description("Creates a pairing code for another browser and prints its link").option("--name <name>", "Name to recognize this browser by").action((options) => {
+	command = "pair";
+	name = options.name ?? null;
+});
+program.command("unpair").description("Picks paired browsers to unpair").action(() => {
+	command = "unpair";
+});
+program.parse();
+const options = program.opts();
+if (!options.auth && !options.pair) program.error("error: --no-pair can't be used with --no-auth");
+const args = {
+	...options,
+	dir: path.resolve(options.dir),
+	command,
+	name
+};
+const serverDir = path.join(import.meta.dirname, "..");
+//#endregion
+//#region src/storage/storage.ts
+const home = args.dir;
+const lockFile = path.join(home, "server.pid");
+mkdirSync(home, { recursive: true });
+function lockHome() {
+	lock();
+	process.on("exit", () => unlinkSync(lockFile));
+}
+function lock() {
+	try {
+		writeFileSync(lockFile, `${process.pid}\n`, { flag: "wx" });
+		return;
+	} catch (error) {
+		if (!hasCode(error, "EEXIST")) throw error;
+	}
+	let content;
+	let modified;
+	try {
+		content = readFileSync(lockFile, "utf8");
+		modified = statSync(lockFile).mtimeMs;
+	} catch (error) {
+		if (hasCode(error, "ENOENT")) return lock();
+		throw error;
+	}
+	const pid = Number(content);
+	const validPid = Number.isInteger(pid) && pid > 0;
+	const writtenThisBoot = modified > Date.now() - os.uptime() * 1e3;
+	if (validPid && writtenThisBoot && pid !== process.pid && isRunning(pid)) {
+		consola.error(`offsite is already running for ${home} (pid ${pid})`);
+		process.exit(1);
+	}
+	unlinkSync(lockFile);
+	lock();
+}
+function isRunning(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (error) {
+		if (hasCode(error, "ESRCH")) return false;
+		if (hasCode(error, "EPERM")) return true;
+		throw error;
+	}
+}
+function hasCode(error, code) {
+	return error instanceof Error && "code" in error && error.code === code;
+}
+function readJson(name) {
+	try {
+		return JSON.parse(readFileSync(path.join(home, name), "utf8"));
+	} catch (error) {
+		if (error.code === "ENOENT") return null;
+		throw error;
+	}
+}
+function writeJson(name, value) {
+	let file = path.join(home, name);
+	mkdirSync(home, { recursive: true });
+	try {
+		file = realpathSync(file);
+	} catch (error) {
+		if (!hasCode(error, "ENOENT")) throw error;
+	}
+	writeFileSync(`${file}.tmp`, `${JSON.stringify(value, null, 2)}\n`, { mode: 384 });
+	renameSync(`${file}.tmp`, file);
+}
+//#endregion
+//#region src/services/open/open.ts
+const openSecret = randomBytes(32).toString("base64url");
+let env = {};
+function openEnv() {
+	return env;
+}
+function installOpen(host, port) {
+	if (process.platform === "win32") return;
+	mkdirSync(path.join(home, "bin"), { recursive: true });
+	const folder = realpathSync(path.join(home, "bin"));
+	const script = path.join(folder, "open.mjs");
+	writeFileSync(script, readFileSync(path.join(serverDir, "src/services/open/open.mjs")));
+	for (const name of [
+		"open",
+		"xdg-open",
+		"wslview"
+	]) {
+		const wrapper = path.join(folder, name);
+		writeFileSync(wrapper, `#!/bin/sh\nexec ${quote(process.execPath)} ${quote(script)} ${name} "$@"\n`);
+		chmodSync(wrapper, 493);
+	}
+	const startup = path.join(folder, "env.sh");
+	writeFileSync(startup, `export PATH=${quote(folder)}:"$PATH"\n`);
+	env = {
+		PATH: process.env.PATH === void 0 ? folder : `${folder}${path.delimiter}${process.env.PATH}`,
+		BROWSER: path.join(folder, process.platform === "darwin" ? "open" : "xdg-open"),
+		OFFSITE_OPEN_URL: `http://${loopback(host)}:${port}/api/open/${openSecret}`,
+		CLAUDE_ENV_FILE: startup,
+		BASH_ENV: startup
+	};
+}
+function loopback(host) {
+	if (host === "0.0.0.0") return "127.0.0.1";
+	if (host === "::") return "[::1]";
+	if (host.includes(":")) return `[${host}]`;
+	return host;
+}
+function quote(value) {
+	return `'${value.replaceAll("'", "'\\''")}'`;
+}
+//#endregion
 //#region src/lib/codex/app-server.ts
 const IDLE_LIMIT$3 = 18e5;
 const START_TIMEOUT = 15e3;
@@ -102,6 +258,7 @@ var AppServer = class {
 		this.child = spawn(executable, ["app-server"], {
 			env: {
 				...process.env,
+				...openEnv(),
 				CODEX_HOME: home
 			},
 			stdio: [
@@ -713,99 +870,6 @@ function record$1(value) {
 	return isRecord(value) ? value : { value };
 }
 //#endregion
-//#region src/args.ts
-let command = "web";
-let name = null;
-const program = new Command("offsite").description("Starts the server and the web app").option("--host <host>", "Address to listen on", "127.0.0.1").option("--port <port>", "Port to listen on", "47841").option("--dir <dir>", "Folder for settings and accounts", path.join(os.homedir(), ".offsite")).option("--no-auth", "Accept connections without pairing").option("--no-pair", "Don't create a pairing code or print pairing links").option("--pwa", "Serve the web app as an installable app that works offline").configureHelp({ showGlobalOptions: true });
-program.command("web", { isDefault: true }).description("Starts the server and the web app, same as offsite");
-program.command("serve").description("Starts only the server, without the web app").action(() => {
-	command = "serve";
-});
-program.command("pair").description("Creates a pairing code for another browser and prints its link").option("--name <name>", "Name to recognize this browser by").action((options) => {
-	command = "pair";
-	name = options.name ?? null;
-});
-program.command("unpair").description("Picks paired browsers to unpair").action(() => {
-	command = "unpair";
-});
-program.parse();
-const options = program.opts();
-if (!options.auth && !options.pair) program.error("error: --no-pair can't be used with --no-auth");
-const args = {
-	...options,
-	dir: path.resolve(options.dir),
-	command,
-	name
-};
-const serverDir = path.join(import.meta.dirname, "..");
-//#endregion
-//#region src/storage/storage.ts
-const home = args.dir;
-const lockFile = path.join(home, "server.pid");
-mkdirSync(home, { recursive: true });
-function lockHome() {
-	lock();
-	process.on("exit", () => unlinkSync(lockFile));
-}
-function lock() {
-	try {
-		writeFileSync(lockFile, `${process.pid}\n`, { flag: "wx" });
-		return;
-	} catch (error) {
-		if (!hasCode(error, "EEXIST")) throw error;
-	}
-	let content;
-	let modified;
-	try {
-		content = readFileSync(lockFile, "utf8");
-		modified = statSync(lockFile).mtimeMs;
-	} catch (error) {
-		if (hasCode(error, "ENOENT")) return lock();
-		throw error;
-	}
-	const pid = Number(content);
-	const validPid = Number.isInteger(pid) && pid > 0;
-	const writtenThisBoot = modified > Date.now() - os.uptime() * 1e3;
-	if (validPid && writtenThisBoot && pid !== process.pid && isRunning(pid)) {
-		consola.error(`offsite is already running for ${home} (pid ${pid})`);
-		process.exit(1);
-	}
-	unlinkSync(lockFile);
-	lock();
-}
-function isRunning(pid) {
-	try {
-		process.kill(pid, 0);
-		return true;
-	} catch (error) {
-		if (hasCode(error, "ESRCH")) return false;
-		if (hasCode(error, "EPERM")) return true;
-		throw error;
-	}
-}
-function hasCode(error, code) {
-	return error instanceof Error && "code" in error && error.code === code;
-}
-function readJson(name) {
-	try {
-		return JSON.parse(readFileSync(path.join(home, name), "utf8"));
-	} catch (error) {
-		if (error.code === "ENOENT") return null;
-		throw error;
-	}
-}
-function writeJson(name, value) {
-	let file = path.join(home, name);
-	mkdirSync(home, { recursive: true });
-	try {
-		file = realpathSync(file);
-	} catch (error) {
-		if (!hasCode(error, "ENOENT")) throw error;
-	}
-	writeFileSync(`${file}.tmp`, `${JSON.stringify(value, null, 2)}\n`, { mode: 384 });
-	renameSync(`${file}.tmp`, file);
-}
-//#endregion
 //#region src/storage/config.ts
 const configFile = path.join(home, "config.json");
 const modelSetting = z.strictObject({
@@ -3734,6 +3798,7 @@ function claudeOptions(accountId, cwd) {
 	const configDir = storedAccount("claude", accountId).configDir ?? claudeBaseDir();
 	const env = {
 		...process.env,
+		...openEnv(),
 		CLAUDE_CODE_ENTRYPOINT: "offsite",
 		CLAUDE_CONFIG_DIR: configDir
 	};
@@ -4890,32 +4955,12 @@ var Run = class {
 	}
 };
 //#endregion
-//#region ../core/src/media.ts
-const mediaTypes = /* @__PURE__ */ new Map([
-	[".png", "image/png"],
-	[".jpg", "image/jpeg"],
-	[".jpeg", "image/jpeg"],
-	[".gif", "image/gif"],
-	[".webp", "image/webp"],
-	[".svg", "image/svg+xml"],
-	[".mp4", "video/mp4"],
-	[".m4v", "video/mp4"],
-	[".webm", "video/webm"],
-	[".mov", "video/quicktime"],
-	[".mp3", "audio/mpeg"],
-	[".wav", "audio/wav"],
-	[".ogg", "audio/ogg"],
-	[".opus", "audio/ogg"],
-	[".m4a", "audio/mp4"],
-	[".aac", "audio/aac"],
-	[".flac", "audio/flac"]
-]);
-//#endregion
 //#region src/services/files.ts
 const FILE_LIMIT = 2e4;
 const OUTPUT_LIMIT$1 = 262144;
 const READ_LIMIT = 1048576;
 const MEDIA_LINK_LIFETIME = 36e5;
+const browseToken = randomBytes(32).toString("base64url");
 const mediaLinks = /* @__PURE__ */ new Map();
 const skipped = /* @__PURE__ */ new Set([
 	"node_modules",
@@ -5046,6 +5091,62 @@ function resolveProjectFile(cwd, file) {
 	return full;
 }
 //#endregion
+//#region src/services/proxy.ts
+const proxies = /* @__PURE__ */ new Map();
+function proxyPort(origin) {
+	const target = new URL(origin);
+	if (target.protocol !== "http:" && target.protocol !== "https:") throw new Error(`${origin} is not an http or https address`);
+	const existing = proxies.get(target.origin);
+	if (existing !== void 0) return existing;
+	const started = startProxy(target);
+	proxies.set(target.origin, started);
+	started.catch(() => proxies.delete(target.origin));
+	return started;
+}
+function startProxy(target) {
+	const proxy = createProxyServer({
+		target: target.origin,
+		changeOrigin: true,
+		ws: true,
+		secure: false,
+		autoRewrite: true,
+		protocolRewrite: "http",
+		cookieDomainRewrite: ""
+	});
+	proxy.on("proxyReq", (outgoing, request) => rewriteOrigin(target, outgoing, request));
+	proxy.on("proxyReqWs", (outgoing, request) => rewriteOrigin(target, outgoing, request));
+	proxy.on("proxyRes", (incoming) => {
+		delete incoming.headers["x-frame-options"];
+		delete incoming.headers["content-security-policy"];
+		if (incoming.headers["set-cookie"] !== void 0) incoming.headers["set-cookie"] = incoming.headers["set-cookie"].map((cookie) => cookie.replace(/;\s*secure/i, "").replace(/;\s*samesite=none/i, ""));
+	});
+	proxy.on("error", (error, _request, response) => {
+		if (!(response instanceof http.ServerResponse)) {
+			response.destroy();
+			return;
+		}
+		if (!response.headersSent) response.writeHead(502, { "content-type": "text/plain; charset=utf-8" });
+		response.end(`Could not reach ${target.origin}: ${error.message}`);
+	});
+	const server = http.createServer((request, response) => proxy.web(request, response));
+	server.on("upgrade", (request, socket, head) => proxy.ws(request, socket, head));
+	return new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(0, args.host, () => {
+			const address = server.address();
+			if (address === null || typeof address === "string") {
+				reject(/* @__PURE__ */ new Error(`the proxy for ${target.origin} has no port`));
+				return;
+			}
+			resolve(address.port);
+		});
+	});
+}
+function rewriteOrigin(target, outgoing, request) {
+	if (request.headers.origin !== void 0) outgoing.setHeader("origin", target.origin);
+	if (request.headers.referer !== void 0) outgoing.setHeader("referer", request.headers.referer.replace(`http://${request.headers.host}`, target.origin));
+}
+//#endregion
 //#region src/services/runs.ts
 const locks = /* @__PURE__ */ new Map();
 function stopAll() {
@@ -6262,6 +6363,8 @@ const handlers = {
 	"files.media": (params) => linkProjectMedia(projectPath(params.projectId), params.path),
 	"files.download": (params) => linkProjectDownload(projectPath(params.projectId), params.path),
 	"files.upload": (params) => saveUpload(params.name, Buffer.from(params.data, "base64")),
+	"files.browse": () => browseToken,
+	"browser.proxy": (params) => proxyPort(params.origin),
 	"tasks.output": (params) => taskOutput(params.sessionId, params.path),
 	"git.status": (params) => gitRepos(projectPath(params.projectId)),
 	"git.diff": (params) => projectDiff(projectPath(params.projectId)),
@@ -6408,6 +6511,8 @@ function hash(secret) {
 //#region src/main.ts
 const UNPAIR_CHECK = 5e3;
 const TICKET_LIFETIME = 6e4;
+const SNIFF_LENGTH = 8e3;
+const openBody = z.object({ path: z.string() });
 const contentTypes = {
 	".html": "text/html; charset=utf-8",
 	".js": "text/javascript; charset=utf-8",
@@ -6419,6 +6524,19 @@ const contentTypes = {
 	".webmanifest": "application/manifest+json",
 	".woff2": "font/woff2"
 };
+const browseTypes = new Map([
+	...Object.entries(contentTypes),
+	...mediaTypes,
+	[".htm", "text/html; charset=utf-8"],
+	[".mjs", "text/javascript; charset=utf-8"],
+	[".json", "application/json; charset=utf-8"],
+	[".pdf", "application/pdf"],
+	[".xml", "application/xml"],
+	[".wasm", "application/wasm"],
+	[".woff", "font/woff"],
+	[".ttf", "font/ttf"],
+	[".otf", "font/otf"]
+]);
 const port = Number(args.port);
 if (!Number.isInteger(port) || port < 1 || port > 65535) {
 	console.error(`invalid port ${args.port}`);
@@ -6437,6 +6555,7 @@ if (args.command === "unpair") {
 }
 lockHome();
 process.env.CLAUDE_CONFIG_DIR = claudeBaseDir();
+installOpen(args.host, port);
 watchSessions();
 refreshAll();
 if (findClaude() === null) {
@@ -6452,6 +6571,14 @@ const server = createServer((request, response) => {
 		serveMedia(url.searchParams.get("token"), request, response);
 		return;
 	}
+	if (url.pathname.startsWith("/api/browse/")) {
+		serveBrowse(url.pathname, request, response);
+		return;
+	}
+	if (url.pathname === `/api/open/${openSecret}`) {
+		answerOpen(request, response);
+		return;
+	}
 	if (url.pathname.startsWith("/api/")) {
 		answerApi(url.pathname, request, response);
 		return;
@@ -6566,28 +6693,100 @@ function serveMedia(token, request, response) {
 		response.end("not found");
 		return;
 	}
+	response.setHeader("access-control-allow-origin", "*");
 	response.setHeader("content-type", link.mediaType);
 	if (link.download !== null) response.setHeader("content-disposition", `attachment; filename*=UTF-8''${encodeURIComponent(link.download)}`);
-	response.setHeader("accept-ranges", "bytes");
 	response.setHeader("cache-control", "private, max-age=3600");
 	response.setHeader("content-security-policy", "sandbox");
 	response.setHeader("x-content-type-options", "nosniff");
+	streamFile(link.file, stats.size, request, response);
+}
+function serveBrowse(pathname, request, response) {
+	if (request.method !== "GET") {
+		response.statusCode = 405;
+		response.end("use GET");
+		return;
+	}
+	const rest = pathname.slice(12);
+	const slash = rest.indexOf("/");
+	if (slash === -1 || rest.slice(0, slash) !== browseToken) {
+		response.statusCode = 404;
+		response.end("This browser link expired");
+		return;
+	}
+	let file;
+	try {
+		file = decodeURIComponent(rest.slice(process.platform === "win32" ? slash + 1 : slash));
+	} catch {
+		response.statusCode = 400;
+		response.end("bad path");
+		return;
+	}
+	const stats = statSync(file, { throwIfNoEntry: false });
+	if (stats === void 0 || !stats.isFile()) {
+		response.statusCode = 404;
+		response.end(`${file} is not a file`);
+		return;
+	}
+	response.setHeader("content-type", browseType(file));
+	response.setHeader("cache-control", "no-cache");
+	streamFile(file, stats.size, request, response);
+}
+function browseType(file) {
+	const known = browseTypes.get(path.extname(file).toLowerCase());
+	if (known !== void 0) return known;
+	const head = Buffer.alloc(SNIFF_LENGTH);
+	const handle = openSync(file, "r");
+	const read = readSync(handle, head, 0, SNIFF_LENGTH, 0);
+	closeSync(handle);
+	return head.subarray(0, read).includes(0) ? "application/octet-stream" : "text/plain; charset=utf-8";
+}
+async function answerOpen(request, response) {
+	if (request.method !== "POST") {
+		response.statusCode = 405;
+		response.end("use POST");
+		return;
+	}
+	let body = "";
+	for await (const chunk of request) body += chunk;
+	let parsed;
+	try {
+		parsed = openBody.parse(JSON.parse(body));
+	} catch {
+		response.statusCode = 400;
+		response.end("expected { path }");
+		return;
+	}
+	if (clients.size === 0) {
+		response.statusCode = 409;
+		response.end("no browser is connected to OffSite");
+		return;
+	}
+	broadcast({
+		type: "open",
+		path: parsed.path
+	});
+	response.statusCode = 204;
+	response.end();
+}
+function streamFile(file, size, request, response) {
+	response.setHeader("accept-ranges", "bytes");
 	if (request.headers.range === void 0) {
-		response.setHeader("content-length", stats.size);
-		createReadStream(link.file).on("error", () => response.destroy()).pipe(response);
+		response.setHeader("content-length", size);
+		createReadStream(file).on("error", () => response.destroy()).pipe(response);
 		return;
 	}
-	const range = byteRange(request.headers.range, stats.size);
+	const range = byteRange(request.headers.range, size);
 	if (range === null) {
 		response.statusCode = 416;
-		response.setHeader("content-range", `bytes */${stats.size}`);
+		response.setHeader("content-range", `bytes */${size}`);
 		response.end();
 		return;
 	}
 	response.statusCode = 206;
-	response.setHeader("content-range", `bytes ${range.start}-${range.end}/${stats.size}`);
+	response.setHeader("content-range", `bytes ${range.start}-${range.end}/${size}`);
 	response.setHeader("content-length", range.end - range.start + 1);
-	createReadStream(link.file, range).on("error", () => response.destroy()).pipe(response);
+	createReadStream(file, range).on("error", () => response.destroy()).pipe(response);
 }
 function byteRange(header, size) {
 	const match = /^bytes=(?:(\d+)-(\d*)|-(\d+))$/.exec(header);