offsite 0.0.43 → 0.0.45

package/README.md

@@ -10,32 +10,6 @@ Claude Code, Codex and OpenCode in your browser. It uses the same sessions as th
 npx offsite
 ```
 
-Then open the pairing link it prints. It pairs this browser with the server, so only browsers that opened the link can use it.
-
-| Command          | What it does                                                                      |
-| ---------------- | --------------------------------------------------------------------------------- |
-| `offsite`        | Starts the server and the web app                                                 |
-| `offsite web`    | Same as `offsite`                                                                 |
-| `offsite serve`  | Starts only the server                                                            |
-| `offsite pair`   | Makes a pairing token for another browser and prints its link. `--name` labels it |
-| `offsite unpair` | Lists paired browsers so you can pick which to unpair                             |
-
-| Flag        | Default      | What it sets                                                 |
-| ----------- | ------------ | ------------------------------------------------------------ |
-| `--host`    | `127.0.0.1`  | Address to listen on                                         |
-| `--port`    | `47841`      | Port to listen on                                            |
-| `--dir`     | `~/.offsite` | Folder for settings and accounts                             |
-| `--no-auth` | auth on      | Accept connections without the pairing token                 |
-| `--no-pair` | pair on      | Don't create a pairing token or print pairing links on start |
-| `--pwa`     | off          | Serve the web app as an installable app that works offline   |
-
-Pairing tokens stay in `tokens.json` inside `--dir`. A running OffSite disconnects an unpaired browser within seconds.
-
-> [!WARNING]
-> With `--no-auth`, anyone who can reach its port, including any website open in your browser, can run your coding agents and open a terminal on your machine.
-
-Don't use the same session in OffSite and the CLI at the same time. Switching between them is fine.
-
 ## Separate instances
 
 Give each instance its own port and `--dir`.

package/apps/server/dist/main.mjs

@@ -85,7 +85,7 @@ function broadcast(event) {
 //#region src/args.ts
 let command = "web";
 let name = null;
-const program = new Command("offsite").description("Starts the server and the web app").option("--host <host>", "Address to listen on", "127.0.0.1").option("--port <port>", "Port to listen on", "47841").option("--dir <dir>", "Folder for settings and accounts", path.join(os.homedir(), ".offsite")).option("--no-auth", "Accept connections without pairing").option("--no-pair", "Don't create a pairing code or print pairing links").option("--pwa", "Serve the web app as an installable app that works offline").configureHelp({ showGlobalOptions: true });
+const program = new Command("offsite").description("Starts the server and the web app").option("--host <host>", "Address to listen on", "127.0.0.1").option("--port <port>", "Port to listen on", "47841").option("--dir <dir>", "Folder for settings and accounts", path.join(os.homedir(), ".offsite")).option("--no-auth", "Accept connections without pairing").option("--no-pair", "Don't create a pairing code or print pairing links").option("--pwa", "Serve the web app as an installable app that works offline").option("--connect <addresses>", "Add this machine to the web app with these comma separated addresses; needs --no-auth").configureHelp({ showGlobalOptions: true });
 program.command("web", { isDefault: true }).description("Starts the server and the web app, same as offsite");
 program.command("serve").description("Starts only the server, without the web app").action(() => {
 	command = "serve";
@@ -100,11 +100,19 @@ program.command("unpair").description("Picks paired browsers to unpair").action(
 program.parse();
 const options = program.opts();
 if (!options.auth && !options.pair) program.error("error: --no-pair can't be used with --no-auth");
+if (options.connect !== void 0 && options.auth) program.error("error: --connect needs --no-auth");
+if (options.connect !== void 0 && command === "serve") program.error("error: --connect can't be used with offsite serve");
+const connect$1 = options.connect === void 0 ? null : options.connect.split(",").map((address) => {
+	const url = URL.parse(address);
+	if (url === null || url.protocol !== "http:" && url.protocol !== "https:") return program.error(`error: --connect address ${address} needs http:// or https://, like https://example.com`);
+	return url.origin;
+});
 const args = {
 	...options,
 	dir: path.resolve(options.dir),
 	command,
-	name
+	name,
+	connect: connect$1
 };
 const serverDir = path.join(import.meta.dirname, "..");
 //#endregion
@@ -3963,7 +3971,7 @@ async function request(connection, message) {
 				tab.minimized = false;
 				project.activeTab = tab.id;
 			}
-			if (project.tabs.length === 0) await createTab(message.projectId);
+			if (project.tabs.length === 0 && message.projectId !== "global") await createTab(message.projectId);
 			break;
 		}
 	}
@@ -6877,12 +6885,12 @@ if (args.auth) setInterval(() => {
 }, UNPAIR_CHECK);
 server.listen(port, args.host, () => {
 	startPush(`${args.host}:${port}`);
-	if (args.pair && (code !== null || !args.auth)) {
+	if (args.connect === null && args.pair && (code !== null || !args.auth)) {
 		const links = pairingLinks(code);
 		if (args.command === "web") console.log(`offsite is running at ${links.local}`);
 	} else {
 		console.log(`offsite is running at ${address}`);
-		if (args.pair) console.log("Run offsite pair to pair another browser");
+		if (args.auth && args.pair) console.log("Run offsite pair to pair another browser");
 	}
 	if (!args.auth) console.warn("auth is off; anyone who can reach this port can control this machine");
 });
@@ -7132,8 +7140,11 @@ function serveFile(pathname, response) {
 		return;
 	}
 	response.setHeader("content-type", contentTypes[path.extname(file)] ?? "application/octet-stream");
-	if (!args.pwa && path.basename(file) === "index.html") {
-		response.end(readFileSync(file, "utf8").replace(/<link rel="manifest"[^>]*>/, ""));
+	if (path.basename(file) === "index.html") {
+		let page = readFileSync(file, "utf8");
+		if (!args.pwa) page = page.replace(/<link rel="manifest"[^>]*>/, "");
+		if (args.connect !== null) page = page.replace("</head>", `<meta name="offsite-connect" content="${args.connect.join(" ")}"></head>`);
+		response.end(page);
 		return;
 	}
 	createReadStream(file).pipe(response);