peer-term 1.4.7 → 1.4.9

package/README.md

@@ -63,7 +63,8 @@ While running, you can manage sessions directly from the host CLI:
 | Command | Description |
 | :--- | :--- |
 | `n` | Create a new session |
-| `l` | List all active sessions |
+| `l` | List all active sessions and permissions (`[READ-ONLY]` vs `[INTERACTIVE]`) |
+| `r <code>` | Toggle read-only / interactive mode for an active session (alias: `rt <code>`) |
 | `a <code>` | Authorize verified fingerprint (in `--secure` mode) |
 | `k <code>` | Kill a specific session |
 | `q` | Quit all sessions and exit |
@@ -74,13 +75,13 @@ While running, you can manage sessions directly from the host CLI:
 - **No Config**: Works instantly. No port forwarding or firewall configuration needed.
 - **End-to-End Encrypted**: Terminal data is encrypted locally using AES-256-GCM with ECDH P-256 key exchange. The relay never sees plaintext. A `--secure` flag enables an out-of-band fingerprint check for strict MITM protection.
 - **WebRTC P2P**: Creates a direct Peer-to-Peer connection on the same LAN for zero-latency, relay-free sessions.
-- **Read-Only Mode**: Guests can view your terminal but cannot type commands.
+- **Live Permission Toggling & Read-Only**: Start view-only with `--readonly` or switch between Read-Only and Interactive mode on the fly with `r <code>`. Guests get instant visual badges and notifications without reconnecting.
 - **File Uploads**: Clients can drag-and-drop to securely upload files directly to `~/peerterm-uploads/` on the host machine. Fully encrypted end-to-end.
 - **Custom Start Path**: Set the starting directory with `--path`.
 - **Resilient Connections**: Both host and client get a 2-minute rejoin window if their IP changes or connection drops. PTY state is fully preserved — no session restart needed.
 - **Multi-Session**: Manage multiple simultaneous sessions with the interactive CLI menu.
 - **QR Code Support**: Displays a terminal QR code for instant connection from mobile or tablet devices without manually entering the code.
-- **Interactive Controls**: Manage sessions directly from the CLI (`n` for new session, `l` to list, `k` to kill, `a` to authorize fingerprint, `q` to quit).
+- **Interactive Controls**: Manage sessions directly from the CLI (`n` for new session, `l` to list, `r <code>` to toggle permissions, `k` to kill, `a` to authorize fingerprint, `q` to quit).
 
 ## How It Works
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "peer-term",
-  "version": "1.4.7",
+  "version": "1.4.9",
   "license": "MIT",
   "description": "Share your terminal instantly using a 6-digit code or QR code. Encrypted. No config.",
   "repository": {

package/src/index.js

@@ -105,7 +105,7 @@ export class Session {
     const modeStr = this.readonly ? 'READ-ONLY' : 'INTERACTIVE (write enabled)';
     const codeLabel = this.code ? `Session ${this.code}` : 'Session';
     this.log(`${codeLabel} is now ${modeStr}`);
-    if (this.sharedKey) {
+    if (this.sharedKey && this.fingerprintAuthorized) {
       await this._sendSessionConfig();
     }
     return this.readonly;
@@ -263,7 +263,10 @@ export class Session {
     });
     try {
       const payload = await encrypt(this.sharedKey, config);
-      this._sendEncryptedToClient(payload);
+      this._sendEncryptedToClient(payload, {
+        directPayload: JSON.stringify({ _meta: 'session-config', payload }),
+        meta: 'session-config',
+      });
     } catch (err) {
       this.log(`Failed to send session config: ${err.message}`);
     }