phewsh 0.15.78 → 0.15.80

package/bin/phewsh.js

@@ -103,6 +103,8 @@ const COMMANDS = {
   setup:   () => require('../commands/setup')(),
   update:  () => require('../commands/update')(),
   serve:   () => require('../commands/serve')(),
+  project: () => require('../commands/project')(),
+  projects: () => require('../commands/project')(),
   sequence: () => require('../commands/sequence')(),
   seq:     () => require('../commands/sequence')(),
   ambient: () => require('../commands/ambient')(),
@@ -161,6 +163,7 @@ function showHelp() {
   console.log(`    ${cyan('watch')}      ${g('Auto-sync .intent/ → native harness files + cloud')}`);
   console.log(`    ${cyan('push/pull')}  ${g('Manual sync to/from phewsh.com/intent')}`);
   console.log(`    ${cyan('serve')}      ${g('Execution bridge — run from phewsh.com/ion or /intent')}`);
+  console.log(`    ${cyan('project')}    ${g('Choose which projects this machine\'s worker shows on /ion')}`);
   console.log(`    ${cyan('ion')}        ${g('Shared visual room for humans + local agents')}`);
   console.log(`    ${cyan('mcp')}        ${g('Connect AI agents via MCP protocol')}`);
   console.log(`    ${cyan('ambient')}    ${g('Continuity without launching phewsh — enhance your other tools')}`);

package/commands/project.js

@@ -0,0 +1,121 @@
+// phewsh project — the serve registry: which projects may this machine's
+// worker expose to phewsh.com/ion and /cockpit?
+//
+// Jul 8 2026 Option C ruling: one worker per machine, explicit registry,
+// identity = normalized git remote (never the folder name). Adding a project
+// here does NOT execute anything and does NOT let anyone run work remotely —
+// it only makes the project visible as "online" when `phewsh serve` runs.
+// Manual claim remains the execution boundary.
+//
+// Usage:
+//   phewsh project              Show the registry + what to do next
+//   phewsh project add [path]   Register a project (default: this directory)
+//   phewsh project list         Same as bare `phewsh project`
+//   phewsh project remove <name|path>   Stop exposing a project
+
+const path = require('path');
+const { addServeProject, removeServeProject, serveProjects } = require('../lib/projects-index');
+
+const b = (s) => `\x1b[1m${s}\x1b[0m`;
+const g = (s) => `\x1b[38;5;247m${s}\x1b[0m`;
+const w = (s) => `\x1b[97m${s}\x1b[0m`;
+const green = (s) => `\x1b[32m${s}\x1b[0m`;
+const yellow = (s) => `\x1b[33m${s}\x1b[0m`;
+const cyan = (s) => `\x1b[36m${s}\x1b[0m`;
+
+function showList() {
+  const projects = serveProjects();
+  console.log('');
+  console.log(`  ${b(w('Served projects'))} ${g('— what this machine\'s worker shows on phewsh.com/ion')}`);
+  console.log('');
+  if (projects.length === 0) {
+    console.log(`  ${g('None yet. Registering a project is one command, run inside its repo:')}`);
+    console.log('');
+    console.log(`    ${cyan('cd <your-project> && phewsh project add')}`);
+    console.log('');
+    console.log(`  ${g('Then start the worker once for the whole machine:')}  ${cyan('phewsh serve')}`);
+  } else {
+    for (const p of projects) {
+      console.log(`  ${green('●')} ${w(p.name)}`);
+      console.log(`     ${g('repo:')} ${g(p.remote || 'no remote')}`);
+      console.log(`     ${g('path:')} ${g(p.path)}`);
+    }
+    console.log('');
+    console.log(`  ${g('These appear as this machine\'s projects when')} ${cyan('phewsh serve')} ${g('is running.')}`);
+    console.log(`  ${g('Add another:')} ${cyan('phewsh project add [path]')}   ${g('Stop exposing one:')} ${cyan('phewsh project remove <name>')}`);
+  }
+  console.log('');
+  console.log(`  ${g('Registering never executes anything — work still starts only when a')}`);
+  console.log(`  ${g('human claims it. See phewsh.com/ion for the team room.')}`);
+  console.log('');
+}
+
+function main() {
+  const args = process.argv.slice(3);
+  const sub = args[0];
+
+  if (sub === 'add') {
+    const dir = args[1] ? path.resolve(args[1]) : process.cwd();
+    try {
+      const p = addServeProject(dir);
+      console.log('');
+      console.log(`  ${green('✓')} ${w(p.name)} ${g('registered for this machine\'s worker.')}`);
+      console.log(`     ${g('identity:')} ${g(p.remote)}`);
+      console.log('');
+      console.log(`  ${g('Next:')} ${cyan('phewsh serve')} ${g('— one worker serves every registered project;')}`);
+      console.log(`  ${g('phewsh.com/ion will show it as online on this machine.')}`);
+      console.log('');
+    } catch (err) {
+      console.log('');
+      console.log(`  ${yellow('●')} ${err.message.split('\n').join(`\n  ${g('')}`)}`);
+      console.log('');
+      process.exit(1);
+    }
+    return;
+  }
+
+  if (sub === 'remove' || sub === 'rm') {
+    if (!args[1]) {
+      console.log('');
+      console.log(`  ${g('Which one? ')} ${cyan('phewsh project remove <name|path>')}`);
+      console.log('');
+      showList();
+      process.exit(1);
+    }
+    const hit = removeServeProject(args[1]);
+    console.log('');
+    if (hit) {
+      console.log(`  ${green('✓')} ${w(hit.name)} ${g('is no longer exposed by this machine\'s worker.')}`);
+      console.log(`  ${g('(The project itself is untouched — this only changes what the worker shows.)')}`);
+    } else {
+      console.log(`  ${yellow('●')} ${g('No served project matches')} ${w(args[1])}${g('. Here\'s what\'s registered:')}`);
+      showList();
+      process.exit(1);
+    }
+    console.log('');
+    return;
+  }
+
+  if (sub && sub !== 'list' && sub !== 'ls' && sub !== 'help' && sub !== '--help' && sub !== '-h') {
+    console.log('');
+    console.log(`  ${yellow('●')} ${g('Unknown subcommand:')} ${w(sub)}`);
+  }
+
+  if (sub === 'help' || sub === '--help' || sub === '-h') {
+    console.log('');
+    console.log(`  ${b(w('phewsh project'))} ${g('— choose which projects this machine\'s worker exposes')}`);
+    console.log('');
+    console.log(`    ${cyan('phewsh project')}                    ${g('show the registry + guidance')}`);
+    console.log(`    ${cyan('phewsh project add [path]')}         ${g('register a project (default: here)')}`);
+    console.log(`    ${cyan('phewsh project remove <name|path>')} ${g('stop exposing a project')}`);
+    console.log('');
+    console.log(`  ${g('Safety: registering only affects visibility. Execution always requires')}`);
+    console.log(`  ${g('a human claim — nothing runs remotely because it was registered.')}`);
+    console.log('');
+    return;
+  }
+
+  showList();
+}
+
+module.exports = main;

package/commands/serve.js

@@ -12,7 +12,7 @@
 //   phewsh serve --port 8080  Start on custom port
 
 const http = require('http');
-const { execSync, spawn } = require('child_process');
+const { execFileSync, spawn } = require('child_process');
 const crypto = require('crypto');
 const os = require('os');
 const path = require('path');
@@ -35,6 +35,18 @@ function getPort() {
   return 7483;
 }
 
+// The project this worker serves = the directory it was started in. The
+// normalized origin remote is the identity the claim path already verifies
+// against (task.js repo-match); name alone is display, remote is truth.
+function currentProject() {
+  let remote = null;
+  try {
+    remote = execFileSync('git', ['remote', 'get-url', 'origin'], { stdio: ['ignore', 'pipe', 'ignore'] })
+      .toString().trim() || null;
+  } catch { /* not a git repo, or no origin — worker still serves the directory */ }
+  return { name: path.basename(process.cwd()), remote };
+}
+
 // ─── Runtime Detection ─────────────────────────────────────────────────────
 
 // Harness runners — shared table in lib/harnesses.js. PHEWSH is not a
@@ -59,6 +71,7 @@ function detectRuntimes() {
 // ─── Job Queue ─────────────────────────────────────────────────────────────
 
 const { gatherReceipts, recordSessionEvent, recordResultFile } = require('../lib/receipts-data');
+const { serveProjects } = require('../lib/projects-index');
 
 const jobs = new Map();
 
@@ -245,10 +258,15 @@ function main() {
       return;
     }
 
-    // Health check
+    // Health check — includes which project this worker is serving, so the
+    // web can say "worker online — <project>" instead of an anonymous dot.
+    // `projects` = the explicit serve registry (`phewsh project add`); only
+    // deliberately registered projects are exposed, never the session index.
     if (url.pathname === '/health' && req.method === 'GET') {
       return json(req, res, {
         status: 'ok',
+        project: currentProject(),
+        projects: serveProjects().map(p => ({ name: p.name, remote: p.remote })),
         runtimes: detectRuntimes(),
         version: require('../package.json').version,
         uptime: process.uptime(),
@@ -314,6 +332,7 @@ function main() {
           pending: pendingDecisions().length,
           bypasses: bypassStats(),
           recentProjects: listProjects().slice(0, 5).map(p => ({ name: p.name, path: p.path, lastOpened: p.lastOpened })),
+          servedProjects: serveProjects().map(p => ({ name: p.name, remote: p.remote })),
           version: require('../package.json').version,
         });
       } catch (err) {
@@ -351,6 +370,26 @@ function main() {
 
   const server = http.createServer(handleRequest);
 
+  // One worker per machine (per port) for now. A second `phewsh serve` used to
+  // die with a raw EADDRINUSE stack — say what's true and how to proceed instead.
+  server.on('error', (err) => {
+    if (err.code === 'EADDRINUSE') {
+      console.log('');
+      console.log(`  ${yellow('●')} A phewsh worker is already running on port ${port}.`);
+      console.log('');
+      console.log(`  ${g('One worker per machine for now — the running worker serves the project')}`);
+      console.log(`  ${g('directory it was started in. To serve a different project:')}`);
+      console.log(`    ${g('· stop the other worker (Ctrl+C) and start this one, or')}`);
+      console.log(`    ${g('· run on another port:')} ${w(`phewsh serve --port ${port + 1}`)}`);
+      console.log(`      ${g('(note: phewsh.com currently discovers port 7483 only)')}`);
+      console.log('');
+      console.log(`  ${g('A one-worker-many-projects registry is the planned next step.')}`);
+      console.log('');
+      process.exit(1);
+    }
+    throw err;
+  });
+
   server.listen(port, '127.0.0.1', () => {
     const mirror = http.createServer(handleRequest);
     mirror.on('error', () => { /* IPv6 unavailable or already bound */ });
@@ -374,6 +413,20 @@ function main() {
       console.log(`  ${g('https://docs.anthropic.com/en/docs/claude-code')}`);
     }
     console.log('');
+    const registered = serveProjects();
+    const here = currentProject();
+    console.log(`  ${b('Projects this worker shows on phewsh.com/ion:')}`);
+    if (registered.length === 0) {
+      console.log(`    ${g('only the current directory:')} ${w(here.name)}${here.remote ? g(` (${here.remote})`) : ''}`);
+      console.log(`    ${g('Register projects by name so the web knows them:')} ${cyan('phewsh project add')} ${g('(run inside each repo)')}`);
+    } else {
+      for (const p of registered) {
+        const isHere = p.path === process.cwd();
+        console.log(`    ${green('●')} ${w(p.name)}${g(` (${p.remote})`)}${isHere ? g(' ← current directory') : ''}`);
+      }
+      console.log(`    ${g('Manage the list:')} ${cyan('phewsh project')}`);
+    }
+    console.log('');
     console.log(`  ${g('Open phewsh.com/ion to see the worker online, or phewsh.com/intent → Work')}`);
     console.log(`  ${g('Press Ctrl+C to stop')}`);
     console.log('');

package/lib/projects-index.js

@@ -13,7 +13,8 @@ const fs = require('fs');
 const path = require('path');
 const os = require('os');
 
-const INDEX_FILE = path.join(os.homedir(), '.phewsh', 'project-index.json');
+// PHEWSH_PROJECT_INDEX override exists for tests only — never point real use away from home.
+const INDEX_FILE = process.env.PHEWSH_PROJECT_INDEX || path.join(os.homedir(), '.phewsh', 'project-index.json');
 
 // Shallow-scanned roots when the user asks to find projects. One level deep,
 // opt-in only — deep-scanning someone's machine uninvited is invasive.
@@ -114,6 +115,75 @@ function scanForCandidates(roots = SCAN_ROOTS) {
   return found;
 }
 
+// ─── Serve registry (Jul 8 2026 Option C ruling) ────────────────────────────
+// Auto-recorded session entries are NOT auto-exposed to the worker. Only
+// projects the human deliberately registers with `phewsh project add` carry
+// serve:true, and only those appear on the bridge/web. Identity is the
+// normalized git remote — the same convention the task-claim path enforces —
+// never the folder name.
+
+const { execFileSync } = require('child_process');
+const { normalizeRemote } = require('./team-tasks');
+
+function originRemote(dir) {
+  try {
+    return execFileSync('git', ['remote', 'get-url', 'origin'], {
+      cwd: dir, stdio: ['ignore', 'pipe', 'ignore'],
+    }).toString().trim() || null;
+  } catch { return null; }
+}
+
+/**
+ * Register a project so the local worker may expose it. Validates before
+ * writing; throws with a plain-language message when something is missing.
+ */
+function addServeProject(dir) {
+  if (!fs.existsSync(path.resolve(dir))) throw new Error(`That folder doesn't exist: ${path.resolve(dir)}`);
+  const key = fs.realpathSync(path.resolve(dir)); // one entry per real directory, symlinks collapse
+
+  if (!fs.existsSync(path.join(key, '.git'))) {
+    throw new Error(`Not a git repository: ${key}\nA served project needs a repo so work stays traceable. Run this inside a git repo (or git init first).`);
+  }
+  const remote = originRemote(key);
+  if (!remote) {
+    throw new Error(`This repo has no 'origin' remote yet.\nThe remote is the project's identity — it's how phewsh guarantees work lands in the right repo.\nAdd one first:  git remote add origin <url>`);
+  }
+  const index = load();
+  index.projects[key] = {
+    ...(index.projects[key] || {}),
+    name: path.basename(key),
+    path: key,
+    remote: normalizeRemote(remote),
+    serve: true,
+    serveAddedAt: new Date().toISOString(),
+    lastOpened: index.projects[key]?.lastOpened || new Date().toISOString(),
+  };
+  save(index);
+  return index.projects[key];
+}
+
+/** Stop exposing a project (by name or path). The session-index entry stays. */
+function removeServeProject(nameOrPath) {
+  const index = load();
+  let wantPath = path.resolve(nameOrPath);
+  try { wantPath = fs.realpathSync(wantPath); } catch { /* not a live path — name match still works */ }
+  const hit = Object.values(index.projects).find(p =>
+    p.serve && (p.path === wantPath || p.name === nameOrPath));
+  if (!hit) return null;
+  delete index.projects[hit.path].serve;
+  delete index.projects[hit.path].serveAddedAt;
+  save(index);
+  return hit;
+}
+
+/** Projects the worker is allowed to expose, pruned to paths that still exist. */
+function serveProjects() {
+  const index = load();
+  return Object.values(index.projects)
+    .filter(p => p.serve === true && fs.existsSync(p.path))
+    .sort((a, b) => String(a.name).localeCompare(String(b.name)));
+}
+
 function fmtAgo(ts) {
   if (!ts) return '';
   const mins = Math.floor((Date.now() - new Date(ts).getTime()) / 60000);
@@ -123,4 +193,4 @@ function fmtAgo(ts) {
   return `${Math.floor(hrs / 24)}d ago`;
 }
 
-module.exports = { INDEX_FILE, SCAN_ROOTS, recordProject, listProjects, scanForProjects, scanForCandidates, fmtAgo };
+module.exports = { INDEX_FILE, SCAN_ROOTS, recordProject, listProjects, scanForProjects, scanForCandidates, fmtAgo, addServeProject, removeServeProject, serveProjects };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phewsh",
-  "version": "0.15.78",
+  "version": "0.15.80",
   "description": "One mission. Many AI tools. No lost context. PHEWSH keeps your project's intent, decisions, and working context aligned across Claude Code, Codex, Cursor, Gemini and your team — so the next AI knows what the last one learned.",
   "bin": {
     "phewsh": "bin/phewsh.js"