pyre-cli 3.7.0 → 3.9.0

package/README.md

@@ -197,6 +197,30 @@ The client connects to the server, authenticates with the password, and displays
 | `--p2p-audit-log <dir>` | Directory for P2P client audit logs |
 | `--p2p-hmac-key <key>` | HMAC key for message signing (must match server) |
 
+### Same local network (LAN)
+
+Both machines must be connected to the same local network (same WiFi or wired subnet). The server listens on `0.0.0.0` (all interfaces) by default, so any device on the LAN can reach it as long as the port is reachable.
+
+On the **server machine**, find its local IP address:
+
+```bash
+hostname -I
+# or
+ifconfig | grep "inet " | grep -v 127.0.0
+```
+
+Use the server's local IP (for example `192.168.1.25`) in the client command:
+
+```bash
+pyre p2p connect --p2p-host 192.168.1.25 --p2p-port 9876 --p2p-password mysecret
+```
+
+**Troubleshooting**
+
+- If the client cannot reach the server, confirm both machines are on the same subnet (ping the server IP from the client).
+- Verify the port is open (no local firewall blocking TCP `9876`).
+- Never expose the server directly to the public internet; it is designed for LAN use only.
+
 ### P2P Protocol
 
 The P2P connection uses a length-prefixed JSON protocol over TCP with HMAC-SHA256 message signing:

package/dist/index.js

@@ -2238,8 +2238,12 @@ var P2PServer = class {
     }
   }
   sendSigned(peer, message) {
-    if (!peer.socket.destroyed) {
+    if (peer.socket.destroyed || !peer.socket.writable) {
+      return;
+    }
+    try {
       peer.socket.write(message);
+    } catch {
     }
   }
   startDataStream(peer) {
@@ -2272,6 +2276,8 @@ var P2PServer = class {
       this.log(chalk6.yellow(`Peer connection reset: ${peer.socket.remoteAddress}`));
       this.audit(peer.ip, "ERROR", "Connection reset");
       this.emitPeerEvent("error", `connection reset: ${peer.socket.remoteAddress}`);
+    } else if (code === "EPIPE") {
+      this.audit(peer.ip, "ERROR", "Broken pipe");
     } else {
       this.log(chalk6.red(`Peer error: ${err.message}`));
       this.audit(peer.ip, "ERROR", err.message);
@@ -2480,7 +2486,10 @@ var P2PClient = class {
   }
   sendSigned(message) {
     if (this.socket && !this.socket.destroyed) {
-      this.socket.write(message);
+      try {
+        this.socket.write(message);
+      } catch {
+      }
     }
   }
   startPing() {
@@ -3186,7 +3195,7 @@ async function showSplash() {
 // src/index.ts
 var pkg = JSON.parse(fs4.readFileSync(new URL("../package.json", import.meta.url), "utf-8"));
 var program = new Command();
-program.name("pyre").version(pkg.version).description("Mac system monitoring CLI: interactive live dashboard, stats, graphs, export, packet monitor, battery predictor").option("-j, --json", "Output as JSON").option("-c, --csv", "Output as CSV").option("-t, --tsv", "Output as TSV").option("--detailed", "Include detailed system info and sensor readings").option("--theme <name>", "Default theme for live mode (default, dracula, cyberpunk, monochrome, nord, gruvbox)", "default").option("--interval <seconds>", "Refresh interval for live mode", "2").option("--once", "Show a single static snapshot instead of live feed").option("--out <file>", "Also write the snapshot output to a file (--once/--json/--csv/--tsv modes)").option("--export-dir <dir>", "Directory used for live-mode snapshot exports and logs", "./pyre-exports").option("--log", "Start continuous CSV logging immediately when live mode starts").option("--tree", "Show process tree view instead of flat list").option("--sort <key>", "Sort processes by: cpu, mem, pid, user, command, state, threads, runtime", "cpu").option("--packets", "Include packet monitor panel in output").option("--limit <n>", "Max number of processes to include in --once/--json/--csv/--tsv snapshots (0 = all)", "10").option("--p2p-host <host>", "P2P host address (server: bind address, client: server address)", "0.0.0.0").option("--p2p-port <port>", "P2P port number", "9876").option("--p2p-password <password>", "Password for P2P authentication").option("--p2p-tls", "Enable TLS encryption for P2P connections").option("--p2p-cert <file>", "TLS certificate file (PEM) for P2P server").option("--p2p-key <file>", "TLS private key file (PEM) for P2P server").option("--p2p-ca <file>", "TLS CA certificate file (PEM) for P2P client").option("--p2p-insecure", "Skip TLS certificate verification (client only)").option("--p2p-rate-limit <n>", "Max auth attempts per IP per minute (default: 5)", "5").option("--p2p-allow <ips>", "Comma-separated list of allowed IPs (empty = all)").option("--p2p-deny <ips>", "Comma-separated list of denied IPs").option("--p2p-audit-log <dir>", "Directory for P2P audit logs").option("--p2p-hmac-key <key>", "HMAC key for message signing (default: derived from password)");
+program.name("pyre").version(pkg.version).description("Mac system monitoring CLI: interactive live dashboard, stats, graphs, export, packet monitor, battery predictor").option("-j, --json", "Output as JSON").option("-c, --csv", "Output as CSV").option("-t, --tsv", "Output as TSV").option("--detailed", "Include detailed system info and sensor readings").option("--theme <name>", "Default theme for live mode (default, dracula, cyberpunk, monochrome, nord, gruvbox)", "default").option("--interval <seconds>", "Refresh interval for live mode", "2").option("--once", "Show a single static snapshot instead of live feed").option("--out <file>", "Also write the snapshot output to a file (--once/--json/--csv/--tsv modes)").option("--export-dir <dir>", "Directory used for live-mode snapshot exports and logs", "./pyre-exports").option("--log", "Start continuous CSV logging immediately when live mode starts").option("--tree", "Show process tree view instead of flat list").option("--sort <key>", "Sort processes by: cpu, mem, pid, user, command, state, threads, runtime", "cpu").option("--packets", "Include packet monitor panel in output").option("--limit <n>", "Max number of processes to include in --once/--json/--csv/--tsv snapshots (0 = all)", "10").option("--p2p-host <host>", "P2P host address (server: bind address, client: server address)").option("--p2p-port <port>", "P2P port number", "9876").option("--p2p-password <password>", "Password for P2P authentication").option("--p2p-tls", "Enable TLS encryption for P2P connections").option("--p2p-cert <file>", "TLS certificate file (PEM) for P2P server").option("--p2p-key <file>", "TLS private key file (PEM) for P2P server").option("--p2p-ca <file>", "TLS CA certificate file (PEM) for P2P client").option("--p2p-insecure", "Skip TLS certificate verification (client only)").option("--p2p-rate-limit <n>", "Max auth attempts per IP per minute (default: 5)", "5").option("--p2p-allow <ips>", "Comma-separated list of allowed IPs (empty = all)").option("--p2p-deny <ips>", "Comma-separated list of denied IPs").option("--p2p-audit-log <dir>", "Directory for P2P audit logs").option("--p2p-hmac-key <key>", "HMAC key for message signing (default: derived from password)");
 program.parse(process.argv);
 var opts = program.opts();
 function isExportMode() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pyre-cli",
-  "version": "3.7.0",
+  "version": "3.9.0",
   "description": "CLI Mac monitoring tool: temps, system stats, live dashboard, packet monitor, battery predictor, export",
   "main": "dist/index.js",
   "type": "module",

package/src/index.ts

@@ -38,7 +38,7 @@ program
     .option('--sort <key>', 'Sort processes by: cpu, mem, pid, user, command, state, threads, runtime', 'cpu')
     .option('--packets', 'Include packet monitor panel in output')
     .option('--limit <n>', 'Max number of processes to include in --once/--json/--csv/--tsv snapshots (0 = all)', '10')
-    .option('--p2p-host <host>', 'P2P host address (server: bind address, client: server address)', '0.0.0.0')
+    .option('--p2p-host <host>', 'P2P host address (server: bind address, client: server address)')
     .option('--p2p-port <port>', 'P2P port number', '9876')
     .option('--p2p-password <password>', 'Password for P2P authentication')
     .option('--p2p-tls', 'Enable TLS encryption for P2P connections')

package/src/p2p/client.ts

@@ -207,7 +207,11 @@ export class P2PClient {
 
   private sendSigned(message: Buffer): void {
     if (this.socket && !this.socket.destroyed) {
-      this.socket.write(message);
+      try {
+        this.socket.write(message);
+      } catch {
+        // ignore write errors; socket likely closed
+      }
     }
   }
 

package/src/p2p/server.ts

@@ -350,8 +350,13 @@ export class P2PServer {
   }
 
   private sendSigned(peer: Peer, message: Buffer): void {
-    if (!peer.socket.destroyed) {
+    if (peer.socket.destroyed || !peer.socket.writable) {
+      return;
+    }
+    try {
       peer.socket.write(message);
+    } catch {
+      // ignore write errors; peer likely disconnected
     }
   }
 
@@ -390,6 +395,8 @@ export class P2PServer {
       this.log(chalk.yellow(`Peer connection reset: ${peer.socket.remoteAddress}`));
       this.audit(peer.ip, 'ERROR', 'Connection reset');
       this.emitPeerEvent('error', `connection reset: ${peer.socket.remoteAddress}`);
+    } else if (code === 'EPIPE') {
+      this.audit(peer.ip, 'ERROR', 'Broken pipe');
     } else {
       this.log(chalk.red(`Peer error: ${err.message}`));
       this.audit(peer.ip, 'ERROR', err.message);