red-pen-hub 0.7.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lincoln Tracy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,114 @@
+# Red Pen Hub
+
+The Red Pen PRO combined project board. One local screen that aggregates your
+Red Pen review notes from every project and every surface - WordPress, Express,
+the static drop-in, Blender - and lets you filter, search, resolve, and jump to
+the source.
+
+Each individual site keeps its own Red Pen overlay, notes, and export - all free
+and complete. The Hub is the cross-project cockpit: everything open, everywhere,
+on one screen, with two-way status write-back.
+
+- **Local-first.** Runs on your machine and only reads stores you point it at.
+- **No SaaS, no phone-home, no account.** Nothing leaves your box.
+- **Loopback-only.** Binds `127.0.0.1` / `::1` and is never reachable from the LAN.
+
+## Quick start
+
+Run it with no install:
+
+```
+npx red-pen-hub
+```
+
+Then open http://localhost:3900
+
+Or from a clone:
+
+```
+npm install
+npm start
+```
+
+## Where your data lives
+
+The Hub keeps all of its state in a per-user data directory, **not** next to its
+own code - so it runs cleanly from an `npx` cache or a packaged binary:
+
+- **Windows:** `%APPDATA%\red-pen-hub\`
+- **macOS / Linux:** `$XDG_CONFIG_HOME/red-pen-hub/` (else `~/.config/red-pen-hub/`)
+
+Set `RED_PEN_HUB_DATA` to override the location (portable installs, testing).
+That folder holds `sources.json` (your source list, the connect token, and your
+license key) and `connected/` (push-store data). The credential file is written
+`0600`. Upgrading from an older in-folder version migrates your state
+automatically on first run.
+
+## Adding projects
+
+Three ways, all from the **Sources** tab:
+
+- **Scan for projects** - point it at a dev folder and it finds every Red Pen
+  install of every type: `.redpen/notes.json` file stores (Express, static
+  export, Blender) and WordPress sites running the wp-red-pen plugin. Pick which
+  to add.
+- **Connect a site (push)** - a site pushes its notes to the Hub and
+  self-registers; no "add" step needed. Used by the static drop-in and WP.
+- **Edit `sources.json` by hand** - copy `sources.example.json` into your data
+  dir as `sources.json` and edit it:
+
+```json
+{
+  "port": 3900,
+  "sources": [
+    { "type": "file", "label": "My App", "path": "C:/.../.redpen/notes.json" },
+    { "type": "wp-rest", "label": "TDM", "url": "https://example.com",
+      "user": "username", "appPassword": "xxxx xxxx xxxx xxxx xxxx xxxx" }
+  ]
+}
+```
+
+WordPress sources authenticate with a standard Application Password and work for
+both local and remote sites.
+
+## Free vs PRO
+
+The Hub is free to try with up to **3 projects** on the board - a real
+try-before-you-buy, not a crippled demo. A PRO license lifts the cap to
+unlimited projects.
+
+- The license is an **offline, lifetime key** - verified locally against an
+  embedded public key. No phone-home, no expiry, no subscription.
+- The **same key** unlocks the WordPress plugin and the Hub.
+- To unlock: paste your key into the unlock panel on the board (or `POST` it to
+  `/api/license`). It is saved to your data dir.
+
+Read the docs at **https://docs.redpen.tools**. PRO licensing is coming soon -
+watch **https://redpen.tools**.
+
+## What it does
+
+- Aggregates notes from every source into one board, normalized to the shared
+  Red Pen note model.
+- Filter by status / project / surface, full-text search, live counts.
+- **Two-way write-back** - resolve or reopen a note from the board and the Hub
+  pushes the change back to its real source (file store, connected push store, or
+  the WP plugin's REST route). Hub-side changes survive the next push from a
+  connected site.
+- Saved views, jump-to-source, Markdown export.
+- Passive git status per project on the Sources tab (clean / dirty indicator).
+
+## Security
+
+- Binds loopback only (IPv4 + IPv6); never exposed to the network.
+- Every `/api` route is gated by a per-install token; the board is served with
+  the token injected so its own fetches pass and nothing else on the box does.
+- A Host allow-list rejects non-loopback `Host` headers (DNS-rebinding guard).
+- URLs derived from source data are scheme-checked and redirects are
+  re-validated per hop.
+
+## License
+
+MIT for the code - it is open and readable. PRO is a paid unlock of the
+unlimited-projects cap, not a lock on the source. By Lincoln Tracy. Part of the
+Red Pen family - see https://redpen.tools.

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "red-pen-hub",
+  "version": "0.7.0",
+  "description": "Red Pen PRO - a local cross-project board that aggregates Red Pen review notes from every project and surface into one screen. No SaaS, no phone-home, local-first.",
+  "type": "commonjs",
+  "main": "src/server.js",
+  "bin": {
+    "red-pen-hub": "src/server.js"
+  },
+  "files": [
+    "src/",
+    "sources.example.json"
+  ],
+  "scripts": {
+    "start": "node src/server.js"
+  },
+  "keywords": [
+    "red-pen",
+    "review",
+    "notes",
+    "dashboard",
+    "aggregator",
+    "dev-tools"
+  ],
+  "author": "Lincoln Tracy",
+  "license": "MIT",
+  "dependencies": {
+    "express": "4.21.2"
+  }
+}

package/sources.example.json

@@ -0,0 +1,20 @@
+{
+  "port": 3900,
+  "discover": [
+    "C:/xampp/htdocs/library/Claude Code Projects"
+  ],
+  "sources": [
+    {
+      "type": "file",
+      "label": "Example single file",
+      "path": "C:/path/to/some-app/.redpen/notes.json"
+    },
+    {
+      "type": "wp-rest",
+      "label": "Example WordPress site",
+      "url": "https://example.com",
+      "user": "your-wp-username",
+      "appPassword": "xxxx xxxx xxxx xxxx xxxx xxxx"
+    }
+  ]
+}