shell-mirror 1.5.140 → 1.5.143

package/public/app/terminal.js

@@ -50,6 +50,8 @@ let AGENT_ID;
 let CLIENT_ID;
 let SELECTED_AGENT; // Store full agent data including WebSocket URL
 let usingDirectConnection = false; // Flag to prevent handler overwrite
+let directProbeAborted = false; // Set when the direct-connection phase is over; late probe successes must not take over
+const DIRECT_PHASE_DEADLINE_MS = 5000; // Global budget for the direct phase on https before WebRTC fallback
 
 // Session management
 let currentSession = null;
@@ -342,9 +344,29 @@ async function initialize() {
     console.log('[CLIENT] 🚀 Initializing connection to agent:', AGENT_ID);
     console.log('[CLIENT] 📋 Selected agent data:', SELECTED_AGENT);
     
-    // First try direct connection to agent
-    const directConnectionSuccess = await tryDirectConnection();
-    
+    // First try direct connection to agent.
+    // On https, browsers block ws:// to anything except localhost (mixed content), and
+    // black-holed probes on cellular can stall for minutes — so cap the whole direct
+    // phase with a single global deadline before falling back to WebRTC signaling.
+    // On http (local dev), behavior is unchanged: full sequential probing, no deadline.
+    directProbeAborted = false;
+    let directConnectionSuccess;
+    if (window.location.protocol === 'https:') {
+        directConnectionSuccess = await Promise.race([
+            tryDirectConnection(),
+            new Promise((resolve) => setTimeout(() => resolve(false), DIRECT_PHASE_DEADLINE_MS))
+        ]);
+        if (!directConnectionSuccess) {
+            // Deadline fired (or all probes failed) — close the direct phase so a
+            // late-resolving probe can't clobber ws/usingDirectConnection after
+            // WebRTC signaling has started. This runs in the microtask continuation
+            // of the race, so it always wins over any not-yet-fired socket onopen.
+            directProbeAborted = true;
+        }
+    } else {
+        directConnectionSuccess = await tryDirectConnection();
+    }
+
     if (directConnectionSuccess) {
         console.log('[CLIENT] ✅ Direct connection established - no server needed!');
         setConnectionMessage('Connected via local network!', true);
@@ -379,16 +401,24 @@ async function tryDirectConnection() {
             return false;
         }
         
-        // Try common local IPs for the agent
-        // Start with localhost/loopback, then try common private network ranges
-        const possibleIPs = [
-            'localhost',
-            '127.0.0.1',
-            // Common private network ranges
-            ...generatePrivateIPCandidates()
-        ];
-        
+        // Try common local IPs for the agent.
+        // On https, browsers block ws:// to private LAN IPs (mixed content; only
+        // localhost/127.0.0.1 are exempt), so probing the LAN list is pure dead time —
+        // restrict to the loopback variants. On http (local dev), keep the full list.
+        const possibleIPs = window.location.protocol === 'https:'
+            ? ['localhost', '127.0.0.1']
+            : [
+                'localhost',
+                '127.0.0.1',
+                // Common private network ranges
+                ...generatePrivateIPCandidates()
+            ];
+
         for (const ip of possibleIPs) {
+            if (directProbeAborted) {
+                console.log('[CLIENT] ⏰ Direct phase deadline reached - stopping remaining probes');
+                return false;
+            }
             const success = await tryDirectConnectionToIP(ip, agent.localPort);
             if (success) {
                 return true;
@@ -418,8 +448,17 @@ async function tryDirectConnectionToIP(ip, port) {
         
         directWs.onopen = () => {
             clearTimeout(timeout);
+            if (directProbeAborted) {
+                // Direct phase already lost the race to the global deadline and
+                // WebRTC signaling owns the connection now — do NOT set up handlers
+                // or clobber ws/usingDirectConnection. Discard this socket.
+                console.log(`[CLIENT] ⏰ Late direct connection to ${ip}:${port} ignored (deadline already fired)`);
+                directWs.close();
+                resolve(false);
+                return;
+            }
             console.log(`[CLIENT] ✅ Direct connection established to ${ip}:${port}`);
-            
+
             // Set up the direct connection handlers
             setupDirectConnection(directWs);
             resolve(true);
@@ -525,17 +564,9 @@ function setupDirectConnection(directWs) {
         console.error('[CLIENT] ❌ Direct connection error:', error);
     };
     
-    // Set up terminal input handler for direct connection
-    term.onData((data) => {
-        if (currentSession && directWs.readyState === WebSocket.OPEN) {
-            directWs.send(JSON.stringify({
-                type: 'input',
-                sessionId: currentSession.id,
-                data: data
-            }));
-        }
-    });
-    
+    // Terminal input is handled by the single module-level term.onData
+    // registration (see "One-time terminal event wiring" below).
+
     // Send authentication
     directWs.send(JSON.stringify({
         type: 'authenticate',
@@ -572,10 +603,16 @@ function generatePrivateIPCandidates() {
 async function initializeWebRTCSignaling() {
     console.log('[CLIENT] 🚀 Initializing WebRTC signaling connection to agent:', AGENT_ID);
     
-    // Use Heroku WebSocket server for WebRTC signaling only
-    const signalingUrl = 'wss://shell-mirror-30aa5479ceaf.herokuapp.com';
-    console.log('[CLIENT] 🌐 Using Heroku WebSocket server for signaling:', signalingUrl);
-    
+    // Signaling endpoint comes from config.js (single source of truth, so the
+    // deployment can move off Heroku without code changes). Empty => cloud
+    // signaling disabled; rely on the LAN-direct path instead.
+    const signalingUrl = (window.SHELL_MIRROR_CONFIG && window.SHELL_MIRROR_CONFIG.SIGNALING_URL) || '';
+    if (!signalingUrl) {
+        console.log('[CLIENT] ☁️ Cloud signaling disabled (config SIGNALING_URL is empty) — using LAN-direct only.');
+        return;
+    }
+    console.log('[CLIENT] 🌐 Using signaling server:', signalingUrl);
+
     ws = new WebSocket(`${signalingUrl}?role=client`);
     
     ws.onopen = () => {
@@ -990,19 +1027,74 @@ function setupDataChannel() {
         term.write('Click Dashboard to return and try again\r\n');
     };
 
-    term.onData((data) => {
-        if (dataChannel && dataChannel.readyState === 'open') {
-            dataChannel.send(JSON.stringify({ type: 'input', data }));
-        }
-    });
+    // Terminal input and resize are handled by the single module-level
+    // registrations (see "One-time terminal event wiring" below), so a
+    // renegotiated data channel never stacks duplicate handlers.
+}
+
+// One-time terminal event wiring. Registered once at script load instead of
+// per connection: the client-hello retry loop can make the agent deliver a
+// SECOND data channel, and per-channel term.onData registrations stacked
+// additively -> every keystroke sent twice. The handlers below read the
+// CURRENT directWs/usingDirectConnection/dataChannel state at event time via
+// sendTerminalInput, so they stay correct across renegotiation.
+term.onData((data) => {
+    sendTerminalInput(data);
+});
+
+term.onResize(({ cols, rows }) => {
+    if (dataChannel && dataChannel.readyState === 'open') {
+        dataChannel.send(JSON.stringify({ type: 'resize', cols, rows }));
+    }
+});
 
-    window.addEventListener('resize', scheduleFit);
+window.addEventListener('resize', scheduleFit);
 
-    term.onResize(({ cols, rows }) => {
-        if (dataChannel && dataChannel.readyState === 'open') {
-            dataChannel.send(JSON.stringify({ type: 'resize', cols, rows }));
+// Brief red pulse on the connection status indicator when input cannot be delivered.
+// Throttled so held/repeated keys don't stack animations.
+let lastInputBlockedFlash = 0;
+function flashInputBlocked() {
+    const now = Date.now();
+    if (now - lastInputBlockedFlash < 500) return;
+    lastInputBlockedFlash = now;
+
+    const statusElement = document.getElementById('connection-status');
+    if (statusElement && statusElement.animate) {
+        statusElement.animate(
+            [
+                { boxShadow: '0 0 0 0 rgba(255, 68, 68, 0.9)', background: '#ff4444' },
+                { boxShadow: '0 0 0 8px rgba(255, 68, 68, 0)', background: '#ff4444' }
+            ],
+            { duration: 250, iterations: 2 }
+        );
+    }
+}
+
+// Single routing point for terminal input (typed keys and FAB keys).
+// Message shapes per transport are fixed by the agent's handlers:
+//   - direct local WS requires { type: 'input', sessionId, data }
+//   - WebRTC data channel expects { type: 'input', data } (session resolved by clientId)
+// The Heroku signaling socket has NO 'input' handler, so we NEVER send input on it.
+function sendTerminalInput(data) {
+    // Direct local-network connection: ws points at the agent's local WebSocket
+    if (usingDirectConnection && ws && ws.readyState === WebSocket.OPEN) {
+        if (currentSession) {
+            ws.send(JSON.stringify({
+                type: 'input',
+                sessionId: currentSession.id,
+                data: data
+            }));
+            return true;
         }
-    });
+    } else if (dataChannel && dataChannel.readyState === 'open') {
+        // WebRTC data channel: no sessionId in the message
+        dataChannel.send(JSON.stringify({ type: 'input', data }));
+        return true;
+    }
+
+    // No writable transport (signaling-only or fully offline): drop with feedback.
+    flashInputBlocked();
+    return false;
 }
 
 function sendMessage(message) {
@@ -1179,10 +1271,20 @@ function doCloseSession(sessionId) {
         switchToSessionId: nextSession ? nextSession.id : null  // Atomic close + switch
     };
 
+    // Route like sendTerminalInput: ws is only a valid transport when it is the
+    // direct local-network socket. The Heroku signaling socket has no
+    // 'close_session' handler and would silently drop the request.
     if (dataChannel && dataChannel.readyState === 'open') {
         dataChannel.send(JSON.stringify(closeMessage));
-    } else if (ws && ws.readyState === WebSocket.OPEN) {
+    } else if (usingDirectConnection && ws && ws.readyState === WebSocket.OPEN) {
         ws.send(JSON.stringify(closeMessage));
+    } else {
+        // Signaling-only or fully offline: fail visibly, keep local state intact
+        // so tabs don't desync from the agent.
+        console.error('[CLIENT] ❌ Cannot close session - no active connection');
+        term.write('\r\n\x1b[31mCannot close session - not connected\x1b[0m\r\n');
+        flashInputBlocked();
+        return;
     }
 
     // Update local state
@@ -1212,8 +1314,10 @@ function doCloseSession(sessionId) {
 }
 
 function getConnectionStatus() {
-    // Check direct WebSocket connection
-    if (ws && ws.readyState === WebSocket.OPEN) {
+    // Check direct WebSocket connection. Only counts when ws is the direct
+    // local-network socket; an open Heroku signaling socket is NOT a terminal
+    // connection and must not be reported as 'connected'.
+    if (usingDirectConnection && ws && ws.readyState === WebSocket.OPEN) {
         return 'connected';
     }
 
@@ -1276,7 +1380,9 @@ function createNewSession() {
         };
         console.log('[CLIENT] Message:', JSON.stringify(message));
         dataChannel.send(JSON.stringify(message));
-    } else if (ws && ws.readyState === WebSocket.OPEN) {
+    } else if (usingDirectConnection && ws && ws.readyState === WebSocket.OPEN) {
+        // Only when ws is the direct local socket; the Heroku signaling socket
+        // has no 'create_session' handler and would silently drop the request.
         console.log('[CLIENT] 📤 Sending session create via Direct WebSocket');
         const message = {
             type: 'create_session',
@@ -1439,6 +1545,8 @@ const fabKeyMap = {
     'shift+tab': '\x1b[Z',   // Shift+Tab - MODE SWITCHING (most critical!)
     'tab': '\t',             // Tab - autocomplete + thinking toggle
     'escape': '\x1b',        // Esc - cancel (double = rewind)
+    'enter': '\r',           // ⏎ - confirm/submit (menu-driven TUIs)
+    'alt+enter': '\x1b\r',   // ⌥⏎ - newline without submit (multiline prompts)
     'up': '\x1b[A',          // ↑ - history up
     'down': '\x1b[B',        // ↓ - history down
     'left': '\x1b[D',        // ← - cursor left
@@ -1515,7 +1623,7 @@ function initFloatingButtons() {
 
     // Button click handlers - send key sequences to terminal
     // Use touchstart with preventDefault to prevent focus loss on mobile
-    document.querySelectorAll('.fab-btn:not([data-repeat])').forEach(btn => {
+    document.querySelectorAll('.fab-btn[data-keys]:not([data-repeat])').forEach(btn => {
         // Touch handler (mobile) - prevent focus loss
         btn.addEventListener('touchstart', (e) => {
             e.preventDefault(); // Prevents focus shift and keyboard dismiss
@@ -1538,6 +1646,36 @@ function initFloatingButtons() {
         });
     });
 
+    // Paste button - reads the clipboard and routes it through the shared input path.
+    // navigator.clipboard.readText() MUST be invoked synchronously inside the
+    // user-gesture handler (iOS Safari rejects it otherwise); only the .then/.catch
+    // runs later. Failures (permission denied, empty clipboard) show a brief
+    // non-blocking notice instead of throwing.
+    const pasteBtn = document.getElementById('fabPaste');
+    if (pasteBtn) {
+        const handlePaste = (e) => {
+            e.preventDefault(); // Prevents focus shift and keyboard dismiss
+            if (!navigator.clipboard || !navigator.clipboard.readText) {
+                flashFabNotice('Clipboard unavailable');
+            } else {
+                navigator.clipboard.readText()
+                    .then(text => {
+                        if (text) {
+                            sendTerminalInput(text);
+                        } else {
+                            flashFabNotice('Clipboard is empty');
+                        }
+                    })
+                    .catch(() => {
+                        flashFabNotice('Paste not allowed');
+                    });
+            }
+            setTimeout(() => term.focus(), 0);
+        };
+        pasteBtn.addEventListener('touchstart', handlePaste, { passive: false });
+        pasteBtn.addEventListener('click', handlePaste);
+    }
+
     // Long-press repeat for arrow keys
     initFabLongPress();
 
@@ -1546,14 +1684,21 @@ function initFloatingButtons() {
     // and rides up with the column — no fixed-positioning, no transform.
     initKeyboardInsetTracking();
 
-    // Scroll to show primary buttons (⇧Tab visible on left)
-    setTimeout(() => {
+    // Scroll to show primary buttons (⇧Tab visible on left). The container is
+    // display:none until startConnection() adds .show, so retry until the strip
+    // has layout; position is measured strip-relative so the toggle/chevron
+    // widths don't skew it.
+    const scrollToPrimaryGroup = (attemptsLeft) => {
         const modeBtn = strip.querySelector('[data-keys="shift+tab"]');
-        if (modeBtn) {
-            strip.scrollLeft = modeBtn.offsetLeft - 10;
+        if (modeBtn && strip.clientWidth > 0) {
+            strip.scrollLeft += modeBtn.getBoundingClientRect().left
+                - strip.getBoundingClientRect().left - 10;
+            updateScrollIndicators();
+        } else if (attemptsLeft > 0) {
+            setTimeout(() => scrollToPrimaryGroup(attemptsLeft - 1), 100);
         }
-        updateScrollIndicators();
-    }, 100);
+    };
+    setTimeout(() => scrollToPrimaryGroup(50), 100);
 
     console.log('[CLIENT] ⌨️ Floating buttons initialized');
 }
@@ -1595,18 +1740,24 @@ function initKeyboardInsetTracking() {
     update(); // initial state
 }
 
+// Brief transient notice above the FAB strip (e.g. clipboard paste failures).
+let fabNoticeTimer = null;
+function flashFabNotice(message) {
+    const notice = document.getElementById('fabNotice');
+    if (!notice) return;
+    notice.textContent = message;
+    notice.classList.add('visible');
+    if (fabNoticeTimer) clearTimeout(fabNoticeTimer);
+    fabNoticeTimer = setTimeout(() => {
+        notice.classList.remove('visible');
+        fabNoticeTimer = null;
+    }, 1600);
+}
+
 // Send key sequence through the appropriate connection
 function sendFabKey(keySequence) {
-    // Use the same logic as term.onData - send through WebRTC or direct WS
-    if (dataChannel && dataChannel.readyState === 'open') {
-        dataChannel.send(JSON.stringify({ type: 'input', data: keySequence }));
-    } else if (ws && ws.readyState === WebSocket.OPEN && currentSession) {
-        ws.send(JSON.stringify({
-            type: 'input',
-            sessionId: currentSession.id,
-            data: keySequence
-        }));
-    }
+    // Routed through the single input path; never falls back to the signaling socket.
+    sendTerminalInput(keySequence);
 }
 
 // Long-press support for arrow buttons (↑/↓)

package/mac-agent/.env

@@ -1,9 +0,0 @@
-WEB_SERVER_HTTP=https://www.igori.eu
-AGENT_SECRET=mac-agent-secret-2024
-AGENT_ID=mac-karmalsky-Sergeis-MacBook-Pro-local-1751389952495
-OWNER_EMAIL=bac9i4mo@gmail.com
-OWNER_TOKEN=temp-token-placeholder
-POLL_INTERVAL=2000
-COMMAND_TIMEOUT=30000
-MAX_CONCURRENT_COMMANDS=3
-LOG_LEVEL=info

package/mac-agent/agent-debug.log

@@ -1,143 +0,0 @@
-=== Mac Agent Debug Log Started 2025-10-06T15:30:27.215Z ===
-[2025-10-06T15:30:27.471Z] ✅ @koush/wrtc package loaded successfully
-[2025-10-06T15:30:27.473Z] 🆔 Agent ID: agent-a5e99ce1-4209-4ec0-9738-7d44dd0c5755
-[2025-10-06T15:30:27.473Z] [AGENT] Host is 0.0.0.0, connecting to localhost instead.
-[2025-10-06T15:30:27.473Z] 🌐 Using local WebSocket URL: ws://localhost:8080
-[2025-10-06T15:30:27.473Z] 🐚 Shell: bash
-[2025-10-06T15:30:27.475Z] 🏠 Starting local WebSocket server on port 8080
-[2025-10-06T15:30:27.475Z] ✅ Local WebSocket server started on port 8080
-[2025-10-06T15:30:27.475Z] 🔌 Connecting to signaling server at ws://localhost:8080?role=agent&agentId=agent-a5e99ce1-4209-4ec0-9738-7d44dd0c5755
-[2025-10-06T15:30:27.497Z] ✅ Connected to signaling server.
-[2025-10-06T15:30:27.497Z] 💓 Starting heartbeat system (60 second interval)
-[2025-10-06T15:30:28.310Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:31:27.635Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:32:27.650Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:33:27.662Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:34:27.631Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:35:27.632Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:36:27.638Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:37:27.636Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:38:27.639Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:39:27.641Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:40:27.650Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:41:27.650Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:42:27.642Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:43:27.638Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:44:27.646Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:45:27.650Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:46:27.667Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:47:27.650Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:48:27.649Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:49:27.651Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:50:27.673Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:51:27.651Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:52:27.712Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:53:27.655Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:54:27.659Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:55:27.660Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:56:27.681Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:57:27.661Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:58:27.680Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T15:59:27.664Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:00:27.700Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:01:27.677Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:02:27.676Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:03:27.678Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:04:27.681Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:05:27.670Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:06:27.674Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:07:27.688Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:08:27.682Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:09:27.685Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:10:27.686Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:11:27.677Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:12:27.797Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:13:27.688Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:14:27.684Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:15:27.690Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:16:27.698Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:17:27.687Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:18:27.702Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:19:27.692Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:20:27.689Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:21:27.697Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:22:27.694Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:23:27.709Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:24:27.717Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:25:27.698Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:26:27.703Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:27:27.699Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:28:27.701Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:29:27.704Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:30:27.715Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:31:27.702Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:32:27.705Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:33:27.720Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:34:27.708Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:35:27.714Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:36:27.713Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:37:27.712Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:38:27.727Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:39:27.713Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:40:27.726Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:41:27.745Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:42:27.723Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:43:27.724Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:44:27.729Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:45:27.724Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:46:27.731Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:47:27.721Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:48:27.728Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:49:27.728Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:50:27.726Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:51:27.725Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:52:27.739Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:53:27.739Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:54:27.734Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:55:27.739Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:56:27.730Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:57:27.741Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:58:27.956Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T16:59:27.740Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:00:27.751Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:01:27.737Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:02:27.744Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:03:27.760Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:04:27.745Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:05:27.746Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:06:27.742Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:07:27.742Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:08:27.763Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:09:27.748Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:10:27.746Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:11:27.747Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:12:27.750Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:13:27.759Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:14:27.749Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:15:27.757Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:16:27.752Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:17:27.760Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:18:27.749Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:19:27.708Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:20:27.708Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:21:27.706Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:22:27.707Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:23:27.700Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:24:27.710Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:25:27.710Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:26:27.695Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:27:27.745Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:28:27.699Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:29:27.704Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:30:27.704Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:31:27.713Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:32:27.709Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:33:27.710Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:34:27.711Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:35:27.694Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:36:27.700Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:37:27.700Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:38:27.698Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:39:27.698Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:40:27.726Z] ⚠️ Heartbeat HTTP error: 404
-[2025-10-06T17:41:27.700Z] ⚠️ Heartbeat HTTP error: 404

package/mac-agent/authorized-users.json

@@ -1,35 +0,0 @@
-{
-  "version": "1.0.0",
-  "lastUpdated": "2024-12-30T00:00:00Z",
-  "users": {
-    "your-email@gmail.com": {
-      "role": "admin",
-      "permissions": ["terminal", "admin", "logs"],
-      "allowedCommands": "*",
-      "maxSessions": 3,
-      "addedDate": "2024-12-30T00:00:00Z",
-      "lastAccess": null,
-      "active": true
-    }
-  },
-  "roles": {
-    "admin": {
-      "description": "Full access to terminal and admin functions",
-      "permissions": ["terminal", "admin", "logs", "user-management"],
-      "allowedCommands": "*",
-      "maxSessions": 5
-    },
-    "user": {
-      "description": "Standard terminal access with command restrictions",
-      "permissions": ["terminal"],
-      "allowedCommands": ["ls", "pwd", "whoami", "echo", "cat", "grep", "find", "ps", "df", "du", "uname", "date", "which"],
-      "maxSessions": 2
-    },
-    "guest": {
-      "description": "Limited read-only terminal access",
-      "permissions": ["terminal"],
-      "allowedCommands": ["ls", "pwd", "whoami", "echo", "cat", "uname", "date", "which"],
-      "maxSessions": 1
-    }
-  }
-}