termbeam 1.8.1 → 1.10.0

package/README.md

@@ -14,9 +14,7 @@
 
 </div>
 
-TermBeam lets you access your terminal from a phone, tablet, or any browser — no SSH, no port forwarding, no config files. Run one command and scan the QR code.
-
-I built this because I kept needing to run quick commands on my dev machine while away from my desk, and SSH on a phone is painful. TermBeam gives you a real terminal with a touch-optimized UI — key bar, swipe scroll, pinch zoom — that actually works on small screens. You get multi-session tabs with split view, terminal search, a command palette, 12 themes, and secure remote access out of the box.
+TermBeam lets you access your terminal from a phone, tablet, or any browser — no SSH, no port forwarding, no configuration needed. Run one command and scan the QR code.
 
 [Full documentation](https://dorlugasigal.github.io/TermBeam/) · [Website](https://termbeam.pages.dev)
 
@@ -47,90 +45,80 @@ termbeam
 
 Scan the QR code printed in your terminal, or open the URL on any device.
 
-> **First time?** Run `termbeam -i` for a guided setup wizard that walks you through password, port, and access mode.
-
-### Secure by default
-
-TermBeam starts with a tunnel and auto-generated password out of the box — just run `termbeam` and scan the QR code.
-
 ```bash
 termbeam                        # tunnel + auto-password (default)
-termbeam --password mysecret    # use a specific password
-termbeam --no-tunnel            # LAN-only (no tunnel)
-termbeam --no-password          # disable password protection
+termbeam --password mysecret    # custom password
+termbeam --no-tunnel            # LAN only
 termbeam -i                     # interactive setup wizard
 ```
 
-## Remote Access
+## Features
 
-```bash
-# Tunnel is on by default
-termbeam
+### Mobile-First
 
-# Persisted tunnel (stable URL you can bookmark, reused across restarts, 30-day expiry)
-termbeam --persisted-tunnel
+- **No SSH client needed** — just open a browser on any device
+- **Touch-optimized key bar** with arrows, Tab, Ctrl, Esc, copy, paste, and more
+- **Swipe scrolling**, pinch zoom, and text selection overlay for copy-paste
+- **iPhone PWA safe-area support** for a native-app feel
 
-# LAN-only (no tunnel)
-termbeam --no-tunnel
-```
+### Multi-Session
 
-If the [Dev Tunnels CLI](https://learn.microsoft.com/en-us/azure/developer/dev-tunnels/get-started) is not installed, TermBeam will offer to install it for you automatically. You can also install it manually:
+- **Tabbed terminals** with drag-to-reorder and live tab previews on hover/long-press
+- **Split view** — two sessions side-by-side (auto-rotates horizontal/vertical)
+- **Session colors and activity indicators** for at-a-glance status
+- **Folder browser** for picking working directory, optional initial command per session
 
-- **Windows:** `winget install Microsoft.devtunnel`
-- **macOS:** `brew install --cask devtunnel`
-- **Linux:** `curl -sL https://aka.ms/DevTunnelCliInstall | bash`
+### Productivity
 
-Persisted tunnels save a tunnel ID to `~/.termbeam/tunnel.json` so the URL stays the same between sessions.
+- **Terminal search** with regex, match count, and prev/next navigation
+- **Command palette** (Ctrl+K / Cmd+K) for quick access to all actions
+- **File upload** — send files from your phone to the session's working directory
+- **Completion notifications** — browser alerts when background commands finish
+- **12 color themes** with adjustable font size
+- **Port preview** — reverse-proxy a local web server through TermBeam
+- **Image paste** from clipboard
 
-## CLI Reference
+### Secure by Default
 
-```bash
-termbeam [shell] [args...]        # start with a specific shell (default: auto-detect)
-termbeam --port 8080              # custom port (default: 3456)
-termbeam --host 0.0.0.0           # allow LAN access (default: 127.0.0.1)
-termbeam --lan                    # shortcut for --host 0.0.0.0
-termbeam -i                       # interactive setup wizard
-termbeam service install          # interactive PM2 service setup wizard
-termbeam service uninstall        # stop & remove PM2 service
-termbeam service status           # show PM2 service status
-termbeam service logs             # tail PM2 service logs
-termbeam service restart          # restart PM2 service
+- **Auto-generated password** with rate limiting and httpOnly cookies
+- **QR code auto-login** with single-use share tokens (5-min expiry)
+- **DevTunnel integration** for secure remote access — ephemeral or persisted URLs
+- **Security headers** (X-Frame-Options, CSP, nosniff) on all responses; only detected shells allowed
+
+## How It Works
+
+TermBeam starts a lightweight web server that spawns a PTY (pseudo-terminal) with your shell, serves a mobile-optimized [xterm.js](https://xtermjs.org/) UI via Express, and bridges the two over WebSocket. Multiple clients can view the same session simultaneously, and sessions persist when all clients disconnect.
+
+```mermaid
+flowchart LR
+  A["Phone / Browser"] <-->|WebSocket| B["TermBeam Server"]
+  B <-->|PTY| C["Shell (zsh/bash)"]
+  B -->|Express| D["Web UI (xterm.js)"]
+  B -.->|Optional| E["DevTunnel"]
 ```
 
-| Flag                  | Description                                          | Default        |
-| --------------------- | ---------------------------------------------------- | -------------- |
-| `--password <pw>`     | Set access password (also accepts `--password=<pw>`) | Auto-generated |
-| `--no-password`       | Disable password (cannot combine with `--public`)    | —              |
-| `--generate-password` | Auto-generate a secure password                      | On             |
-| `--tunnel`            | Create an ephemeral devtunnel URL (private)          | On             |
-| `--no-tunnel`         | Disable tunnel (LAN-only)                            | —              |
-| `--persisted-tunnel`  | Create a reusable devtunnel URL                      | Off            |
-| `--public`            | Allow public tunnel access                           | Off            |
-| `--port <port>`       | Server port                                          | `3456`         |
-| `--host <addr>`       | Bind address                                         | `127.0.0.1`    |
-| `--lan`               | Bind to all interfaces (LAN access)                  | Off            |
-| `--log-level <level>` | Log verbosity (error/warn/info/debug)                | `info`         |
-| `-i, --interactive`   | Interactive setup wizard (guided configuration)      | Off            |
-| `-h, --help`          | Show help                                            | —              |
-| `-v, --version`       | Show version                                         | —              |
-
-| Subcommand          | Description                   |
-| ------------------- | ----------------------------- |
-| `service install`   | Interactive PM2 service setup |
-| `service uninstall` | Stop & remove from PM2        |
-| `service status`    | Show PM2 service status       |
-| `service logs`      | Tail PM2 service logs         |
-| `service restart`   | Restart PM2 service           |
-
-Environment variables: `PORT`, `TERMBEAM_PASSWORD`, `TERMBEAM_CWD`, `TERMBEAM_LOG_LEVEL`, `SHELL` (Unix fallback), `COMSPEC` (Windows fallback). See [Configuration docs](https://dorlugasigal.github.io/TermBeam/configuration/).
+## CLI Highlights
 
-## Security
+| Flag                  | Description                                     | Default        |
+| --------------------- | ----------------------------------------------- | -------------- |
+| `--password <pw>`     | Set access password                             | Auto-generated |
+| `--no-password`       | Disable password protection                     | —              |
+| `--tunnel`            | Create an ephemeral devtunnel URL               | On             |
+| `--no-tunnel`         | Disable tunnel (LAN-only)                       | —              |
+| `--persisted-tunnel`  | Reusable devtunnel URL (stable across restarts) | Off            |
+| `--port <port>`       | Server port                                     | `3456`         |
+| `--host <addr>`       | Bind address                                    | `127.0.0.1`    |
+| `--lan`               | Bind to all interfaces (LAN access)             | Off            |
+| `-i, --interactive`   | Interactive setup wizard                        | Off            |
+| `--log-level <level>` | Log verbosity (error/warn/info/debug)           | `info`         |
+
+For all flags, subcommands, and environment variables, see the [Configuration docs](https://dorlugasigal.github.io/TermBeam/configuration/).
 
-TermBeam auto-generates a password and creates a tunnel by default, so your terminal is protected out of the box. By default, the server binds to `127.0.0.1` (localhost only). Use `--lan` or `--host 0.0.0.0` to allow LAN access, or `--no-tunnel` to disable the tunnel.
+## Security
 
-Auth uses secure httpOnly cookies with 24-hour expiry, login is rate-limited to 5 attempts per minute, and security headers (X-Frame-Options, X-Content-Type-Options, etc.) are set on all responses. Each QR code contains a single-use share token (5-minute expiry) for password-free login. API clients that can't use cookies can authenticate with an `Authorization: Bearer <password>` header.
+TermBeam auto-generates a password and creates a secure tunnel by default, binding to `127.0.0.1` (localhost only). Auth uses httpOnly cookies with 24-hour expiry, login is rate-limited to 5 attempts per minute, QR codes contain single-use share tokens (5-min expiry), and security headers (X-Frame-Options, CSP, nosniff) are set on all responses.
 
-For the full threat model, safe usage guidance, and a quick safety checklist, see [SECURITY.md](SECURITY.md). For detailed security feature documentation, see the [Security Guide](https://dorlugasigal.github.io/TermBeam/security/).
+For the full threat model and safety checklist, see [SECURITY.md](SECURITY.md). For detailed security documentation, see the [Security Guide](https://dorlugasigal.github.io/TermBeam/security/).
 
 ## Contributing
 

package/bin/termbeam.js

@@ -8,13 +8,142 @@ if (subcommand === 'service') {
     console.error(err.message);
     process.exit(1);
   });
+} else if (subcommand === 'resume') {
+  const { resume } = require('../src/resume');
+  resume(process.argv.slice(3)).catch((err) => {
+    console.error(err.message);
+    process.exit(1);
+  });
+} else if (subcommand === 'list') {
+  const { list } = require('../src/resume');
+  list().catch((err) => {
+    console.error(err.message);
+    process.exit(1);
+  });
 } else {
+  // Reject any non-flag positional arg — it's not a known subcommand
+  if (subcommand && !subcommand.startsWith('-')) {
+    const { printHelp } = require('../src/cli');
+    console.error(`Unknown command: ${subcommand}\n`);
+    printHelp();
+    process.exit(1);
+  }
+
   const { createTermBeamServer } = require('../src/server.js');
   const { parseArgs } = require('../src/cli');
   const { runInteractiveSetup } = require('../src/interactive');
+  const { readConnectionConfig } = require('../src/resume');
+  const http = require('http');
+
+  function httpPost(url, headers) {
+    return new Promise((resolve) => {
+      const parsed = new URL(url);
+      const req = http.request(
+        {
+          hostname: parsed.hostname,
+          port: parsed.port,
+          path: parsed.pathname,
+          method: 'POST',
+          headers,
+          timeout: 2000,
+        },
+        (res) => {
+          res.resume();
+          resolve(res.statusCode);
+        },
+      );
+      req.on('error', () => resolve(null));
+      req.on('timeout', () => {
+        req.destroy();
+        resolve(null);
+      });
+      req.end();
+    });
+  }
+
+  function checkExistingServer(config) {
+    if (!config) return Promise.resolve(false);
+    const host = config.host === 'localhost' ? '127.0.0.1' : config.host;
+    return new Promise((resolve) => {
+      const req = http.get(
+        `http://${host}:${config.port}/api/sessions`,
+        {
+          timeout: 2000,
+          headers: config.password ? { Authorization: `Bearer ${config.password}` } : {},
+        },
+        (res) => {
+          res.resume();
+          resolve(res.statusCode < 500);
+        },
+      );
+      req.on('error', () => resolve(false));
+      req.on('timeout', () => {
+        req.destroy();
+        resolve(false);
+      });
+    });
+  }
+
+  async function stopExistingServer(config, fallbackPassword) {
+    // Always target loopback — the shutdown endpoint only accepts loopback requests
+    const url = `http://127.0.0.1:${config.port}/api/shutdown`;
+    console.log(`Stopping existing server on port ${config.port}...`);
+
+    // Try with config password, then fallback password, then no password
+    const passwords = [config.password, fallbackPassword, null].filter(
+      (v, i, a) => a.indexOf(v) === i,
+    );
+    let stopped = false;
+    for (const pw of passwords) {
+      const headers = pw ? { Authorization: `Bearer ${pw}` } : {};
+      const status = await httpPost(url, headers);
+      if (status && status !== 401) {
+        stopped = true;
+        break;
+      }
+    }
+    if (!stopped) {
+      console.error(
+        'Cannot stop the existing server — password mismatch.\n' +
+          'Stop it manually (Ctrl+C in its terminal) and try again.',
+      );
+      process.exit(1);
+    }
+    for (let i = 0; i < 20; i++) {
+      await new Promise((r) => setTimeout(r, 250));
+      if (!(await checkExistingServer(config))) break;
+    }
+  }
 
   async function main() {
     const baseConfig = parseArgs();
+    const targetPort = baseConfig.port;
+    const targetHost = baseConfig.host === '0.0.0.0' ? '127.0.0.1' : baseConfig.host;
+
+    // Check connection.json for an existing server
+    const existing = readConnectionConfig();
+    if (existing && (await checkExistingServer(existing))) {
+      if (baseConfig.force) {
+        await stopExistingServer(existing, baseConfig.password);
+      } else {
+        const displayHost = existing.host === '127.0.0.1' ? 'localhost' : existing.host;
+        console.error(
+          `TermBeam is already running on http://${displayHost}:${existing.port}\n` +
+            'Use "termbeam resume" to reconnect, "termbeam list" to list sessions,\n' +
+            'or "termbeam --force" to stop the existing server and start a new one.',
+        );
+        process.exit(1);
+      }
+    }
+
+    // Also check the target port directly (handles stale/missing connection.json)
+    if (baseConfig.force && targetPort !== 0) {
+      const targetConfig = { host: targetHost, port: targetPort, password: baseConfig.password };
+      if (await checkExistingServer(targetConfig)) {
+        await stopExistingServer(targetConfig);
+      }
+    }
+
     let config;
     if (baseConfig.interactive) {
       config = await runInteractiveSetup(baseConfig);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "termbeam",
-  "version": "1.8.1",
+  "version": "1.10.0",
   "description": "Beam your terminal to any device — mobile-optimized web terminal with multi-session support",
   "main": "src/server.js",
   "bin": {

package/public/terminal.html

@@ -1165,6 +1165,9 @@
         max-height: 90vh;
         overflow-y: auto;
       }
+      #upload-modal .modal {
+        overflow: visible;
+      }
       .modal h2 {
         font-size: 18px;
         margin-bottom: 16px;
@@ -1982,6 +1985,53 @@
         <button class="key-btn icon-btn" data-key="&#x1b;[C" title="Right">→</button>
       </div>
     </div>
+    <input type="file" id="upload-input" multiple hidden />
+
+    <!-- Upload Confirm Modal -->
+    <div class="modal-overlay" id="upload-modal">
+      <div class="modal">
+        <h2>Upload Files</h2>
+        <div
+          id="upload-file-list"
+          style="
+            margin-bottom: 12px;
+            font-size: 13px;
+            color: var(--text-secondary);
+            max-height: 120px;
+            overflow-y: auto;
+          "
+        ></div>
+        <label for="upload-dir">Destination directory</label>
+        <div class="cwd-picker">
+          <input type="text" id="upload-dir" placeholder="Session working directory" />
+          <button
+            type="button"
+            class="cwd-browse-btn"
+            id="upload-browse-btn"
+            title="Browse folders"
+          >
+            <svg
+              width="18"
+              height="18"
+              viewBox="0 0 24 24"
+              fill="none"
+              stroke="currentColor"
+              stroke-width="2"
+              stroke-linecap="round"
+              stroke-linejoin="round"
+            >
+              <path
+                d="M22 19a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h5l2 3h9a2 2 0 0 1 2 2z"
+              />
+            </svg>
+          </button>
+        </div>
+        <div class="modal-actions">
+          <button class="btn-cancel" id="upload-cancel">Cancel</button>
+          <button class="btn-create" id="upload-confirm">Upload</button>
+        </div>
+      </div>
+    </div>
 
     <div id="reconnect-overlay">
       <div class="msg">Session disconnected</div>
@@ -2449,6 +2499,7 @@
         setupKeyBar();
         setupPaste();
         setupImagePaste();
+        setupUpload();
         setupSelectMode();
         setupNewSessionModal();
         setupPreviewModal();
@@ -3739,6 +3790,167 @@
         );
       }
 
+      // ===== File Upload =====
+      function setupUpload() {
+        const uploadInput = document.getElementById('upload-input');
+        const uploadModal = document.getElementById('upload-modal');
+        const uploadDirInput = document.getElementById('upload-dir');
+        const uploadFileList = document.getElementById('upload-file-list');
+        const uploadConfirmBtn = document.getElementById('upload-confirm');
+        const uploadCancelBtn = document.getElementById('upload-cancel');
+        const uploadBrowseBtn = document.getElementById('upload-browse-btn');
+
+        let pendingFiles = null;
+
+        const MAX_FILE_SIZE = 10 * 1024 * 1024;
+
+        function openUploadModal(files) {
+          pendingFiles = files;
+          const ms = managed.get(activeId);
+          const cwd = (ms && ms.cwd) || '';
+          uploadDirInput.value = cwd;
+          let hasOversized = false;
+          uploadFileList.innerHTML = '';
+          Array.from(files).forEach((f) => {
+            const oversized = f.size > MAX_FILE_SIZE;
+            if (oversized) hasOversized = true;
+            const row = document.createElement('div');
+            if (oversized) row.style.color = '#f87171';
+            row.textContent =
+              '📄 ' +
+              f.name +
+              ' (' +
+              formatSize(f.size) +
+              ')' +
+              (oversized ? ' exceeds 10 MB limit' : '');
+            uploadFileList.appendChild(row);
+          });
+          uploadConfirmBtn.disabled = hasOversized;
+          uploadConfirmBtn.style.opacity = hasOversized ? '0.5' : '1';
+          uploadModal.classList.add('visible');
+        }
+
+        function closeUploadModal() {
+          uploadModal.classList.remove('visible');
+          closeBrowseDropdown();
+          pendingFiles = null;
+        }
+
+        function formatSize(bytes) {
+          if (bytes < 1024) return bytes + ' B';
+          if (bytes < 1024 * 1024) return (bytes / 1024).toFixed(1) + ' KB';
+          return (bytes / (1024 * 1024)).toFixed(1) + ' MB';
+        }
+
+        uploadInput.addEventListener('change', () => {
+          const files = uploadInput.files;
+          if (!files || !files.length || !activeId) return;
+          openUploadModal(files);
+        });
+
+        uploadCancelBtn.addEventListener('click', closeUploadModal);
+        uploadModal.addEventListener('click', (e) => {
+          if (e.target === uploadModal) closeUploadModal();
+        });
+
+        // Directory browsing (reuse /api/dirs)
+        let browseDropdown = null;
+
+        function closeBrowseDropdown() {
+          if (browseDropdown) {
+            browseDropdown.remove();
+            browseDropdown = null;
+          }
+        }
+
+        // Close dropdown when clicking outside
+        document.addEventListener('click', (e) => {
+          if (
+            browseDropdown &&
+            !browseDropdown.contains(e.target) &&
+            e.target !== uploadBrowseBtn
+          ) {
+            closeBrowseDropdown();
+          }
+        });
+
+        uploadBrowseBtn.addEventListener('click', async () => {
+          if (browseDropdown) {
+            closeBrowseDropdown();
+            return;
+          }
+          const q = uploadDirInput.value || '';
+          try {
+            const res = await fetch('/api/dirs?q=' + encodeURIComponent(q ? q + '/' : ''), {
+              credentials: 'same-origin',
+            });
+            const data = await res.json();
+            if (!data.dirs || !data.dirs.length) return;
+            browseDropdown = document.createElement('div');
+            browseDropdown.style.cssText =
+              'position:absolute;left:0;right:0;bottom:100%;margin-bottom:4px;max-height:150px;overflow-y:auto;background:var(--surface);border:1px solid var(--border);border-radius:6px;z-index:10;box-shadow:0 -4px 12px rgba(0,0,0,0.2);';
+            data.dirs.forEach((d) => {
+              const opt = document.createElement('div');
+              opt.textContent = d;
+              opt.style.cssText =
+                'padding:6px 10px;cursor:pointer;font-size:13px;color:var(--text);';
+              opt.addEventListener('mouseenter', () => (opt.style.background = 'var(--hover)'));
+              opt.addEventListener('mouseleave', () => (opt.style.background = 'none'));
+              opt.addEventListener('click', () => {
+                uploadDirInput.value = d;
+                closeBrowseDropdown();
+              });
+              browseDropdown.appendChild(opt);
+            });
+            uploadBrowseBtn.parentElement.style.position = 'relative';
+            uploadBrowseBtn.parentElement.appendChild(browseDropdown);
+          } catch {}
+        });
+
+        uploadConfirmBtn.addEventListener('click', async () => {
+          if (!pendingFiles || !pendingFiles.length || !activeId) return;
+          const targetDir = uploadDirInput.value.trim();
+          const filesToUpload = Array.from(pendingFiles);
+          closeUploadModal();
+
+          let uploaded = 0;
+          let failed = 0;
+
+          for (const file of filesToUpload) {
+            try {
+              const headers = {
+                'Content-Type': file.type || 'application/octet-stream',
+                'X-Filename': file.name,
+              };
+              if (targetDir) headers['X-Target-Dir'] = targetDir;
+              const res = await fetch(`/api/sessions/${activeId}/upload`, {
+                method: 'POST',
+                headers,
+                body: file,
+                credentials: 'same-origin',
+              });
+              if (!res.ok) {
+                const err = await res.json().catch(() => ({}));
+                throw new Error(err.error || 'Upload failed');
+              }
+              await res.json();
+              uploaded++;
+            } catch (err) {
+              failed++;
+              console.error('Upload error:', file.name, err);
+            }
+          }
+
+          if (uploaded > 0) {
+            const dir = targetDir || 'session directory';
+            showToast(`${uploaded} file${uploaded > 1 ? 's' : ''} uploaded to ${dir}`);
+          }
+          if (failed > 0) {
+            showToast(`${failed} file${failed > 1 ? 's' : ''} failed to upload`);
+          }
+        });
+      }
+
       // ===== New Session Modal =====
       let shellsLoaded = false;
 
@@ -4164,6 +4376,19 @@
             category: 'Session',
             action: () => openNewSessionModal(),
           },
+          {
+            icon: '<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><polyline points="17 8 12 3 7 8"/><line x1="12" y1="3" x2="12" y2="15"/></svg>',
+            label: 'Upload files',
+            category: 'Session',
+            action: () => {
+              if (!activeId) {
+                showToast('No active session');
+                return;
+              }
+              document.getElementById('upload-input').value = '';
+              document.getElementById('upload-input').click();
+            },
+          },
           {
             icon: '<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>',
             label: 'Close tab',
@@ -4348,8 +4573,8 @@
               btn.innerHTML =
                 '<span class="palette-action-icon">' + a.icon + '</span>' + esc(a.label);
               btn.addEventListener('click', () => {
-                if (!a.keepOpen) closePalette();
                 a.action();
+                if (!a.keepOpen) closePalette();
               });
               body.appendChild(btn);
             });

package/src/cli.js

@@ -10,6 +10,8 @@ termbeam — Beam your terminal to any device
 
 Usage:
   termbeam [options] [shell] [args...]
+  termbeam resume [name] [options]     Reconnect to a running session
+  termbeam list                        List running sessions
   termbeam service <action>            Manage as a background service (PM2)
 
 Actions (service):
@@ -31,6 +33,7 @@ Options:
   --host <addr>         Bind address (default: 127.0.0.1)
   --lan                 Bind to 0.0.0.0 (allow LAN access, default: localhost only)
   --log-level <level>   Set log verbosity: error, warn, info, debug (default: info)
+  --force               Stop any existing server before starting a new one
   -i, --interactive     Interactive setup wizard (guided configuration)
   -h, --help            Show this help
   -v, --version         Show version
@@ -50,6 +53,8 @@ Examples:
   termbeam /bin/bash                Use bash instead of default shell
   termbeam --interactive               Guided setup wizard
   termbeam service install          Set up as background service (PM2)
+  termbeam resume                   Reconnect to an active session
+  termbeam list                     List all active sessions
 
 Environment:
   PORT                  Server port (default: 3456)
@@ -244,6 +249,7 @@ function parseArgs() {
   let persistedTunnel = false;
   let publicTunnel = false;
   let interactive = false;
+  let force = false;
   let explicitPassword = !!password;
 
   const args = process.argv.slice(2);
@@ -288,6 +294,14 @@ function parseArgs() {
       interactive = true;
     } else if (args[i] === '--log-level' && args[i + 1]) {
       logLevel = args[++i];
+    } else if (args[i].startsWith('--log-level=')) {
+      logLevel = args[i].split('=')[1];
+    } else if (args[i] === '--force') {
+      force = true;
+    } else if (args[i].startsWith('--')) {
+      console.error(`Unknown flag: ${args[i]}\n`);
+      printHelp();
+      process.exit(1);
     } else {
       filteredArgs.push(args[i]);
     }
@@ -341,6 +355,7 @@ function parseArgs() {
     version,
     logLevel,
     interactive,
+    force,
   };
 }