tokmon 0.23.4 → 0.23.5

package/README.md

@@ -81,7 +81,7 @@ For **Claude / Codex / Cursor / Grok** — Daily, Weekly, and Monthly breakdowns
 
 ## Web Dashboard
 
-Prefer a browser? `tokmon serve` starts a local web dashboard with the same data as the TUI — charts, global filtering, and shareable images — in a terminal-styled UI. Press `w` (or `W`) inside the TUI to open its authenticated local URL.
+Prefer a browser? `tokmon serve` starts a local web dashboard with the same data as the TUI — charts, global filtering, and shareable images — in a terminal-styled UI. Press `w` (or `W`) inside the TUI to open its ordinary local URL.
 
 ```bash
 tokmon serve            # opens http://127.0.0.1:4317 in your browser
@@ -89,9 +89,7 @@ tokmon serve --port 8080
 tokmon serve --no-open  # don't auto-open the browser
 ```
 
-It binds to `127.0.0.1` only and reads the same data read-only — nothing leaves your machine. It renders instantly from a cached snapshot, then streams live updates over an authenticated WebSocket, and goes idle when no tab is open. Filter by provider, model, account, and period, flip between dark and light, and export any panel — or a summary card — as a PNG with the **Share** button.
-
-The URL opened by `W` contains a capability in its fragment. Fragments are not sent with normal page requests or referrers, but keeping it in the address makes the complete URL copyable into another local browser while that daemon is running. Treat that URL as private; after the daemon restarts, press `W` again for a fresh one.
+It binds to `127.0.0.1` by default and reads the same local daemon state — nothing leaves your machine. The browser connects directly over a same-origin WebSocket; dashboard URLs have no token or login step. Optional LAN access can be enabled in settings, with an explicit unsafe-access warning, and takes effect after the daemon restarts. The dashboard renders instantly from a cached snapshot, then streams live updates and goes idle when no tab is open. Filter by provider, model, account, and period, flip between dark and light, and export any panel — or a summary card — as a PNG with the **Share** button.
 
 ### Overview
 
@@ -224,7 +222,7 @@ tokmon runs entirely on your machine and reads everything **read-only**:
 
 ## How It Works
 
-tokmon runs a small local **daemon** that does all the data collection. The terminal UI and the web dashboard are both thin clients of it, talking over a loopback-only WebSocket — so a single process does the work and the TUI and web always show the same numbers. The daemon starts automatically with the TUI (and standalone via `tokmon serve`), and idle-pauses when nothing is watching.
+tokmon runs a small local **daemon** that does all the data collection. The terminal UI and the web dashboard are both thin clients of it, talking over a local WebSocket — loopback-only by default — so a single process does the work and the TUI and web always show the same numbers. The daemon starts automatically with the TUI (and standalone via `tokmon serve`), and idle-pauses when nothing is watching.
 
 **Usage & cost**
 - Parses each tool's local session logs — Claude / Codex / pi `JSONL`, Cursor / opencode `SQLite` — and aggregates cost and token usage per day, week, and month.

package/dist/{bootstrap-ink-BIOLTP7F.js → bootstrap-ink-WA3ENW2M.js}

@@ -19,7 +19,7 @@ import {
   time,
   tokens,
   withTimeout
-} from "./chunk-2AFQKH5O.js";
+} from "./chunk-IELQ5EY3.js";
 import {
   glyphs
 } from "./chunk-RF4GGQGM.js";
@@ -37,7 +37,7 @@ import {
   sanitizeTyped,
   saveConfigSync,
   snapshotCacheFile
-} from "./chunk-DJPUYMZM.js";
+} from "./chunk-5CWOJMAH.js";
 
 // src/bootstrap-ink.tsx
 import { render } from "ink";
@@ -530,7 +530,7 @@ import { Box as Box4, Text as Text4 } from "ink";
 import { memo as memo3 } from "react";
 import { Box as Box3, Text as Text3 } from "ink";
 import { Fragment as Fragment2, jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
-var GENERAL_ROWS = 8;
+var GENERAL_ROWS = 9;
 var SETTINGS_TABS = ["general", "providers", "accounts"];
 var SETTINGS_TAB_LABELS = {
   general: "General",
@@ -624,7 +624,9 @@ var SettingsView = memo3(function SettingsView2({
           " ",
           glyphs().caretR
         ] })
-      ] })
+      ] }),
+      /* @__PURE__ */ jsx3(Row, { cursor, idx: 8, label: "Network access", children: /* @__PURE__ */ jsx3(Text3, { bold: true, color: config.allowNetworkAccess ? "red" : "green", children: config.allowNetworkAccess ? "LAN (unsafe)" : "local only" }) }),
+      config.allowNetworkAccess && /* @__PURE__ */ jsx3(Text3, { color: "red", children: "  Warning: dashboard data and settings will be exposed to your local network after daemon restart." })
     ] }),
     activeTab === "providers" && /* @__PURE__ */ jsxs3(Fragment2, { children: [
       /* @__PURE__ */ jsx3(Text3, { bold: true, dimColor: true, children: "Providers" }),
@@ -1615,7 +1617,7 @@ var TokmonRpcClient = class extends Context.Service()(
 ) {
 };
 var dynamicImport = new Function("specifier", "return import(specifier)");
-function toWsUrl(baseUrl, token) {
+function toWsUrl(baseUrl) {
   const base = typeof window === "undefined" ? void 0 : window.location.origin;
   const url = new URL(baseUrl, base);
   if (url.protocol === "http:") url.protocol = "ws:";
@@ -1625,8 +1627,8 @@ function toWsUrl(baseUrl, token) {
   }
   url.hash = "";
   url.searchParams.delete("tokmonToken");
+  url.searchParams.delete("wsToken");
   url.pathname = TOKMON_WS_PATH;
-  if (token) url.searchParams.set("wsToken", token);
   return url.toString();
 }
 function shouldUseNodeTransport(transport) {
@@ -1651,7 +1653,7 @@ function retryPolicy(options) {
   return typeof options.reconnectAttempts === "number" ? policy.pipe(Schedule.both(Schedule.recurs(options.reconnectAttempts))) : policy;
 }
 function createDaemonRpcClient(baseUrl, options = {}) {
-  const url = toWsUrl(baseUrl, options.wsToken);
+  const url = toWsUrl(baseUrl);
   const fibers = /* @__PURE__ */ new Set();
   let session = null;
   let sessionPromise = null;
@@ -1872,20 +1874,19 @@ function createDaemonRpcClient(baseUrl, options = {}) {
 }
 
 // src/client/use-daemon.ts
-function useDaemon(baseUrl, wsToken) {
+function useDaemon(baseUrl) {
   const [snapshot, setSnapshot] = useState3(null);
   const [conn, setConn] = useState3("connecting");
   const [config, setConfigState] = useState3(null);
   const client = useMemo(() => {
-    if (!baseUrl || !wsToken) return null;
+    if (!baseUrl) return null;
     return createDaemonRpcClient(baseUrl, {
       transport: "node",
-      wsToken,
       onConn: (state) => {
         if (state !== "closed") setConn(state);
       }
     });
-  }, [baseUrl, wsToken]);
+  }, [baseUrl]);
   const clientRef = useRef2(client);
   clientRef.current = client;
   useEffect3(() => {
@@ -2383,6 +2384,10 @@ function handleSettings(input, key, ctx) {
     }
     if (index === 7 && (inputKey.leftArrow || inputKey.rightArrow || inputKey.return)) {
       updateConfig((current) => ({ ...current, defaultFocus: current.defaultFocus === "all" ? "last" : "all" }));
+      return;
+    }
+    if (index === 8 && (inputKey.leftArrow || inputKey.rightArrow || inputKey.return)) {
+      updateConfig((current) => ({ ...current, allowNetworkAccess: !current.allowNetworkAccess }));
     }
   }
 }
@@ -3304,10 +3309,10 @@ function useAccountForm({ cfg, detected, updateConfig, trackedAccountRows, setSe
 
 // src/app.tsx
 import { Fragment as Fragment4, jsx as jsx12, jsxs as jsxs12 } from "react/jsx-runtime";
-function App({ interval: cliInterval, initialConfig, baseUrl = null, wsToken = null, mode = "degraded" }) {
-  const connected = mode === "connected" && baseUrl !== null && wsToken !== null;
+function App({ interval: cliInterval, initialConfig, baseUrl = null, mode = "degraded" }) {
+  const connected = mode === "connected" && baseUrl !== null;
   const degraded = !connected;
-  const daemon = useDaemon(connected ? baseUrl : null, connected ? wsToken : null);
+  const daemon = useDaemon(connected ? baseUrl : null);
   const { config, configSaveError, updateConfig } = useConfigState({
     initialConfig,
     cliInterval,
@@ -3643,16 +3648,16 @@ function App({ interval: cliInterval, initialConfig, baseUrl = null, wsToken = n
       return;
     }
     if (webRef.current) {
-      openUrl(webRef.current.browserUrl);
+      openUrl(webRef.current.url);
       return;
     }
     if (webStartingRef.current) return;
     webStartingRef.current = true;
     try {
-      const { startWebServer } = await import("./server-UHQEOVQH.js");
+      const { startWebServer } = await import("./server-XUCQWX6N.js");
       const ctrl = await startWebServer({ config: cfg, log: false });
       webRef.current = ctrl;
-      openUrl(ctrl.browserUrl);
+      openUrl(ctrl.url);
     } catch {
     } finally {
       webStartingRef.current = false;
@@ -3850,6 +3855,12 @@ function App({ interval: cliInterval, initialConfig, baseUrl = null, wsToken = n
       glyphs().middot,
       " showing last known data"
     ] }),
+    cfg.allowNetworkAccess && /* @__PURE__ */ jsxs12(Text12, { color: "red", children: [
+      glyphs().warn,
+      " unsafe network access enabled ",
+      glyphs().middot,
+      " dashboard may be reachable from your LAN after daemon restart"
+    ] }),
     configSaveError && /* @__PURE__ */ jsxs12(Text12, { color: "red", children: [
       glyphs().warn,
       " ",
@@ -3970,7 +3981,6 @@ async function bootstrapInk({ interval, config, daemon, mode }) {
         interval,
         initialConfig: config,
         baseUrl: daemon.baseUrl,
-        wsToken: daemon.wsToken,
         mode
       }
     ) })

package/dist/{chunk-RM3ZE44Z.js → chunk-3TJVFKXV.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   cacheDir
-} from "./chunk-DJPUYMZM.js";
+} from "./chunk-5CWOJMAH.js";
 
 // src/web/lockfile.ts
 import { closeSync, fchmodSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "fs";

package/dist/{chunk-DJPUYMZM.js → chunk-5CWOJMAH.js}

@@ -25,6 +25,7 @@ var DEFAULTS = {
   dashboardLayout: "grid",
   defaultFocus: "all",
   ascii: "auto",
+  allowNetworkAccess: false,
   knownProviders: []
 };
 var LEGACY_KNOWN = ["claude", "codex", "cursor"];
@@ -214,6 +215,7 @@ function repairConfig(input) {
     dashboardLayout: parsed.dashboardLayout === "single" ? "single" : "grid",
     defaultFocus: parsed.defaultFocus === "last" ? "last" : "all",
     ascii: parsed.ascii === "on" ? "on" : parsed.ascii === "off" ? "off" : "auto",
+    allowNetworkAccess: parsed.allowNetworkAccess === true,
     knownProviders
   };
   for (const key of Object.keys(DEFAULTS)) {

package/dist/{chunk-2AFQKH5O.js → chunk-IELQ5EY3.js}

@@ -6,7 +6,7 @@ import {
   expandHome,
   isValidTimezone,
   slugify
-} from "./chunk-DJPUYMZM.js";
+} from "./chunk-5CWOJMAH.js";
 
 // src/providers/usage-core.ts
 import { readFileSync, readdirSync } from "fs";
@@ -4631,6 +4631,7 @@ var ConfigSchema = Schema.Struct({
   dashboardLayout: Schema.Literals(["grid", "single"]),
   defaultFocus: Schema.Literals(["all", "last"]),
   ascii: Schema.Literals(["auto", "on", "off"]),
+  allowNetworkAccess: Schema.Boolean,
   knownProviders: Schema.Array(ProviderIdSchema)
 });
 var ProtocolInfoSchema = Schema.Struct({

package/dist/{chunk-2K4L4QQK.js → chunk-MJWFCDBB.js}

@@ -1,12 +1,11 @@
 #!/usr/bin/env node
 import {
   appVersion,
-  browserUrl,
   findWebRoot,
   send,
   sendJson,
   serveStatic
-} from "./chunk-Q2DSDWO2.js";
+} from "./chunk-SMPY52EV.js";
 import {
   PROVIDERS,
   TOKMON_CAPABILITIES,
@@ -21,7 +20,7 @@ import {
   namedHex,
   resolveTimezone,
   withTimeout
-} from "./chunk-2AFQKH5O.js";
+} from "./chunk-IELQ5EY3.js";
 import {
   cacheDir,
   expandHome,
@@ -29,11 +28,11 @@ import {
   normalizeConfig,
   saveConfig,
   snapshotCacheFile
-} from "./chunk-DJPUYMZM.js";
+} from "./chunk-5CWOJMAH.js";
 
 // src/web/server.ts
 import { createServer } from "http";
-import { randomBytes, timingSafeEqual as timingSafeEqual2 } from "crypto";
+import { randomBytes, timingSafeEqual } from "crypto";
 
 // src/web/data.ts
 async function resolveAccounts(config) {
@@ -676,7 +675,6 @@ async function applyConfigUpdate(engine, state, input) {
 }
 
 // src/web/ws.ts
-import { timingSafeEqual } from "crypto";
 import * as NodeHttpServer from "@effect/platform-node/NodeHttpServer";
 import { NodeWS } from "@effect/platform-node/NodeSocket";
 import { Effect, Exit, Layer, Queue, Scope, Stream } from "effect";
@@ -743,40 +741,55 @@ async function listHomeDirectory(rawPath) {
   return { path: abs, parent: parentFor(root, abs), entries };
 }
 
-// src/web/ws.ts
+// src/web/request-guard.ts
+import { isIP } from "net";
 function header(req, name) {
   const value = req.headers[name.toLowerCase()];
   return Array.isArray(value) ? value[0] : value;
 }
-function isLoopbackHost(value) {
-  if (!value) return false;
-  const host = value.trim().toLowerCase();
-  if (!host) return false;
-  return /^(?:127\.0\.0\.1|localhost)(?::\d{1,5})?$/.test(host) || /^\[::1\](?::\d{1,5})?$/.test(host);
-}
-function isWsPath(req) {
+function hostnameFromHost(value) {
+  if (!value) return null;
   try {
-    return new URL(req.url ?? "/", "http://127.0.0.1").pathname === TOKMON_WS_PATH;
+    const url = new URL(`http://${value.trim()}`);
+    if (url.username || url.password || url.pathname !== "/" || url.search || url.hash) return null;
+    return url.hostname.replace(/^\[|\]$/g, "").toLowerCase();
   } catch {
-    return false;
+    return null;
   }
 }
-function wsToken(req) {
+function isLoopbackHostHeader(value) {
+  const hostname = hostnameFromHost(value);
+  return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1";
+}
+function isAllowedHostHeader(value, allowNetworkAccess) {
+  if (isLoopbackHostHeader(value)) return true;
+  if (!allowNetworkAccess) return false;
+  const hostname = hostnameFromHost(value);
+  return hostname !== null && isIP(hostname) !== 0;
+}
+function isSameOriginRequest(req) {
+  const origin = header(req, "origin");
+  if (!origin || origin === "null") return true;
+  const host = header(req, "host")?.trim().toLowerCase();
+  if (!host) return false;
   try {
-    return new URL(req.url ?? "/", "http://127.0.0.1").searchParams.get("wsToken");
+    const url = new URL(origin);
+    return (url.protocol === "http:" || url.protocol === "https:") && url.host.toLowerCase() === host;
   } catch {
-    return null;
+    return false;
   }
 }
-function tokenMatches(actual, expected) {
-  if (!actual) return false;
-  const left = Buffer.from(actual);
-  const right = Buffer.from(expected);
-  return left.length === right.length && timingSafeEqual(left, right);
+function isAllowedLocalRequest(req, allowNetworkAccess) {
+  return isAllowedHostHeader(header(req, "host"), allowNetworkAccess) && isSameOriginRequest(req);
 }
-function isAuthorized(req, token) {
-  if (!isLoopbackHost(header(req, "host"))) return false;
-  return tokenMatches(wsToken(req), token);
+
+// src/web/ws.ts
+function isWsPath(req) {
+  try {
+    return new URL(req.url ?? "/", "http://127.0.0.1").pathname === TOKMON_WS_PATH;
+  } catch {
+    return false;
+  }
 }
 function rejectUpgrade(socket, status = 403, message = "Forbidden") {
   try {
@@ -855,15 +868,11 @@ async function mountWsRpc(server, deps) {
     )
   );
   const onUpgrade = (req, socket, head) => {
-    if (!isLoopbackHost(header(req, "host"))) {
+    if (!isAllowedLocalRequest(req, deps.state.config.allowNetworkAccess)) {
       rejectUpgrade(socket);
       return;
     }
     if (!isWsPath(req)) return;
-    if (!isAuthorized(req, deps.wsToken)) {
-      rejectUpgrade(socket);
-      return;
-    }
     upgradeHandler(req, socket, head);
   };
   server.prependListener("upgrade", onUpgrade);
@@ -900,59 +909,38 @@ async function mountWsRpc(server, deps) {
 }
 
 // src/web/server.ts
-var HOST = "127.0.0.1";
+var LOOPBACK_HOST = "127.0.0.1";
+var NETWORK_HOST = "0.0.0.0";
 var DEFAULT_PORT = 4317;
 var MAX_PORT_TRIES = 20;
-function isLoopbackHostHeader(value) {
-  if (!value) return false;
-  const host = value.trim().toLowerCase();
-  return /^(?:127\.0\.0\.1|localhost)(?::\d{1,5})?$/.test(host) || /^\[::1\](?::\d{1,5})?$/.test(host);
-}
-function isLoopbackOrigin(origin) {
-  if (!origin || origin === "null") return true;
-  try {
-    const u = new URL(origin);
-    return isLoopbackHostHeader(u.host);
-  } catch {
-    return false;
-  }
-}
 function header2(req, name) {
   const value = req.headers[name];
   return Array.isArray(value) ? value[0] : value;
 }
-function tokenMatches2(given, expected) {
+function tokenMatches(given, expected) {
   if (!given) return false;
   const actual = Buffer.from(given);
   const token = Buffer.from(expected);
-  return actual.length === token.length && timingSafeEqual2(actual, token);
+  return actual.length === token.length && timingSafeEqual(actual, token);
 }
-function guardHost(req, res) {
-  if (isLoopbackHostHeader(header2(req, "host"))) return true;
+function guardHost(req, res, allowNetworkAccess) {
+  if (isAllowedHostHeader(header2(req, "host"), allowNetworkAccess)) return true;
   sendJson(res, 403, { error: "forbidden" });
   return false;
 }
-function guardPrivileged(req, res, wsToken2) {
-  const header3 = (n) => {
-    const v = req.headers[n];
-    return Array.isArray(v) ? v[0] : v;
-  };
-  if (!tokenMatches2(header3("x-tokmon-token"), wsToken2)) {
-    sendJson(res, 403, { error: "forbidden" });
-    return false;
-  }
-  if (!isLoopbackOrigin(header3("origin"))) {
+function guardSameOrigin(req, res) {
+  if (!isSameOriginRequest(req)) {
     sendJson(res, 403, { error: "forbidden" });
     return false;
   }
   return true;
 }
-function createRouter(engine, state, vite, webRoot, wsToken2, version) {
+function createRouter(engine, state, vite, webRoot, wsToken, version) {
   return (req, res) => {
     const url = req.url || "/";
     const path = url.split("?")[0];
     const method = req.method || "GET";
-    if (!guardHost(req, res)) return;
+    if (!guardHost(req, res, state.config.allowNetworkAccess)) return;
     if (path === "/api/data") {
       engine.touch();
       sendJson(res, 200, engine.snapshot() ?? { pending: true });
@@ -964,12 +952,12 @@ function createRouter(engine, state, vite, webRoot, wsToken2, version) {
         ready: engine.snapshot() !== null,
         version,
         // Discovery requires this proof; public health checks retain their useful 200 response.
-        owner: tokenMatches2(header2(req, "x-tokmon-token"), wsToken2)
+        owner: tokenMatches(header2(req, "x-tokmon-token"), wsToken)
       });
       return;
     }
     if (path === "/api/config") {
-      if (!guardPrivileged(req, res, wsToken2)) return;
+      if (!guardSameOrigin(req, res)) return;
       if (method === "GET") {
         sendJson(res, 200, state.config);
         return;
@@ -996,7 +984,7 @@ async function startWebServer(opts) {
   const version = appVersion();
   const summaryIntervalMs = summaryIntervalFor(state.config);
   const billingIntervalMs = billingIntervalFor(state.config);
-  const wsToken2 = opts.wsToken ?? randomBytes(32).toString("base64url");
+  const wsToken = opts.wsToken ?? randomBytes(32).toString("base64url");
   const log = (msg) => {
     if (opts.log) process.stdout.write(msg + "\n");
   };
@@ -1010,10 +998,11 @@ async function startWebServer(opts) {
     const webRoot = vite ? null : findWebRoot();
     if (!vite && !webRoot) log("  \u26A0 no dashboard available \u2014 see the page for build/dev instructions");
     engine = createDataEngine({ version, config: state.config, tz, summaryIntervalMs, billingIntervalMs, resolved });
-    server.addListener("request", createRouter(engine, state, vite, webRoot, wsToken2, version));
-    closeWsRpc = await mountWsRpc(server, { engine, state, wsToken: wsToken2 });
-    const port = await listenWithFallback(server, opts.port ?? DEFAULT_PORT);
-    const serverUrl = `http://${HOST}:${port}`;
+    server.addListener("request", createRouter(engine, state, vite, webRoot, wsToken, version));
+    closeWsRpc = await mountWsRpc(server, { engine, state });
+    const bindHost = state.config.allowNetworkAccess ? NETWORK_HOST : LOOPBACK_HOST;
+    const port = await listenWithFallback(server, opts.port ?? DEFAULT_PORT, bindHost);
+    const serverUrl = `http://${LOOPBACK_HOST}:${port}`;
     if (vite?.warmupRequest) {
       try {
         await Promise.race([vite.warmupRequest("/src/main.tsx"), delay(5e3)]);
@@ -1024,9 +1013,7 @@ async function startWebServer(opts) {
     let stopped = false;
     return {
       url: serverUrl,
-      browserUrl: browserUrl(serverUrl, wsToken2),
       port,
-      wsToken: wsToken2,
       snapshot: engine.snapshot,
       config: () => state.config,
       stop: async () => {
@@ -1078,11 +1065,11 @@ function closeServer(server, timeoutMs = 1e3) {
     }
   });
 }
-function listenWithFallback(server, startPort) {
+function listenWithFallback(server, startPort, host) {
   return new Promise((resolve, reject) => {
     if (startPort === 0) {
       server.once("error", reject);
-      server.listen(0, HOST, () => {
+      server.listen(0, host, () => {
         const addr = server.address();
         resolve(typeof addr === "object" && addr ? addr.port : 0);
       });
@@ -1100,7 +1087,7 @@ function listenWithFallback(server, startPort) {
           reject(err);
         }
       });
-      server.listen(port, HOST, () => resolve(port));
+      server.listen(port, host, () => resolve(port));
     };
     attempt();
   });

package/dist/{chunk-Q2DSDWO2.js → chunk-SMPY52EV.js}

@@ -116,39 +116,10 @@ function appVersion() {
   return "";
 }
 
-// src/web/open.ts
-import { spawn } from "child_process";
-import { appendFileSync } from "fs";
-function browserUrl(url, wsToken) {
-  return wsToken ? `${url}#/#tokmonToken=${encodeURIComponent(wsToken)}` : url;
-}
-function openBrowser(url, wsToken) {
-  const target = browserUrl(url, wsToken);
-  if (process.env.TOKMON_OPENLOG) {
-    try {
-      appendFileSync(process.env.TOKMON_OPENLOG, target + "\n");
-    } catch {
-    }
-    return;
-  }
-  try {
-    if (process.platform === "darwin") {
-      spawn("open", [target], { stdio: "ignore", detached: true }).unref();
-    } else if (process.platform === "win32") {
-      spawn("cmd", ["/c", "start", "", target], { stdio: "ignore", detached: true }).unref();
-    } else {
-      spawn("xdg-open", [target], { stdio: "ignore", detached: true }).unref();
-    }
-  } catch {
-  }
-}
-
 export {
   findWebRoot,
   send,
   sendJson,
   serveStatic,
-  appVersion,
-  browserUrl,
-  openBrowser
+  appVersion
 };

package/dist/cli.js

@@ -41,14 +41,14 @@ function validateServeArgs(serveArgs) {
 }
 async function main() {
   if (subcommand === "__daemon") {
-    const { runDaemon } = await import("./daemon-PP3QAT6E.js");
+    const { runDaemon } = await import("./daemon-PVYTXJMS.js");
     await runDaemon(args.slice(1), { foreground: false });
     process.exitCode ??= 0;
     return;
   }
   if (subcommand === "serve" || subcommand === "web") {
     validateServeArgs(args.slice(1));
-    const { runDaemon } = await import("./daemon-PP3QAT6E.js");
+    const { runDaemon } = await import("./daemon-PVYTXJMS.js");
     await runDaemon(args.slice(1), { foreground: true });
     process.exitCode ??= 0;
     return;
@@ -90,9 +90,9 @@ async function main() {
       return;
     }
   }
-  const { loadConfig } = await import("./config-5CNJN3P7.js");
+  const { loadConfig } = await import("./config-QC5QSP3G.js");
   const { resolveGlyphs, setGlyphs } = await import("./glyphs-NKCSZLGO.js");
-  const { attachOrSpawn } = await import("./daemon-handle-6F2IB6CU.js");
+  const { attachOrSpawn } = await import("./daemon-handle-Y2N2NA6D.js");
   const config = await loadConfig();
   setGlyphs(resolveGlyphs({
     flag: asciiFlag,
@@ -103,7 +103,7 @@ async function main() {
   }));
   const daemon = await attachOrSpawn();
   const mode = daemon.kind === "spawned" ? "connected" : "degraded";
-  const { bootstrapInk } = await import("./bootstrap-ink-BIOLTP7F.js");
+  const { bootstrapInk } = await import("./bootstrap-ink-WA3ENW2M.js");
   await bootstrapInk({ interval, config, daemon, mode });
 }
 void main().catch((error) => {

package/dist/{config-5CNJN3P7.js → config-QC5QSP3G.js}

@@ -24,7 +24,7 @@ import {
   saveConfigSync,
   slugify,
   snapshotCacheFile
-} from "./chunk-DJPUYMZM.js";
+} from "./chunk-5CWOJMAH.js";
 export {
   ACCENT_COLORS,
   COLOR_PALETTE,