vibeshare-live 0.1.0 → 0.2.0

package/dist/cli.js

@@ -1,277 +1,432 @@
 #!/usr/bin/env node
 import {
+  ConsentRequiredError,
+  LocalHttpTransport,
+  SHARE_SCOPE,
+  ShareManager,
   VERSION,
-  createShare
-} from "./chunk-5OLI3WTU.js";
+  clearActiveShare,
+  listActiveShares,
+  loadLedger,
+  readActiveShare,
+  writeActiveShare
+} from "./chunk-RY2ANOPC.js";
 
 // src/cli.ts
-import { createInterface } from "readline";
-import { networkInterfaces } from "os";
-import { pathToFileURL } from "url";
-import { createHost, createRelay, SHARE_SESSION_SCOPE } from "vibelive-cli";
-var HOST_ID = "host";
-var BADGE = "\u25CF p2p \xB7 e2e \xB7 nothing stored on a server";
-var err = (message) => ({ cmd: "error", message });
-function parseArgs(argv) {
-  const dd = argv.indexOf("--");
-  const head = dd >= 0 ? argv.slice(0, dd) : [...argv];
-  const command = dd >= 0 ? argv.slice(dd + 1) : [];
-  if (head.includes("--help") || head.includes("-h")) return { cmd: "help" };
-  if (head.includes("--version") || head.includes("-v")) return { cmd: "version" };
-  const sub = head[0];
-  if (sub === "stop") return { cmd: "stop" };
-  if (sub === "viewers") return { cmd: "viewers" };
-  if (sub === "mcp") return { cmd: "mcp" };
-  if (head.length === 0 && command.length === 0) return { cmd: "help" };
-  let flagTokens;
-  if (sub === "host") {
-    flagTokens = head.slice(1);
-  } else if (sub === void 0 || sub.startsWith("-")) {
-    flagTokens = head;
-  } else {
-    return err(`unknown command: ${sub}`);
+import { spawn } from "child_process";
+import { createInterface } from "readline/promises";
+import { badge, createHookBus, parseConfirm, watchCwd } from "@pooriaarab/vibe-core";
+var CliUsageError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "CliUsageError";
   }
-  let access = "spectate";
-  let expire;
-  let pass;
-  let name;
-  for (let i = 0; i < flagTokens.length; i++) {
-    const t = flagTokens[i];
-    if (t === void 0) break;
-    const next = flagTokens[i + 1];
-    if (t === "--spectate") {
-      access = "spectate";
-    } else if (t === "--invite") {
-      access = "invite";
-    } else if (t === "--expire") {
-      if (next === void 0) return err("--expire requires a value (1h | 24h)");
-      if (next !== "1h" && next !== "24h") {
-        return err(`--expire must be "1h" or "24h", got: ${next}`);
-      }
-      expire = next;
-      i++;
-    } else if (t === "--pass") {
-      if (next === void 0) return err("--pass requires a value");
-      pass = next;
-      i++;
-    } else if (t === "--name") {
-      if (next === void 0) return err("--name requires a value");
-      name = next;
-      i++;
-    } else {
-      return err(`unknown flag: ${t}`);
-    }
-  }
-  if (command.length === 0) {
-    return err('vibeshare needs a command after "--", e.g. `vibeshare --invite -- claude`');
-  }
-  return { cmd: "host", command, access, expire, pass, name };
-}
-var HELP = `vibeshare ${VERSION} \u2014 share your live agent session by URL
-
-USAGE
-  vibeshare [--spectate|--invite] [--expire 1h|24h] [--pass <p>] -- <command...>
-  vibeshare host   [the flags above]                -- <command...>
-      Host a session running <command> (e.g. \`vibeshare --invite -- claude\`)
-      and print its share URL. You start as the driver.
+};
+var USAGE = `vibeshare \u2014 share your live agent coding session by URL
 
-      --spectate   link holders get read-only access (default)
-      --invite     link holders may request to join; approve to let them drive
-      --expire     auto-revoke the share after 1h or 24h
-      --pass <p>   require a passphrase on top of the share URL
-      --name <s>   display name for the host participant
+usage:
+  vibeshare [options] [-- <cmd\u2026>]   start sharing (default: your shell)
+  vibeshare viewers [shareId]       list viewers; act on join requests
+  vibeshare stop [shareId]          end the active share
 
-  vibeshare stop        stop the foreground host session (also: /stop inside it)
-  vibeshare viewers     (in-foreground) list viewers / pending join requests
-  vibeshare mcp         run the vibeshare MCP server on stdio
-  vibeshare --version
-  vibeshare --help
+options:
+  --spectate        viewers watch read-only (default)
+  --invite          viewers may request to join as collaborators
+  --expire <when>   1h, 24h, 7d, \u2026 or "stop" (default: until you stop)
+  --pass <phrase>   require a passphrase to watch
+  --port <n>        port to serve on (default: random)
+  --host <addr>     bind address (default: 127.0.0.1; 0.0.0.0 shares on LAN)
+  --name <label>    what to call the session
+  --yes, -y         grant share:session consent without prompting
+  --json            machine-readable output (viewers)
+  --approve <id>    approve a viewer's join request (viewers)
+  --deny <id>       deny a join request (viewers)
+  --kick <id>       remove a viewer (viewers)
+  --version, -v     print version
+  --help, -h        this help
 
-v0 is foreground, host-authoritative, local/LAN. The share URL points at your own
-domain (vibeshare.stream); the live stream runs over a self-hostable e2e relay.
-${BADGE}
-`;
-function printHelp(stream = process.stdout) {
-  stream.write(HELP);
-}
-function lanAddress() {
-  const nets = networkInterfaces();
-  for (const list of Object.values(nets)) {
-    if (!list) continue;
-    for (const n of list) {
-      if (n && n.family === "IPv4" && !n.internal) return n.address;
+local-first: the stream is served from this machine; nothing is stored on a
+server. Consent scope "share:session" is recorded in ~/.vibeshare/consent.json.`;
+function parseArgv(argv) {
+  const rest = [...argv];
+  const sub = rest[0];
+  if (sub === "--help" || sub === "-h" || sub === "help") return { cmd: "help" };
+  if (sub === "--version" || sub === "-v" || sub === "version") return { cmd: "version" };
+  if (sub === "stop") {
+    const extra = positionalArgs(rest.slice(1));
+    if (extra.length > 1) throw new CliUsageError("stop takes at most one share id");
+    return { cmd: "stop", ...extra[0] !== void 0 ? { share: extra[0] } : {} };
+  }
+  if (sub === "viewers") {
+    const args = rest.slice(1);
+    const out = {
+      cmd: "viewers",
+      json: false
+    };
+    let actions = 0;
+    for (let i = 0; i < args.length; i++) {
+      const a = args[i];
+      if (a === "--json") out.json = true;
+      else if (a === "--approve" || a === "--deny" || a === "--kick") {
+        const id = args[++i];
+        if (id === void 0) throw new CliUsageError(`${a} needs a viewer id`);
+        const key = a.slice(2);
+        out[key] = id;
+        actions++;
+      } else if (a.startsWith("-")) throw new CliUsageError(`unknown option for viewers: ${a}`);
+      else if (out.share === void 0) out.share = a;
+      else throw new CliUsageError(`unexpected argument: ${a}`);
     }
+    if (actions > 1) throw new CliUsageError("use only one of --approve / --deny / --kick");
+    return out;
   }
-  return null;
-}
-async function runHost(p) {
-  const host = createHost({ command: p.command });
-  const relay = await createRelay({
+  if (sub === "start") rest.shift();
+  const options = {
+    access: "spectate",
+    expiry: "stop",
     port: 0,
-    hostHandle: host,
-    initialDriver: HOST_ID,
-    hostParticipantName: p.name ?? HOST_ID
-  });
-  relay.consent.grant(SHARE_SESSION_SCOPE);
-  let expired = false;
-  const share = createShare({
-    session: relay,
-    access: p.access,
-    expiry: p.expire,
-    passphrase: p.pass,
-    onRevoke: (reason) => {
-      if (reason === "expired") expired = true;
-    }
-  });
-  host.onOutput((entry) => process.stdout.write(entry.text));
-  const accessLabel = p.access + (p.pass ? " \xB7 passphrase" : "") + (p.expire ? ` \xB7 expires ${p.expire}` : " \xB7 no expiry");
-  process.stderr.write(`vibeshare \u2014 sharing ${p.command.join(" ")}
-`);
-  process.stderr.write(`  share:  ${share.url}
-`);
-  process.stderr.write(`  access: ${accessLabel}
-`);
-  process.stderr.write(`  relay:  ${relay.url}
-`);
-  const lan = lanAddress();
-  if (lan) {
-    process.stderr.write(`  lan:     ws://${lan}:${relay.port}
-`);
+    host: "127.0.0.1",
+    yes: false,
+    command: []
+  };
+  for (let i = 0; i < rest.length; i++) {
+    const a = rest[i];
+    const value = (flag) => {
+      const v = rest[++i];
+      if (v === void 0) throw new CliUsageError(`${flag} needs a value`);
+      return v;
+    };
+    if (a === "--") {
+      options.command = rest.slice(i + 1);
+      break;
+    } else if (a === "--spectate") options.access = "spectate";
+    else if (a === "--invite") options.access = "invite";
+    else if (a === "--expire" || a === "--expiry") options.expiry = value(a);
+    else if (a === "--pass") options.passphrase = value(a);
+    else if (a === "--port") {
+      const n = Number(value(a));
+      if (!Number.isInteger(n) || n < 0 || n > 65535) throw new CliUsageError("--port must be 0\u201365535");
+      options.port = n;
+    } else if (a === "--host") options.host = value(a);
+    else if (a === "--name") options.name = value(a);
+    else if (a === "--yes" || a === "-y") options.yes = true;
+    else if (a === "--help" || a === "-h") return { cmd: "help" };
+    else if (a.startsWith("-")) throw new CliUsageError(`unknown option: ${a}`);
+    else options.command = rest.slice(i);
+    if (!a.startsWith("-")) break;
   }
-  process.stderr.write(`  ${BADGE}
-`);
-  process.stderr.write(
-    `  you are the driver. /release to hand off, /drive to take back, /viewers, /approve <id>, /stop to end.
-`
-  );
-  const rl = createInterface({ input: process.stdin, terminal: false });
-  const printViewers = () => {
-    const roster = share.viewers();
-    if (roster.viewers.length === 0 && roster.pending.length === 0) {
-      process.stderr.write("  (no viewers connected)\n");
-      return;
-    }
-    for (const v of roster.viewers) {
-      process.stderr.write(`  \u25CF ${v.name} [${v.role}]
-`);
+  return { cmd: "start", options };
+}
+function positionalArgs(args) {
+  const out = [];
+  for (const a of args) {
+    if (a.startsWith("-")) throw new CliUsageError(`unknown option: ${a}`);
+    out.push(a);
+  }
+  return out;
+}
+var stdio = {
+  out: (t) => process.stdout.write(t + "\n"),
+  err: (t) => process.stderr.write(t + "\n")
+};
+var HOOK_KINDS = [
+  "task-done",
+  "pr-opened",
+  "prototype-finished",
+  "spec-completed",
+  "tests-pass",
+  "tests-fail",
+  "error",
+  "session-end",
+  "manual"
+];
+async function ensureConsent(io, yes) {
+  const ledger = loadLedger();
+  if (ledger.allows(SHARE_SCOPE)) return true;
+  if (yes) {
+    ledger.grant(SHARE_SCOPE, "granted via vibeshare --yes");
+    return true;
+  }
+  if (!process.stdin.isTTY) {
+    io.err(`consent required: re-run with --yes to grant "${SHARE_SCOPE}" (recorded locally in ~/.vibeshare/consent.json)`);
+    return false;
+  }
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    const answer = await rl.question(
+      `Share this session live by URL? Anyone with the link can view its output. (y/N) `
+    );
+    if (!parseConfirm(answer)) {
+      io.err("aborted \u2014 no consent granted");
+      return false;
     }
-    for (const v of roster.pending) {
-      process.stderr.write(`  \u2026 ${v.name} [wants to join \u2014 /approve ${v.id}]
-`);
+    ledger.grant(SHARE_SCOPE, "granted via vibeshare CLI prompt");
+    return true;
+  } finally {
+    rl.close();
+  }
+}
+function lineBuffer(publish) {
+  let buf = "";
+  return {
+    push(chunk) {
+      buf += chunk;
+      let idx;
+      while ((idx = buf.indexOf("\n")) !== -1) {
+        publish(buf.slice(0, idx).replace(/\r$/, ""));
+        buf = buf.slice(idx + 1);
+      }
+      if (buf.length > 8192) {
+        publish(buf);
+        buf = "";
+      }
+    },
+    flush() {
+      if (buf.length > 0) {
+        publish(buf);
+        buf = "";
+      }
     }
   };
-  rl.on("line", (line) => {
-    if (line === "/stop" || line === "/quit") {
-      void shutdown(0);
-      return;
-    }
-    if (line === "/viewers") {
-      printViewers();
-      return;
-    }
-    if (line.startsWith("/approve ")) {
-      const id = line.slice("/approve ".length).trim();
-      const ok = share.approve(id);
-      process.stderr.write(ok ? `  promoted ${id}.
-` : `  can't promote ${id} (unknown / spectate-only).
-`);
-      return;
-    }
-    if (line === "/release") {
-      relay.localReleaseControl(HOST_ID);
-      process.stderr.write("  control released.\n");
-      return;
-    }
-    if (line === "/drive") {
-      relay.localRequestControl(HOST_ID);
-      process.stderr.write("  control requested.\n");
-      return;
+}
+async function startShare(options, io) {
+  if (!await ensureConsent(io, options.yes)) return 1;
+  const bus = createHookBus({ onError: (e) => io.err(`[vibeshare] hook error: ${String(e)}`) });
+  const watcher = watchCwd(process.cwd(), bus);
+  let created = null;
+  const transport = new LocalHttpTransport({
+    host: options.host,
+    port: options.port,
+    onStopRequested: () => {
+      shutdown(0);
     }
-    if (relay.arbiter.isDriver(HOST_ID)) {
-      host.sendInput(`${line}
-`);
-    } else {
-      process.stderr.write("  (not the driver \u2014 /drive to take control)\n");
+  });
+  const manager = new ShareManager({ consent: loadLedger(), transport });
+  try {
+    created = await manager.createShare({
+      access: options.access,
+      expiry: options.expiry,
+      ...options.passphrase !== void 0 ? { passphrase: options.passphrase } : {},
+      ...options.name !== void 0 ? { name: options.name } : {},
+      session: options.command.length > 0 ? options.command.join(" ") : void 0
+    });
+  } catch (err) {
+    watcher.stop();
+    await transport.close();
+    if (err instanceof ConsentRequiredError || err instanceof Error) {
+      io.err(`vibeshare: ${err.message}`);
+      return err instanceof ConsentRequiredError ? 1 : 2;
     }
+    throw err;
+  }
+  for (const kind of HOOK_KINDS) {
+    bus.on(kind, (e) => {
+      created?.feed.publishEvent(e);
+    });
+  }
+  const record = {
+    id: created.share.id,
+    url: created.url,
+    port: transport.port,
+    hostToken: transport.hostToken,
+    pid: process.pid,
+    startedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  writeActiveShare(record);
+  const loopback = options.host === "127.0.0.1" || options.host === "localhost" || options.host === "::1";
+  io.out(`${badge(loopback ? "local" : "p2p")}`);
+  io.out(`  sharing:  ${created.share.name}`);
+  io.out(`  url:      ${created.url}`);
+  io.out(`  access:   ${created.share.access}${created.share.access === "spectate" ? " (read-only)" : " (viewers may request to join)"}`);
+  io.out(`  expires:  ${created.share.expiresAt ?? "until you stop"}`);
+  if (created.share.passphraseHash) io.out(`  pass:     required`);
+  io.out(`  manage:   vibeshare viewers \xB7 vibeshare stop`);
+  if (!loopback) io.err("note: bound to a non-loopback address \u2014 anyone who can reach this host with the link can watch.");
+  const cmd = options.command.length > 0 ? options.command : [process.env["SHELL"] ?? "/bin/sh"];
+  const child = spawn(cmd[0], cmd.slice(1), {
+    stdio: ["inherit", "pipe", "pipe"],
+    env: process.env
+  });
+  const outLines = lineBuffer((l) => created?.feed.publish(l, { stream: "stdout" }));
+  const errLines = lineBuffer((l) => created?.feed.publish(l, { stream: "stderr" }));
+  child.stdout?.on("data", (d) => {
+    process.stdout.write(d);
+    outLines.push(d.toString("utf8"));
+  });
+  child.stderr?.on("data", (d) => {
+    process.stderr.write(d);
+    errLines.push(d.toString("utf8"));
   });
-  rl.on("SIGINT", () => void shutdown(0));
   let shuttingDown = false;
-  const shutdown = async (code2) => {
-    if (shuttingDown) return;
-    shuttingDown = true;
-    rl.close();
-    host.kill();
-    await share.revoke();
-    process.exit(code2);
-  };
-  process.on("SIGINT", () => void shutdown(130));
-  process.on("SIGTERM", () => void shutdown(143));
-  if (p.expire !== void 0) {
-    void promiseTrue(() => share.revoked).then(async () => {
-      if (expired) {
-        process.stderr.write("  share expired \u2014 tearing down.\n");
-        await shutdown(0);
-      }
+  const exitCode = await new Promise((resolve) => {
+    child.on("error", (err) => {
+      io.err(`vibeshare: could not start ${cmd[0]}: ${err.message}`);
+      resolve(2);
+    });
+    child.on("exit", (code, signal) => {
+      resolve(code ?? (signal !== null ? 128 : 0));
     });
+    process.on("SIGINT", () => shutdown2(130));
+    process.on("SIGTERM", () => shutdown2(143));
+    function shutdown2(code) {
+      if (shuttingDown) return;
+      shuttingDown = true;
+      child.kill("SIGTERM");
+      resolve(code);
+    }
+    shutdownRef = shutdown2;
+  });
+  outLines.flush();
+  errLines.flush();
+  watcher.stop();
+  clearActiveShare(record.id);
+  await manager.stopAll();
+  return exitCode;
+}
+var shutdownRef = null;
+function shutdown(code) {
+  shutdownRef?.(code);
+}
+async function controlFetch(record, path, init) {
+  let res;
+  try {
+    res = await fetch(`http://127.0.0.1:${record.port}${path}`, {
+      method: init?.method ?? "GET",
+      headers: {
+        authorization: `Bearer ${record.hostToken}`,
+        ...init?.body !== void 0 ? { "content-type": "application/json" } : {}
+      },
+      ...init?.body !== void 0 ? { body: JSON.stringify(init.body) } : {}
+    });
+  } catch {
+    return { ok: false, status: 0, message: "connection refused" };
+  }
+  const body = await res.json().catch(() => ({}));
+  if (!res.ok) {
+    const message = typeof body["error"] === "string" ? body["error"] : `HTTP ${res.status}`;
+    return { ok: false, status: res.status, message };
   }
-  const code = await host.exited;
-  await shutdown(code ?? 0);
-  return code ?? 0;
+  return { ok: true, data: body };
 }
-function promiseTrue(pred) {
-  return new Promise((resolve) => {
-    const tick = () => {
-      if (pred()) resolve();
-      else setTimeout(tick, 250);
-    };
-    tick();
-  });
+function resolveRecord(shareId, io) {
+  if (shareId !== void 0) {
+    const rec = readActiveShare(shareId);
+    if (rec) return rec;
+    io.err(`no recorded share ${shareId}`);
+    return null;
+  }
+  const [latest] = listActiveShares();
+  if (!latest) {
+    io.err("no active vibeshare share \u2014 start one with `vibeshare`");
+    return null;
+  }
+  return latest;
 }
-async function runStop() {
-  process.stderr.write(
-    "vibeshare runs the host in the foreground. To stop it, switch to that terminal and\npress Ctrl+C (or type /stop). v0 does not yet daemonize or keep cross-process state.\n"
+async function viewersCommand(cmd, io) {
+  const record = resolveRecord(cmd.share, io);
+  if (!record) return 1;
+  const action = cmd.approve !== void 0 ? "approve" : cmd.deny !== void 0 ? "deny" : cmd.kick !== void 0 ? "kick" : null;
+  const target = cmd.approve ?? cmd.deny ?? cmd.kick;
+  if (action !== null && target !== void 0) {
+    const res2 = await controlFetch(record, `/control/${action}`, {
+      method: "POST",
+      body: { share: record.id, viewer: target }
+    });
+    if (!res2.ok) {
+      if (res2.status === 0) clearActiveShare(record.id);
+      io.err(`vibeshare: could not ${action} ${target}: ${res2.message}`);
+      return 1;
+    }
+    const v = res2.data.viewer;
+    io.out(
+      action === "approve" ? `\u2713 approved ${v.name} \u2014 now a collaborator` : action === "deny" ? `\u2713 denied ${v.name} \u2014 stays a spectator` : `\u2713 kicked ${v.name}`
+    );
+    return 0;
+  }
+  const res = await controlFetch(
+    record,
+    `/control/viewers?share=${encodeURIComponent(record.id)}`
   );
+  if (!res.ok) {
+    if (res.status === 0) {
+      clearActiveShare(record.id);
+      io.err("vibeshare: the share process is not running (stale record cleaned up)");
+    } else {
+      io.err(`vibeshare: ${res.message}`);
+    }
+    return 1;
+  }
+  if (cmd.json) {
+    io.out(JSON.stringify(res.data, null, 2));
+    return 0;
+  }
+  io.out(`${record.url}`);
+  if (res.data.viewers.length === 0) {
+    io.out("  no viewers yet");
+    return 0;
+  }
+  for (const v of res.data.viewers) {
+    const pending = v.joinRequest === "pending" ? "  \u23F3 requested to join \u2014 vibeshare viewers --approve " + v.id : "";
+    io.out(`  ${v.id}  ${v.name}  [${v.role}]${pending}`);
+  }
+  io.out(`  ${res.data.watching} watching now`);
   return 0;
 }
-async function runViewers() {
-  process.stderr.write(
-    "vibeshare runs the host in the foreground. Inside that session, type /viewers to list\nconnected viewers and pending join requests, and /approve <id> to promote one.\n"
-  );
+async function stopCommand(cmd, io) {
+  const record = resolveRecord(cmd.share, io);
+  if (!record) return 1;
+  const res = await controlFetch(record, "/control/stop", {
+    method: "POST",
+    body: { share: record.id }
+  });
+  clearActiveShare(record.id);
+  if (!res.ok) {
+    io.err(res.status === 0 ? "vibeshare: the share process was not running (record cleaned up)" : `vibeshare: ${res.message}`);
+    return res.status === 0 ? 0 : 1;
+  }
+  io.out(`\u2713 stopped ${record.url}`);
   return 0;
 }
-async function main(argv = process.argv.slice(2)) {
-  const parsed = parseArgs(argv);
-  switch (parsed.cmd) {
+async function run(argv, io = stdio) {
+  let command;
+  try {
+    command = parseArgv(argv);
+  } catch (err) {
+    if (err instanceof CliUsageError) {
+      io.err(`vibeshare: ${err.message}
+`);
+      io.err(USAGE);
+      return 2;
+    }
+    throw err;
+  }
+  switch (command.cmd) {
     case "help":
-      printHelp();
+      io.out(USAGE);
       return 0;
     case "version":
-      process.stdout.write(`${VERSION}
-`);
+      io.out(`vibeshare ${VERSION}`);
       return 0;
-    case "mcp": {
-      const { runMcpStdio } = await import("./mcp.js");
-      await runMcpStdio();
-      return 0;
-    }
-    case "stop":
-      return runStop();
+    case "start":
+      return startShare(command.options, io);
     case "viewers":
-      return runViewers();
-    case "host":
-      return runHost(parsed);
-    case "error":
-      process.stderr.write(`vibeshare: ${parsed.message}
-`);
-      printHelp(process.stderr);
-      return 2;
+      return viewersCommand(command, io);
+    case "stop":
+      return stopCommand(command, io);
   }
 }
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-  void main().then((code) => process.exit(code));
+var isMain = process.argv[1] !== void 0 && import.meta.url === new URL(`file://${process.argv[1]}`).href;
+if (isMain) {
+  run(process.argv.slice(2)).then(
+    (code) => process.exit(code),
+    (err) => {
+      console.error("vibeshare:", err);
+      process.exit(1);
+    }
+  );
 }
 export {
-  main,
-  parseArgs,
-  printHelp
+  CliUsageError,
+  parseArgv,
+  run
 };