viveworker 0.8.4 → 0.8.6

package/README.md

@@ -163,6 +163,8 @@ Use these commands most often:
   start `viveworker` again using the saved config
 - `npx viveworker stop`
   stop the local background service
+- `npx viveworker restart`
+  restart the local bridge using the saved config
 - `npx viveworker status`
   show the current app URL, launchd/background status, and health
 - `npx viveworker doctor`
@@ -266,6 +268,7 @@ What it supports:
 - PNG / JPG / GIF / WebP
 - CSV rendered as an HTML table by default
 - optional password protection
+- short-lived token URLs for password-protected shares
 - optional expiry
 
 HTML uploads are optimized by default when possible.
@@ -288,10 +291,17 @@ Typical commands:
 - `npx viveworker share update <slug> --file updated-report.html`
 - `npx viveworker share update <slug> --password "hunter2"`
 - `npx viveworker share update <slug> --expires-days 7`
-- `npx viveworker share link <slug>`
+- `npx viveworker share link <slug> --password "hunter2" --ttl-hours 24`
 - `VIVEWORKER_BUYER_PRIVATE_KEY=0x... npx viveworker share pay https://share.viveworker.com/v/<slug> --output ./deliverable.pdf`
 - `npx viveworker share pay https://share.viveworker.com/v/<slug> --wallet hazbase --output ./deliverable.pdf`
 
+`share link` is for agent handoff. It verifies the current password locally with
+the File Share worker and returns a short-lived `https://share.viveworker.com/v/<slug>?t=<token>`
+URL, so the recipient can open the share without seeing the password. The token
+defaults to 24 hours, can be capped with `--ttl-hours` up to 720 hours, never
+outlives the share expiry, and is invalidated when you rotate the share password
+with `share update --password`.
+
 `share pay` is human-in-the-loop by default. EOA mode reads the x402 payment
 requirements and asks the paired device to approve before signing. `--wallet
 hazbase` instead sends the payment request to the paired device, asks for

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "viveworker",
-  "version": "0.8.4",
-  "description": "Open mobile control surface for Codex, Claude, Thread Sharing, File Share, Moltbook, and A2A tasks on your trusted LAN.",
+  "version": "0.8.6",
+  "description": "Mobile control plane for AI agents. Approve, answer, and hand off work for Codex, Claude, MCP-ready tools, and A2A from one phone.",
   "author": "Yuta Hoshino <hoshino.lireneo@gmail.com>",
   "license": "MIT",
   "keywords": [
@@ -9,6 +9,15 @@
     "codex-desktop",
     "claude",
     "claude-desktop",
+    "mcp",
+    "model-context-protocol",
+    "mcp-server",
+    "ai-agents",
+    "agent-control-plane",
+    "agent-handoff",
+    "a2a",
+    "agent-to-agent",
+    "a2a-relay",
     "macos",
     "mobile",
     "ios",
@@ -22,17 +31,15 @@
     "moltbook",
     "file-share",
     "thread-sharing",
-    "ai-agents",
-    "a2a",
-    "agent-to-agent",
-    "a2a-relay",
-    "agent-control-plane",
     "lan",
-    "companion-app",
-    "vivecoding"
+    "remote-pairing",
+    "companion-app"
   ],
   "homepage": "https://viveworker.com/",
   "repository": "viveworker-dev/viveworker",
+  "bugs": {
+    "url": "https://github.com/viveworker-dev/viveworker/issues"
+  },
   "type": "module",
   "bin": {
     "viveworker": "./scripts/viveworker.mjs"
@@ -67,7 +74,8 @@
     "ntfy/docker-compose.yml.example"
   ],
   "dependencies": {
-    "@hazbase/auth": "^0.5.1",
+    "@hazbase/auth": "^0.5.3",
+    "@hazbase/simplicity": "^0.3.0",
     "@noble/ciphers": "^1.0.0",
     "@noble/curves": "^1.2.0",
     "@noble/hashes": "^1.3.2",

package/scripts/mcp-server.mjs

@@ -146,6 +146,8 @@ async function callTool(params) {
       return toolOk(await toolRequestApproval(args));
     case "viveworker_share_file":
       return toolOk(await toolShareFile(args));
+    case "viveworker_share_link":
+      return toolOk(await toolShareLink(args));
     case "viveworker_thread_share":
       return toolOk(await toolThreadShare(args));
     case "viveworker_send_a2a_task":
@@ -199,6 +201,13 @@ async function toolShareFile(args) {
   const workspaceRoot = optionalString(args.workspaceRoot) || process.env.VIVEWORKER_MCP_WORKSPACE_ROOT || process.cwd();
   const file = await validateSharePath(requestedPath, workspaceRoot);
   const stat = await fs.stat(file.realPath);
+  const password = optionalString(args.password);
+  const expiresDays = optionalString(args.expiresDays ?? args["expires-days"]);
+  const tokenize = optionalBoolean(args.tokenize) || optionalBoolean(args.tokenizedUrl) || optionalBoolean(args.passwordlessUrl);
+  const tokenTtlHours = normalizeShareTokenTtlHours(args.tokenTtlHours ?? args["token-ttl-hours"] ?? args.ttlHours ?? args["ttl-hours"]);
+  if (tokenize && !password) {
+    throw rpcInvalidParams("tokenize requires password because tokenized URLs are minted from password-protected shares");
+  }
   const approval = await bridgeEvent({
     eventType: "approval_request",
     title: "Share file with viveworker File Share",
@@ -207,6 +216,8 @@ async function toolShareFile(args) {
       "",
       `File: ${file.displayPath}`,
       `Size: ${stat.size} bytes`,
+      password ? "Password gate: enabled" : "Password gate: disabled",
+      tokenize ? `Token URL: create short-lived passwordless ?t= URL${tokenTtlHours ? ` (${tokenTtlHours}h)` : " (24h)"}` : "",
       "",
       "Approve only if this file is safe to send outside this Mac.",
     ].join("\n"),
@@ -219,12 +230,52 @@ async function toolShareFile(args) {
   }
 
   const uploadArgs = ["share", "upload", file.realPath, "--json"];
-  const password = optionalString(args.password);
-  const expiresDays = optionalString(args.expiresDays ?? args["expires-days"]);
   if (password) uploadArgs.push("--password", password);
   if (expiresDays) uploadArgs.push("--expires-days", expiresDays);
   const upload = await runViveworkerCliJson(uploadArgs, 90_000);
-  return { approved: true, share: upload };
+  if (!tokenize) {
+    return { approved: true, share: upload };
+  }
+
+  const slug = optionalString(upload.slug) || slugFromShareUrl(upload.url);
+  if (!slug) {
+    throw new Error("share upload did not return a slug for tokenized URL creation");
+  }
+  const link = await createShareTokenLink(slug, password, tokenTtlHours);
+  return { approved: true, share: upload, tokenizedLink: link };
+}
+
+async function toolShareLink(args) {
+  const slug = requiredString(args.slug, "slug");
+  if (!/^[A-Za-z0-9]+$/.test(slug)) {
+    throw rpcInvalidParams("slug must contain only letters and numbers");
+  }
+  const password = requiredString(args.password, "password");
+  if (password.length > 256) {
+    throw rpcInvalidParams("password is too long (max 256 characters)");
+  }
+  const ttlHours = normalizeShareTokenTtlHours(args.ttlHours ?? args["ttl-hours"] ?? args.tokenTtlHours ?? args["token-ttl-hours"]);
+  const approval = await bridgeEvent({
+    eventType: "approval_request",
+    title: "Create File Share token link",
+    message: [
+      "An MCP client wants to mint a short-lived passwordless File Share URL.",
+      "",
+      `Share slug: ${slug}`,
+      `Token TTL: ${ttlHours || 24}h`,
+      "",
+      "Anyone with the returned ?t= URL can open this share until the token or share expires.",
+      "Approve only if you are comfortable handing off this password-protected share.",
+    ].join("\n"),
+    approvalKind: "file_share_link",
+    timeoutMs: clampTimeout(args.timeoutMs),
+  }, clampTimeout(args.timeoutMs));
+  if (!approval.approved) {
+    return { approved: false, decision: approval.decision || "rejected" };
+  }
+
+  const link = await createShareTokenLink(slug, password, ttlHours);
+  return { approved: true, link };
 }
 
 async function toolThreadShare(args) {
@@ -577,6 +628,43 @@ function normalizeStringArray(value) {
   return value.map((item) => String(item || "").trim()).filter(Boolean);
 }
 
+function optionalBoolean(value) {
+  if (value === true) return true;
+  if (value === false || value == null) return false;
+  const text = String(value).trim().toLowerCase();
+  return text === "1" || text === "true" || text === "yes" || text === "on";
+}
+
+function normalizeShareTokenTtlHours(value) {
+  if (value == null || value === "") return undefined;
+  const n = Number(value);
+  if (!Number.isFinite(n) || n <= 0 || n > 720) {
+    throw rpcInvalidParams("token TTL must be a number between 1 and 720 hours");
+  }
+  return n;
+}
+
+function slugFromShareUrl(value) {
+  const text = optionalString(value);
+  if (!text) return "";
+  try {
+    const url = new URL(text);
+    const match = url.pathname.match(/^\/v\/([A-Za-z0-9]+)/u);
+    return match?.[1] || "";
+  } catch {
+    const match = text.match(/\/v\/([A-Za-z0-9]+)/u);
+    return match?.[1] || "";
+  }
+}
+
+async function createShareTokenLink(slug, password, ttlHours) {
+  const linkArgs = ["share", "link", slug, "--password", password, "--json"];
+  if (ttlHours !== undefined) {
+    linkArgs.push("--ttl-hours", String(ttlHours));
+  }
+  return runViveworkerCliJson(linkArgs, 30_000);
+}
+
 function requiredString(value, name) {
   const text = optionalString(value);
   if (!text) throw rpcInvalidParams(`${name} is required`);
@@ -789,7 +877,7 @@ const TOOLS = [
   {
     name: "viveworker_share_file",
     title: "Share file",
-    description: "After phone approval, upload a workspace file to viveworker File Share and return the limited URL.",
+    description: "After phone approval, upload a workspace file to viveworker File Share and return the limited URL. If password is set, pass tokenize=true to also mint a short-lived passwordless ?t= URL.",
     inputSchema: {
       type: "object",
       additionalProperties: false,
@@ -798,11 +886,29 @@ const TOOLS = [
         workspaceRoot: { type: "string" },
         password: { type: "string" },
         expiresDays: { type: "string" },
+        tokenize: { type: "boolean" },
+        tokenTtlHours: { type: "number" },
         timeoutMs: { type: "number" },
       },
       required: ["path"],
     },
   },
+  {
+    name: "viveworker_share_link",
+    title: "Create File Share token URL",
+    description: "After phone approval, mint a short-lived passwordless ?t= URL for an existing password-protected File Share slug.",
+    inputSchema: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        slug: { type: "string" },
+        password: { type: "string" },
+        ttlHours: { type: "number" },
+        timeoutMs: { type: "number" },
+      },
+      required: ["slug", "password"],
+    },
+  },
   {
     name: "viveworker_thread_share",
     title: "Thread share",
@@ -871,7 +977,7 @@ const PROMPTS = [
       title: "Share deliverable",
       description: "Package a local deliverable through viveworker File Share with phone approval.",
     },
-    text: "When the user asks to share a report, prototype, screenshot, CSV, or standalone HTML deliverable, use viveworker_share_file. Only share files inside the workspace and never share secrets or credentials.",
+    text: "When the user asks to share a report, prototype, screenshot, CSV, or standalone HTML deliverable, use viveworker_share_file. Only share files inside the workspace and never share secrets or credentials. If the user wants a password-protected share but the recipient should not know the password, set password plus tokenize=true, or use viveworker_share_link for an existing password-protected slug to mint a short-lived ?t= URL.",
   },
   {
     definition: {