<div align="center">

<img src="media/logo.png" alt="Session Hub" width="112">

# Session Hub

**See what your teammates did with their AI — and let your AI ask them.**
Share Claude Code and Cursor sessions across your team: peer‑to‑peer, end‑to‑end encrypted, with signed identities and an MCP server built in.

[![License: AGPL-3.0-or-later](https://img.shields.io/badge/license-AGPL--3.0--or--later-blue.svg)](LICENSE)
[![Release](https://img.shields.io/github/v/release/carlosvisbal/session-hub?color=1f5fd6)](https://github.com/carlosvisbal/session-hub/releases)
[![CI](https://github.com/carlosvisbal/session-hub/actions/workflows/ci.yml/badge.svg)](https://github.com/carlosvisbal/session-hub/actions/workflows/ci.yml)
![VS Code](https://img.shields.io/badge/VS%20Code-%E2%9C%93-007ACC?logo=visualstudiocode&logoColor=white)
![Cursor](https://img.shields.io/badge/Cursor-%E2%9C%93-000000)
![MCP](https://img.shields.io/badge/MCP-server-7aa7f0)

**English** · [Español](README.es.md)

<img src="media/screenshot.png" alt="Session Hub panel: team members, who read my sessions, and a teammate's complete AI session" width="900">

<sub>Demo data. Interface in English and Spanish.</sub>

</div>

---

## Why

Your backend teammate spent the morning with Claude Code changing an API. You, on the frontend, find out hours later — or never. **Session Hub** turns those AI conversations into shared, searchable team context:

> *"What did Carlos change in the backend today?"* — ask your own AI, get the answer from his real sessions.

## Features

| | |
|---|---|
| 🤝 **Team view** | Everyone's Claude Code and Cursor sessions in one panel: who asked what, which files changed, where it ended up. |
| 🧠 **MCP built in** | Your AI (Cursor, VS Code agent mode, Claude Code) can list, search and read **complete** sessions from your teammates. |
| 🔐 **Signed identity** | Every install has an Ed25519 key. Nobody can impersonate anyone — not even with a stolen certificate. |
| 🛰️ **No central server** | Each person runs their own hub; hubs talk directly over Hyperswarm, encrypted with Noise. Works on a LAN with no internet. |
| 🎛️ **Personal control** | Choose which projects you share and with whom, hide single sessions, pause everything, block someone just for you. |
| 👁️ **Transparency** | Get notified when someone reads your session — who, which one, which project, from which tool. 90‑day audit log. |
| 🧹 **Secret redaction** | Tokens, passwords, keys and credentialed URLs leave your machine as `[REDACTED]`. |
| 📜 **Free software** | AGPL‑3.0‑or‑later. The running hub serves its own source at `/source`. |

## Quick start

```bash
cursor --install-extension session-hub.vsix     # or: code --install-extension session-hub.vsix
```

Download `session-hub.vsix` from the [latest release](https://github.com/carlosvisbal/session-hub/releases/latest). No Node.js install needed — the hub runs on the editor's own runtime.

1. **Create a team** in the Session Hub sidebar (first person only).
2. **Invite** — copies a one‑time `SH2-…` code (valid 48 h). Any member can invite.
3. **Join** — paste the code. The inviter's hub confirms you automatically when both are online.
4. **Share a project** and pick who can see it.

📘 Full guide for non‑technical users: **[docs/MANUAL.md](docs/MANUAL.md)**

## How it works

```mermaid
flowchart LR
  subgraph A["Carlos's machine"]
    AI1["AI · Cursor"] -->|MCP · 127.0.0.1| H1["Hub"]
  end
  subgraph B["Ana's machine"]
    AI2["AI · Claude Code"] -->|MCP · 127.0.0.1| H2["Hub"]
  end
  subgraph C["Pedro's machine"]
    AI3["AI · VS Code"] -->|MCP · 127.0.0.1| H3["Hub"]
  end
  H1 <-->|"encrypted · authenticated"| H2
  H2 <-->|"encrypted · authenticated"| H3
  H1 <-->|"encrypted · authenticated"| H3
```

- The API and MCP of each person listen **only on 127.0.0.1**; your AI talks only to your own hub.
- Each hub is its owner's **orchestrator**: it asks the other hubs in parallel, merges answers and labels whose they are. A slow teammate never blocks the rest (10 s timeout per call).
- Each hub answers **only for its owner, with its owner's rules**, and logs every read.
- Membership is a **certificate chain** rooted at the team founder: invite → member → admission. A leaked invite can't admit a second person.

| Network mode (`sessionHub.network`) | Use | Needs |
|---|---|---|
| `lan` *(default)* | Office network; the hubs themselves form the network | UDP `49737` allowed |
| `private` | Remote/VPN with your own bootstrap nodes | `sessionHub.bootstrap` |
| `public` | Remote with zero setup | Outbound UDP |

**Remote, step by step.** Your own infrastructure (bootstrap nodes + a blind relay that only forwards encrypted bytes) starts with one command:

```bash
npm run infra -- --host 203.0.113.10     # prints the settings every teammate pastes
npm run infra -- --public                # relay only, on the public network
```

VPNs (WireGuard, Tailscale, corporate) are detected and advertised automatically. If a connection fails because of a network policy (UDP blocked, strict NAT, unreachable relay…), Session Hub tells you **why** and **Copy connection report** produces a ready‑to‑send message for IT.

**Language:** the interface follows the editor language (Spanish or English); force it with `sessionHub.language`.

## MCP tools

| Tool | What it does |
|---|---|
| `list_peers` | Team members, who's online, what they share with you, network status |
| `what_changed` | What each teammate did since a date: requests, files, commands, final state |
| `list_sessions` | Sessions by person, project, source and date |
| `get_session` | A **complete** session — every message, untruncated |
| `search_sessions` | Full‑text search across what your team shares with you |

All tools accept `peer` (name, fingerprint, `"me"` or `"all"`). Empty results explain *why* (nobody online vs. nothing shared).

## Command line (no editor)

```bash
npm install
npm run setup -- --name Ana --role frontend /path/to/project=my-api
npm run setup -- team create "dev-team"     # or: npm run setup -- team join SH2-…
npm start
npm test
```

## Security

Threat model and known limitations: **[SECURITY.md](SECURITY.md)**. Report vulnerabilities privately to **carlosvisbal66@gmail.com**.

## Contributing

Pull requests welcome under the [DCO](CONTRIBUTING.md) (`git commit -s`) — no copyright assignment. See [CHANGELOG.md](CHANGELOG.md).

## License

Session Hub is free software under the [GNU Affero General Public License v3.0 or later](LICENSE). © 2026 Carlos Visbal and the Session Hub authors ([AUTHORS](AUTHORS)).
If you modify it and let others use it over a network, you must offer them your source (AGPL §13) — the hub does this automatically at `/source`.

Not affiliated with Anysphere (Cursor) or Anthropic (Claude Code). See [NOTICE](NOTICE).