@akiojin/gwt 9.36.2 → 9.38.0

package/README.ja.md

@@ -96,6 +96,51 @@ gwt
 `http://127.0.0.1:<port>/` のような URL を出力します。ネイティブアプリの起動中は、
 同じ URL を通常のブラウザでも開けます。
 
+### Headless / Browser-only モード
+
+`gwt serve` (等価 alias: `gwt --headless`) は、ネイティブウィンドウを開かずに
+同じ UI を起動します。embedded HTTP / WebSocket サーバーだけが立ち上がり、
+オペレーターは出力された URL を任意のブラウザで開いて操作します。
+
+```bash
+gwt serve                              # 127.0.0.1、ランダムポート、ブラウザ自動起動
+gwt serve --no-open                    # 同じ動作だがブラウザ自動起動を抑制 (CI / スクリプト用)
+gwt serve --port 8787                  # 固定ポート + ブラウザ自動起動
+gwt serve --bind 0.0.0.0 --port 8787   # LAN (VPN 越し含む) へ公開 + ブラウザ自動起動
+gwt --headless --port 8787             # `gwt serve --port 8787` と同じ
+```
+
+既定でシステムブラウザが自動起動します。CI / 自動化で server だけ立ち上げ
+たい場合は `--no-open` を指定してください。`--open` は既存スクリプト互換性
+維持のため no-op flag として残しています。
+
+信頼境界は **LAN のみ** (VPN-extended LAN を含む) です。`gwt serve` には
+TLS 終端、認証ゲート、レート制限は組み込まれていません。`--bind` で
+公開した IP に到達できる主体はすべて trusted と見なされ、ターミナル起動を
+含む全 UI 操作が可能になります。既定値は `127.0.0.1` で、ネイティブ GUI と
+同じローカルループバック信頼モデルを維持します。外部からアクセスする場合は、
+ポートを公開インターネットに晒さず、VPN (Tailscale、WireGuard など) 越しで
+LAN に入ってから接続してください。
+
+プラットフォーム注記: Linux では `tao 0.35` が EventLoop 生成時に display
+server (X11 / Wayland) を要求するので、v1 の `gwt serve` は GUI と同じ
+`DISPLAY` 依存を引き継ぎます。macOS / Windows の headless 利用は追加設定
+不要ですが、Linux の pure-headless 環境 (DISPLAY 無し) では `Xvfb` /
+`xvfb-run` を併用するか、SPEC-1942 follow-up の tao 切り離し対応を待って
+ください。
+
+すべての HTTP / WebSocket リクエストは `tracing::info!(target = "gwt_access",
+...)` で記録されるため、stderr と `~/.gwt/logs/<date>/` で「どこからアクセス
+されているか」を即時に確認できます。`/healthz` は `debug!` に降格されており、
+ヘルスチェックでログが埋まりません。
+
+Lifecycle: `gwt serve` プロセスが agent / PTY の寿命を所有します。ブラウザの
+タブを閉じても agent は **停止しません**。`Ctrl-C` / `SIGTERM` を受け取った
+ときに、PTY のドレイン → サーバー停止の順で graceful shutdown を実行します。
+GUI と headless は別の lock kind を使うので、同じ worktree で `gwt` と
+`gwt serve` を同時に起動できます。起動時に共存 warning が stderr に出るので、
+意図しない並走は気付けます。
+
 CLI サブコマンドは `gwtd` で処理され、GUI は起動しません。
 
 ```bash

package/README.md

@@ -98,6 +98,51 @@ directory. The app also starts a local HTTP/WebSocket server for the WebView
 surface and prints a URL such as `http://127.0.0.1:<port>/` to stderr. You can
 open that URL in a regular browser while the native app is running.
 
+### Headless / Browser-only mode
+
+`gwt serve` (equivalent alias: `gwt --headless`) launches the same UI without
+opening a native window. The embedded HTTP / WebSocket server stays up and
+the operator opens the printed URL in any browser instead.
+
+```bash
+gwt serve                              # 127.0.0.1, random port, auto-open browser
+gwt serve --no-open                    # same, but suppress the browser launch (CI / scripts)
+gwt serve --port 8787                  # fixed port + auto-open browser
+gwt serve --bind 0.0.0.0 --port 8787   # share with the LAN (VPN-extended), auto-open browser
+gwt --headless --port 8787             # same as `gwt serve --port 8787`
+```
+
+The system browser is opened automatically by default. Pass `--no-open` for
+CI / automation use cases that only need the server running. `--open` is kept
+as a no-op flag for backward compatibility with existing scripts.
+
+Trust boundary: **LAN only** (including VPN-extended LAN). `gwt serve` does
+not ship TLS termination, an authentication gate, or rate limiting. Anyone
+that can reach the bind address can drive the embedded UI, which includes
+spawning terminals. The `--bind` flag is opt-in: the default `127.0.0.1`
+keeps the same loopback-trust behaviour as the native GUI. For external
+access, run the host behind a VPN (Tailscale, WireGuard, etc.) rather than
+exposing the port to the public Internet.
+
+Platform note: on Linux, `tao 0.35` still requires a display server (X11 or
+Wayland) at EventLoop creation, so v1 of `gwt serve` inherits the GUI's
+`DISPLAY` dependency. macOS and Windows headless installs need nothing
+special; Linux operators in pure-headless environments (no DISPLAY) should
+either use `Xvfb`/`xvfb-run` or wait for the tao-detach follow-up tracked
+under SPEC-1942.
+
+Every HTTP / WebSocket request is mirrored to `tracing::info!(target =
+"gwt_access", ...)` so the operator can see *which* peer is connecting in
+real time on stderr and in `~/.gwt/logs/<date>/`. `/healthz` is demoted to
+`debug!` to avoid drowning the stream with health probes.
+
+Lifecycle: the `gwt serve` process owns the agent / PTY lifetime. Closing a
+browser tab does **not** stop running agents — only `Ctrl-C` / `SIGTERM`
+asks the server to drain PTYs and exit gracefully. The GUI and a headless
+session for the same worktree are isolated by separate lock kinds, so you
+can run `gwt` and `gwt serve` together; a startup warning surfaces the
+co-existence so it is intentional, not accidental.
+
 CLI subcommands run through `gwtd` without opening a GUI window:
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akiojin/gwt",
-  "version": "9.36.2",
+  "version": "9.38.0",
   "description": "Desktop GUI for Git worktree management and coding agent launch",
   "type": "module",
   "bin": {
@@ -12,9 +12,9 @@
     "dev": "cargo run -p gwt --bin gwt",
     "build": "cargo build --release -p gwt --bin gwt --bin gwtd",
     "test": "cargo test -p gwt-core -p gwt --all-features",
-    "test:frontend-bundle": "node --check crates/gwt/web/app.js && node --check crates/gwt/web/branch-cleanup-modal.js && node --check crates/gwt/web/migration-modal.js && node --check crates/gwt/web/project-clone-modal.js && node --check crates/gwt/web/board-surface.js && node --check crates/gwt/web/workspace-kanban-surface.js && node --check crates/gwt/web/theme-manager.js && node --check crates/gwt/web/theme-toggle.js && node --check crates/gwt/web/hotkey.js && node --check crates/gwt/web/operator-shell.js && node --check crates/gwt/web/focus-trap.js && node --check crates/gwt/web/window-docking.js && node --check crates/gwt/web/update-cta.js && node --check crates/gwt/web/terminal-context-menu.js && node --check crates/gwt/web/window-geometry-sync.js && node --check crates/gwt/web/custom-agent-env-editor.js && node --check crates/gwt/web/socket-receive-dispatcher.js && node --check crates/gwt/web/interaction-guard.js && node --check crates/gwt/web/viewport-persist-throttle.js && node --check crates/gwt/web/viewport-sync.js && node --check crates/gwt/web/project-tabs-renderer.js && node --check crates/gwt/web/clone-modal-focus-guard.js && node --check crates/gwt/web/ui-trace-profiler.js && node --check crates/gwt/web/ui-trace-wiring.js",
-    "test:frontend-smoke": "node --test crates/gwt/web/__tests__/branch-cleanup.smoke.test.mjs crates/gwt/web/__tests__/migration-modal.smoke.test.mjs crates/gwt/web/__tests__/project-clone-modal.smoke.test.mjs crates/gwt/web/__tests__/open-project-split-button.smoke.test.mjs",
-    "test:frontend-unit": "node --test crates/gwt/web/__tests__/contrast.test.mjs crates/gwt/web/__tests__/theme-manager.test.mjs crates/gwt/web/__tests__/theme-segmented.test.mjs crates/gwt/web/__tests__/hotkey.test.mjs crates/gwt/web/__tests__/index-settings-panel.test.mjs crates/gwt/web/__tests__/index-status-controller.test.mjs crates/gwt/web/__tests__/operator-chrome-structure.test.mjs crates/gwt/web/__tests__/operator-shell-runtime.test.mjs crates/gwt/web/__tests__/operator-shell-hover-reveal.test.mjs crates/gwt/web/__tests__/board-surface.test.mjs crates/gwt/web/__tests__/focus-trap.test.mjs crates/gwt/web/__tests__/kanban-structure.test.mjs crates/gwt/web/__tests__/kanban-dnd.test.mjs crates/gwt/web/__tests__/kanban-drawer.test.mjs crates/gwt/web/__tests__/workspace-kanban-surface.test.mjs crates/gwt/web/__tests__/update-button.test.mjs crates/gwt/web/__tests__/window-docking.test.mjs crates/gwt/web/__tests__/terminal-context-menu.test.mjs crates/gwt/web/__tests__/terminal-viewport-reflow.test.mjs crates/gwt/web/__tests__/window-geometry-sync.test.mjs crates/gwt/web/__tests__/custom-agent-env-editor.test.mjs crates/gwt/web/__tests__/settings-system-tab.test.mjs crates/gwt/web/__tests__/socket-receive-dispatcher.test.mjs crates/gwt/web/__tests__/ui-trace-profiler.test.mjs crates/gwt/web/__tests__/ui-trace-wiring.test.mjs crates/gwt/web/__tests__/interaction-guard.test.mjs crates/gwt/web/__tests__/wizard-interaction-guard-wiring.test.mjs crates/gwt/web/__tests__/viewport-persist-throttle.test.mjs crates/gwt/web/__tests__/viewport-sync.test.mjs crates/gwt/web/__tests__/project-tabs-renderer.test.mjs crates/gwt/web/__tests__/project-tab-style.test.mjs crates/gwt/web/__tests__/playwright-embedded-routes.test.mjs crates/gwt/web/__tests__/viewport-persist-wiring.test.mjs crates/gwt/web/__tests__/system-settings-interaction-guard-wiring.test.mjs crates/gwt/web/__tests__/clone-modal-focus-guard.test.mjs crates/gwt/web/__tests__/clone-modal-focus-guard-wiring.test.mjs crates/gwt/web/__tests__/recent-row-style.test.mjs",
+    "test:frontend-bundle": "node --check crates/gwt/web/app.js && node --check crates/gwt/web/branch-cleanup-modal.js && node --check crates/gwt/web/migration-modal.js && node --check crates/gwt/web/project-clone-modal.js && node --check crates/gwt/web/board-surface.js && node --check crates/gwt/web/workspace-kanban-surface.js && node --check crates/gwt/web/theme-manager.js && node --check crates/gwt/web/theme-toggle.js && node --check crates/gwt/web/hotkey.js && node --check crates/gwt/web/operator-shell.js && node --check crates/gwt/web/focus-trap.js && node --check crates/gwt/web/window-docking.js && node --check crates/gwt/web/update-cta.js && node --check crates/gwt/web/terminal-context-menu.js && node --check crates/gwt/web/terminal-wheel-scroll.js && node --check crates/gwt/web/window-geometry-sync.js && node --check crates/gwt/web/custom-agent-env-editor.js && node --check crates/gwt/web/socket-receive-dispatcher.js && node --check crates/gwt/web/interaction-guard.js && node --check crates/gwt/web/viewport-persist-throttle.js && node --check crates/gwt/web/viewport-sync.js && node --check crates/gwt/web/project-tabs-renderer.js && node --check crates/gwt/web/clone-modal-focus-guard.js && node --check crates/gwt/web/ui-trace-profiler.js && node --check crates/gwt/web/ui-trace-wiring.js && node --check crates/gwt/web/close-project-tab-confirm-modal.js",
+    "test:frontend-smoke": "node --test crates/gwt/web/__tests__/branch-cleanup.smoke.test.mjs crates/gwt/web/__tests__/migration-modal.smoke.test.mjs crates/gwt/web/__tests__/project-clone-modal.smoke.test.mjs crates/gwt/web/__tests__/open-project-split-button.smoke.test.mjs crates/gwt/web/__tests__/close-project-tab.smoke.test.mjs",
+    "test:frontend-unit": "node --test crates/gwt/web/__tests__/contrast.test.mjs crates/gwt/web/__tests__/theme-manager.test.mjs crates/gwt/web/__tests__/theme-segmented.test.mjs crates/gwt/web/__tests__/hotkey.test.mjs crates/gwt/web/__tests__/index-settings-panel.test.mjs crates/gwt/web/__tests__/index-status-controller.test.mjs crates/gwt/web/__tests__/operator-chrome-structure.test.mjs crates/gwt/web/__tests__/operator-shell-runtime.test.mjs crates/gwt/web/__tests__/operator-shell-hover-reveal.test.mjs crates/gwt/web/__tests__/board-surface.test.mjs crates/gwt/web/__tests__/focus-trap.test.mjs crates/gwt/web/__tests__/kanban-structure.test.mjs crates/gwt/web/__tests__/kanban-dnd.test.mjs crates/gwt/web/__tests__/kanban-drawer.test.mjs crates/gwt/web/__tests__/workspace-kanban-surface.test.mjs crates/gwt/web/__tests__/update-button.test.mjs crates/gwt/web/__tests__/window-docking.test.mjs crates/gwt/web/__tests__/terminal-context-menu.test.mjs crates/gwt/web/__tests__/terminal-wheel-scroll.test.mjs crates/gwt/web/__tests__/terminal-viewport-reflow.test.mjs crates/gwt/web/__tests__/window-geometry-sync.test.mjs crates/gwt/web/__tests__/custom-agent-env-editor.test.mjs crates/gwt/web/__tests__/settings-system-tab.test.mjs crates/gwt/web/__tests__/settings-agent-backends-tab.test.mjs crates/gwt/web/__tests__/launch-wizard-backend-picker.test.mjs crates/gwt/web/__tests__/socket-receive-dispatcher.test.mjs crates/gwt/web/__tests__/ui-trace-profiler.test.mjs crates/gwt/web/__tests__/ui-trace-wiring.test.mjs crates/gwt/web/__tests__/interaction-guard.test.mjs crates/gwt/web/__tests__/wizard-interaction-guard-wiring.test.mjs crates/gwt/web/__tests__/viewport-persist-throttle.test.mjs crates/gwt/web/__tests__/viewport-sync.test.mjs crates/gwt/web/__tests__/project-tabs-renderer.test.mjs crates/gwt/web/__tests__/project-tab-style.test.mjs crates/gwt/web/__tests__/playwright-embedded-routes.test.mjs crates/gwt/web/__tests__/viewport-persist-wiring.test.mjs crates/gwt/web/__tests__/system-settings-interaction-guard-wiring.test.mjs crates/gwt/web/__tests__/clone-modal-focus-guard.test.mjs crates/gwt/web/__tests__/clone-modal-focus-guard-wiring.test.mjs crates/gwt/web/__tests__/recent-row-style.test.mjs",
     "test:visual": "playwright test --config crates/gwt/playwright/playwright.config.ts",
     "test:release-assets": "node scripts/test_release_assets.cjs",
     "test:release-flow": "bash scripts/check-release-flow.sh",

package/wix/main.wxs

@@ -43,11 +43,19 @@
   <Fragment>
     <ComponentGroup Id="ProductComponents" Directory="INSTALLFOLDER">
       <Component Id="GwtExecutableComponent">
-        <File Id="GwtExecutable" Source="!(bindpath.gwt)gwt.exe" KeyPath="yes" />
+        <!--
+          SPEC-1942 2026-05-20 Amendment Bug B: WiX v4 defaults the installed
+          File Name to the literal Source string when Name is omitted, so the
+          bindpath binder variable leaks into the on-disk file name (observed
+          in v9.37.0 as `!(bindpath.gwt)gwt.exe`). Pin the Name explicitly so
+          the installed file is always `gwt.exe` regardless of how bindpath
+          resolves at build time.
+        -->
+        <File Id="GwtExecutable" Source="!(bindpath.gwt)gwt.exe" Name="gwt.exe" KeyPath="yes" />
         <Environment Id="GwtUserPath" Name="PATH" Value="[INSTALLFOLDER]" Action="set" Part="last" />
       </Component>
       <Component Id="GwtdExecutableComponent">
-        <File Id="GwtdExecutable" Source="!(bindpath.gwt)gwtd.exe" KeyPath="yes" />
+        <File Id="GwtdExecutable" Source="!(bindpath.gwt)gwtd.exe" Name="gwtd.exe" KeyPath="yes" />
       </Component>
     </ComponentGroup>