@covro/covro 0.0.0-stage → 0.1.0-dev.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 郁蒸十四
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,174 @@
-# Temporary Holding Version
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/covro-logo-dark.svg" />
+    <img src="docs/assets/covro-logo.svg" alt="Covro" width="266" height="64" />
+  </picture>
+</p>
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<h1 align="center">Codex CLI. Now in your browser.</h1>
+
+<p align="center">
+  <strong>Covro is a self-hosted Web UI for Codex CLI.</strong><br />
+  Start a task at your desk. Review the changes, approve the next step, and keep it moving from your phone.
+</p>
+
+<p align="center"><strong>Self-hosted · Desktop & mobile · Your existing Codex login · MIT</strong></p>
+
+<p align="center">
+  <a href="#get-started">🚀 Get started</a> ·
+  <a href="#what-you-can-do">✨ Features</a> ·
+  <a href="#access-from-another-device">🌐 Remote access</a> ·
+  <a href="README.zh-CN.md">简体中文</a>
+</p>
+
+![Covro desktop workspace with a conversation and a Markdown document side by side](docs/assets/workspace-desktop.png)
+
+<p align="center"><sub>Captured from the running app with sample projects and fixture-generated conversations.</sub></p>
+
+<a id="what-you-can-do"></a>
+
+## ✨ What you can do
+
+- 📱 **Step away from your desk. Stay with the task.** Follow tool activity, inspect file changes, handle permission requests, and answer Codex's questions from your computer or phone. Closing the page doesn't cancel the task.
+- 🗂️ **See every project in one place.** Run independent tasks in parallel and spot which conversations are working, waiting for approval, or ready to read.
+- 💬 **Pick up your Codex CLI conversations.** Browse saved history, resume existing work, or fork a new direction. Rename conversations to find them later and archive them when you're done.
+- 📖 **Review the work beside the conversation.** Read Markdown documents in a desktop side panel while you keep talking to Codex. View code, tables, and images, with a full-screen document reader on mobile.
+- ✍️ **Switch tasks without losing your draft.** Each conversation keeps its own draft, pasted images, and model settings in the current page. Copy or export results when you're done.
+
+<details>
+  <summary><strong>📱 A workspace that fits your phone</strong></summary>
+  <p>Check a result, answer a question, or send the next instruction without returning to your desk.</p>
+  <img src="docs/assets/workspace-mobile.png" alt="Covro conversation on a phone-sized screen" width="320" />
+</details>
+
+<a id="get-started"></a>
+
+## 🚀 Get started
+
+You need **Node.js 24.19 or later in the 24.x line** and an installed, signed-in **Codex CLI**. The interface currently uses Simplified Chinese.
+
+<!-- codex-compatibility:start -->
+
+Recommended Codex CLI: **0.163.0**. Verified versions: `0.163.0`.
+
+<!-- codex-compatibility:end -->
+
+<a id="npm-installation"></a>
+
+### 📦 npm installation
+
+The first public npm release is being prepared. Until `@covro/covro` is published, [run from source](#run-from-source). After publication, install and start with:
+
+```sh
+npm install -g @covro/covro
+covro
+```
+
+`covro` starts in the background and prints the local address. Open **<http://127.0.0.1:8787>** to get started. Close the terminal and keep working in your browser.
+
+| Command                   | Purpose                                      |
+| ------------------------- | -------------------------------------------- |
+| `covro status`            | Show the running instance and its address    |
+| `covro logs`              | Read recent service logs                     |
+| `covro stop`              | Stop the service                             |
+| `covro run`               | Run in the foreground                        |
+| `covro service install`   | Opt in to login auto-start on macOS or Linux |
+| `covro service uninstall` | Remove login auto-start                      |
+
+The npm package is `@covro/covro`; the command is `covro`. Install the development channel with `npm install -g @covro/covro@dev`.
+
+The npm CLI uses `~/.covro/config.json` and a fixed data directory beside it. Reuse an existing configuration with `covro --config /absolute/path/config.json`.
+
+<a id="run-from-source"></a>
+
+### 🛠️ Run from source
+
+To try Covro before the npm release or work on the code, use **pnpm 12.11.2**:
+
+```sh
+git clone https://github.com/yuzheng14/codex-web-ui.git covro
+cd covro
+pnpm install --frozen-lockfile
+cp config.example.json config.local.json
+pnpm build
+pnpm start -- --config ./config.local.json
+```
+
+Open **<http://127.0.0.1:8787>**, click **添加项目** (Add project), and enter a project directory on the computer running Covro. Open a conversation or send your first task.
+
+For local development, run `pnpm dev` instead and open <http://127.0.0.1:5173>.
+
+<a id="access-from-another-device"></a>
+
+## 🌐 Access from another device
+
+Covro runs on your computer; the browser is your control surface. Tasks continue when you close the page, and reopening it reconnects to the service. The host computer must stay awake and online.
+
+| Setup                          | How to connect                                                       |
+| ------------------------------ | -------------------------------------------------------------------- |
+| On the host computer           | Open the local address                                               |
+| Your devices through Tailscale | Configure Tailscale Serve and add its HTTPS origin to `publicOrigin` |
+| Through Cloudflare             | Use a tunnel with Cloudflare Access and Covro's JWT verification     |
+
+Follow the [deployment guide](docs/deployment.md) for complete configuration. Remote access is explicit: a fresh installation listens on loopback only. When adding projects remotely, choose directories on the host computer.
+
+## Updates and release channels
+
+Open **Covro** in the sidebar to check versions, choose a channel, enable idle-time automatic upgrades, or upgrade and restart. The CLI provides the same update engine:
+
+```sh
+covro update status
+covro update
+covro update --channel dev
+```
+
+| Channel | npm tag  | Choose it for                               |
+| ------- | -------- | ------------------------------------------- |
+| Stable  | `latest` | Regular use                                 |
+| Beta    | `beta`   | Preview releases selected by the maintainer |
+| Dev     | `dev`    | New main-branch changes after CI passes     |
+
+Each release declares its recommended and verified Codex CLI versions. The update panel shows the current and candidate combinations. Automatic upgrades require a verified combination; an unverified combination needs explicit confirmation for that exact upgrade. Unknown versions, invalid/missing declarations, and explicitly unsupported combinations block managed upgrades. The CLI offers `covro update --allow-unverified-codex` for the same explicit attempt. Covro does not upgrade your Codex CLI.
+
+Automatic installation is off by default. Managed upgrades support **macOS and Linux npm global installations**; source, linked, container, and Windows installations use their original update method. A failed candidate is rolled back before business writes resume; downgrades must pass database compatibility checks. Old backups are retained without automatic rotation.
+
+See [distribution and recovery](docs/distribution.md) and [release operations](docs/releases.md) for details.
+
+## Your computer, your workspace
+
+Covro is a single-user Web UI for your existing Codex CLI. It connects through `codex app-server`, which executes tasks on the host computer using your Codex login and configuration. Projects and Codex history stay there; Covro stores its own project registry and operation records in SQLite. It does not provide a separate hosted account or copy your Codex login into the browser. Codex itself still uses its configured model provider.
+
+Use the browser to follow work, review requests, and continue conversations. An interactive terminal, file editor, Git GUI, and multi-user team management are outside the current scope.
+
+## Development and contribution
+
+```sh
+pnpm typecheck
+pnpm lint
+pnpm test
+pnpm build
+pnpm test:e2e
+```
+
+Browser tests require the Chromium version used by the existing Playwright dependency. Tests and CI use explicit fixtures; they do not send real model requests.
+
+Found a problem or have an idea? [Open an issue](https://github.com/yuzheng14/codex-web-ui/issues). Include your OS, Node.js and Codex versions, installation method, and steps to reproduce. Small, focused PRs are welcome. Update both `README.md` and `README.zh-CN.md` when changing user-facing facts or setup instructions.
+
+<a id="documentation"></a>
+
+## 📚 Documentation
+
+| Guide                                        | Contents                                                                |
+| -------------------------------------------- | ----------------------------------------------------------------------- |
+| [Detailed usage · 中文](docs/usage.zh-CN.md) | Projects, conversations, approvals, notifications, images, and recovery |
+| [Deployment](docs/deployment.md)             | Local access, Tailscale, and Cloudflare Access                          |
+| [Distribution](docs/distribution.md)         | CLI, services, data locations, upgrades, and repair                     |
+| [Compatibility](docs/compatibility.md)       | Verified Codex versions and behavior boundaries                         |
+| [Slash commands](docs/slash-commands.md)     | Supported commands and usage                                            |
+| [Architecture](docs/architecture.md)         | How the gateway, Codex adapter, and browser fit together                |
+| [Verification](docs/verification.md)         | Test coverage and recorded live checks                                  |
+| [Brand assets](docs/brand.md)                | Editable SVG logo and wordmarks                                         |
+
+## License
+
+[MIT](LICENSE). Covro is an independent project and is not affiliated with OpenAI.

package/README.zh-CN.md

@@ -0,0 +1,174 @@
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/covro-logo-dark.svg" />
+    <img src="docs/assets/covro-logo.svg" alt="Covro" width="266" height="64" />
+  </picture>
+</p>
+
+<h1 align="center">在浏览器里，用你的 Codex CLI。</h1>
+
+<p align="center">
+  <strong>Covro 是 Codex CLI 的自部署 Web UI。</strong><br />
+  在桌前发起任务，用手机查看改动、处理审批，接着推进下一步。
+</p>
+
+<p align="center"><strong>自行部署 · 电脑与手机 · 沿用 Codex 登录 · MIT 开源</strong></p>
+
+<p align="center">
+  <a href="#开始使用">🚀 开始使用</a> ·
+  <a href="#你可以做什么">✨ 功能介绍</a> ·
+  <a href="#从其他设备访问">🌐 远程访问</a> ·
+  <a href="README.md">English</a>
+</p>
+
+![Covro 桌面工作台：会话与 Markdown 文档并排阅读](docs/assets/workspace-desktop.png)
+
+<p align="center"><sub>截图来自实际运行的应用，使用示例项目与测试夹具生成的会话。</sub></p>
+
+<a id="你可以做什么"></a>
+
+## ✨ 你可以做什么
+
+- 📱 **离开电脑，也能跟进任务。** 在电脑或手机上查看工具活动与文件变更、处理权限审批、回答 Codex 的问题。关闭页面，任务仍会继续。
+- 🗂️ **多个项目，一眼掌握进展。** 让独立任务并行执行，随时看到哪些会话正在工作、等待审批，哪些已有结果可读。
+- 💬 **接着你的 Codex CLI 会话。** 浏览已有历史、恢复工作，或 Fork 一个新方向；为会话命名以便查找，完成后归档。
+- 📖 **一边看产出，一边继续讨论。** 电脑上将 Markdown 文档与会话并排打开，继续向 Codex 提问；支持代码、表格与图片，手机上也有全屏文档阅读器。
+- ✍️ **切换任务，草稿还在。** 每个会话分别保留当前页面中的草稿、粘贴图片和模型设置；完成后可以复制或导出结果。
+
+<details>
+  <summary><strong>📱 手机上也能舒服地使用</strong></summary>
+  <p>查看结果、回答问题、补充下一步要求，不必每次都回到电脑前。</p>
+  <img src="docs/assets/workspace-mobile.png" alt="手机屏幕上的 Covro 会话" width="320" />
+</details>
+
+<a id="开始使用"></a>
+
+## 🚀 开始使用
+
+需要 **Node.js 24.x，版本不低于 24.19**，以及已经安装、登录的 **Codex CLI**。界面目前使用简体中文。
+
+<!-- codex-compatibility:start -->
+
+推荐 Codex CLI：**0.163.0**。已验证版本：`0.163.0`。
+
+<!-- codex-compatibility:end -->
+
+<a id="npm-安装"></a>
+
+### 📦 npm 安装
+
+首个公开 npm 版本正在准备中。`@covro/covro` 发布前，请先[从源码运行](#从源码运行)；发布后，只需安装并启动：
+
+```sh
+npm install -g @covro/covro
+covro
+```
+
+`covro` 默认在后台启动，并输出本机访问地址。打开 **<http://127.0.0.1:8787>** 即可开始使用。关掉终端后，仍可继续通过浏览器工作。
+
+| 命令                      | 用途                                 |
+| ------------------------- | ------------------------------------ |
+| `covro status`            | 查看运行实例与访问地址               |
+| `covro logs`              | 查看最近的服务日志                   |
+| `covro stop`              | 停止服务                             |
+| `covro run`               | 在前台运行                           |
+| `covro service install`   | 在 macOS 或 Linux 上主动启用登录自启 |
+| `covro service uninstall` | 移除登录自启                         |
+
+npm 包名为 `@covro/covro`，命令为 `covro`。开发渠道使用 `npm install -g @covro/covro@dev` 安装。
+
+npm CLI 默认使用 `~/.covro/config.json`，数据目录固定在配置文件旁。可以通过 `covro --config /absolute/path/config.json` 沿用已有配置。
+
+<a id="从源码运行"></a>
+
+### 🛠️ 从源码运行
+
+想在 npm 发布前体验，或参与开发，可以使用 **pnpm 12.11.2** 从源码运行：
+
+```sh
+git clone https://github.com/yuzheng14/codex-web-ui.git covro
+cd covro
+pnpm install --frozen-lockfile
+cp config.example.json config.local.json
+pnpm build
+pnpm start -- --config ./config.local.json
+```
+
+打开 **<http://127.0.0.1:8787>**，点击 **添加项目**，填写运行 Covro 的电脑上的项目目录，然后打开会话或发送第一条任务。
+
+本地开发可以改用 `pnpm dev`，打开 <http://127.0.0.1:5173>。
+
+<a id="从其他设备访问"></a>
+
+## 🌐 从其他设备访问
+
+Covro 运行在你的电脑上，浏览器是操作入口。关闭页面不会取消任务；重新打开后会连接到服务。运行服务的电脑需要保持唤醒并在线。
+
+| 使用方式                      | 连接方法                                                 |
+| ----------------------------- | -------------------------------------------------------- |
+| 在运行服务的电脑上            | 打开本机地址                                             |
+| 通过 Tailscale 访问自己的设备 | 配置 Tailscale Serve，并将 HTTPS 地址加入 `publicOrigin` |
+| 通过 Cloudflare 访问          | 使用 Tunnel、Cloudflare Access 及 Covro 的 JWT 校验      |
+
+完整配置见[部署指南](docs/deployment.md)。新安装默认只监听回环地址，远程访问需单独配置。在手机上添加项目时，填写的仍是运行服务的电脑上的目录。
+
+## 更新与版本渠道
+
+点击侧栏的 **Covro**，可以检查版本、选择渠道、启用空闲时自动升级，或一键升级并重启。CLI 使用同一个升级引擎：
+
+```sh
+covro update status
+covro update
+covro update --channel dev
+```
+
+| 渠道   | npm 标签 | 适合                        |
+| ------ | -------- | --------------------------- |
+| 稳定版 | `latest` | 日常使用                    |
+| 预览版 | `beta`   | 维护者选定的预览版本        |
+| 开发版 | `dev`    | CI 通过后的 main 分支新功能 |
+
+每个发行版声明推荐和已验证的 Codex CLI 版本，更新面板会同时显示当前与目标组合。自动升级只接受已验证组合；未验证组合需要对确切目标明确确认。版本未知、声明缺失/无效或明确不支持的组合会阻止受管升级。CLI 可通过 `covro update --allow-unverified-codex` 明确尝试同一组合。Covro 不会自动升级你的 Codex CLI。
+
+自动安装默认关闭。受管升级支持 **macOS 和 Linux 的 npm 全局安装**；源码、链接、容器和 Windows 安装沿用原更新方式。候选版本失败时，会在重新开放业务写入前回滚；降级需通过数据库兼容检查。旧备份会保留，暂不自动轮转。
+
+详细说明见[分发与恢复](docs/distribution.md)、[发版操作](docs/releases.md)。
+
+## 你的电脑，你的工作台
+
+Covro 是面向单用户的 Codex CLI Web UI，通过 `codex app-server` 连接已有 CLI，沿用你的 Codex 登录与配置，在运行服务的电脑上执行任务。项目与 Codex 历史留在那里；Covro 使用 SQLite 保存自身的项目注册和操作记录。它不提供单独的托管账号，也不会把 Codex 登录信息复制到浏览器。Codex 本身仍会访问你配置的模型提供方。
+
+浏览器用于跟进工作、处理请求和继续对话。交互终端、文件编辑器、Git 图形界面与多人团队管理不在当前范围内。
+
+## 开发与参与
+
+```sh
+pnpm typecheck
+pnpm lint
+pnpm test
+pnpm build
+pnpm test:e2e
+```
+
+浏览器测试需要现有 Playwright 依赖所对应的 Chromium。测试与 CI 使用明确的测试夹具，不发起真实模型请求。
+
+遇到问题或有想法，欢迎[提交 Issue](https://github.com/yuzheng14/codex-web-ui/issues)，附上操作系统、Node.js 与 Codex 版本、安装方式和复现步骤。也欢迎范围明确的小 PR。修改面向使用者的事实或安装步骤时，请同步更新 `README.md` 和 `README.zh-CN.md`。
+
+<a id="文档导航"></a>
+
+## 📚 文档导航
+
+| 指南                                 | 内容                                 |
+| ------------------------------------ | ------------------------------------ |
+| [详细使用指南](docs/usage.zh-CN.md)  | 项目、会话、审批、通知、图片和恢复   |
+| [部署](docs/deployment.md)           | 本机、Tailscale 与 Cloudflare Access |
+| [分发](docs/distribution.md)         | CLI、服务、数据位置、升级与修复      |
+| [兼容性](docs/compatibility.md)      | 已验证的 Codex 版本与行为边界        |
+| [Slash 命令](docs/slash-commands.md) | 支持的命令和用法                     |
+| [架构](docs/architecture.md)         | 网关、Codex 适配器与浏览器的协作方式 |
+| [验证记录](docs/verification.md)     | 测试范围与真实环境检查记录           |
+| [品牌素材](docs/brand.md)            | 可编辑的 SVG 图标与完整标识          |
+
+## 许可证
+
+[MIT](LICENSE)。Covro 是独立项目，与 OpenAI 无隶属关系。

package/bin/covro.mjs

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import console from 'node:console';
+import process from 'node:process';
+import { main } from '../dist/cli/main.js';
+await main().catch((error) => {
+  console.error(error instanceof Error ? error.message : 'Covro failed');
+  process.exitCode = 1;
+});

package/dist/cli/control.js

@@ -0,0 +1,66 @@
+import { request } from "node:http";
+import lockfile from "proper-lockfile";
+import { setTimeout } from "node:timers/promises";
+function control(location, action, input = {}) {
+  return new Promise((resolve, reject) => {
+    const requestBody = JSON.stringify(input);
+    const outgoing = request(
+      {
+        socketPath: location.socket,
+        path: `/${action}`,
+        method: "POST",
+        headers: {
+          "content-type": "application/json",
+          "content-length": Buffer.byteLength(requestBody)
+        }
+      },
+      (incoming) => {
+        let body = "";
+        incoming.on("data", (chunk) => {
+          body += chunk.toString();
+          if (body.length > 256 * 1024) incoming.destroy(new Error("Control response too large"));
+        });
+        incoming.on("error", reject);
+        incoming.on("end", () => {
+          try {
+            const result = JSON.parse(body);
+            if (incoming.statusCode !== 200)
+              reject(new Error(result.error ?? "Control request failed"));
+            else resolve(result);
+          } catch (error) {
+            reject(error);
+          }
+        });
+      }
+    );
+    outgoing.setTimeout(15e3, () => outgoing.destroy(new Error("Covro control timed out")));
+    outgoing.on("error", reject);
+    outgoing.end(requestBody);
+  });
+}
+function isNotRunning(error) {
+  return ["ENOENT", "ECONNREFUSED"].includes(error.code ?? "");
+}
+async function stopAndWait(location) {
+  try {
+    await control(location, "stop");
+  } catch (error) {
+    if (!isNotRunning(error)) throw error;
+  }
+  for (let attempt = 0; attempt < 120; attempt++) {
+    try {
+      if (!await lockfile.check(location.state, { stale: 1e4 })) return;
+    } catch (error) {
+      if (error.code === "ENOENT") return;
+      throw error;
+    }
+    await setTimeout(100);
+  }
+  throw new Error("Covro \u5C1A\u672A\u5B8C\u6210\u5173\u95ED\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5");
+}
+export {
+  control,
+  isNotRunning,
+  stopAndWait
+};
+//# sourceMappingURL=control.js.map

package/dist/cli/control.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cli/control.ts"],
+  "sourcesContent": ["import { request } from 'node:http';\nimport type { CovroPaths } from './paths.js';\nimport lockfile from 'proper-lockfile';\nimport { setTimeout } from 'node:timers/promises';\n\n/** Local owner control uses a private socket, never the public HTTP authentication boundary. */\nexport function control<T = unknown>(\n  location: CovroPaths,\n  action: string,\n  input: object = {},\n): Promise<T> {\n  return new Promise((resolve, reject) => {\n    const requestBody = JSON.stringify(input);\n    const outgoing = request(\n      {\n        socketPath: location.socket,\n        path: `/${action}`,\n        method: 'POST',\n        headers: {\n          'content-type': 'application/json',\n          'content-length': Buffer.byteLength(requestBody),\n        },\n      },\n      (incoming) => {\n        let body = '';\n        incoming.on('data', (chunk: Buffer) => {\n          body += chunk.toString();\n          if (body.length > 256 * 1024) incoming.destroy(new Error('Control response too large'));\n        });\n        incoming.on('error', reject);\n        incoming.on('end', () => {\n          try {\n            const result = JSON.parse(body) as T & { error?: string };\n            if (incoming.statusCode !== 200)\n              reject(new Error(result.error ?? 'Control request failed'));\n            else resolve(result);\n          } catch (error) {\n            reject(error);\n          }\n        });\n      },\n    );\n    outgoing.setTimeout(15_000, () => outgoing.destroy(new Error('Covro control timed out')));\n    outgoing.on('error', reject);\n    outgoing.end(requestBody);\n  });\n}\nexport function isNotRunning(error: unknown) {\n  return ['ENOENT', 'ECONNREFUSED'].includes((error as NodeJS.ErrnoException).code ?? '');\n}\nexport async function stopAndWait(location: CovroPaths) {\n  try {\n    await control(location, 'stop');\n  } catch (error) {\n    if (!isNotRunning(error)) throw error;\n  }\n  for (let attempt = 0; attempt < 120; attempt++) {\n    try {\n      if (!(await lockfile.check(location.state, { stale: 10_000 }))) return;\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === 'ENOENT') return;\n      throw error;\n    }\n    await setTimeout(100);\n  }\n  throw new Error('Covro \u5C1A\u672A\u5B8C\u6210\u5173\u95ED\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5');\n}\n"],
+  "mappings": "AAAA,SAAS,eAAe;AAExB,OAAO,cAAc;AACrB,SAAS,kBAAkB;AAGpB,SAAS,QACd,UACA,QACA,QAAgB,CAAC,GACL;AACZ,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,cAAc,KAAK,UAAU,KAAK;AACxC,UAAM,WAAW;AAAA,MACf;AAAA,QACE,YAAY,SAAS;AAAA,QACrB,MAAM,IAAI,MAAM;AAAA,QAChB,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,kBAAkB,OAAO,WAAW,WAAW;AAAA,QACjD;AAAA,MACF;AAAA,MACA,CAAC,aAAa;AACZ,YAAI,OAAO;AACX,iBAAS,GAAG,QAAQ,CAAC,UAAkB;AACrC,kBAAQ,MAAM,SAAS;AACvB,cAAI,KAAK,SAAS,MAAM,KAAM,UAAS,QAAQ,IAAI,MAAM,4BAA4B,CAAC;AAAA,QACxF,CAAC;AACD,iBAAS,GAAG,SAAS,MAAM;AAC3B,iBAAS,GAAG,OAAO,MAAM;AACvB,cAAI;AACF,kBAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,gBAAI,SAAS,eAAe;AAC1B,qBAAO,IAAI,MAAM,OAAO,SAAS,wBAAwB,CAAC;AAAA,gBACvD,SAAQ,MAAM;AAAA,UACrB,SAAS,OAAO;AACd,mBAAO,KAAK;AAAA,UACd;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AACA,aAAS,WAAW,MAAQ,MAAM,SAAS,QAAQ,IAAI,MAAM,yBAAyB,CAAC,CAAC;AACxF,aAAS,GAAG,SAAS,MAAM;AAC3B,aAAS,IAAI,WAAW;AAAA,EAC1B,CAAC;AACH;AACO,SAAS,aAAa,OAAgB;AAC3C,SAAO,CAAC,UAAU,cAAc,EAAE,SAAU,MAAgC,QAAQ,EAAE;AACxF;AACA,eAAsB,YAAY,UAAsB;AACtD,MAAI;AACF,UAAM,QAAQ,UAAU,MAAM;AAAA,EAChC,SAAS,OAAO;AACd,QAAI,CAAC,aAAa,KAAK,EAAG,OAAM;AAAA,EAClC;AACA,WAAS,UAAU,GAAG,UAAU,KAAK,WAAW;AAC9C,QAAI;AACF,UAAI,CAAE,MAAM,SAAS,MAAM,SAAS,OAAO,EAAE,OAAO,IAAO,CAAC,EAAI;AAAA,IAClE,SAAS,OAAO;AACd,UAAK,MAAgC,SAAS,SAAU;AACxD,YAAM;AAAA,IACR;AACA,UAAM,WAAW,GAAG;AAAA,EACtB;AACA,QAAM,IAAI,MAAM,gFAAoB;AACtC;",
+  "names": []
+}

package/dist/cli/daemon.js

@@ -0,0 +1,118 @@
+import { createServer } from "node:http";
+import { chmod, mkdir, rm } from "node:fs/promises";
+import { acquireInstanceLock } from "../server/instance-lock.js";
+import { loadConfig } from "../server/config.js";
+import { startGateway } from "../server/main.js";
+import { packageInfo, paths } from "./paths.js";
+import { UpdateManager } from "../updates/manager.js";
+import { saveJson } from "../updates/files.js";
+async function runDaemon(configPath) {
+  const location = paths(configPath);
+  await mkdir(location.state, { recursive: true, mode: 448 });
+  const release = await acquireInstanceLock(location.state);
+  let config;
+  let runtime;
+  let updates;
+  const server = createServer((request, response) => {
+    void (async () => {
+      response.setHeader("content-type", "application/json");
+      if (request.method !== "POST") throw new Error("Expected POST");
+      let body = "";
+      for await (const chunk of request) {
+        body += String(chunk);
+        if (body.length > 8192) throw new Error("Control request too large");
+      }
+      const input = body ? JSON.parse(body) : {};
+      if (request.url === "/status") {
+        response.end(
+          JSON.stringify({
+            version: packageInfo.version,
+            pid: process.pid,
+            origin: config.publicOrigin[0],
+            configPath,
+            dataDir: config.dataDir,
+            maintenance: runtime?.service.isInMaintenance(),
+            codexVersion: runtime?.codex.diagnostics().codexVersion ?? null,
+            codexReady: runtime?.codex.ready ?? false
+          })
+        );
+      } else if (request.url === "/stop") {
+        await stop(() => response.end(JSON.stringify({ stopped: true })));
+      } else if (request.url === "/prepare-update") {
+        response.end(JSON.stringify(runtime.service.prepareUpdate()));
+      } else if (request.url === "/cancel-update") {
+        runtime.service.setMaintenance(false);
+        response.end(JSON.stringify({ cancelled: true }));
+      } else if (request.url === "/activate-update") {
+        const id = input.id;
+        if (typeof id !== "string") throw new Error("Invalid upgrade identity");
+        await updates.commitActivation(id);
+        runtime.service.setMaintenance(false);
+        response.end(JSON.stringify({ activated: true }));
+      } else if (request.url === "/update-status") {
+        response.end(JSON.stringify(await updates.status()));
+      } else if (request.url === "/update-check") {
+        const channel = input.channel;
+        if (channel !== void 0 && !["stable", "beta", "dev"].includes(String(channel)))
+          throw new Error("Invalid channel");
+        response.end(
+          JSON.stringify(await updates.check(channel))
+        );
+      } else if (request.url === "/update") {
+        response.end(
+          JSON.stringify(await updates.start(input))
+        );
+      } else {
+        response.statusCode = 404;
+        response.end(JSON.stringify({ error: "Unknown control action" }));
+      }
+    })().catch((error) => {
+      response.statusCode = 400;
+      response.end(
+        JSON.stringify({ error: error instanceof Error ? error.message : "Control failed" })
+      );
+    });
+  });
+  let stopping;
+  const stop = (respond) => stopping ??= (async () => {
+    await runtime?.close();
+    respond?.();
+    await new Promise((done) => server.close(() => done()));
+    if (process.platform !== "win32") await rm(location.socket, { force: true });
+    await release();
+  })();
+  try {
+    config = await loadConfig({ configPath, development: false });
+    updates = new UpdateManager(
+      location,
+      config.dataDir,
+      () => runtime?.codex.diagnostics().codexVersion ?? null
+    );
+    await updates.initialize();
+    const maintenance = await updates.activationPending();
+    runtime = await startGateway(config, { updates, maintenance });
+    if (process.platform !== "win32") await rm(location.socket, { force: true });
+    await new Promise((done, reject) => {
+      server.once("error", reject);
+      server.listen(location.socket, done);
+    });
+    if (process.platform !== "win32") await chmod(location.socket, 384);
+    await saveJson(`${location.state}/instance.json`, {
+      root: updates.context?.root,
+      config: location.config,
+      socket: location.socket
+    });
+    console.log(`Covro ${packageInfo.version} listening on ${config.publicOrigin[0]}`);
+    process.once("SIGINT", () => void stop());
+    process.once("SIGTERM", () => void stop());
+  } catch (error) {
+    updates?.close();
+    await runtime?.close();
+    await release();
+    throw error;
+  }
+}
+export {
+  runDaemon
+};
+//# sourceMappingURL=daemon.js.map

package/dist/cli/daemon.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cli/daemon.ts"],
+  "sourcesContent": ["import { createServer } from 'node:http';\nimport { chmod, mkdir, rm } from 'node:fs/promises';\nimport { acquireInstanceLock } from '../server/instance-lock.js';\nimport { loadConfig } from '../server/config.js';\nimport { startGateway } from '../server/main.js';\nimport { packageInfo, paths } from './paths.js';\nimport { UpdateManager } from '../updates/manager.js';\nimport { saveJson } from '../updates/files.js';\n\nexport async function runDaemon(configPath: string) {\n  const location = paths(configPath);\n  await mkdir(location.state, { recursive: true, mode: 0o700 });\n  const release = await acquireInstanceLock(location.state);\n  let config: Awaited<ReturnType<typeof loadConfig>>;\n  let runtime: Awaited<ReturnType<typeof startGateway>> | undefined;\n  let updates: UpdateManager | undefined;\n  const server = createServer((request, response) => {\n    void (async () => {\n      response.setHeader('content-type', 'application/json');\n      if (request.method !== 'POST') throw new Error('Expected POST');\n      let body = '';\n      for await (const chunk of request) {\n        body += String(chunk);\n        if (body.length > 8192) throw new Error('Control request too large');\n      }\n      const input: unknown = body ? JSON.parse(body) : {};\n      if (request.url === '/status') {\n        response.end(\n          JSON.stringify({\n            version: packageInfo.version,\n            pid: process.pid,\n            origin: config.publicOrigin[0],\n            configPath,\n            dataDir: config.dataDir,\n            maintenance: runtime?.service.isInMaintenance(),\n            codexVersion: runtime?.codex.diagnostics().codexVersion ?? null,\n            codexReady: runtime?.codex.ready ?? false,\n          }),\n        );\n      } else if (request.url === '/stop') {\n        await stop(() => response.end(JSON.stringify({ stopped: true })));\n      } else if (request.url === '/prepare-update') {\n        response.end(JSON.stringify(runtime!.service.prepareUpdate()));\n      } else if (request.url === '/cancel-update') {\n        runtime!.service.setMaintenance(false);\n        response.end(JSON.stringify({ cancelled: true }));\n      } else if (request.url === '/activate-update') {\n        const id = (input as { id?: unknown }).id;\n        if (typeof id !== 'string') throw new Error('Invalid upgrade identity');\n        await updates!.commitActivation(id);\n        runtime!.service.setMaintenance(false);\n        response.end(JSON.stringify({ activated: true }));\n      } else if (request.url === '/update-status') {\n        response.end(JSON.stringify(await updates!.status()));\n      } else if (request.url === '/update-check') {\n        const channel = (input as { channel?: unknown }).channel;\n        if (channel !== undefined && !['stable', 'beta', 'dev'].includes(String(channel)))\n          throw new Error('Invalid channel');\n        response.end(\n          JSON.stringify(await updates!.check(channel as 'stable' | 'beta' | 'dev' | undefined)),\n        );\n      } else if (request.url === '/update') {\n        response.end(\n          JSON.stringify(await updates!.start(input as Parameters<UpdateManager['start']>[0])),\n        );\n      } else {\n        response.statusCode = 404;\n        response.end(JSON.stringify({ error: 'Unknown control action' }));\n      }\n    })().catch((error: unknown) => {\n      response.statusCode = 400;\n      response.end(\n        JSON.stringify({ error: error instanceof Error ? error.message : 'Control failed' }),\n      );\n    });\n  });\n  let stopping: Promise<void> | undefined;\n  const stop = (respond?: () => void) =>\n    (stopping ??= (async () => {\n      await runtime?.close();\n      respond?.();\n      await new Promise<void>((done) => server.close(() => done()));\n      if (process.platform !== 'win32') await rm(location.socket, { force: true });\n      await release();\n    })());\n  try {\n    config = await loadConfig({ configPath, development: false });\n    updates = new UpdateManager(\n      location,\n      config.dataDir,\n      () => runtime?.codex.diagnostics().codexVersion ?? null,\n    );\n    await updates.initialize();\n    const maintenance = await updates.activationPending();\n    runtime = await startGateway(config, { updates, maintenance });\n    if (process.platform !== 'win32') await rm(location.socket, { force: true });\n    await new Promise<void>((done, reject) => {\n      server.once('error', reject);\n      server.listen(location.socket, done);\n    });\n    if (process.platform !== 'win32') await chmod(location.socket, 0o600);\n    await saveJson(`${location.state}/instance.json`, {\n      root: updates.context?.root,\n      config: location.config,\n      socket: location.socket,\n    });\n    console.log(`Covro ${packageInfo.version} listening on ${config.publicOrigin[0]}`);\n    process.once('SIGINT', () => void stop());\n    process.once('SIGTERM', () => void stop());\n  } catch (error) {\n    updates?.close();\n    await runtime?.close();\n    await release();\n    throw error;\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,OAAO,OAAO,UAAU;AACjC,SAAS,2BAA2B;AACpC,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAC7B,SAAS,aAAa,aAAa;AACnC,SAAS,qBAAqB;AAC9B,SAAS,gBAAgB;AAEzB,eAAsB,UAAU,YAAoB;AAClD,QAAM,WAAW,MAAM,UAAU;AACjC,QAAM,MAAM,SAAS,OAAO,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC5D,QAAM,UAAU,MAAM,oBAAoB,SAAS,KAAK;AACxD,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,QAAM,SAAS,aAAa,CAAC,SAAS,aAAa;AACjD,UAAM,YAAY;AAChB,eAAS,UAAU,gBAAgB,kBAAkB;AACrD,UAAI,QAAQ,WAAW,OAAQ,OAAM,IAAI,MAAM,eAAe;AAC9D,UAAI,OAAO;AACX,uBAAiB,SAAS,SAAS;AACjC,gBAAQ,OAAO,KAAK;AACpB,YAAI,KAAK,SAAS,KAAM,OAAM,IAAI,MAAM,2BAA2B;AAAA,MACrE;AACA,YAAM,QAAiB,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC;AAClD,UAAI,QAAQ,QAAQ,WAAW;AAC7B,iBAAS;AAAA,UACP,KAAK,UAAU;AAAA,YACb,SAAS,YAAY;AAAA,YACrB,KAAK,QAAQ;AAAA,YACb,QAAQ,OAAO,aAAa,CAAC;AAAA,YAC7B;AAAA,YACA,SAAS,OAAO;AAAA,YAChB,aAAa,SAAS,QAAQ,gBAAgB;AAAA,YAC9C,cAAc,SAAS,MAAM,YAAY,EAAE,gBAAgB;AAAA,YAC3D,YAAY,SAAS,MAAM,SAAS;AAAA,UACtC,CAAC;AAAA,QACH;AAAA,MACF,WAAW,QAAQ,QAAQ,SAAS;AAClC,cAAM,KAAK,MAAM,SAAS,IAAI,KAAK,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC;AAAA,MAClE,WAAW,QAAQ,QAAQ,mBAAmB;AAC5C,iBAAS,IAAI,KAAK,UAAU,QAAS,QAAQ,cAAc,CAAC,CAAC;AAAA,MAC/D,WAAW,QAAQ,QAAQ,kBAAkB;AAC3C,gBAAS,QAAQ,eAAe,KAAK;AACrC,iBAAS,IAAI,KAAK,UAAU,EAAE,WAAW,KAAK,CAAC,CAAC;AAAA,MAClD,WAAW,QAAQ,QAAQ,oBAAoB;AAC7C,cAAM,KAAM,MAA2B;AACvC,YAAI,OAAO,OAAO,SAAU,OAAM,IAAI,MAAM,0BAA0B;AACtE,cAAM,QAAS,iBAAiB,EAAE;AAClC,gBAAS,QAAQ,eAAe,KAAK;AACrC,iBAAS,IAAI,KAAK,UAAU,EAAE,WAAW,KAAK,CAAC,CAAC;AAAA,MAClD,WAAW,QAAQ,QAAQ,kBAAkB;AAC3C,iBAAS,IAAI,KAAK,UAAU,MAAM,QAAS,OAAO,CAAC,CAAC;AAAA,MACtD,WAAW,QAAQ,QAAQ,iBAAiB;AAC1C,cAAM,UAAW,MAAgC;AACjD,YAAI,YAAY,UAAa,CAAC,CAAC,UAAU,QAAQ,KAAK,EAAE,SAAS,OAAO,OAAO,CAAC;AAC9E,gBAAM,IAAI,MAAM,iBAAiB;AACnC,iBAAS;AAAA,UACP,KAAK,UAAU,MAAM,QAAS,MAAM,OAAgD,CAAC;AAAA,QACvF;AAAA,MACF,WAAW,QAAQ,QAAQ,WAAW;AACpC,iBAAS;AAAA,UACP,KAAK,UAAU,MAAM,QAAS,MAAM,KAA8C,CAAC;AAAA,QACrF;AAAA,MACF,OAAO;AACL,iBAAS,aAAa;AACtB,iBAAS,IAAI,KAAK,UAAU,EAAE,OAAO,yBAAyB,CAAC,CAAC;AAAA,MAClE;AAAA,IACF,GAAG,EAAE,MAAM,CAAC,UAAmB;AAC7B,eAAS,aAAa;AACtB,eAAS;AAAA,QACP,KAAK,UAAU,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,iBAAiB,CAAC;AAAA,MACrF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACD,MAAI;AACJ,QAAM,OAAO,CAAC,YACX,cAAc,YAAY;AACzB,UAAM,SAAS,MAAM;AACrB,cAAU;AACV,UAAM,IAAI,QAAc,CAAC,SAAS,OAAO,MAAM,MAAM,KAAK,CAAC,CAAC;AAC5D,QAAI,QAAQ,aAAa,QAAS,OAAM,GAAG,SAAS,QAAQ,EAAE,OAAO,KAAK,CAAC;AAC3E,UAAM,QAAQ;AAAA,EAChB,GAAG;AACL,MAAI;AACF,aAAS,MAAM,WAAW,EAAE,YAAY,aAAa,MAAM,CAAC;AAC5D,cAAU,IAAI;AAAA,MACZ;AAAA,MACA,OAAO;AAAA,MACP,MAAM,SAAS,MAAM,YAAY,EAAE,gBAAgB;AAAA,IACrD;AACA,UAAM,QAAQ,WAAW;AACzB,UAAM,cAAc,MAAM,QAAQ,kBAAkB;AACpD,cAAU,MAAM,aAAa,QAAQ,EAAE,SAAS,YAAY,CAAC;AAC7D,QAAI,QAAQ,aAAa,QAAS,OAAM,GAAG,SAAS,QAAQ,EAAE,OAAO,KAAK,CAAC;AAC3E,UAAM,IAAI,QAAc,CAAC,MAAM,WAAW;AACxC,aAAO,KAAK,SAAS,MAAM;AAC3B,aAAO,OAAO,SAAS,QAAQ,IAAI;AAAA,IACrC,CAAC;AACD,QAAI,QAAQ,aAAa,QAAS,OAAM,MAAM,SAAS,QAAQ,GAAK;AACpE,UAAM,SAAS,GAAG,SAAS,KAAK,kBAAkB;AAAA,MAChD,MAAM,QAAQ,SAAS;AAAA,MACvB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,IACnB,CAAC;AACD,YAAQ,IAAI,SAAS,YAAY,OAAO,iBAAiB,OAAO,aAAa,CAAC,CAAC,EAAE;AACjF,YAAQ,KAAK,UAAU,MAAM,KAAK,KAAK,CAAC;AACxC,YAAQ,KAAK,WAAW,MAAM,KAAK,KAAK,CAAC;AAAA,EAC3C,SAAS,OAAO;AACd,aAAS,MAAM;AACf,UAAM,SAAS,MAAM;AACrB,UAAM,QAAQ;AACd,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}