@gleapai/kai-bridge 0.6.0 → 0.9.0

package/README.md

@@ -1,8 +1,7 @@
-# kai-bridge
+# Kai Code Bridge
 
-Run [Gleap Kai Code](https://gleap.io) sessions on your own machine — with your own
-Claude Code / Codex login — and preview your real dev servers from the dashboard or the
-Gleap app on your phone.
+Run [Gleap Kai Code](https://gleap.io) on your computer or server with your own
+Claude Code / Codex login, local dev-server previews, and photo or video verification.
 
 ```bash
 npm i -g @gleapai/kai-bridge   # one install, so the background service has a stable path
@@ -43,3 +42,28 @@ kai-bridge run --task "Explain the auth flow in this repo" --cwd ~/code/my-app
 
 `npm run sync-runner` copies the ACP runner from a sibling `gleap_code_analyzer` checkout;
 `npm test` runs the unit suite (uses real `git`).
+
+
+### Computers and your own servers
+
+Kai Code offers **Kai Code Cloud** (Gleap's managed execution, using AI credits) or **Kai Code Bridge** (your coding agents on your computer or a server you manage, using your own AI subscriptions).
+
+Run `npm i -g @gleapai/kai-bridge && kai-bridge` in a local terminal or over SSH. The guided setup pairs the device, installs its background service and helps sign in to coding agents. Node.js 20+ and Git are required. On a Linux server, keep the user service running after logout using your system's service configuration; `kai-bridge doctor` reports service status.
+
+Codex and Claude Code ship with Kai Code Bridge. Missing agents can be installed or repaired, and existing agents can be updated independently:
+
+```sh
+kai-bridge harness install codex
+kai-bridge harness update codex
+kai-bridge harness login codex --device-auth
+
+kai-bridge harness install claude
+kai-bridge harness update claude
+kai-bridge harness login claude
+```
+
+Updates install into `~/.kai/harnesses`, verify the new executable, then select it for subsequent sessions. A failed download or startup leaves the previous version selected. Existing versions are retained for running sessions; your global CLI installations and agent logins are not overwritten. `--version <version>` selects a specific package version (for Claude, the Claude Agent SDK package version).
+
+Codex automatically uses device-code sign-in over SSH or on headless Linux. Enable device-code sign-in in the account settings if Codex asks. Claude uses its native `auth login` flow: follow the URL and prompts in the SSH terminal. Dashboard **Sign in** opens a terminal on desktop devices; for headless servers it shows the exact command to run over SSH. The login is picked up automatically.
+
+**Previews are local to the Kai Code Bridge device.** Open them on that computer, on the same network when supported, or use your own SSH port forwarding. Kai Code Bridge does not expose previews through a public tunnel. Screenshot and video verification runs on the Kai Code Bridge device and uploads its evidence to the Kai Code session, so those checks still work on a remote server.

package/bin/kai-bridge.mjs

@@ -7,7 +7,7 @@
 //   kai-bridge install | uninstall   run at login (launchd / systemd / Task Scheduler)
 //   kai-bridge start                 run in the foreground (what the service runs)
 //   kai-bridge status                device, service, profiles, repos
-//   kai-bridge harness list|install <id>|login <id>      Claude Code + Codex are bundled; Cursor is downloaded
+//   kai-bridge harness list|install <id>|update <id>|login <id> [--device-auth]      Claude Code + Codex are bundled; Cursor is downloaded
 //   kai-bridge profile list|add <id> --harness claude|codex|cursor [--label …]|login <id>|remove <id>
 //   kai-bridge repo scan|roots [add <dir>|remove <dir>]|primary <repoKey> <path>
 //   kai-bridge run --task "…" [--model …] [--profile …] [--cwd …]   (local turn, no server)
@@ -89,7 +89,8 @@ async function profile() {
   if (sub === "login") {
     const p = resolveProfiles(config).find((x) => x.id === positional[1]);
     if (!p) fail("unknown profile");
-    const c = loginCommand(p.harness, p.configDir);
+    await installHarness(p.harness, { kaiHome: KAI_HOME, onLog: out });
+    const c = loginCommand(p.harness, p.configDir, KAI_HOME, flags["device-auth"] ? { deviceAuth: true } : undefined);
     if (!c) fail(`${p.harness} is not installed`);
     const child = spawn(c.cmd, c.args, { env: c.env, stdio: "inherit" });
     child.on("close", (code) => process.exit(code ?? 0));
@@ -111,9 +112,9 @@ async function harness() {
     return;
   }
   const id = positional[1];
-  if (!HARNESS_INFO[id]) fail("usage: harness list|install <claude|codex|cursor>|login <id>");
+  if (!HARNESS_INFO[id]) fail("usage: harness list|install <id>|update <id>|login <id> (claude|codex|cursor)");
   if (sub === "install" || sub === "update") {
-    const res = await installHarness(id, { kaiHome: KAI_HOME, onLog: out });
+    const res = await installHarness(id, { kaiHome: KAI_HOME, onLog: out, update: sub === "update", version: typeof flags.version === "string" ? flags.version : undefined });
     if (!res.ok) fail(`${id} is not usable`);
     out(`${HARNESS_INFO[id].label} ${res.version} → ${res.binary}`);
     return;
@@ -123,7 +124,7 @@ async function harness() {
     positional[0] = "login";
     return profile();
   }
-  fail("usage: harness list|install <id>|login <id>");
+  fail("usage: harness list|install <id>|update <id>|login <id> [--device-auth]");
 }
 
 async function repo() {
@@ -280,7 +281,7 @@ try {
 
   setup                            guided onboarding (pair · service · sign-ins)
   login | logout | install | uninstall | start | status | doctor | update
-  harness list|install <id>|login <id>
+  harness list|install <id>|update <id>|login <id> [--device-auth]
   profile list|add <id> --harness claude|codex|cursor|login <id>|remove <id>
   repo scan|roots [add|remove <dir>]|primary <repoKey> <path>
   run --task "…" [--model …] [--profile …] [--cwd …]`);