@gleapai/kai-bridge 0.7.0 → 0.9.1

package/README.md

@@ -1,14 +1,14 @@
-# kai-bridge
+# Kai Code Bridge
 
-Run [Gleap Kai Code](https://gleap.io) sessions on your own machine — with your own
-Claude Code / Codex login — and preview your real dev servers from the dashboard or the
-Gleap app on your phone.
+Run [Gleap Kai Code](https://gleap.io) on your computer or server with your own
+Claude Code / Codex login, local dev-server previews, and photo or video verification.
 
 ```bash
 npm i -g @gleapai/kai-bridge   # one install, so the background service has a stable path
 kai-bridge login             # pair this machine with your Gleap account
 kai-bridge install           # run at login (launchd / systemd / Task Scheduler)
 kai-bridge status
+kai-bridge ps                # sessions running on this machine, with dashboard links (--json for tooling)
 ```
 
 (`npx @gleapai/kai-bridge login` works for a quick look, but `install` needs the
@@ -43,3 +43,28 @@ kai-bridge run --task "Explain the auth flow in this repo" --cwd ~/code/my-app
 
 `npm run sync-runner` copies the ACP runner from a sibling `gleap_code_analyzer` checkout;
 `npm test` runs the unit suite (uses real `git`).
+
+
+### Computers and your own servers
+
+Kai Code offers **Kai Code Cloud** (Gleap's managed execution, using AI credits) or **Kai Code Bridge** (your coding agents on your computer or a server you manage, using your own AI subscriptions).
+
+Run `npm i -g @gleapai/kai-bridge && kai-bridge` in a local terminal or over SSH. The guided setup pairs the device, installs its background service and helps sign in to coding agents. Node.js 20+ and Git are required. On a Linux server, keep the user service running after logout using your system's service configuration; `kai-bridge doctor` reports service status.
+
+Codex and Claude Code ship with Kai Code Bridge. Missing agents can be installed or repaired, and existing agents can be updated independently:
+
+```sh
+kai-bridge harness install codex
+kai-bridge harness update codex
+kai-bridge harness login codex --device-auth
+
+kai-bridge harness install claude
+kai-bridge harness update claude
+kai-bridge harness login claude
+```
+
+Updates install into `~/.kai/harnesses`, verify the new executable, then select it for subsequent sessions. A failed download or startup leaves the previous version selected. Existing versions are retained for running sessions; your global CLI installations and agent logins are not overwritten. `--version <version>` selects a specific package version (for Claude, the Claude Agent SDK package version).
+
+Codex automatically uses device-code sign-in over SSH or on headless Linux. Enable device-code sign-in in the account settings if Codex asks. Claude uses its native `auth login` flow: follow the URL and prompts in the SSH terminal. Dashboard **Sign in** opens a terminal on desktop devices; for headless servers it shows the exact command to run over SSH. The login is picked up automatically.
+
+**Previews are local to the Kai Code Bridge device.** Open them on that computer, on the same network when supported, or use your own SSH port forwarding. Kai Code Bridge does not expose previews through a public tunnel. Screenshot and video verification runs on the Kai Code Bridge device and uploads its evidence to the Kai Code session, so those checks still work on a remote server.

package/bin/kai-bridge.mjs

@@ -7,7 +7,8 @@
 //   kai-bridge install | uninstall   run at login (launchd / systemd / Task Scheduler)
 //   kai-bridge start                 run in the foreground (what the service runs)
 //   kai-bridge status                device, service, profiles, repos
-//   kai-bridge harness list|install <id>|login <id>      Claude Code + Codex are bundled; Cursor is downloaded
+//   kai-bridge ps [--json]           what runs right now: daemon, turns, dev servers — with dashboard links
+//   kai-bridge harness list|install <id>|update <id>|login <id> [--device-auth]      Claude Code + Codex are bundled; Cursor is downloaded
 //   kai-bridge profile list|add <id> --harness claude|codex|cursor [--label …]|login <id>|remove <id>
 //   kai-bridge repo scan|roots [add <dir>|remove <dir>]|primary <repoKey> <path>
 //   kai-bridge run --task "…" [--model …] [--profile …] [--cwd …]   (local turn, no server)
@@ -28,6 +29,7 @@ import { defaultRoots, groupByRepo, scanRoots, toDeviceRepoReport } from "../src
 import { install, isInstalled, uninstall, isEphemeralBinPath } from "../src/service.mjs";
 import { HARNESS_INFO, describeHarnesses, installHarness } from "../src/harnesses.mjs";
 import { fetchLatestVersion, installVersion, installedVersion, isNewer } from "../src/selfupdate.mjs";
+import { collectProcessList, formatProcessList } from "../src/ps.mjs";
 
 const BIN = fileURLToPath(import.meta.url);
 const argv = process.argv.slice(2);
@@ -68,6 +70,12 @@ async function status() {
   for (const r of toDeviceRepoReport(groups)) out(`  ${r.key.padEnd(48)} ${r.primaryPath}${r.checkouts > 1 ? ` (+${r.checkouts - 1})` : ""} ${r.dirtyCount ? `· ${r.dirtyCount} dirty` : ""}`);
 }
 
+/** Sessions running on this machine — read from the daemon's state files, so it works while the daemon is busy or down. */
+function ps() {
+  const list = collectProcessList();
+  out(flags.json ? JSON.stringify(list, null, 2) : formatProcessList(list));
+}
+
 async function profile() {
   const config = loadConfig();
   const sub = positional[0];
@@ -89,7 +97,8 @@ async function profile() {
   if (sub === "login") {
     const p = resolveProfiles(config).find((x) => x.id === positional[1]);
     if (!p) fail("unknown profile");
-    const c = loginCommand(p.harness, p.configDir);
+    await installHarness(p.harness, { kaiHome: KAI_HOME, onLog: out });
+    const c = loginCommand(p.harness, p.configDir, KAI_HOME, flags["device-auth"] ? { deviceAuth: true } : undefined);
     if (!c) fail(`${p.harness} is not installed`);
     const child = spawn(c.cmd, c.args, { env: c.env, stdio: "inherit" });
     child.on("close", (code) => process.exit(code ?? 0));
@@ -111,9 +120,9 @@ async function harness() {
     return;
   }
   const id = positional[1];
-  if (!HARNESS_INFO[id]) fail("usage: harness list|install <claude|codex|cursor>|login <id>");
+  if (!HARNESS_INFO[id]) fail("usage: harness list|install <id>|update <id>|login <id> (claude|codex|cursor)");
   if (sub === "install" || sub === "update") {
-    const res = await installHarness(id, { kaiHome: KAI_HOME, onLog: out });
+    const res = await installHarness(id, { kaiHome: KAI_HOME, onLog: out, update: sub === "update", version: typeof flags.version === "string" ? flags.version : undefined });
     if (!res.ok) fail(`${id} is not usable`);
     out(`${HARNESS_INFO[id].label} ${res.version} → ${res.binary}`);
     return;
@@ -123,7 +132,7 @@ async function harness() {
     positional[0] = "login";
     return profile();
   }
-  fail("usage: harness list|install <id>|login <id>");
+  fail("usage: harness list|install <id>|update <id>|login <id> [--device-auth]");
 }
 
 async function repo() {
@@ -230,6 +239,9 @@ try {
     case "status":
       await status();
       break;
+    case "ps":
+      ps();
+      break;
     case "profile":
       await profile();
       break;
@@ -279,8 +291,8 @@ try {
       out(`kai-bridge — run Gleap Kai Code on this machine
 
   setup                            guided onboarding (pair · service · sign-ins)
-  login | logout | install | uninstall | start | status | doctor | update
-  harness list|install <id>|login <id>
+  login | logout | install | uninstall | start | status | ps | doctor | update
+  harness list|install <id>|update <id>|login <id> [--device-auth]
   profile list|add <id> --harness claude|codex|cursor|login <id>|remove <id>
   repo scan|roots [add|remove <dir>]|primary <repoKey> <path>
   run --task "…" [--model …] [--profile …] [--cwd …]`);

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@gleapai/kai-bridge",
-  "version": "0.7.0",
+  "version": "0.9.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@gleapai/kai-bridge",
-      "version": "0.7.0",
+      "version": "0.9.1",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gleapai/kai-bridge",
-  "version": "0.7.0",
-  "description": "Run Gleap Kai Code sessions on your own machine with your own Claude Code / Codex login — and preview your real dev servers from the dashboard or the phone.",
+  "version": "0.9.1",
+  "description": "Kai Code Bridge runs Kai Code on your computer or server with your own coding subscriptions, local previews, and photo or video verification.",
   "type": "module",
   "license": "MIT",
   "bin": {
@@ -13,7 +13,6 @@
     "runner",
     "scripts/postinstall.mjs",
     "README.md",
-    "fly",
     "scripts/runtime-smoke.mjs",
     "npm-shrinkwrap.json"
   ],
@@ -52,8 +51,5 @@
     "type": "git",
     "url": "git+https://github.com/GleapSDK/kai-bridge.git"
   },
-  "homepage": "https://gleap.io",
-  "kaiHostedRuntime": {
-    "protocol": 1
-  }
+  "homepage": "https://gleap.io"
 }

package/scripts/runtime-smoke.mjs

@@ -55,6 +55,6 @@ try {
     await initialize(adapter.cmd, adapter.args, { protocolVersion: 1, clientCapabilities: {}, clientInfo: { name: 'kai-runtime-check', version: '1.0.0' } });
   }
   // Imports catch packaging omissions and syntax/dependency failures before boot.
-  await import('../src/daemon.mjs'); await import('../src/codex-broker.mjs');
+  await import('../src/daemon.mjs'); await import('../src/harness-install.mjs');
   console.log('Native CLIs, Codex app-server and both ACP adapters passed isolated startup checks.');
 } finally { rmSync(home, { recursive: true, force: true }); }

package/src/api.mjs

@@ -210,6 +210,14 @@ export class BridgeApi {
   pendingTurns() {
     return this.request("GET", "/gleapcode/bridge/devices/me/pending");
   }
+  /**
+   * Provider git credentials for one connected repository — asked for only
+   * after this machine's own credentials were rejected (see git-auth.mjs).
+   */
+  gitCredentials(repoKey) {
+    return this.request("POST", "/gleapcode/bridge/devices/me/git-credentials", { repoKey });
+  }
+
   commandAck(commandId, payload) {
     return this.request("POST", `/gleapcode/bridge/commands/${encodeURIComponent(commandId)}/ack`, payload);
   }