@jbaehova/onthego 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ONTHEGO contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,69 @@
+# ONTHEGO
+
+ONTHEGO carries project-scoped agent sessions, a redacted handoff, execution logs, and work state between a local Git workspace and a Daytona sandbox. A small control plane on Contabo keeps the latest state available across local machines. `status` turns the synchronized state into a concise update with GPT-5.6 Luna using high reasoning effort.
+
+## Install
+
+The npm package currently uses the `@jbaehova` scope because the unscoped `onthego` name is owned by another npm account.
+
+```sh
+npm install -g @jbaehova/onthego
+```
+
+The installed command is `onthego`.
+
+## Phase 1 commands
+
+```sh
+onthego init
+onthego login
+onthego pass
+onthego status
+onthego pull
+```
+
+`init` turns the current Git repository into an ONTHEGO project. It creates the safe, trackable `.onthego.yaml` project identity and adds local secret and state patterns to `.gitignore`. Re-running it preserves the existing project identity. `login` authenticates this device with the ONTHEGO control plane. `pass` automatically finds every session for the current Git project from Codex, Cursor, Hermes, and Claude. It redacts all detected sessions, generates `HANDOFF.md`, and starts the default `agent-sync` workload in Daytona. No agent or session option is required. `status` refreshes the latest Daytona run and redacted logs, synchronizes them through the control plane, and generates the LLM summary. `pull` downloads the latest result only after its SHA-256 hash matches the remote receipt.
+
+Run `onthego init` once after cloning or creating a repository. The Phase 1 pass flow is always `onthego pass`.
+
+## Secrets
+
+All repository secret values live in one root `.env`. ONTHEGO searches from the working directory to the Git root and refuses a file readable by group or other users. The current integration reads these keys:
+
+- `DAYTONA_API_KEY`
+- `OPENAI_API_KEY`
+- `ONTHEGO_CONTROL_PLANE_URL`
+- `ONTHEGO_CONTROL_PLANE_TLS_SHA256`
+- `ONTHEGO_LOGIN_BOOTSTRAP_TOKEN`
+- `ONTHEGO_CONTROL_PLANE_SIGNING_KEY`
+- `CONTABO_VPS_IP_ADDRESS`
+- `CONTABO_VPS_DEFAULT_USER`
+- `CONTABO_VPS_PASSWORD`
+
+The `.env` file, `AGENTS.md`, `.agents/`, local state, npm credentials, archives, build output, logs, and editor metadata are ignored by Git. The login session is stored outside the repository with permission `0600`.
+
+## Security model
+
+- Context selection accepts only Codex, Cursor, Hermes, and Claude sessions associated with the current Git project.
+- Redaction removes common tokens, authorization headers, private keys, and matching secret assignments before transfer.
+- The Contabo client pins the server certificate SHA-256 fingerprint.
+- Control plane state updates use authenticated generation checks.
+- Daytona result files are accepted only when the remote receipt contains a matching SHA-256 hash.
+- Portable internal snapshots use age X25519 encryption and Ed25519 signatures.
+
+## Release
+
+GitHub Actions tests the Go code, builds static Linux amd64 and macOS arm64 binaries, assembles the npm package, scans the release tree for local or secret files, publishes to npm, and attaches checksummed binaries to the GitHub release.
+
+## Development
+
+Go 1.25.4 or newer and Node.js 18 or newer are required.
+
+```sh
+make check
+make build
+```
+
+GPU fine-tuning, GPU model serving, and the Hugging Face connector are backlog items. Their internal experiments are not part of the Phase 1 command contract.
+
+See [docs/architecture.md](docs/architecture.md) and [docs/progress.md](docs/progress.md) for the implementation record.

package/npm/bin/onthego.js

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+
+const { spawnSync } = require("node:child_process");
+const { existsSync } = require("node:fs");
+const path = require("node:path");
+
+const supported = new Map([
+  ["darwin-arm64", "onthego-darwin-arm64"],
+  ["linux-x64", "onthego-linux-amd64"],
+]);
+
+const platform = `${process.platform}-${process.arch}`;
+const filename = supported.get(platform);
+if (!filename) {
+  process.stderr.write(`onthego does not support ${platform} yet\n`);
+  process.exit(1);
+}
+
+const binary = path.resolve(__dirname, "..", "vendor", filename);
+if (!existsSync(binary)) {
+  process.stderr.write(`onthego binary is missing for ${platform}\n`);
+  process.exit(1);
+}
+
+const result = spawnSync(binary, process.argv.slice(2), {
+  stdio: "inherit",
+  env: process.env,
+});
+
+if (result.error) {
+  process.stderr.write(`${result.error.message}\n`);
+  process.exit(1);
+}
+process.exit(result.status ?? 1);

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@jbaehova/onthego",
+  "version": "0.1.1",
+  "description": "Carry agent context and work between local projects and Daytona sandboxes",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jbaehova/onthego.git"
+  },
+  "homepage": "https://github.com/jbaehova/onthego#readme",
+  "bugs": {
+    "url": "https://github.com/jbaehova/onthego/issues"
+  },
+  "bin": {
+    "onthego": "npm/bin/onthego.js"
+  },
+  "files": [
+    "npm/bin/onthego.js",
+    "npm/vendor/onthego-darwin-arm64",
+    "npm/vendor/onthego-linux-amd64",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "demo": "./scripts/demo.sh",
+    "prepack": "node npm/scripts/verify-package.mjs",
+    "test": "go test ./..."
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
+}