@mindexec/cli 0.2.477 → 0.2.478

package/README.md

@@ -1,232 +1,232 @@
-# MindExec Local Bridge Server
-
-??Blazor ?깆뿉??濡쒖뺄 ?뚯씪 ?쒖뒪?쒖뿉 ?묎렐?섍린 ?꾪븳 Node.js 釉뚮━吏€ ?쒕쾭?낅땲??
-
-## npm quick start
-
-```bash
-npx -y mindexec@latest
-```
-
-`mindexec` is the short official launcher alias. Existing
-`npx -y @mindexec/cli@latest` commands remain compatible.
-
-The npm CLI now starts both pieces of the local product:
-
-- MindCanvas app: `http://localhost:5147/mindcanvas`
-- LocalBridge API: `http://127.0.0.1:5147/api/status`
-- Workspace assets: `http://127.0.0.1:5147/assets/...`
-
-By default the CLI opens the MindCanvas app in your default browser after the
-bridge is ready. Use `mindexec --no-open` or `MINDEXEC_NO_OPEN=1` when you only
-want to start the listener.
-
-For npx and global installs, the default workspace is the directory where you
-run the command. Run it from the folder that contains your `.mindexec` data, or
-pass the workspace explicitly:
-
-```bash
-npx -y mindexec@latest --workspace /path/to/workspace
-```
-
-For local frontend development, keep LocalBridge running and refresh the
-packaged app bundle after code changes:
-
-```powershell
-.\scripts\publish-mindexec-cli.ps1 -AppOnly
-```
-
-Then hard-refresh `http://localhost:5147/mindcanvas` in the browser.
-
-The app and bridge are packaged together. Run `scripts/publish-mindexec-cli.ps1`
-from the repository root before publishing so the latest
-`MindExecution.Web` WASM `wwwroot` is copied into `LocalBridge/wwwroot`.
-The packaged app is configured with `Bridge:Url=app-origin`, so custom
-`BRIDGE_PORT` values keep the WASM app and LocalBridge API on the same origin.
-The publish helper trims hosted/demo-only gallery images and unused
-precompressed static files from the npm bundle by default. Use
-`-KeepPackagedGalleryImages` or `-KeepPackagedPrecompressedAssets` only when
-testing a full untrimmed local package.
-
-## Standalone Electron desktop app
-
-The Electron build contains both the published MindCanvas frontend and
-LocalBridge runtime. It does not discover, replace, or reuse a separately
-running `npx` Bridge. Each desktop launch allocates dedicated available
-LocalBridge and RemoteHub ports, starts its bundled runtime, and releases those
-ports when the app exits.
-
-Build Windows installer and portable artifacts:
-
-```powershell
-cd LocalBridge
-npm run desktop:build:win
-npm run test:desktop:win
-```
-
-Release artifacts are written to `artifacts/electron`:
-
-- `MindExec-Setup-<version>-x64.exe`
-- `MindExec-Portable-<version>-x64.exe`
-- `win-unpacked/MindExec.exe`
-
-The default desktop workspace is `Documents/MindExecution`. Set
-`MINDEXEC_DESKTOP_WORKSPACE` to use an explicit workspace. Store signing,
-Partner Center identity, Apple provisioning, and sandbox entitlements are
-release-channel credentials and are intentionally not embedded in source.
-
-## Remote Direct quick start
-
-LocalBridge also starts a separate RemoteHub listener for direct remote-agent
-experiments. By default it binds to loopback only:
-
-```bash
-npx -y mindexec@latest
-npx @mindexec/remote connect --manager 127.0.0.1:5198 --pair <pair-token>
-```
-
-Read the pair token from the protected local endpoint:
-
-```bash
-curl -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/status
-```
-
-LAN/direct mode must be enabled explicitly by changing the RemoteHub bind host:
-
-```powershell
-$env:REMOTE_HUB_HOST="0.0.0.0"
-$env:REMOTE_HUB_PORT="5198"
-$env:REMOTE_HUB_PAIR_TOKEN="<strong-token>"
-npx -y mindexec@latest
-```
-
-Device inventory is intentionally not paginated:
-
-```bash
-curl -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices
-```
-
-Request and read the latest view-only thumbnail for a connected device:
-
-```bash
-curl -X POST -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices/<device-id>/thumbnail/request
-curl -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices/<device-id>/thumbnail
-```
-
-Start, read, and stop the focused view-only RemoteFast live stream:
-
-```bash
-curl -X POST -H "X-Bridge-Token: <bridge-token>" -H "Content-Type: application/json" \
-  -d "{\"fps\":12,\"maxWidth\":960,\"maxHeight\":540,\"quality\":60}" \
-  http://127.0.0.1:5147/api/remote/devices/<device-id>/live/start
-
-curl -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices/<device-id>/live/frame
-
-curl -X POST -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices/<device-id>/live/stop
-```
-
-Queue a safe task-only instruction for one device or all connected devices:
-
-```bash
-curl -X POST -H "X-Bridge-Token: <bridge-token>" -H "Content-Type: application/json" \
-  -d "{\"instruction\":\"Check the desktop and report status.\"}" \
-  http://127.0.0.1:5147/api/remote/devices/<device-id>/tasks
-
-curl -X POST -H "X-Bridge-Token: <bridge-token>" -H "Content-Type: application/json" \
-  -d "{\"instruction\":\"Prepare a short status report.\",\"allConnected\":true}" \
-  http://127.0.0.1:5147/api/remote/tasks
-```
-
-Queue an opt-in text-only AI assist task for agents started with `--ai`:
-
-```bash
-curl -X POST -H "X-Bridge-Token: <bridge-token>" -H "Content-Type: application/json" \
-  -d "{\"instruction\":\"Summarize what this computer should do next.\",\"allConnected\":true,\"approvalLevel\":\"ai-assist\"}" \
-  http://127.0.0.1:5147/api/remote/tasks
-```
-
-?먮뒗 ?꾩뿭 ?ㅼ튂 ???ㅽ뻾?⑸땲??
-
-```bash
-npm install -g @mindexec/cli
-mindexec
-```
-
-湲곕낯 ?ㅽ뻾 二쇱냼??`http://127.0.0.1:5147`?낅땲?? `WORKSPACE_PATH`媛€ 鍮꾩뼱 ?덉쑝硫??ㅼ튂???⑦궎吏€??遺€紐??대뜑瑜?湲곕낯 ?묒뾽 怨듦컙?쇰줈 ?ъ슜?⑸땲??
-
-```bash
-mindexec --workspace /custom/path
-BRIDGE_PORT=8080 WORKSPACE_PATH=/custom/path mindexec
-```
-
-?꾩?留먭낵 踰꾩쟾 ?뺤씤:
-
-```bash
-mindexec --help
-mindexec --version
-```
-
-## ?ㅼ튂
+# MindExec Local Bridge Server
+
+??Blazor ?깆뿉??濡쒖뺄 ?뚯씪 ?쒖뒪?쒖뿉 ?묎렐?섍린 ?꾪븳 Node.js 釉뚮━吏€ ?쒕쾭?낅땲??
+
+## npm quick start
+
+```bash
+npx -y mindexec@latest
+```
+
+`mindexec` is the short official launcher alias. Existing
+`npx -y @mindexec/cli@latest` commands remain compatible.
+
+The npm CLI now starts both pieces of the local product:
+
+- MindCanvas app: `http://localhost:5147/mindcanvas`
+- LocalBridge API: `http://127.0.0.1:5147/api/status`
+- Workspace assets: `http://127.0.0.1:5147/assets/...`
+
+By default the CLI opens the MindCanvas app in your default browser after the
+bridge is ready. Use `mindexec --no-open` or `MINDEXEC_NO_OPEN=1` when you only
+want to start the listener.
+
+For npx and global installs, the default workspace is the directory where you
+run the command. Run it from the folder that contains your `.mindexec` data, or
+pass the workspace explicitly:
+
+```bash
+npx -y mindexec@latest --workspace /path/to/workspace
+```
+
+For local frontend development, keep LocalBridge running and refresh the
+packaged app bundle after code changes:
+
+```powershell
+.\scripts\publish-mindexec-cli.ps1 -AppOnly
+```
+
+Then hard-refresh `http://localhost:5147/mindcanvas` in the browser.
+
+The app and bridge are packaged together. Run `scripts/publish-mindexec-cli.ps1`
+from the repository root before publishing so the latest
+`MindExecution.Web` WASM `wwwroot` is copied into `LocalBridge/wwwroot`.
+The packaged app is configured with `Bridge:Url=app-origin`, so custom
+`BRIDGE_PORT` values keep the WASM app and LocalBridge API on the same origin.
+The publish helper trims hosted/demo-only gallery images and unused
+precompressed static files from the npm bundle by default. Use
+`-KeepPackagedGalleryImages` or `-KeepPackagedPrecompressedAssets` only when
+testing a full untrimmed local package.
+
+## Standalone Electron desktop app
+
+The Electron build contains both the published MindCanvas frontend and
+LocalBridge runtime. It does not discover, replace, or reuse a separately
+running `npx` Bridge. Each desktop launch allocates dedicated available
+LocalBridge and RemoteHub ports, starts its bundled runtime, and releases those
+ports when the app exits.
+
+Build Windows installer and portable artifacts:
+
+```powershell
+cd LocalBridge
+npm run desktop:build:win
+npm run test:desktop:win
+```
+
+Release artifacts are written to `artifacts/electron`:
+
+- `MindExec-Setup-<version>-x64.exe`
+- `MindExec-Portable-<version>-x64.exe`
+- `win-unpacked/MindExec.exe`
+
+The default desktop workspace is `Documents/MindExecution`. Set
+`MINDEXEC_DESKTOP_WORKSPACE` to use an explicit workspace. Store signing,
+Partner Center identity, Apple provisioning, and sandbox entitlements are
+release-channel credentials and are intentionally not embedded in source.
+
+## Remote Direct quick start
+
+LocalBridge also starts a separate RemoteHub listener for direct remote-agent
+experiments. By default it binds to loopback only:
+
+```bash
+npx -y mindexec@latest
+npx @mindexec/remote connect --manager 127.0.0.1:5198 --pair <pair-token>
+```
+
+Read the pair token from the protected local endpoint:
+
+```bash
+curl -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/status
+```
+
+LAN/direct mode must be enabled explicitly by changing the RemoteHub bind host:
+
+```powershell
+$env:REMOTE_HUB_HOST="0.0.0.0"
+$env:REMOTE_HUB_PORT="5198"
+$env:REMOTE_HUB_PAIR_TOKEN="<strong-token>"
+npx -y mindexec@latest
+```
+
+Device inventory is intentionally not paginated:
+
+```bash
+curl -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices
+```
+
+Request and read the latest view-only thumbnail for a connected device:
+
+```bash
+curl -X POST -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices/<device-id>/thumbnail/request
+curl -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices/<device-id>/thumbnail
+```
+
+Start, read, and stop the focused view-only RemoteFast live stream:
+
+```bash
+curl -X POST -H "X-Bridge-Token: <bridge-token>" -H "Content-Type: application/json" \
+  -d "{\"fps\":12,\"maxWidth\":960,\"maxHeight\":540,\"quality\":60}" \
+  http://127.0.0.1:5147/api/remote/devices/<device-id>/live/start
+
+curl -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices/<device-id>/live/frame
+
+curl -X POST -H "X-Bridge-Token: <bridge-token>" http://127.0.0.1:5147/api/remote/devices/<device-id>/live/stop
+```
+
+Queue a safe task-only instruction for one device or all connected devices:
+
+```bash
+curl -X POST -H "X-Bridge-Token: <bridge-token>" -H "Content-Type: application/json" \
+  -d "{\"instruction\":\"Check the desktop and report status.\"}" \
+  http://127.0.0.1:5147/api/remote/devices/<device-id>/tasks
+
+curl -X POST -H "X-Bridge-Token: <bridge-token>" -H "Content-Type: application/json" \
+  -d "{\"instruction\":\"Prepare a short status report.\",\"allConnected\":true}" \
+  http://127.0.0.1:5147/api/remote/tasks
+```
+
+Queue an opt-in text-only AI assist task for agents started with `--ai`:
+
+```bash
+curl -X POST -H "X-Bridge-Token: <bridge-token>" -H "Content-Type: application/json" \
+  -d "{\"instruction\":\"Summarize what this computer should do next.\",\"allConnected\":true,\"approvalLevel\":\"ai-assist\"}" \
+  http://127.0.0.1:5147/api/remote/tasks
+```
+
+?먮뒗 ?꾩뿭 ?ㅼ튂 ???ㅽ뻾?⑸땲??
+
+```bash
+npm install -g @mindexec/cli
+mindexec
+```
+
+湲곕낯 ?ㅽ뻾 二쇱냼??`http://127.0.0.1:5147`?낅땲?? `WORKSPACE_PATH`媛€ 鍮꾩뼱 ?덉쑝硫??ㅼ튂???⑦궎吏€??遺€紐??대뜑瑜?湲곕낯 ?묒뾽 怨듦컙?쇰줈 ?ъ슜?⑸땲??
+
+```bash
+mindexec --workspace /custom/path
+BRIDGE_PORT=8080 WORKSPACE_PATH=/custom/path mindexec
+```
+
+?꾩?留먭낵 踰꾩쟾 ?뺤씤:
+
+```bash
+mindexec --help
+mindexec --version
+```
+
+## ?ㅼ튂
 
 ```bash
 cd LocalBridge
 npm install
 ```
 
-## ?ㅽ뻾
-
-### ?쇰컲 ?ㅽ뻾
-```bash
-cd LocalBridge
-npm start
-```
-
-`npm start`??`WORKSPACE_PATH`媛€ 鍮꾩뼱 ?덉쑝硫?`LocalBridge`??遺€紐??대뜑(蹂댄넻 ?€?μ냼 猷⑦듃)瑜?湲곕낯 ?묒뾽 怨듦컙?쇰줈 ?ъ슜?⑸땲??
-
-### macOS / Linux?먯꽌 ?명븯寃??ㅽ뻾
-```bash
-cd LocalBridge
-chmod +x start-bridge.sh
-./start-bridge.sh
-```
-
-`start-bridge.sh`???ㅼ쓬???먮룞?쇰줈 泥섎━?⑸땲??
-- `WORKSPACE_PATH`媛€ ?놁쑝硫??€?μ냼 猷⑦듃瑜??묒뾽 怨듦컙?쇰줈 ?ъ슜
-- `BRIDGE_PORT`媛€ ?놁쑝硫?`5147` ?ъ슜
-- 媛숈? ?ы듃???대? 釉뚮━吏€媛€ ???덉쑝硫?以묐났 ?ㅽ뻾 諛⑹?
-- ?ㅻⅨ OS?먯꽌 蹂듭궗????`node_modules`媛€ 媛먯??섎㈃ ?꾩옱 ?뚮옯?쇱슜?쇰줈 ?ㅼ떆 `npm install`
-
-### 媛쒕컻 紐⑤뱶 (?먮룞 ?ъ떆??
-```bash
-npm run dev
-```
-
-### ?섍꼍 蹂€??
-
-| 蹂€??| ?ㅻ챸 | 湲곕낯媛?|
-|------|------|--------|
-| `BRIDGE_PORT` | ?쒕쾭 ?ы듃 | 5147 |
-| `WORKSPACE_PATH` | ?묒뾽 怨듦컙 寃쎈줈 | `LocalBridge` ?먮뒗 ?ㅼ튂 ?⑦궎吏€??遺€紐??대뜑 (?놁쑝硫?`~/Documents/MindExecution`) |
-| `BRIDGE_TOKEN` | ?꾪뿕 REST API???ъ슜??怨좎젙 ?좏겙. 鍮꾩슦硫??ㅽ뻾 ???쒕뜡 ?앹꽦 | ?쒕뜡 |
-| `BRIDGE_REQUIRE_TOKEN` | `false`/`0`/`off`濡??ㅼ젙?섎㈃ REST ?좏겙 寃€??鍮꾪솢?깊솕 | true |
-| `COMPANY_CORE_URL` | CompanyCore 濡쒖뺄 API 二쇱냼. `/api/company-core/*` ?꾨줉???€??| http://127.0.0.1:5077 |
-| `BRIDGE_SKIP_PORT_REAP` | ?쒖옉 ???숈씪 ?ы듃??湲곗〈 MindExec bridge ?뺣━瑜?嫄대꼫?? | false |
-| `BRIDGE_FORCE_KILL_PORT_OWNER` | `BRIDGE_PORT`瑜??≪쓣 ?꾩쓽 ?꾨줈?몄뒪瑜??뺣━ | false |
-
-?덉떆:
-```bash
-BRIDGE_PORT=8080 WORKSPACE_PATH=/custom/path npm start
-```
-
-macOS / Linux?먯꽌 ?ㅽ겕由쏀듃?€ ?④퍡 ?ㅽ뻾???뚮룄 ?숈씪?⑸땲??
-```bash
-BRIDGE_PORT=8080 WORKSPACE_PATH=/custom/path ./start-bridge.sh
-```
-
-## API ?붾뱶?ъ씤??
-
-### ?곹깭 ?뺤씤
-- `GET /api/status` - ?쒕쾭 ?곹깭 ?뺤씤, `/events`??`wsToken`怨??꾪뿕 REST API??`bridgeToken` 諛섑솚
+## ?ㅽ뻾
+
+### ?쇰컲 ?ㅽ뻾
+```bash
+cd LocalBridge
+npm start
+```
+
+`npm start`??`WORKSPACE_PATH`媛€ 鍮꾩뼱 ?덉쑝硫?`LocalBridge`??遺€紐??대뜑(蹂댄넻 ?€?μ냼 猷⑦듃)瑜?湲곕낯 ?묒뾽 怨듦컙?쇰줈 ?ъ슜?⑸땲??
+
+### macOS / Linux?먯꽌 ?명븯寃??ㅽ뻾
+```bash
+cd LocalBridge
+chmod +x start-bridge.sh
+./start-bridge.sh
+```
+
+`start-bridge.sh`???ㅼ쓬???먮룞?쇰줈 泥섎━?⑸땲??
+- `WORKSPACE_PATH`媛€ ?놁쑝硫??€?μ냼 猷⑦듃瑜??묒뾽 怨듦컙?쇰줈 ?ъ슜
+- `BRIDGE_PORT`媛€ ?놁쑝硫?`5147` ?ъ슜
+- 媛숈? ?ы듃???대? 釉뚮━吏€媛€ ???덉쑝硫?以묐났 ?ㅽ뻾 諛⑹?
+- ?ㅻⅨ OS?먯꽌 蹂듭궗????`node_modules`媛€ 媛먯??섎㈃ ?꾩옱 ?뚮옯?쇱슜?쇰줈 ?ㅼ떆 `npm install`
+
+### 媛쒕컻 紐⑤뱶 (?먮룞 ?ъ떆??
+```bash
+npm run dev
+```
+
+### ?섍꼍 蹂€??
+
+| 蹂€??| ?ㅻ챸 | 湲곕낯媛?|
+|------|------|--------|
+| `BRIDGE_PORT` | ?쒕쾭 ?ы듃 | 5147 |
+| `WORKSPACE_PATH` | ?묒뾽 怨듦컙 寃쎈줈 | `LocalBridge` ?먮뒗 ?ㅼ튂 ?⑦궎吏€??遺€紐??대뜑 (?놁쑝硫?`~/Documents/MindExecution`) |
+| `BRIDGE_TOKEN` | ?꾪뿕 REST API???ъ슜??怨좎젙 ?좏겙. 鍮꾩슦硫??ㅽ뻾 ???쒕뜡 ?앹꽦 | ?쒕뜡 |
+| `BRIDGE_REQUIRE_TOKEN` | `false`/`0`/`off`濡??ㅼ젙?섎㈃ REST ?좏겙 寃€??鍮꾪솢?깊솕 | true |
+| `COMPANY_CORE_URL` | CompanyCore 濡쒖뺄 API 二쇱냼. `/api/company-core/*` ?꾨줉???€??| http://127.0.0.1:5077 |
+| `BRIDGE_SKIP_PORT_REAP` | ?쒖옉 ???숈씪 ?ы듃??湲곗〈 MindExec bridge ?뺣━瑜?嫄대꼫?? | false |
+| `BRIDGE_FORCE_KILL_PORT_OWNER` | `BRIDGE_PORT`瑜??≪쓣 ?꾩쓽 ?꾨줈?몄뒪瑜??뺣━ | false |
+
+?덉떆:
+```bash
+BRIDGE_PORT=8080 WORKSPACE_PATH=/custom/path npm start
+```
+
+macOS / Linux?먯꽌 ?ㅽ겕由쏀듃?€ ?④퍡 ?ㅽ뻾???뚮룄 ?숈씪?⑸땲??
+```bash
+BRIDGE_PORT=8080 WORKSPACE_PATH=/custom/path ./start-bridge.sh
+```
+
+## API ?붾뱶?ъ씤??
+
+### ?곹깭 ?뺤씤
+- `GET /api/status` - ?쒕쾭 ?곹깭 ?뺤씤, `/events`??`wsToken`怨??꾪뿕 REST API??`bridgeToken` 諛섑솚
 
 ### ?묒뾽 怨듦컙
 - `GET /api/workspace` - ?꾩옱 ?묒뾽 怨듦컙 ?뺣낫
@@ -238,7 +238,7 @@ BRIDGE_PORT=8080 WORKSPACE_PATH=/custom/path ./start-bridge.sh
 - `POST /api/file/delete` - ?뚯씪 ??젣
 - `POST /api/file/exists` - ?뚯씪 議댁옱 ?뺤씤
 - `POST /api/file/copy` - ?뚯씪 蹂듭궗
-- `POST /api/file/move` - ?뚯씪 ?대룞/?대쫫 蹂€寃?
+- `POST /api/file/move` - ?뚯씪 ?대룞/?대쫫 蹂€寃?
 - `POST /api/file/info` - ?뚯씪 ?뺣낫
 
 ### ?붾젆?좊━ ?묒뾽
@@ -246,54 +246,54 @@ BRIDGE_PORT=8080 WORKSPACE_PATH=/custom/path ./start-bridge.sh
 - `POST /api/dir/list` - ?붾젆?좊━ 紐⑸줉
 - `POST /api/dir/delete` - ?붾젆?좊━ ??젣
 
-### ???ㅽ뻾
-- `POST /api/shell/execute` - ??紐낅졊 ?ㅽ뻾. 湲곗〈 ?명솚?⑹씠硫??대??곸쑝濡?job ?대깽?몃? `/events`濡??꾩넚
-- `POST /api/shell/jobs` - ??紐낅졊??諛깃렇?쇱슫??job?쇰줈 ?쒖옉?섍퀬 `jobId` 諛섑솚
-- `GET /api/shell/jobs/:jobId` - job ?곹깭/異쒕젰 議고쉶
-- `POST /api/shell/jobs/:jobId/cancel` - ?ㅽ뻾 以묒씤 job 痍⑥냼
-
-### ?대깽???ㅽ듃由?- `WebSocket /events?token=<wsToken>` - ?꾨줈?앺듃 蹂€寃쎄낵 shell/Codex job ?대깽?몃? push
-
-Shell/Codex job ?대깽??
-- `ShellQueued`
-- `ShellStarted`
-- `ShellStdout`
-- `ShellStderr`
-- `ShellCompleted`
-- `ShellFailed`
-- `ShellCancelRequested`
-
-### OpenAI Codex runtime
-- `GET /api/codex/capabilities` - TypeScript SDK / App Server scaffold / Legacy Exec provider availability
-- `POST /api/codex/thread/start` - start a local Codex thread
-- `POST /api/codex/thread/run` - run a Codex turn. Uses `@openai/codex-sdk` first and falls back to legacy `codex exec`
-- `POST /api/codex/image/run` - generate or edit one image through `@openai/codex-sdk`; invalid login opens the bundled browser sign-in flow and retries once
-- `POST /api/codex/thread/resume` - resume a stored SDK thread by id
-- `POST /api/codex/thread/cancel` - cancel an active turn
-- `GET /api/codex/thread/:threadId/status` - inspect local thread status and compact run metadata
-
-The TypeScript SDK runs only inside LocalBridge. Browser/WASM clients should call these bridge endpoints and must not import or execute Codex SDK packages directly.
-
-By default, LocalBridge reuses the active `CODEX_HOME` (or the standard `~/.codex` home) so SDK calls share the existing Codex login. Set `MINDEXEC_CODEX_HOME` only when a deliberately separate MindExec login is required.
-
-### Port ownership
-
-On startup, LocalBridge checks `BRIDGE_PORT` and stops an existing MindExec/LocalBridge listener on that same port before binding. If the port is owned by an unrelated process, startup fails with a clear message instead of silently killing it. Set `BRIDGE_FORCE_KILL_PORT_OWNER=1` only when the launcher owns that port policy and should terminate any listener.
-
-The `start-bridge.bat` and `start-bridge.sh` wrappers always delegate startup to `launch-bridge.cjs`, so port cleanup is handled by the same guard path on every launch.
-### CompanyCore ?꾨줉??- `GET /api/company-core/health` -> `CompanyCore /health`
-- `GET /api/company-core/companies` -> `CompanyCore /api/companies`
-- `POST /api/company-core/companies/create-and-run` -> `CompanyCore /api/companies/create-and-run`
-
-MindExec Web?€ CompanyCore ?ы듃瑜?吏곸젒 ???꾩슂 ?놁씠 LocalBridge `5147`留??몄텧?섎㈃ ?⑸땲?? ???꾨줉?쒕룄 Bridge Token 蹂댄샇瑜?諛쏆뒿?덈떎.
+### ???ㅽ뻾
+- `POST /api/shell/execute` - ??紐낅졊 ?ㅽ뻾. 湲곗〈 ?명솚?⑹씠硫??대??곸쑝濡?job ?대깽?몃? `/events`濡??꾩넚
+- `POST /api/shell/jobs` - ??紐낅졊??諛깃렇?쇱슫??job?쇰줈 ?쒖옉?섍퀬 `jobId` 諛섑솚
+- `GET /api/shell/jobs/:jobId` - job ?곹깭/異쒕젰 議고쉶
+- `POST /api/shell/jobs/:jobId/cancel` - ?ㅽ뻾 以묒씤 job 痍⑥냼
+
+### ?대깽???ㅽ듃由?- `WebSocket /events?token=<wsToken>` - ?꾨줈?앺듃 蹂€寃쎄낵 shell/Codex job ?대깽?몃? push
+
+Shell/Codex job ?대깽??
+- `ShellQueued`
+- `ShellStarted`
+- `ShellStdout`
+- `ShellStderr`
+- `ShellCompleted`
+- `ShellFailed`
+- `ShellCancelRequested`
+
+### OpenAI Codex runtime
+- `GET /api/codex/capabilities` - TypeScript SDK / App Server scaffold / Legacy Exec provider availability
+- `POST /api/codex/thread/start` - start a local Codex thread
+- `POST /api/codex/thread/run` - run a Codex turn. Uses `@openai/codex-sdk` first and falls back to legacy `codex exec`
+- `POST /api/codex/image/run` - generate or edit one image through `@openai/codex-sdk`; invalid login opens the bundled browser sign-in flow and retries once
+- `POST /api/codex/thread/resume` - resume a stored SDK thread by id
+- `POST /api/codex/thread/cancel` - cancel an active turn
+- `GET /api/codex/thread/:threadId/status` - inspect local thread status and compact run metadata
+
+The TypeScript SDK runs only inside LocalBridge. Browser/WASM clients should call these bridge endpoints and must not import or execute Codex SDK packages directly.
+
+By default, LocalBridge reuses the active `CODEX_HOME` (or the standard `~/.codex` home) so SDK calls share the existing Codex login. Set `MINDEXEC_CODEX_HOME` only when a deliberately separate MindExec login is required.
+
+### Port ownership
+
+On startup, LocalBridge checks `BRIDGE_PORT` and stops an existing MindExec/LocalBridge listener on that same port before binding. If the port is owned by an unrelated process, startup fails with a clear message instead of silently killing it. Set `BRIDGE_FORCE_KILL_PORT_OWNER=1` only when the launcher owns that port policy and should terminate any listener.
+
+The `start-bridge.bat` and `start-bridge.sh` wrappers always delegate startup to `launch-bridge.cjs`, so port cleanup is handled by the same guard path on every launch.
+### CompanyCore ?꾨줉??- `GET /api/company-core/health` -> `CompanyCore /health`
+- `GET /api/company-core/companies` -> `CompanyCore /api/companies`
+- `POST /api/company-core/companies/create-and-run` -> `CompanyCore /api/companies/create-and-run`
+
+MindExec Web?€ CompanyCore ?ы듃瑜?吏곸젒 ???꾩슂 ?놁씠 LocalBridge `5147`留??몄텧?섎㈃ ?⑸땲?? ???꾨줉?쒕룄 Bridge Token 蹂댄샇瑜?諛쏆뒿?덈떎.
 
 ## 蹂댁븞 二쇱쓽?ы빆
 
-- ???쒕쾭??**濡쒖뺄?몄뒪??127.0.0.1)?먯꽌留?* ?묎렐 媛€?ν빀?덈떎.
-- ?묒뾽 怨듦컙 ?몃????뚯씪?먮뒗 ?묎렐?????놁뒿?덈떎.
-- ?꾪뿕????紐낅졊(rm -rf, format ???€ 李⑤떒?⑸땲??
-- ?뚯씪 ?곌린/??젣, ?붾젆?좊━ ?앹꽦/??젣, asset ?낅줈?? shell, project open/close 媛숈? ?꾪뿕 REST API??湲곕낯?곸쑝濡?`X-Bridge-Token` ?먮뒗 `Authorization: Bearer <token>`???꾩슂?⑸땲??
-- ?좏겙?€ `GET /api/status`??`bridgeToken`?쇰줈 ?뺤씤?⑸땲?? 怨좎젙 ?좏겙???꾩슂?섎㈃ `BRIDGE_TOKEN` ?섍꼍 蹂€?섎? ?ъ슜?섏꽭??
+- ???쒕쾭??**濡쒖뺄?몄뒪??127.0.0.1)?먯꽌留?* ?묎렐 媛€?ν빀?덈떎.
+- ?묒뾽 怨듦컙 ?몃????뚯씪?먮뒗 ?묎렐?????놁뒿?덈떎.
+- ?꾪뿕????紐낅졊(rm -rf, format ???€ 李⑤떒?⑸땲??
+- ?뚯씪 ?곌린/??젣, ?붾젆?좊━ ?앹꽦/??젣, asset ?낅줈?? shell, project open/close 媛숈? ?꾪뿕 REST API??湲곕낯?곸쑝濡?`X-Bridge-Token` ?먮뒗 `Authorization: Bearer <token>`???꾩슂?⑸땲??
+- ?좏겙?€ `GET /api/status`??`bridgeToken`?쇰줈 ?뺤씤?⑸땲?? 怨좎젙 ?좏겙???꾩슂?섎㈃ `BRIDGE_TOKEN` ?섍꼍 蹂€?섎? ?ъ슜?섏꽭??
 
 ## ?ъ슜 ?덉떆
 
@@ -308,65 +308,65 @@ const data = await response.json();
 console.log(data.content);
 ```
 
-### ?뚯씪 ?곌린
-```javascript
-const status = await fetch('http://127.0.0.1:5147/api/status').then(r => r.json());
-
-await fetch('http://127.0.0.1:5147/api/file/write', {
-    method: 'POST',
-    headers: {
-        'Content-Type': 'application/json',
-        [status.bridgeTokenHeader || 'X-Bridge-Token']: status.bridgeToken
-    },
-    body: JSON.stringify({ 
-        path: 'test.txt', 
-        content: 'Hello, World!' 
+### ?뚯씪 ?곌린
+```javascript
+const status = await fetch('http://127.0.0.1:5147/api/status').then(r => r.json());
+
+await fetch('http://127.0.0.1:5147/api/file/write', {
+    method: 'POST',
+    headers: {
+        'Content-Type': 'application/json',
+        [status.bridgeTokenHeader || 'X-Bridge-Token']: status.bridgeToken
+    },
+    body: JSON.stringify({ 
+        path: 'test.txt', 
+        content: 'Hello, World!' 
     })
 });
 ```
 
-### ??紐낅졊 ?ㅽ뻾
-```javascript
-const status = await fetch('http://127.0.0.1:5147/api/status').then(r => r.json());
-
-const response = await fetch('http://127.0.0.1:5147/api/shell/execute', {
-    method: 'POST',
-    headers: {
-        'Content-Type': 'application/json',
-        [status.bridgeTokenHeader || 'X-Bridge-Token']: status.bridgeToken
-    },
-    body: JSON.stringify({ 
-        command: 'dir',
-        timeout: 30000 
+### ??紐낅졊 ?ㅽ뻾
+```javascript
+const status = await fetch('http://127.0.0.1:5147/api/status').then(r => r.json());
+
+const response = await fetch('http://127.0.0.1:5147/api/shell/execute', {
+    method: 'POST',
+    headers: {
+        'Content-Type': 'application/json',
+        [status.bridgeTokenHeader || 'X-Bridge-Token']: status.bridgeToken
+    },
+    body: JSON.stringify({ 
+        command: 'dir',
+        timeout: 30000 
     })
 });
-const result = await response.json();
-console.log(result.stdout);
-```
-
-### ??job ?ㅽ듃由щ컢
-```javascript
-const status = await fetch('http://127.0.0.1:5147/api/status').then(r => r.json());
-const ws = new WebSocket(`ws://127.0.0.1:5147/events?token=${encodeURIComponent(status.wsToken)}`);
-
-ws.onmessage = (message) => {
-    const event = JSON.parse(message.data);
-    if (event.type === 'ShellStdout') console.log(event.payload.chunk);
-    if (event.type === 'ShellCompleted') console.log('done', event.payload.jobId);
-};
-
-await fetch('http://127.0.0.1:5147/api/shell/jobs', {
-    method: 'POST',
-    headers: {
-        'Content-Type': 'application/json',
-        [status.bridgeTokenHeader || 'X-Bridge-Token']: status.bridgeToken
-    },
-    body: JSON.stringify({
-        command: 'codex exec \"Summarize this repository\"',
-        timeout: 300000
-    })
-});
-```
+const result = await response.json();
+console.log(result.stdout);
+```
+
+### ??job ?ㅽ듃由щ컢
+```javascript
+const status = await fetch('http://127.0.0.1:5147/api/status').then(r => r.json());
+const ws = new WebSocket(`ws://127.0.0.1:5147/events?token=${encodeURIComponent(status.wsToken)}`);
+
+ws.onmessage = (message) => {
+    const event = JSON.parse(message.data);
+    if (event.type === 'ShellStdout') console.log(event.payload.chunk);
+    if (event.type === 'ShellCompleted') console.log('done', event.payload.jobId);
+};
+
+await fetch('http://127.0.0.1:5147/api/shell/jobs', {
+    method: 'POST',
+    headers: {
+        'Content-Type': 'application/json',
+        [status.bridgeTokenHeader || 'X-Bridge-Token']: status.bridgeToken
+    },
+    body: JSON.stringify({
+        command: 'codex exec \"Summarize this repository\"',
+        timeout: 300000
+    })
+});
+```
 
 ## CORS
 
@@ -382,6 +382,6 @@ await fetch('http://127.0.0.1:5147/api/shell/jobs', {
 ## Web怨?MAUI ?숈떆 ?ъ슜
 
 1. 釉뚮━吏€ ?쒕쾭瑜??ㅽ뻾?⑸땲??(`npm start`)
-2. Web Blazor ?깆쓣 ?ㅽ뻾?⑸땲??
+2. Web Blazor ?깆쓣 ?ㅽ뻾?⑸땲??
 3. MAUI ?깆? 釉뚮━吏€ ?쒕쾭 ?놁씠???묐룞?⑸땲??(吏곸젒 ?뚯씪 ?쒖뒪???묎렐)