@organizaone/o1-code 0.14.1 → 0.15.0

package/locales/en.js

@@ -3396,4 +3396,79 @@ export default {
     '(Use Enter to select, Tab to switch scope)',
   'this project only': 'this project only',
   'Next: {{commands}}': 'Next: {{commands}}',
+  // Remote sessions (/rc)
+  'Mirror this session to your OrganizaOne account page and take input from there':
+    'Mirror this session to your OrganizaOne account page and take input from there',
+  '[off | status | name <name>]': '[off | status | name <name>]',
+  'Remote sessions are not available in this session.':
+    'Remote sessions are not available in this session.',
+  'Remote mode is not on.': 'Remote mode is not on.',
+  'Remote mode is off; the session ended on the account page.':
+    'Remote mode is off; the session ended on the account page.',
+  'Usage: /rc name <name>': 'Usage: /rc name <name>',
+  'Remote session renamed to {{name}}.': 'Remote session renamed to {{name}}.',
+  'Usage: /rc [off | status | name <name>]':
+    'Usage: /rc [off | status | name <name>]',
+  'remote: active · 1 viewer': 'remote: active · 1 viewer',
+  'remote: active · {{count}} viewers': 'remote: active · {{count}} viewers',
+  'remote: reconnecting': 'remote: reconnecting',
+  'remote: ended: {{reason}}': 'remote: ended: {{reason}}',
+  'Remote sessions are off for this session (remote.enabled, or O1CODE_DISABLE_REMOTE).':
+    'Remote sessions are off for this session (remote.enabled, or O1CODE_DISABLE_REMOTE).',
+  'Remote needs the OrganizaOne sign-in: connect with "Sign in with your account" or the o1-gateway device code (/auth).':
+    'Remote needs the OrganizaOne sign-in: connect with "Sign in with your account" or the o1-gateway device code (/auth).',
+  'Your plan does not include remote sessions. See your account at {{url}}.':
+    'Your plan does not include remote sessions. See your account at {{url}}.',
+  'The OrganizaOne gateway did not answer about this key. Try again in a moment.':
+    'The OrganizaOne gateway did not answer about this key. Try again in a moment.',
+  'remote.viaTunnel is "always", but this session has no o1-connect tunnel open.':
+    'remote.viaTunnel is "always", but this session has no o1-connect tunnel open.',
+  'remote.viaTunnel is "never", but this session only reaches OrganizaOne through the o1-connect tunnel.':
+    'remote.viaTunnel is "never", but this session only reaches OrganizaOne through the o1-connect tunnel.',
+  'Your plan allows no more remote sessions at once. Live now: {{sessions}}.':
+    'Your plan allows no more remote sessions at once. Live now: {{sessions}}.',
+  'Your plan allows no more remote sessions at once.':
+    'Your plan allows no more remote sessions at once.',
+  'The gateway refused the remote session ({{code}}): {{message}}':
+    'The gateway refused the remote session ({{code}}): {{message}}',
+  'Remote mode could not start.': 'Remote mode could not start.',
+  'Name: {{name}}': 'Name: {{name}}',
+  'Open: {{url}}': 'Open: {{url}}',
+  '/rc off ends it.': '/rc off ends it.',
+  'Remote mode is off.': 'Remote mode is off.',
+  '/rc turns it on.': '/rc turns it on.',
+  'Remote mode is on as "{{name}}": {{url}}':
+    'Remote mode is on as "{{name}}": {{url}}',
+  'A viewer opened this session on the account page ({{count}} watching).':
+    'A viewer opened this session on the account page ({{count}} watching).',
+  'A viewer left the account page ({{count}} watching).':
+    'A viewer left the account page ({{count}} watching).',
+  'Remote: the gateway is away; reconnecting.':
+    'Remote: the gateway is away; reconnecting.',
+  'Remote: connected to the gateway again.':
+    'Remote: connected to the gateway again.',
+  'Remote mode ended: {{reason}}.': 'Remote mode ended: {{reason}}.',
+  '[from the account page] {{text}}': '[from the account page] {{text}}',
+  'Answered from the account page: {{label}}':
+    'Answered from the account page: {{label}}',
+  'Remote sessions': 'Remote sessions',
+  'The OrganizaOne gateway will mirror this terminal to your account page: what you type, what the model answers, each tool call and its result, and the questions the terminal asks.':
+    'The OrganizaOne gateway will mirror this terminal to your account page: what you type, what the model answers, each tool call and its result, and the questions the terminal asks.',
+  'From the page you can type prompts, stop a turn, compact or clear the session, and answer permissions and questions. Shell access, /resume, plugins and the approval mode stay in the terminal.':
+    'From the page you can type prompts, stop a turn, compact or clear the session, and answer permissions and questions. Shell access, /resume, plugins and the approval mode stay in the terminal.',
+  'The gateway relays the session and keeps none of its content; it records that a session existed, who viewed it, and each decision and who answered it.':
+    'The gateway relays the session and keeps none of its content; it records that a session existed, who viewed it, and each decision and who answered it.',
+  'Enter to continue · Esc to cancel. Shown once.':
+    'Enter to continue · Esc to cancel. Shown once.',
+  'Connecting to the OrganizaOne gateway…':
+    'Connecting to the OrganizaOne gateway…',
+  'Remote mode is on as "{{name}}". Open this address on your account page, or scan the code:':
+    'Remote mode is on as "{{name}}". Open this address on your account page, or scan the code:',
+  'Esc closes this; /rc off ends the session.':
+    'Esc closes this; /rc off ends the session.',
+  'The QR code does not fit this terminal; open the address instead.':
+    'The QR code does not fit this terminal; open the address instead.',
+  Continue: 'Continue',
+  'Disconnect remote control': 'Disconnect remote control',
+  Other: 'Other',
 };

package/locales/pt.js

@@ -3704,4 +3704,81 @@ export default {
     '(Enter seleciona, Tab troca o escopo)',
   'this project only': 'só neste projeto',
   'Next: {{commands}}': 'Próximo: {{commands}}',
+  // Remote sessions (/rc)
+  'Mirror this session to your OrganizaOne account page and take input from there':
+    'Espelhar esta sessão na página da sua conta OrganizaOne e receber entrada de lá',
+  '[off | status | name <name>]': '[off | status | name <nome>]',
+  'Remote sessions are not available in this session.':
+    'Sessões remotas não estão disponíveis nesta sessão.',
+  'Remote mode is not on.': 'O modo remoto não está ligado.',
+  'Remote mode is off; the session ended on the account page.':
+    'Modo remoto desligado; a sessão foi encerrada na página da conta.',
+  'Usage: /rc name <name>': 'Uso: /rc name <nome>',
+  'Remote session renamed to {{name}}.':
+    'Sessão remota renomeada para {{name}}.',
+  'Usage: /rc [off | status | name <name>]':
+    'Uso: /rc [off | status | name <nome>]',
+  'remote: active · 1 viewer': 'remoto: ativo · 1 visualizador',
+  'remote: active · {{count}} viewers':
+    'remoto: ativo · {{count}} visualizadores',
+  'remote: reconnecting': 'remoto: reconectando',
+  'remote: ended: {{reason}}': 'remoto: encerrado: {{reason}}',
+  'Remote sessions are off for this session (remote.enabled, or O1CODE_DISABLE_REMOTE).':
+    'Sessões remotas estão desligadas nesta sessão (remote.enabled ou O1CODE_DISABLE_REMOTE).',
+  'Remote needs the OrganizaOne sign-in: connect with "Sign in with your account" or the o1-gateway device code (/auth).':
+    'O modo remoto precisa do login OrganizaOne: conecte com "Entrar com sua conta" ou com o código de dispositivo do o1-gateway (/auth).',
+  'Your plan does not include remote sessions. See your account at {{url}}.':
+    'Seu plano não inclui sessões remotas. Veja sua conta em {{url}}.',
+  'The OrganizaOne gateway did not answer about this key. Try again in a moment.':
+    'O gateway OrganizaOne não respondeu sobre esta chave. Tente de novo em instantes.',
+  'remote.viaTunnel is "always", but this session has no o1-connect tunnel open.':
+    'remote.viaTunnel está em "always", mas esta sessão não tem um túnel o1-connect aberto.',
+  'remote.viaTunnel is "never", but this session only reaches OrganizaOne through the o1-connect tunnel.':
+    'remote.viaTunnel está em "never", mas esta sessão só alcança a OrganizaOne pelo túnel o1-connect.',
+  'Your plan allows no more remote sessions at once. Live now: {{sessions}}.':
+    'Seu plano não permite mais sessões remotas ao mesmo tempo. Ativas agora: {{sessions}}.',
+  'Your plan allows no more remote sessions at once.':
+    'Seu plano não permite mais sessões remotas ao mesmo tempo.',
+  'The gateway refused the remote session ({{code}}): {{message}}':
+    'O gateway recusou a sessão remota ({{code}}): {{message}}',
+  'Remote mode could not start.': 'O modo remoto não pôde iniciar.',
+  'Name: {{name}}': 'Nome: {{name}}',
+  'Open: {{url}}': 'Abrir: {{url}}',
+  '/rc off ends it.': '/rc off encerra.',
+  'Remote mode is off.': 'Modo remoto desligado.',
+  '/rc turns it on.': '/rc liga.',
+  'Remote mode is on as "{{name}}": {{url}}':
+    'Modo remoto ligado como "{{name}}": {{url}}',
+  'A viewer opened this session on the account page ({{count}} watching).':
+    'Um visualizador abriu esta sessão na página da conta ({{count}} assistindo).',
+  'A viewer left the account page ({{count}} watching).':
+    'Um visualizador saiu da página da conta ({{count}} assistindo).',
+  'Remote: the gateway is away; reconnecting.':
+    'Remoto: o gateway está fora; reconectando.',
+  'Remote: connected to the gateway again.':
+    'Remoto: conectado ao gateway de novo.',
+  'Remote mode ended: {{reason}}.': 'Modo remoto encerrado: {{reason}}.',
+  '[from the account page] {{text}}': '[da página da conta] {{text}}',
+  'Answered from the account page: {{label}}':
+    'Respondido pela página da conta: {{label}}',
+  'Remote sessions': 'Sessões remotas',
+  'The OrganizaOne gateway will mirror this terminal to your account page: what you type, what the model answers, each tool call and its result, and the questions the terminal asks.':
+    'O gateway OrganizaOne vai espelhar este terminal na página da sua conta: o que você digita, o que o modelo responde, cada chamada de ferramenta e seu resultado, e as perguntas que o terminal faz.',
+  'From the page you can type prompts, stop a turn, compact or clear the session, and answer permissions and questions. Shell access, /resume, plugins and the approval mode stay in the terminal.':
+    'Pela página você pode digitar prompts, interromper um turno, compactar ou limpar a sessão, e responder permissões e perguntas. Acesso ao shell, /resume, plugins e o modo de aprovação ficam no terminal.',
+  'The gateway relays the session and keeps none of its content; it records that a session existed, who viewed it, and each decision and who answered it.':
+    'O gateway retransmite a sessão e não guarda nada do conteúdo; registra que uma sessão existiu, quem a viu, e cada decisão e quem respondeu.',
+  'Enter to continue · Esc to cancel. Shown once.':
+    'Enter continua · Esc cancela. Mostrado uma vez.',
+  'Connecting to the OrganizaOne gateway…':
+    'Conectando ao gateway OrganizaOne…',
+  'Remote mode is on as "{{name}}". Open this address on your account page, or scan the code:':
+    'Modo remoto ligado como "{{name}}". Abra este endereço na página da sua conta ou leia o código:',
+  'Esc closes this; /rc off ends the session.':
+    'Esc fecha isto; /rc off encerra a sessão.',
+  'The QR code does not fit this terminal; open the address instead.':
+    'O código QR não cabe neste terminal; abra o endereço.',
+  Continue: 'Continuar',
+  'Disconnect remote control': 'Desconectar controle remoto',
+  Other: 'Outra resposta',
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@organizaone/o1-code",
-  "version": "0.14.1",
+  "version": "0.15.0",
   "description": "O1-Code - AI-powered coding assistant",
   "license": "Apache-2.0",
   "repository": {
@@ -42,7 +42,7 @@
     "release-notes.json"
   ],
   "config": {
-    "sandboxImageUri": "ghcr.io/organizaone/o1-code:0.14.1"
+    "sandboxImageUri": "ghcr.io/organizaone/o1-code:0.15.0"
   },
   "dependencies": {},
   "optionalDependencies": {

package/release-notes.json

@@ -1,4 +1,10 @@
 {
+  "0.15.0": {
+    "highlights": [
+      "Remote sessions",
+      "The vendored o1-connect library is 9.9.0, which adds openRemote."
+    ]
+  },
   "0.14.1": {
     "highlights": [
       "A blocked Goal says how to move on"

package/vendor/o1-connect/.lintstagedrc.mjs

@@ -0,0 +1,7 @@
+// Copyright 2026 o1-code contributors
+// SPDX-License-Identifier: Apache-2.0
+
+export default {
+  'lib.mjs': 'node --check',
+  '*.{json,md}': 'prettier --write',
+};

package/vendor/o1-connect/README.md

@@ -4,7 +4,8 @@ The client library of o1-gateway (OrganizaOne AI Gateway), used by the "o1-gatew
 provider: the pinned tunnel of `o1-connect run` started inside o1-code, with a loopback endpoint
 that speaks the proxy's API and swaps the device token in.
 
-- `lib.mjs`: the library, one dependency-free ES module (`node:` modules only).
+- `lib.mjs`: the library, one dependency-free ES module (`node:` modules only). Since 9.9.0 it
+  also exports `openRemote`, the terminal's side of a remote session (contract §5).
 - `lib.d.mts`: its types.
 
 Both are copied, never loaded at run time: the library is what protects the session on a network
@@ -15,13 +16,13 @@ dependency, and update `VENDOR.json` with the new version and hashes; the test
 The local lint-staged configuration checks the library's syntax without formatting it, so
 pre-commit checks preserve the upstream bytes and their recorded hash.
 
-|                                     |                                                                                        |
-| ----------------------------------- | -------------------------------------------------------------------------------------- |
-| Version                             | 9.4.0 (`// o1-connect-lib 9.4.0`)                                                      |
-| Source                              | `github.com/organizaone/o1-gateway`, commit `eb849d839dca8a53958885bb0cfe1320b09fd24b` |
-| `lib.mjs` SHA-256                   | `06c4176a6cfd975c70e8c079bdb93ed1024e3076090c77d066d12cef5a305db1`                     |
-| `lib.d.mts` SHA-256                 | `852feb8f9dbb324c5118e9ca8d92371abc2364b0536e161bfb7682fd1dd6eafe`                     |
-| Checked against local gateway build | 2026-10-06, source and copy compared with `Get-FileHash`                               |
+|                             |                                                                                        |
+| --------------------------- | -------------------------------------------------------------------------------------- |
+| Version                     | 9.9.0 (`// o1-connect-lib 9.9.0`)                                                      |
+| Source                      | `github.com/organizaone/o1-gateway`, commit `a7234d36eca4d9bc6b73c68d26494e21a44b6cae` |
+| `lib.mjs` SHA-256           | `3f1784b067660cfd2866a023885948f1a246c029ee9a3dc73f1a126072c7d0fb`                     |
+| `lib.d.mts` SHA-256         | `242576aa4d42aa82665f7bd570b5b0f432e2df497e7ed0586ceb850b3fe250e4`                     |
+| Checked against the gateway | 2026-10-11, `https://api.organizaone.com/client/lib.mjs.sha256` compared with `shasum` |
 
 License: MIT (the banner of each file).
 

package/vendor/o1-connect/VENDOR.json

@@ -1,10 +1,10 @@
 {
   "name": "o1-connect-lib",
-  "version": "9.4.0",
+  "version": "9.9.0",
   "source": "https://github.com/organizaone/o1-gateway",
-  "commit": "eb849d839dca8a53958885bb0cfe1320b09fd24b",
+  "commit": "a7234d36eca4d9bc6b73c68d26494e21a44b6cae",
   "files": {
-    "lib.mjs": "06c4176a6cfd975c70e8c079bdb93ed1024e3076090c77d066d12cef5a305db1",
-    "lib.d.mts": "852feb8f9dbb324c5118e9ca8d92371abc2364b0536e161bfb7682fd1dd6eafe"
+    "lib.mjs": "3f1784b067660cfd2866a023885948f1a246c029ee9a3dc73f1a126072c7d0fb",
+    "lib.d.mts": "242576aa4d42aa82665f7bd570b5b0f432e2df497e7ed0586ceb850b3fe250e4"
   }
 }

package/vendor/o1-connect/lib.d.mts

@@ -1,4 +1,4 @@
-// o1-connect-lib 9.4.0 - https://github.com/organizaone/o1-gateway (MIT)
+// o1-connect-lib 9.9.0 - https://github.com/organizaone/o1-gateway (MIT)
 /**
  * o1-connect as a library (docs/O1-CODE-LOGIN.md §3): the pinned tunnel
  * of `o1-connect run`, started inside the host app instead of as a
@@ -14,6 +14,9 @@
  *   proxy's API with the device token swapped in, and returns its base URL, a
  *   per-session key for it, and close().
  * - forget({ store }) deletes the saved configuration.
+ * - openRemote({ connection | baseUrl + apiKey, session, history }) puts a
+ *   terminal session in remote mode (remote.ts, §5): the gateway mirrors what
+ *   the app sends to the owner's browser and hands back its input and answers.
  *
  * Secrets (the device token) live only in the app's SecretStore and in this
  * process's memory: the library writes no file, sets no environment
@@ -57,7 +60,13 @@ export type O1ConnectErrorCode =
 /** The local port asked for is taken. */
  | "port_in_use"
 /** The loopback endpoint could not listen for another reason (EACCES, EADDRNOTAVAIL: a port the OS reserves or forbids); the message names it. */
- | "port_unavailable";
+ | "port_unavailable"
+/** The gateway refused the remote session before it opened; the `cause` is `{ status, code }` (the HTTP status, 0 for a `bye`, and the gateway's code or the bye's reason). */
+ | "remote_refused"
+/** The upgrade was answered by something that is not a remote session's gateway. */
+ | "remote_protocol"
+/** A decision was closed before a viewer answered it (in the terminal, by its expiry, or with the session). */
+ | "decision_closed";
 export declare class O1ConnectError extends Error {
     readonly code: O1ConnectErrorCode;
     constructor(code: O1ConnectErrorCode, message: string, options?: {
@@ -130,6 +139,119 @@ export interface Connection {
     /** Stops the tunnel and the endpoint; resolves once the port is free. Safe to call twice. */
     close(): Promise<void>;
 }
+export type RemoteState = "online" | "reconnecting" | "ended";
+export type RemoteDecisionKind = "can_use_tool" | "ask_user" | "plan";
+export type RemoteCommandName = "interrupt" | "compact" | "clear" | "model" | "effort";
+/** The terminal session going remote, as the gateway and a viewer name it. */
+export interface RemoteSessionInfo {
+    /** The session's own id: the same id re-opens the same remote session (and keeps a viewer's URL) within four hours. */
+    id: string;
+    /** Shown to the viewer (the host's name and a suffix, as a rule). */
+    name: string;
+    /** A hint of the working directory, for the viewer's list; never a secret. */
+    cwd?: string;
+    /** The terminal's version. */
+    version: string;
+    approvalMode: string;
+    model: string;
+}
+export interface RemoteDecisionOption {
+    value: string;
+    label: string;
+    danger?: boolean;
+}
+/** A question the terminal puts to its viewers too: a tool's permission, a question to the user, a plan. */
+export interface RemoteDecisionRequest {
+    id: string;
+    kind: RemoteDecisionKind;
+    /** ISO time; the gateway holds the request open at most an hour. */
+    expiresAt: string;
+    title: string;
+    summary: string;
+    options: RemoteDecisionOption[];
+}
+export interface RemoteDecision {
+    outcome: string;
+    payload?: unknown;
+    by: "remote";
+}
+export interface RemoteAgentEvents {
+    /** A viewer typed a prompt: for the terminal's own queue. */
+    input: {
+        id: string;
+        text: string;
+    };
+    /** A viewer ran one of the commands allowed remotely. */
+    command: {
+        id: string;
+        name: RemoteCommandName;
+        args?: Record<string, unknown>;
+    };
+    /** A viewer answered a decision (requestDecision's promise resolves with it too). */
+    decision: {
+        id: string;
+        outcome: string;
+        payload?: unknown;
+    };
+    viewer: {
+        op: "attached" | "detached";
+        count: number;
+    };
+    /** online after a reconnection, reconnecting while the gateway is away, ended with why (a `bye`'s reason, or `closed`). */
+    state: {
+        state: RemoteState;
+        reason?: string;
+    };
+    /** The gateway refused one of this side's frames (`code`, and the frame's `id` when it had one). */
+    error: {
+        code: string;
+        id?: string;
+    };
+}
+export interface RemoteOpenOptions {
+    /** The gateway's base URL (https; http for a loopback host in tests), with `apiKey`. */
+    baseUrl?: string;
+    /** Or an open() connection: the session rides its pinned tunnel with its device key. */
+    connection?: Connection;
+    /** The device key, with `baseUrl`. */
+    apiKey?: string;
+    session: RemoteSessionInfo;
+    /** The session's recent events, for a viewer's first screen (the newest that fit 512 KiB); a function is read at every hello. */
+    history?: unknown[] | (() => unknown[]);
+    /** Lines without content (ids, counts, reasons); default: none. */
+    log?(line: string): void;
+}
+export interface RemoteAgent {
+    readonly remoteId: string;
+    /** Where a viewer opens the session (the account page). */
+    readonly url: string;
+    readonly state: RemoteState;
+    /** One event of the session, as the terminal shows it (opaque to the gateway). */
+    send(ev: unknown): void;
+    status(s: {
+        state: "idle" | "streaming" | "awaiting";
+        model?: string;
+        approvalMode?: string;
+    }): void;
+    /** Asks the viewers; resolves with the first viewer's answer, rejects `decision_closed` once closeDecision runs (the terminal answered first) or the session ends. */
+    requestDecision(req: RemoteDecisionRequest): Promise<RemoteDecision>;
+    /** The request is no longer open: answered in the terminal (`local`), by a viewer (`remote`, after the promise resolved), or expired. */
+    closeDecision(id: string, by: "local" | "remote" | "expired", outcome?: string | null): void;
+    /** Subscribes; the function returned unsubscribes. */
+    on<K extends keyof RemoteAgentEvents>(event: K, fn: (e: RemoteAgentEvents[K]) => void): () => void;
+    /** Leaves remote mode: the gateway ends the session at once and tells the viewers. Safe to call twice. */
+    close(): Promise<void>;
+}
+/**
+ * Puts a terminal session in remote mode: an outbound connection to the
+ * gateway's `/remote/agent` (through `connection`'s tunnel, or straight to
+ * `baseUrl` with `apiKey`), the session's hello, and the gateway's ready.
+ * Resolves once viewers may attach; rejects `remote_refused` when the
+ * gateway will not have it (the key, the plan, a ceiling), with why in the
+ * `cause`. The agent reconnects on its own and ends only on a refusal it
+ * cannot mend or on close().
+ */
+export declare function openRemote(opts: RemoteOpenOptions): Promise<RemoteAgent>;
 /**
  * Reads the code, has the app confirm every key's fingerprint, then saves the
  * configuration under `name` in the store (replacing any there). Nothing is