@seele00/seele 0.1.91 → 1.0.0

package/README.md

@@ -1,82 +1,38 @@
-# Seele Codex npm Package
+# Seele Host npm artifact
 
-This package is the prebuilt Linux x64 Seele service. Its backend is the Rust
-`seele-server`/`seele-worker` runtime, statically linked against musl so it does
-not depend on the target host's glibc version. Node.js 24 LTS and npm are
-retained for installing and updating the Seele-managed Codex CLI; the target
-host does not need Rust, pnpm, TypeScript, or Vite.
+This package contains Seele Host, the long-lived supervisor and recovery control plane exposed by
+the `seele` command. The Host semantic contract starts at major version 1. Seele Work remains a
+separately versioned immutable artifact in `@seele00/seele-work`; Host downloads, verifies, retains,
+and activates Work versions.
 
-The web output is path-independent. `SEELE_PUBLIC_BASE_PATH` selects the public
-path when the service starts; changing it does not require another build.
+The package contains only:
 
-## Required Deployment Values
+- `bin/seele`, a thin launcher for Seele Host;
+- `libexec/seele-host`, a statically linked Linux x64 Host binary;
+- `host-release-manifest.json`, with source provenance, target details, and a SHA-256 digest for
+  every other packaged file;
+- `initial-work.json`, which pins the exact verified `@seele00/seele-work` version, npm SRI,
+  release-manifest digest, and build commit used for first startup;
+- `README.md`, `LEGAL.md`, and `package.json`.
 
-Before installation, confirm all of these values with the package owner or
-target-environment owner. Do not invent or silently default them:
+It has no npm dependencies and no lifecycle scripts.
 
-- `SEELE_ROOT`: persistent root containing `.runtime` and `workspaces`.
-- `SEELE_CODEX_HOST`: service listen address.
-- `SEELE_CODEX_PORT`: service listen port.
-- `SEELE_PUBLIC_BASE_PATH`: externally visible path prefix, such as `/`.
-- `SEELE_PROXY`: local no-auth proxy URL consumed by Codex.
-- `SEELE_UPSTREAM_PROXY`: authenticated upstream proxy URL consumed by gost.
-- `SEELE_AUTH_PASSWORD`: initial admin password for a non-loopback listener.
+## Release handoff
 
-`SEELE_UPSTREAM_PROXY` has the form
-`socks5h://username:password@hostname:port`. Ask the package owner for the
-complete secret value. Do not reconstruct it from the example.
+This archive was created as a release candidate by the repository's locked, offline Host packaging
+lane. That lane requires a clean Git worktree, a configured local upstream, a `HEAD` that is not
+ahead of that upstream, a Linux x64 builder, and two byte-identical `npm pack` results. It does not
+contact the npm registry, publish a package, or change a dist-tag.
 
-## Install
+The archive must travel with its npm pack, verifier, provenance, integrity, and handoff JSON files.
+A designated release owner must independently review that handoff before performing any publication
+from the dedicated publishing instance. Possession of this archive is not publication authorization.
 
-Keep npm's cache under the persistent Seele root so later installs and upgrades
-can reuse downloaded packages:
+An archive can be verified without extracting it:
 
-```bash
-npm install --global @seele00/seele@latest \
-  --registry=https://registry.npmmirror.com/ \
-  --cache "$SEELE_ROOT/.runtime/npm-cache"
+```sh
+node scripts/deploy/verify-seele-host-npm.mjs \
+  --mode release-candidate \
+  --archive seele00-seele-1.0.0.tgz \
+  --expected-version 1.0.0
 ```
-
-Copy and edit the environment template:
-
-```bash
-cp "$(seele env-example)" "$SEELE_ROOT/seele.env"
-vi "$SEELE_ROOT/seele.env"
-```
-
-On the first installation, prepare the Seele-managed Codex CLI, authenticate
-with a headless device code, and start the service:
-
-```bash
-seele bootstrap \
-  --env "$SEELE_ROOT/seele.env" \
-  --auth device \
-  --start
-```
-
-The command prints a URL and one-time device code. Complete authentication in
-a browser on another machine. No browser is required on the Linux host.
-
-## Start And Upgrade
-
-For normal service starts after bootstrap:
-
-```bash
-seele start --env "$SEELE_ROOT/seele.env"
-```
-
-`seele start` does not install, configure, or validate Codex CLI. It starts the
-platform even when the CLI is absent so CLI lifecycle handling can remain inside
-the platform.
-
-Upgrade the npm package without rebuilding Seele on the target host:
-
-```bash
-npm install --global @seele00/seele@<new-version> \
-  --registry=https://registry.npmmirror.com/ \
-  --cache "$SEELE_ROOT/.runtime/npm-cache"
-seele start --env "$SEELE_ROOT/seele.env"
-```
-
-Package upgrades do not update an existing Codex CLI. Use Seele's runtime
-settings UI for later Codex CLI updates.

package/bin/seele

@@ -0,0 +1,15 @@
+#!/bin/sh
+set -eu
+
+SOURCE="$0"
+while [ -L "$SOURCE" ]; do
+  SOURCE_DIR="$(CDPATH= cd -- "$(dirname -- "$SOURCE")" && pwd)"
+  SOURCE="$(readlink "$SOURCE")"
+  case "$SOURCE" in
+    /*) ;;
+    *) SOURCE="$SOURCE_DIR/$SOURCE" ;;
+  esac
+done
+PACKAGE_ROOT="$(CDPATH= cd -- "$(dirname -- "$SOURCE")/.." && pwd)"
+
+exec "$PACKAGE_ROOT/libexec/seele-host" "$@"

package/host-release-manifest.json

@@ -0,0 +1,58 @@
+{
+  "manifestVersion": 1,
+  "product": "seele-host",
+  "packageName": "@seele00/seele",
+  "version": "1.0.0",
+  "buildCommit": "859e1ca5ea25b010c1f4c0a7706557f24587f45c",
+  "sourceDateEpoch": 1787119252,
+  "sourceDirty": false,
+  "target": {
+    "os": "linux",
+    "architecture": "x86_64",
+    "rustTarget": "x86_64-unknown-linux-musl",
+    "linkage": "static-musl"
+  },
+  "entrypoints": {
+    "host": "libexec/seele-host",
+    "cli": "bin/seele"
+  },
+  "files": [
+    {
+      "path": "LEGAL.md",
+      "sha256": "adba50d9794b9ef3f7ec8cbc680f7f1fa3fbf9df0ac8d1f9b9ccab6d941bc11b",
+      "size": 572,
+      "executable": false
+    },
+    {
+      "path": "README.md",
+      "sha256": "dde9f9cd4de96a957d5decf70f03e642f58cb54318d4d1038e855770dc2fbc7a",
+      "size": 1772,
+      "executable": false
+    },
+    {
+      "path": "bin/seele",
+      "sha256": "f1bcb888f2b35d80afcec240f149e4c7d20e048aaa6410d7d6d810e1d8a1b610",
+      "size": 352,
+      "executable": true
+    },
+    {
+      "path": "initial-work.json",
+      "sha256": "333fdc3f31fd51d8980e6d69fc5b5eb8e593d7ee021740b8d9ea1d7ae6fd4372",
+      "size": 354,
+      "executable": false
+    },
+    {
+      "path": "libexec/seele-host",
+      "sha256": "ef3eca3e611714a68b5a4f586230b758de5240eeeb200503995a625036d7542f",
+      "size": 13551120,
+      "executable": true
+    },
+    {
+      "path": "package.json",
+      "sha256": "d86bac61399fb9e667e8a557dbab0f65311183fc4c08c0974ce18d31bed942e1",
+      "size": 263,
+      "executable": false
+    }
+  ],
+  "artifactMode": "release-candidate"
+}

package/initial-work.json

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": 1,
+  "packageName": "@seele00/seele-work",
+  "version": "0.1.93",
+  "npmIntegrity": "sha512-Ofk/0bmk1myRiDS0Uva09AHN3wO548HNIMuokJO81kQfPlYZfzTM/y4FQpfjB1Rz6vbdXzcCCBNdS/r9Ut0bwA==",
+  "manifestDigest": "73b4418a03057d2326a08de53ac646435e19e3b2b889f3a8d6b6987c6e0b7d8a",
+  "buildCommit": "859e1ca5ea25b010c1f4c0a7706557f24587f45c"
+}

package/package.json

@@ -1,9 +1,8 @@
 {
   "name": "@seele00/seele",
-  "version": "0.1.91",
-  "description": "Browser UI and server runtime for Seele Codex",
+  "version": "1.0.0",
+  "description": "Seele Host supervisor and recovery control plane",
   "private": false,
-  "type": "module",
   "license": "UNLICENSED",
   "os": [
     "linux"
@@ -11,11 +10,7 @@
   "cpu": [
     "x64"
   ],
-  "engines": {
-    "node": ">=24 <25"
-  },
   "bin": {
-    "seele": "bin/seele-codex",
-    "seele-codex": "bin/seele-codex"
+    "seele": "bin/seele"
   }
 }

package/bin/seele-codex

@@ -1,58 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-SOURCE="${BASH_SOURCE[0]}"
-while [ -h "$SOURCE" ]; do
-  SOURCE_DIR="$(cd -P "$(dirname "$SOURCE")" && pwd)"
-  SOURCE="$(readlink "$SOURCE")"
-  case "$SOURCE" in
-    /*) ;;
-    *) SOURCE="$SOURCE_DIR/$SOURCE" ;;
-  esac
-done
-PACKAGE_ROOT="$(cd -P "$(dirname "$SOURCE")/.." && pwd)"
-
-usage() {
-  cat <<'EOF'
-Usage: seele-codex <command> [options]
-
-Commands:
-  bootstrap   Prepare Codex CLI/authentication, then optionally start Seele.
-  start       Start the Seele web and API service.
-  doctor      Check the configured Seele runtime.
-  env-example Print the installed environment-file template path.
-  version     Print the installed Seele package version.
-EOF
-}
-
-COMMAND="${1:-}"
-if [ -n "$COMMAND" ]; then
-  shift
-fi
-
-case "$COMMAND" in
-  bootstrap)
-    exec "$PACKAGE_ROOT/scripts/deploy/bootstrap.sh" --skip-build "$@"
-    ;;
-  start)
-    exec "$PACKAGE_ROOT/scripts/deploy/start.sh" "$@"
-    ;;
-  doctor)
-    export SEELE_CODEX_WEB_DIST="${SEELE_CODEX_WEB_DIST:-$PACKAGE_ROOT/web/dist}"
-    exec "$PACKAGE_ROOT/libexec/seele-server" doctor "$@"
-    ;;
-  env-example)
-    printf '%s\n' "$PACKAGE_ROOT/scripts/deploy/seele.env.example"
-    ;;
-  version|--version|-v)
-    exec node -e 'console.log(require(process.argv[1]).version)' "$PACKAGE_ROOT/package.json"
-    ;;
-  help|--help|-h|"")
-    usage
-    ;;
-  *)
-    echo "Unknown command: $COMMAND" >&2
-    usage >&2
-    exit 1
-    ;;
-esac

package/scripts/deploy/bootstrap.sh

@@ -1,334 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-cd "$ROOT_DIR"
-
-ENV_FILE=""
-CLI_AUTH_MODE=""
-START_AFTER=0
-SKIP_BUILD=0
-
-usage() {
-  cat <<'EOF'
-Usage: ./scripts/deploy/bootstrap.sh [options]
-
-Options:
-  --env PATH             Load deployment environment variables from PATH.
-  --auth MODE            device | auth-json | token | none. Defaults to none.
-  --start                Start Seele Codex after bootstrap succeeds.
-  --skip-build           Skip pnpm install/build.
-  -h, --help             Show this help.
-
-Typical first run:
-
-  cp scripts/deploy/seele.env.example seele.env
-  ./scripts/deploy/bootstrap.sh --env ./seele.env --start
-EOF
-}
-
-main() {
-while [ "$#" -gt 0 ]; do
-  case "$1" in
-    --env)
-      ENV_FILE="${2:-}"
-      shift 2
-      ;;
-    --auth)
-      CLI_AUTH_MODE="${2:-}"
-      shift 2
-      ;;
-    --start)
-      START_AFTER=1
-      shift
-      ;;
-    --skip-build)
-      SKIP_BUILD=1
-      shift
-      ;;
-    -h|--help)
-      usage
-      exit 0
-      ;;
-    *)
-      echo "Unknown option: $1" >&2
-      usage >&2
-      exit 1
-      ;;
-  esac
-done
-
-if [ -n "$ENV_FILE" ]; then
-  if [ ! -f "$ENV_FILE" ]; then
-    echo "Environment file not found: $ENV_FILE" >&2
-    exit 1
-  fi
-  set -a
-  # shellcheck disable=SC1090
-  . "$ENV_FILE"
-  set +a
-fi
-
-if [ -z "${SEELE_ROOT:-}" ]; then
-  echo "SEELE_ROOT is required for this deployment test." >&2
-  echo "Ask the package owner or target-environment owner for the Seele root directory and put it in seele.env." >&2
-  exit 1
-fi
-if [ -z "${SEELE_CLOUD_URL:-}" ]; then
-  echo "SEELE_CLOUD_URL is required for deployment authorization." >&2
-  echo "Ask the deployment owner for the reachable cloud Seele URL and put it in seele.env." >&2
-  exit 1
-fi
-export SEELE_ROOT
-AUTH_MODE="${CLI_AUTH_MODE:-${SEELE_DEPLOY_AUTH_MODE:-none}}"
-RUNTIME_DIR="${SEELE_RUNTIME_DIR:-$SEELE_ROOT/.runtime}"
-export SEELE_RUNTIME_DIR="$RUNTIME_DIR"
-export CODEX_HOME="${CODEX_HOME:-$RUNTIME_DIR/codex-home}"
-export CODEX_INSTALL_DIR="$RUNTIME_DIR/bin"
-export SEELE_CODEX_WORKSPACE_ROOT="${SEELE_CODEX_WORKSPACE_ROOT:-$SEELE_ROOT/workspaces}"
-export SEELE_CODEX_WEB_DIST="${SEELE_CODEX_WEB_DIST:-$ROOT_DIR/web/dist}"
-export SEELE_PUBLIC_BASE_PATH="$(normalize_base_path "${SEELE_PUBLIC_BASE_PATH:-/}")"
-export PATH="$CODEX_INSTALL_DIR:$PATH"
-
-if [ -z "${SEELE_PROXY:-}" ]; then
-  echo "SEELE_PROXY is required for this deployment test." >&2
-  echo "Ask the package owner for the proxy value, put it in seele.env, then rerun bootstrap." >&2
-  exit 1
-fi
-
-normalize_proxy_env
-
-mkdir -p "$RUNTIME_DIR" "$CODEX_HOME" "$CODEX_INSTALL_DIR" "$SEELE_CODEX_WORKSPACE_ROOT"
-chmod 700 "$CODEX_HOME"
-
-ensure_node
-ensure_codex_cli
-write_codex_config
-authenticate_codex "$AUTH_MODE"
-
-if [ "$SKIP_BUILD" -eq 0 ]; then
-  ensure_rust
-  ensure_pnpm
-  pnpm install --frozen-lockfile
-  pnpm --filter @seele-codex/web build
-  cargo build --locked --release --manifest-path "$ROOT_DIR/Cargo.toml" \
-    -p seele-server -p seele-worker
-fi
-
-cat <<EOF
-Seele Codex bootstrap completed.
-
-Runtime directory: $RUNTIME_DIR
-Codex home: $CODEX_HOME
-Codex install dir: $CODEX_INSTALL_DIR
-Workspace root: $SEELE_CODEX_WORKSPACE_ROOT
-EOF
-
-if [ "$START_AFTER" -eq 1 ]; then
-  if [ -n "$ENV_FILE" ]; then
-    exec "$ROOT_DIR/scripts/deploy/start.sh" --env "$ENV_FILE"
-  fi
-  exec "$ROOT_DIR/scripts/deploy/start.sh"
-fi
-}
-
-normalize_proxy_env() {
-  export NO_PROXY="${NO_PROXY:-127.0.0.1,localhost,.svc,.cluster.local}"
-  export no_proxy="$NO_PROXY"
-}
-
-with_runtime_proxy() {
-  if [ -n "${SEELE_PROXY:-}" ]; then
-    ALL_PROXY="$SEELE_PROXY" \
-      HTTP_PROXY="$SEELE_PROXY" \
-      HTTPS_PROXY="$SEELE_PROXY" \
-      all_proxy="$SEELE_PROXY" \
-      http_proxy="$SEELE_PROXY" \
-      https_proxy="$SEELE_PROXY" \
-      "$@"
-    return
-  fi
-
-  "$@"
-}
-
-normalize_base_path() {
-  local value="$1"
-  if [ -z "$value" ]; then
-    value="/"
-  fi
-  value="/${value#/}"
-  value="${value%/}/"
-  printf '%s' "$value"
-}
-
-replace_path_atomically() {
-  node -e 'require("node:fs").renameSync(process.argv[1], process.argv[2])' "$1" "$2"
-}
-
-ensure_node() {
-  if ! command -v node >/dev/null 2>&1; then
-    echo "node is required. Install Node.js 24 LTS before running this script." >&2
-    exit 1
-  fi
-
-  node -e 'const major = Number(process.versions.node.split(".")[0]); if (major !== 24) { console.error(`Node.js 24 LTS is required. Current: ${process.version}`); process.exit(1); }'
-}
-
-ensure_rust() {
-  if ! command -v cargo >/dev/null 2>&1; then
-    echo "Rust/Cargo is required to build Seele from source." >&2
-    exit 1
-  fi
-}
-
-ensure_pnpm() {
-  if command -v pnpm >/dev/null 2>&1; then
-    return
-  fi
-
-  if ! command -v corepack >/dev/null 2>&1; then
-    echo "pnpm is required, or corepack must be available to install pnpm." >&2
-    exit 1
-  fi
-
-  corepack enable
-  corepack prepare pnpm@9.15.0 --activate
-}
-
-ensure_codex_cli() {
-  if [ -x "$CODEX_INSTALL_DIR/codex" ]; then
-    local current_version_output=""
-    if current_version_output="$("$CODEX_INSTALL_DIR/codex" --version 2>/dev/null)"; then
-      echo "Using Seele-managed Codex CLI: $current_version_output"
-      return
-    fi
-    echo "WARNING: The existing Seele-managed Codex CLI is not runnable on this platform." >&2
-    echo "Start Seele, open Settings > Runtime > Check Update, and explicitly start the reinstall." >&2
-    return
-  fi
-
-  if ! command -v npm >/dev/null 2>&1; then
-    echo "npm is required to install Codex CLI automatically." >&2
-    exit 1
-  fi
-
-  local codex_root="$RUNTIME_DIR/codex"
-  local versions_dir="$codex_root/versions"
-  local staging_dir="$codex_root/.staging-bootstrap-$$"
-  mkdir -p "$versions_dir"
-  rm -rf "$staging_dir"
-
-  echo "Installing Codex CLI into staging: $staging_dir"
-  with_runtime_proxy npm install \
-    --global \
-    --prefix "$staging_dir" \
-    --no-audit \
-    --no-fund \
-    @openai/codex@latest
-
-  local staging_bin="$staging_dir/bin/codex"
-  if [ ! -x "$staging_bin" ]; then
-    echo "Codex CLI installation completed, but the staged binary was not found at $staging_bin." >&2
-    exit 1
-  fi
-
-  local version_output
-  local version
-  version_output="$("$staging_bin" --version)"
-  version="${version_output#codex-cli }"
-  case "$version" in
-    ""|*[!0-9A-Za-z._-]*)
-      echo "Unable to determine a safe Codex CLI version from: $version_output" >&2
-      exit 1
-      ;;
-  esac
-
-  local platform
-  local architecture
-  platform="$(node -p 'process.platform')"
-  architecture="$(node -p 'process.arch')"
-  local version_key="$version-$platform-$architecture"
-  local version_dir="$versions_dir/$version_key"
-  if [ -e "$version_dir" ]; then
-    if [ ! -x "$version_dir/bin/codex" ] || [ "$("$version_dir/bin/codex" --version)" != "$version_output" ]; then
-      echo "Existing Codex CLI version directory is invalid: $version_dir" >&2
-      exit 1
-    fi
-    rm -rf "$staging_dir"
-  else
-    mv "$staging_dir" "$version_dir"
-  fi
-
-  local current_next="$codex_root/current.next-$$"
-  local launcher_next="$CODEX_INSTALL_DIR/codex.next-$$"
-  ln -s "versions/$version_key" "$current_next"
-  replace_path_atomically "$current_next" "$codex_root/current"
-  ln -s "../codex/current/bin/codex" "$launcher_next"
-  replace_path_atomically "$launcher_next" "$CODEX_INSTALL_DIR/codex"
-  hash -r
-
-  if [ ! -x "$CODEX_INSTALL_DIR/codex" ]; then
-    echo "Codex CLI activation failed at $CODEX_INSTALL_DIR/codex." >&2
-    exit 1
-  fi
-  echo "Codex CLI: $("$CODEX_INSTALL_DIR/codex" --version)"
-}
-
-write_codex_config() {
-  local config_file="$CODEX_HOME/config.toml"
-  if [ -f "$config_file" ]; then
-    return
-  fi
-
-  cat > "$config_file" <<'EOF'
-cli_auth_credentials_store = "file"
-EOF
-  chmod 600 "$config_file"
-}
-
-authenticate_codex() {
-  local mode="$1"
-  local auth_file="$CODEX_HOME/auth.json"
-
-  if [ "${SEELE_FORCE_CODEX_LOGIN:-0}" != "1" ] && [ -s "$auth_file" ]; then
-    echo "Codex auth cache already exists at $auth_file; skipping login."
-    return
-  fi
-
-  case "$mode" in
-    device)
-      echo "Starting Codex device-code login."
-      echo "Open the printed URL in your local browser and enter the code shown by Codex."
-      with_runtime_proxy codex login --device-auth
-      ;;
-    auth-json)
-      if [ -z "${CODEX_AUTH_JSON:-}" ]; then
-        echo "CODEX_AUTH_JSON is required when --auth auth-json is used." >&2
-        exit 1
-      fi
-      if [ ! -f "$CODEX_AUTH_JSON" ]; then
-        echo "CODEX_AUTH_JSON file not found: $CODEX_AUTH_JSON" >&2
-        exit 1
-      fi
-      cp "$CODEX_AUTH_JSON" "$auth_file"
-      chmod 600 "$auth_file"
-      ;;
-    token)
-      if [ -z "${CODEX_ACCESS_TOKEN:-}" ]; then
-        echo "CODEX_ACCESS_TOKEN is required when --auth token is used." >&2
-        exit 1
-      fi
-      printf '%s' "$CODEX_ACCESS_TOKEN" | with_runtime_proxy codex login --with-access-token
-      ;;
-    none)
-      echo "Skipping Codex authentication."
-      ;;
-    *)
-      echo "Unknown auth mode: $mode" >&2
-      exit 1
-    ;;
-  esac
-}
-
-main "$@"