@very_aq/codex-cli-web 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 codex-cli-web contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,228 @@
+# codex-cli-web
+
+> Local-first Web UI for Codex CLI, powered by `codex app-server` (JSON-RPC over stdio).
+
+English | [简体中文](README.zh-CN.md)
+
+## Table of Contents
+
+- [Highlights](#highlights)
+- [Quickstart](#quickstart)
+- [Web UI](#web-ui)
+- [Configuration](#configuration)
+- [Authentication and Multi-user](#authentication-and-multi-user)
+- [History (SQLite)](#history-sqlite)
+- [Uploads](#uploads)
+- [Development](#development)
+- [Contributing](#contributing)
+- [Security](#security)
+- [License](#license)
+
+## Highlights
+
+- Integrates with a locally installed `codex` CLI (this repository does not bundle Codex).
+- Loopback-first network defaults (`127.0.0.1`) to reduce accidental exposure during local deployment.
+- Multi-user authentication with admin-assigned workspace boundaries.
+- Single-entry runtime configuration via `CODEX_CONFIG` (JSON string or JSON file path).
+- SQLite-backed history pipeline (disable with `CODEX_WEB_HISTORY_MODE=off`).
+
+## Quickstart
+
+### Requirements
+
+- Node.js 18+
+- `codex` CLI installed and available on `PATH` (`codex --help` should work)
+
+### Install
+
+```bash
+npm ci
+# or: npm install
+```
+
+### Run in development
+
+```bash
+npm run dev
+```
+
+Then open `http://127.0.0.1:5173`.
+
+Dev mode uses:
+
+- Web server: `127.0.0.1:8787`
+- Vite UI: `127.0.0.1:5173`
+- Proxy: `/api`, `/ws`, and `/socket.io` to the server
+
+### Build and run (production)
+
+```bash
+npm run build
+npm start
+```
+
+Then open `http://127.0.0.1:8787`.
+
+By default the server binds to loopback (`127.0.0.1`). To expose on LAN:
+
+```bash
+CODEX_WEB_HOST=0.0.0.0 npm start
+```
+
+Note: the server refuses to bind to a non-loopback host until admin initialization is completed on loopback.
+Start on loopback first, complete the admin initialization flow in the Web UI, then restart with `CODEX_WEB_HOST=0.0.0.0`.
+
+### Use as an npm CLI (`ccw`)
+
+This section applies after the package is published to npm (or installed via npm from a local path).
+
+With `npx` (no global install):
+
+```bash
+npx -p codex-cli-web ccw --config ./config.json
+```
+
+Global install:
+
+```bash
+npm install -g codex-cli-web
+ccw --config ./config.json
+```
+
+If you run from a git checkout and `ccw` fails with "missing `server/dist/index.js`", run:
+
+```bash
+npm run build
+```
+
+## Web UI
+
+This section describes the main Web UI entry points (matching the current runtime UI).
+
+![Web UI screenshot](docs/screenshots/web-ui.png)
+
+### Workspaces (workspace rail)
+
+- The left workspace rail shows available workspace dirs (rendered as an initial letter or `/`). Click to switch the active workspace.
+- The active workspace affects:
+  - Which threads are shown in the sidebar list
+  - The default `cwd` used when creating a new thread
+
+### Sidebar (threads + settings)
+
+- Primary actions: `New thread`, `Settings`.
+- The `Settings` panel includes common actions like refresh thread list, logout, theme/locale toggles, accent/background colors, and compact view; admins also get a user management entry.
+- Thread cards show the derived title, model provider, and last activity time; the archive button archives a thread.
+
+### Main area and composer
+
+- Header shortcuts: refresh current thread, quick new thread, view file changes (Changes), context usage, and WS connection status.
+- The composer toolbar supports:
+  - Plan / Model / Reasoning effort (click to cycle)
+  - File uploads (pasting images also triggers upload)
+  - Type `/` for the slash command menu (or `/help`)
+  - Type `$` for the skills picker (loaded from the server)
+
+## Configuration
+
+### Config precedence
+
+Runtime config is resolved in this order:
+
+1. Environment variables
+2. `CODEX_CONFIG` (inline JSON or a JSON file path)
+3. Built-in defaults (`server/src/config/serverConfig.ts`)
+
+### `CODEX_CONFIG` (single-entry config)
+
+`CODEX_CONFIG` supports two forms:
+
+- Inline JSON: `CODEX_CONFIG='{\"web\":{\"port\":9000}}' npm start`
+- JSON file path: `CODEX_CONFIG=./config.json npm start`
+
+This repository includes a commented example file: `config.json`.
+
+### CLI config flag
+
+The server parses a config flag at startup and maps it to `CODEX_CONFIG`:
+
+- `--config ./config.json`
+- `---config ./config.json` (compat)
+- `--config=./config.json` (same)
+- `---config=./config.json` (same)
+
+### Common environment variables
+
+- Web: `CODEX_WEB_HOST`, `CODEX_WEB_PORT`
+- Auth: `SESSION_TOKEN`, `CODEX_WEB_AUTH_DB_PATH`
+- Codex: `CODEX_BIN`, `CODEX_CWD`, `CODEX_ALLOWED_CWD_ROOTS`, `CODEX_APPROVAL_POLICY`, `CODEX_SANDBOX_MODE`, `CODEX_HISTORY_PERSISTENCE`, `CODEX_DISABLE_RESPONSE_STORAGE`
+- Legacy import (optional): `CODEX_WEB_USERS_FILE`, `CODEX_WEB_USER_WORKSPACES_FILE`
+- History: `CODEX_WEB_HISTORY_MODE`, `CODEX_WEB_HISTORY_DB_PATH`
+- Uploads: `CODEX_WEB_UPLOAD_BASE_DIR`, `CODEX_WEB_MAX_UPLOAD_BYTES`
+- `CODEX_CWD` is the base directory for relative cwd resolution, and is used when a new thread does not provide `cwd`.
+
+### Thread loading
+
+- `CODEX_WEB_OPEN_THREAD_TURNS_LIMIT`: max turns included when opening a thread (default: unlimited, equivalent to `Number.MAX_SAFE_INTEGER` / `9007199254740991`; set a number to cap the initial payload; set `all`, `unlimited`, or `infinite` to explicitly disable the cap).
+
+## Authentication and Multi-user
+
+This server supports multiple users with per-user workspace isolation.
+
+- Admin initialization:
+  - On first install, no admin account is pre-created (the server does not auto-create `admin/pass`).
+  - The first visit to the login page enters the setup flow (backed by `POST /api/auth/bootstrap-admin/setup`), where you choose the admin username and password (minimum length: 8).
+  - Before setup is completed, the server refuses to bind to a non-loopback host (for example `0.0.0.0`).
+  - `pass` is only a legacy-compatibility marker for upgrade scenarios; it is not a usable default password on fresh installs, and setup rejects `pass` as a new password.
+- Auth/settings DB: users, assigned workspaces, user-created workspace dirs, and per-user UI preferences are stored in SQLite.
+  - Override path with `CODEX_WEB_AUTH_DB_PATH` (default: `~/.codex_cli_web/auth.db`).
+- Two workspace concepts (decoupled):
+  - `auth workspaces`: permission roots assigned by admin (returned by `/api/auth/me` as `workspaces`).
+  - `user-created workspaceDirs`: user-saved concrete cwd list (managed by `/api/workspaces/user-created`).
+- Workspace isolation: non-admin users can only operate within workspaces assigned by admin.
+  - Enforced on both HTTP endpoints and WebSocket actions.
+  - Member access is enforced against admin-assigned `workspaces` only (it does not intersect with `CODEX_ALLOWED_CWD_ROOTS`).
+
+## History (SQLite)
+
+The web server can persist session history to SQLite.
+
+- `CODEX_WEB_HISTORY_MODE`: `off` / `shadow` / `primary` (`shadow` is accepted for compatibility and currently behaves like `primary`)
+- `CODEX_WEB_HISTORY_DB_PATH`: SQLite path (default: `~/.codex_cli_web/history.db`; relative paths resolve from repo/workspace root)
+
+## Uploads
+
+- `CODEX_WEB_UPLOAD_BASE_DIR`: upload base directory (default: `<CODEX_CWD>/.codex-web/uploads`, relative paths resolve from `CODEX_CWD`)
+- `CODEX_WEB_MAX_UPLOAD_BYTES`: max bytes for a single file (default: `104857600` = 100MB)
+
+## Development
+
+### Commands
+
+```bash
+npm run dev              # run server + web in development mode
+npm run build            # build web then server
+npm start                # start built server
+npm test                 # run server tests (Vitest)
+npm run codex:generate   # regenerate Codex protocol TS types (requires codex on PATH)
+```
+
+### Project structure
+
+```text
+server/  # Node/TypeScript app server, Codex process integration
+web/     # React + Vite UI
+docs/    # plans and project documents
+```
+
+## Contributing
+
+See `CONTRIBUTING.md`.
+
+## Security
+
+See `SECURITY.md`.
+
+## License
+
+This project is licensed under the MIT License. See `LICENSE`.

package/README.zh-CN.md

@@ -0,0 +1,228 @@
+# codex-cli-web
+
+> 面向 Codex CLI 的本机优先 Web UI，底层基于 `codex app-server`（通过 stdio 的 JSON-RPC）。
+
+简体中文 | [English](README.md)
+
+## 目录
+
+- [亮点](#亮点)
+- [快速开始](#快速开始)
+- [Web UI](#web-ui)
+- [配置](#配置)
+- [认证与多用户](#认证与多用户)
+- [历史（SQLite）](#历史sqlite)
+- [上传](#上传)
+- [开发](#开发)
+- [开源协作](#开源协作)
+- [安全策略](#安全策略)
+- [许可证](#许可证)
+
+## 亮点
+
+- 对接本机已安装的 `codex` CLI（本仓库不内置 Codex）。
+- 默认仅监听回环地址（`127.0.0.1`），降低本地部署时误对外暴露风险。
+- 支持多用户认证，并按管理员分配的 workspace 边界隔离权限。
+- 支持 `CODEX_CONFIG` 单入口运行时配置（内联 JSON 或 JSON 文件路径）。
+- 提供 SQLite 历史链路（可通过 `CODEX_WEB_HISTORY_MODE=off` 关闭）。
+
+## 快速开始
+
+### 环境要求
+
+- Node.js 18+
+- 已安装并可执行 `codex` CLI（`codex --help` 可用）
+
+### 安装依赖
+
+```bash
+npm ci
+# 或：npm install
+```
+
+### 开发模式启动
+
+```bash
+npm run dev
+```
+
+浏览器打开 `http://127.0.0.1:5173`。
+
+开发模式默认：
+
+- Web 服务：`127.0.0.1:8787`
+- Vite 前端：`127.0.0.1:5173`
+- 代理：`/api`、`/ws`、`/socket.io` 转发到服务端
+
+### 构建与运行（生产模式）
+
+```bash
+npm run build
+npm start
+```
+
+浏览器打开 `http://127.0.0.1:8787`。
+
+默认仅监听回环地址（`127.0.0.1`）。如果要对局域网开放：
+
+```bash
+CODEX_WEB_HOST=0.0.0.0 npm start
+```
+
+注意：管理员初始化未完成（或仍存在默认口令账号）时，服务会拒绝监听非回环地址。
+建议先用回环地址启动，在 Web UI 完成管理员初始化后，再用 `CODEX_WEB_HOST=0.0.0.0` 重启。
+
+### 作为 npm CLI 使用（`ccw`）
+
+本节适用于“已发布到 npm 后”，或通过 npm 从本地路径安装包的场景。
+
+使用 `npx`（无需全局安装）：
+
+```bash
+npx -p codex-cli-web ccw --config ./config.json
+```
+
+全局安装：
+
+```bash
+npm install -g codex-cli-web
+ccw --config ./config.json
+```
+
+如果你是直接从 git 仓库运行，且 `ccw` 提示缺少 `server/dist/index.js`，先执行：
+
+```bash
+npm run build
+```
+
+## Web UI
+
+本节用于对齐当前 Web UI 的主要功能入口（与你提供的运行截图一致）。
+
+![Web UI 运行截图](docs/screenshots/web-ui.png)
+
+### 工作区（Workspace rail）
+
+- 左侧竖向轨道展示“可用工作区”列表（按目录名首字母/`/` 显示），点击可切换当前工作区。
+- 当前工作区会影响：
+  - 侧栏线程列表的过滤范围；
+  - 新建线程默认使用的 `cwd`。
+
+### 侧栏（线程 + 设置）
+
+- 侧栏主入口：`新线程`、`设置`。
+- `设置` 面板包含常用操作：刷新线程列表、登出、主题/语言切换、颜色（Accent/Background）、紧凑视图；管理员额外提供“用户管理”入口。
+- 线程卡片展示：标题、模型提供方（model provider）、更新时间；右侧归档按钮可将线程归档。
+
+### 主区与输入框
+
+- 顶部常用按钮：刷新当前线程、快速新建线程、查看文件变更（Changes）、上下文使用率、WS 连接状态。
+- 输入框工具栏支持：
+  - Plan / Model / Reasoning effort（可点击循环切换）；
+  - 附件上传（也支持直接粘贴图片触发上传）；
+  - 输入 `/` 打开 slash 命令菜单（也可用 `/help` 查看帮助）；
+  - 输入 `$` 打开 skills 选择（会从服务端加载可用 skills）。
+
+## 配置
+
+### 配置优先级
+
+运行时配置按以下顺序解析：
+
+1. 环境变量
+2. `CODEX_CONFIG`（内联 JSON 或 JSON 文件路径）
+3. 内置默认值（`server/src/config/serverConfig.ts`）
+
+### `CODEX_CONFIG`（单入口配置）
+
+`CODEX_CONFIG` 支持两种形式：
+
+- 内联 JSON：`CODEX_CONFIG='{\"web\":{\"port\":9000}}' npm start`
+- JSON 文件路径：`CODEX_CONFIG=./config.json npm start`
+
+本仓库提供了带 `+comment` 字段注释的示例文件：`config.json`。
+
+### CLI 启动参数
+
+服务端启动时会解析 config 参数，并同步到环境变量 `CODEX_CONFIG`：
+
+- `--config ./config.json`
+- `---config ./config.json`（兼容写法）
+- `--config=./config.json`（等价写法）
+- `---config=./config.json`（等价写法）
+
+### 常用环境变量
+
+- Web：`CODEX_WEB_HOST`、`CODEX_WEB_PORT`
+- 认证：`SESSION_TOKEN`、`CODEX_WEB_AUTH_DB_PATH`
+- Codex：`CODEX_BIN`、`CODEX_CWD`、`CODEX_ALLOWED_CWD_ROOTS`、`CODEX_APPROVAL_POLICY`、`CODEX_SANDBOX_MODE`、`CODEX_HISTORY_PERSISTENCE`、`CODEX_DISABLE_RESPONSE_STORAGE`
+- 兼容导入（可选）：`CODEX_WEB_USERS_FILE`、`CODEX_WEB_USER_WORKSPACES_FILE`
+- 历史：`CODEX_WEB_HISTORY_MODE`、`CODEX_WEB_HISTORY_DB_PATH`
+- 上传：`CODEX_WEB_UPLOAD_BASE_DIR`、`CODEX_WEB_MAX_UPLOAD_BYTES`
+- `CODEX_CWD` 用于相对路径解析基准；新建线程未显式提供 `cwd` 时会使用该目录。
+
+### 打开线程 turns 上限
+
+- `CODEX_WEB_OPEN_THREAD_TURNS_LIMIT`：打开线程时首包返回的 turns 数量上限（默认不限制，等价于 `Number.MAX_SAFE_INTEGER` / `9007199254740991`；设置为数字可限制首包体积；设置为 `all`、`unlimited` 或 `infinite` 也可显式取消限制）。
+
+## 认证与多用户
+
+服务端支持多用户认证，并对不同用户的工作区权限进行隔离。
+
+- 管理员初始化：
+  - 首次安装后，系统不会预置任何管理员账号（不会自动创建 `admin/pass`）。
+  - 首次打开登录页会进入初始化流程（后端接口 `POST /api/auth/bootstrap-admin/setup`），由你自行创建管理员用户名和密码（密码最少 8 位）。
+  - 在初始化完成前，服务拒绝监听非回环地址（例如 `0.0.0.0`）。
+  - `pass` 仅用于旧版本升级场景下的弱口令兼容检测，不是新安装时的默认可用密码；初始化流程也不允许把新密码设置为 `pass`。
+- 认证/设置 DB：用户、工作区分配、用户自建工作目录、UI 偏好等都会持久化到 SQLite。
+  - 可用 `CODEX_WEB_AUTH_DB_PATH` 覆盖路径（默认：`<CODEX_CWD>/.codex-web/auth.db`）。
+- 两个工作区概念（解耦）：
+  - `auth workspaces`：管理员分配的权限根目录（`/api/auth/me` 的 `workspaces` 字段）。
+  - `user-created workspaceDirs`：用户保存的具体 cwd 列表（`/api/workspaces/user-created`）。
+- 工作区隔离：非管理员只能在管理员分配的 workspaces 内操作。
+  - 同时在 HTTP 与 WebSocket 行为中强制校验。
+  - member 的访问边界只以管理员分配的 `workspaces` 为准（不会与 `CODEX_ALLOWED_CWD_ROOTS` 再取交集）。
+
+## 历史（SQLite）
+
+Web 服务可以将会话历史持久化到 SQLite。
+
+- `CODEX_WEB_HISTORY_MODE`：`off` / `shadow` / `primary`（`shadow` 为兼容值，当前行为与 `primary` 一致）
+- `CODEX_WEB_HISTORY_DB_PATH`：SQLite 文件路径（默认：`.codex-web/history.db`；相对路径以仓库/工作区根目录解析）
+
+## 上传
+
+- `CODEX_WEB_UPLOAD_BASE_DIR`：上传根目录（默认：`<CODEX_CWD>/.codex-web/uploads`；相对路径以 `CODEX_CWD` 解析）
+- `CODEX_WEB_MAX_UPLOAD_BYTES`：单文件上限（默认：`104857600`，即 100MB）
+
+## 开发
+
+### 常用命令
+
+```bash
+npm run dev              # 同时启动 server + web（开发模式）
+npm run build            # 先构建 web，再构建 server
+npm start                # 启动构建后的服务
+npm test                 # 运行 server 侧测试（Vitest）
+npm run codex:generate   # 重新生成 Codex 协议 TS 类型（需要 codex 在 PATH）
+```
+
+### 目录结构
+
+```text
+server/  # Node/TypeScript 服务端，负责对接 Codex 进程
+web/     # React + Vite 前端
+docs/    # 计划与项目文档
+```
+
+## 开源协作
+
+参见 `CONTRIBUTING.md`。
+
+## 安全策略
+
+参见 `SECURITY.md`。
+
+## 许可证
+
+本项目采用 MIT 许可证，详见 `LICENSE`。

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@very_aq/codex-cli-web",
+  "version": "0.0.1",
+  "private": false,
+  "bin": {
+    "ccw": "bin/ccw"
+  },
+  "files": [
+    "bin/ccw",
+    "server/dist",
+    "web/dist",
+    "README.md"
+  ],
+  "workspaces": [
+    "server",
+    "web"
+  ],
+  "scripts": {
+    "dev": "concurrently -n server,web -c blue,green --kill-others-on-fail \"npm -w server run dev\" \"wait-on http-get://127.0.0.1:8787/api/health && npm -w web run dev\"",
+    "build": "npm -w web run build && npm -w server run build",
+    "codex:generate": "npm -w server run codex:generate",
+    "start": "node server/dist/index.js",
+    "test": "npm -w server test",
+    "prepack": "npm run build",
+    "pack": "npm pack"
+  },
+  "dependencies": {
+    "better-sqlite3": "^11.8.1",
+    "busboy": "^1.6.0",
+    "express": "^4.19.2",
+    "socket.io": "^4.8.3",
+    "ws": "^8.17.1"
+  },
+  "devDependencies": {
+    "concurrently": "^9.1.2",
+    "wait-on": "^8.0.5"
+  }
+}

package/server/dist/admin/userAdminRoutes.d.ts

@@ -0,0 +1,7 @@
+import express from "express";
+import type { UserStore } from "../auth/userStore";
+type CreateUserAdminRoutesOptions = {
+    userStore: UserStore;
+};
+export declare function createUserAdminRoutes(opts: CreateUserAdminRoutesOptions): express.Router;
+export {};

package/server/dist/admin/userAdminRoutes.js

@@ -0,0 +1,91 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createUserAdminRoutes = createUserAdminRoutes;
+const express_1 = __importDefault(require("express"));
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
+const requireAdmin_1 = require("../auth/requireAdmin");
+function toPublicUser(user) {
+    const { passwordHash: _passwordHash, ...rest } = user;
+    return rest;
+}
+function normalizeUsername(username) {
+    return String(username ?? "").trim();
+}
+function normalizeRole(role) {
+    return String(role ?? "").trim() === "admin" ? "admin" : "member";
+}
+function normalizeWorkspaceList(workspaces) {
+    const input = Array.isArray(workspaces) ? workspaces : [];
+    const seen = new Set();
+    const out = [];
+    for (const w of input) {
+        const trimmed = String(w ?? "").trim();
+        if (!trimmed)
+            continue;
+        const resolved = node_path_1.default.resolve(trimmed);
+        if (seen.has(resolved))
+            continue;
+        seen.add(resolved);
+        out.push(resolved);
+    }
+    return out;
+}
+async function ensureWorkspaceDirectoriesExist(workspaces) {
+    for (const workspacePath of workspaces) {
+        // 分配路径不存在时自动创建，保证“分配即可用”。
+        await promises_1.default.mkdir(workspacePath, { recursive: true });
+        // 目录创建后再校验类型，避免路径指向文件造成后续权限语义异常。
+        const workspaceStat = await promises_1.default.stat(workspacePath);
+        if (!workspaceStat.isDirectory()) {
+            throw new Error(`workspace is not a directory: ${workspacePath}`);
+        }
+    }
+}
+function createUserAdminRoutes(opts) {
+    const router = express_1.default.Router();
+    router.use(requireAdmin_1.requireAdmin);
+    router.get("/users", async (_req, res) => {
+        const users = await opts.userStore.listUsers();
+        res.json({ ok: true, users: users.map(toPublicUser) });
+    });
+    router.post("/users", async (req, res) => {
+        const body = (req.body ?? {});
+        const username = normalizeUsername(body.username);
+        const password = String(body.password ?? "");
+        const role = normalizeRole(body.role);
+        if (!username || !password) {
+            res.status(400).json({ ok: false, error: "invalid_input" });
+            return;
+        }
+        try {
+            const created = await opts.userStore.createUser({ username, password, role });
+            res.json({ ok: true, user: toPublicUser(created) });
+        }
+        catch (err) {
+            res.status(400).json({ ok: false, error: "create_failed", details: String(err) });
+        }
+    });
+    router.put("/users/:username/workspaces", async (req, res) => {
+        const username = normalizeUsername(req.params?.username);
+        const body = (req.body ?? {});
+        const workspaces = normalizeWorkspaceList(body.workspaces);
+        if (!username) {
+            res.status(400).json({ ok: false, error: "invalid_input" });
+            return;
+        }
+        try {
+            await ensureWorkspaceDirectoriesExist(workspaces);
+            const updated = await opts.userStore.assignWorkspaces(username, workspaces);
+            res.json({ ok: true, user: toPublicUser(updated) });
+        }
+        catch (err) {
+            res.status(400).json({ ok: false, error: "assign_failed", details: String(err) });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=userAdminRoutes.js.map

package/server/dist/admin/userAdminRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userAdminRoutes.js","sourceRoot":"","sources":["../../src/admin/userAdminRoutes.ts"],"names":[],"mappings":";;;;;AAoDA,sDA+CC;AAnGD,sDAA8B;AAC9B,gEAAkC;AAClC,0DAA6B;AAC7B,uDAAoD;AASpD,SAAS,YAAY,CAAC,IAAgB;IACpC,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAiB;IAC1C,OAAO,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,OAAO,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAmB;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,QAAQ,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,UAAoB;IACjE,KAAK,MAAM,aAAa,IAAI,UAAU,EAAE,CAAC;QACvC,0BAA0B;QAC1B,MAAM,kBAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,iCAAiC;QACjC,MAAM,aAAa,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iCAAiC,aAAa,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,qBAAqB,CAAC,IAAkC;IACtE,MAAM,MAAM,GAAG,iBAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,2BAAY,CAAC,CAAC;IAEzB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAQ,CAAC;QACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,iBAAiB,CAAE,GAAG,CAAC,MAAc,EAAE,QAAQ,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAQ,CAAC;QACrC,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,+BAA+B,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/server/dist/app.d.ts

@@ -0,0 +1,22 @@
+import type { Express } from "express";
+import type { UserStore } from "./auth/userStore";
+import type { CodexAppServer } from "./codex/codexAppServer";
+import type { UserWorkspaceStore } from "./workspace/userWorkspaceStore";
+import type { UserSettingsStore } from "./settings/userSettingsStore";
+import type { HistoryQueryService } from "./history/query/historyQueryService";
+type StatusSnapshot = {
+    codex?: unknown;
+    codexTask?: unknown;
+    ws?: unknown;
+};
+export declare function createApp(opts: {
+    sessionSecret: string;
+    startedAtMs?: number;
+    getStatusSnapshot?: () => StatusSnapshot;
+    codex?: CodexAppServer;
+    userStore?: UserStore;
+    userWorkspaceStore?: UserWorkspaceStore;
+    userSettingsStore?: UserSettingsStore;
+    historyQuery?: HistoryQueryService | null;
+}): Express;
+export {};