@wnzzer/tendly 0.0.0-stage → 0.1.75

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 wnzzer
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,185 @@
-# Temporary Holding Version
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/banner-dark.png">
+    <img src="docs/assets/banner-light.png" alt="Tendly: one canvas for the official Claude Code and Codex CLIs, on your own machine." width="100%">
+  </picture>
+</p>
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<p align="center">
+  <a href="https://github.com/wnzzer/tendly/actions/workflows/check.yml"><img src="https://img.shields.io/github/actions/workflow/status/wnzzer/tendly/check.yml?branch=main&style=flat-square&label=CI&color=0f7f70" alt="CI status"></a>
+  <a href="https://github.com/wnzzer/tendly/releases"><img src="https://img.shields.io/github/v/release/wnzzer/tendly?style=flat-square&label=release&color=0f7f70" alt="Latest release"></a>
+  <a href="https://www.npmjs.com/package/@wnzzer/tendly"><img src="https://img.shields.io/npm/v/%40wnzzer%2Ftendly?style=flat-square&label=npm&color=0f7f70" alt="npm version"></a>
+  <img src="https://img.shields.io/badge/node-%E2%89%A5%2024-0f7f70?style=flat-square" alt="Node.js 24 or newer">
+  <img src="https://img.shields.io/badge/platform-macOS%20%7C%20Linux%20%7C%20Windows-7760b5?style=flat-square" alt="Platforms: macOS, Linux and Windows">
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-7760b5?style=flat-square" alt="License: MIT"></a>
+</p>
+
+<p align="center">
+  <a href="#quick-start">Quick start</a> ·
+  <a href="#highlights">Highlights</a> ·
+  <a href="#how-it-works">How it works</a> ·
+  <a href="#documentation">Documentation</a> ·
+  <a href="README.zh-CN.md">简体中文</a>
+</p>
+
+<br>
+
+Tendly is a browser workspace for the official **Claude Code** and **Codex** CLIs. It runs where your code lives and puts agent sessions, files, Git diffs and terminals on one canvas you can split and dock, from any browser, phone included.
+
+It has no agent of its own: Codex runs through its official `app-server` and Claude Code through `stream-json`, so logins, models, hooks, `CLAUDE.md` and permission prompts stay native.
+
+<p align="center">
+  <img src="docs/assets/screenshot-canvas.png" alt="The Tendly canvas: two agent sessions side by side, and Git changes with a diff bottom right." width="100%">
+</p>
+
+## Highlights
+
+<table>
+  <tr>
+    <td width="33%" valign="top">
+      <b>The real clients</b><br><br>
+      Every session is the <code>claude</code> or <code>codex</code> you already have installed. Sign-in, MCP servers, slash commands and permission prompts behave as in the terminal, and new models appear as soon as you upgrade the CLI.
+    </td>
+    <td width="33%" valign="top">
+      <b>Steer while it works</b><br><br>
+      <kbd>Enter</kbd> steers the running turn without stopping it, <kbd>Alt</kbd>+<kbd>Enter</kbd> queues the next turn, and <i>Interrupt and send</i> changes course.
+    </td>
+    <td width="33%" valign="top">
+      <b>Every project on one canvas</b><br><br>
+      Split, tab and dock sessions, files, diffs and terminals from different repositories. Closing a pane never ends its process, and the layout follows you to any browser.
+    </td>
+  </tr>
+  <tr>
+    <td width="33%" valign="top">
+      <b>One branch per session</b><br><br>
+      Give a session its own branch and it works in a Git worktree, so two agents can build two features at once.
+    </td>
+    <td width="33%" valign="top">
+      <b>Accounts and endpoints, kept apart</b><br><br>
+      Each session picks an official account, the host's sign-in, a custom gateway or an isolated client home, with remaining 5-hour and weekly quota at a glance. Hand a conversation from Claude Code to Codex, or back.
+    </td>
+    <td width="33%" valign="top">
+      <b>Any screen</b><br><br>
+      Splits fold into tabs when space runs out. On a phone you get a drawer sidebar, bottom-sheet menus and long-press for right-click.
+    </td>
+  </tr>
+</table>
+
+<br>
+
+<p align="center">
+  <img src="docs/assets/screenshot-steer.png" alt="A steered message in the middle of a running turn, with the send menu open." width="70%">
+  &nbsp;
+  <img src="docs/assets/screenshot-mobile.png" alt="Tendly on a phone: the split folded into tabs and the composer." width="26%">
+</p>
+<p align="center">
+  <sub>Left: a steered message joins the running turn, with the send menu open. Right: the same canvas on a phone.</sub>
+</p>
+
+<table>
+  <tr>
+    <td width="33%"><img src="docs/assets/screenshot-accounts.png" alt="Official accounts with 5-hour and weekly quota rings."></td>
+    <td width="33%"><img src="docs/assets/screenshot-endpoints.png" alt="The endpoint menu: host sign-in, a team gateway or an isolated client home, and hand-off to Codex."></td>
+    <td width="33%"><img src="docs/assets/screenshot-models.png" alt="The model menu in the message box."></td>
+  </tr>
+  <tr>
+    <td align="center"><sub>Official accounts, with 5-hour and weekly quota</sub></td>
+    <td align="center"><sub>Endpoints: host sign-in, gateway or isolated home</sub></td>
+    <td align="center"><sub>Model and thinking depth from the message box</sub></td>
+  </tr>
+</table>
+
+<details>
+<summary><b>All features</b></summary>
+<br>
+
+**Canvas**: recursive splits, drag-to-edge docking, tabs and `1:1` / `2×2` / `1:2:1` presets; each file and Git pane stays bound to its repository; layouts saved on the server; right-click menus throughout.
+
+**Agent sessions**: structured view with grouped tool cards, native approval and question cards, a context-usage ring and turn status. Model, thinking depth, permission mode and endpoint are switchable from the message box (or type any model ID). Resume native Claude Code and Codex history per workspace. File references such as `src/app.ts:42` open at that line. Images open in a lightbox; tables and code render properly. *Interrupt* and *End session* are separate, and input is never replayed after a disconnect. Sessions can be archived, multi-selected and deleted, and temporary sessions handle throwaway questions.
+
+**Files and Git**: file tree and editor that follow changes on disk live; `.gitignore`-aware search; `@path` completion; conflict-checked saves; Markdown, image, video, audio and PDF previews. The Git pane covers status, diff, stage, discard and commit, plus branches and worktrees.
+
+**Accounts and environment**: official account sign-in and quota; import the host's configuration or create isolated endpoint profiles; per-session environment variables with secret references; per-client defaults stored on the server.
+
+**Host and appearance**: CPU and memory in the status bar; English and Chinese UI; light and dark with three palettes, separate interface and conversation fonts, and a text size.
+
+</details>
+
+## Quick start
+
+Requires Node.js 24+ and [Claude Code](https://www.npmjs.com/package/@anthropic-ai/claude-code) and/or [Codex](https://www.npmjs.com/package/@openai/codex) on the same machine.
+
+```bash
+npm install -g @wnzzer/tendly
+tendly             # starts in the background → http://127.0.0.1:28789/
+```
+
+Then **pick a workspace** (any directory on the host), reuse your sign-in from *Settings → Official accounts → Import existing configuration*, and **create a session** or **load an existing one**.
+
+Prebuilt for macOS (arm64, x64), Linux (x64, arm64, static musl) and Windows (x64), with no postinstall step. Other platforms can [build from source](docs/development.md). On Windows, terminals open PowerShell (`TENDLY_SHELL` picks another shell).
+
+| Command | Description |
+| --- | --- |
+| `tendly` / `tendly --lan` | Start in the background, on loopback or on every interface |
+| `tendly status` · `logs` | URL, access token and server log |
+| `tendly restart` · `stop` | Restart or stop the background server |
+| `tendly update` · `--check` | Install the latest npm release (or only check); Settings → Updates does the same |
+| `tendly serve` | Run in the foreground, for systemd or another supervisor |
+
+## Configuration and remote access
+
+State lives in `~/.tendly/` (SQLite, settings, logs), with no telemetry. Settings are read from `config.toml` there, and matching `TENDLY_*` environment variables win:
+
+```toml
+lan = true                  # same as --lan
+port = 28789                # or addr = "192.168.0.9:28789"
+token = "..."               # TENDLY_TOKEN
+allowed-origins = ["https://dock.example.com"]
+```
+
+To reach it from another device, prefer **SSH forwarding** (`ssh -L 28789:127.0.0.1:28789 user@server`). `--lan` is plain HTTP for trusted networks only, and an **HTTPS reverse proxy** must keep `Host` and WebSocket upgrades. See [Configuration](docs/configuration.md) and [remote access](docs/security.md#private-remote-access).
+
+> [!WARNING]
+> Tendly is for **a single trusted user**. Anyone who can reach it has your user's permissions, and `claude` / `codex` run **unsandboxed**. Read [Security and boundaries](docs/security.md) before exposing it beyond localhost.
+
+## How it works
+
+```mermaid
+flowchart LR
+  browser["<b>Browser</b><br/>Vue 3 canvas<br/>sessions · files · Git · terminals"]
+  server["<b>tendly-server</b> · Rust<br/>workspaces · files · Git<br/>auth · PTY supervisor"]
+  db[("SQLite<br/>~/.tendly")]
+  bridge["<b>Native bridge</b> · Node<br/>JSONL"]
+  claude["claude<br/>stream-json"]
+  codex["codex<br/>app-server"]
+  shell["Host shell"]
+
+  browser <-- "HTTP + WebSocket<br/>same origin" --> server
+  server --- db
+  server --> shell
+  server <--> bridge
+  bridge <--> claude
+  bridge <--> codex
+```
+
+The Rust server handles the protocol, auth, persistence and process supervision, and runs no agent loop itself. The Node bridge maps each client's official interface to session events.
+
+## Documentation
+
+[Configuration](docs/configuration.md) · [Endpoint profiles](docs/endpoint-profiles.md) · [Official accounts](docs/official-accounts.md) · [Sessions and canvas](docs/sessions-and-canvas.md) · [Structured agent UI](docs/structured-agent-ui.md) · [Agent tools](docs/agent-tools.md) · [Security](docs/security.md) · [Permission boundary](docs/permission-boundary.md) · [API](docs/api.md) · [Architecture](docs/architecture.md) · [Upgrading](docs/settings-update.md) · [Development](docs/development.md)
+
+## Development
+
+Requires Rust 1.89+, Node.js 24+ and pnpm 10.30.3.
+
+```bash
+pnpm install --frozen-lockfile
+pnpm run dev       # → http://127.0.0.1:5173/
+pnpm run check && cargo test --workspace
+```
+
+See [Development](docs/development.md) for the full check list and repository layout.
+
+## License
+
+[MIT](LICENSE). Third-party material is listed in [third-party notices](docs/third-party-notices.md). Claude Code and Codex are products of Anthropic and OpenAI respectively. Tendly is an independent project and is not affiliated with or endorsed by either company.

package/THIRD-PARTY-NOTICES.md

@@ -0,0 +1,72 @@
+# Third-party brand vectors
+
+Claude asterisk and OpenAI knot paths are sourced from `@lobehub/icons-static-svg@1.95.0` ([LobeHub Icons](https://github.com/lobehub/lobe-icons)). Codex is identified with the OpenAI mark **and the Codex text label**; this does not claim a distinct official Codex logo or any endorsement. Pi's mark is the shape of the logo pi.dev publishes (`https://pi.dev/logo-auto.svg`), redrawn in one colour at icon size. Brand trademarks remain their owners' property.
+
+MIT License
+
+Copyright (c) 2023 LobeHub
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+# Symbols Nerd Font Mono
+
+`apps/web/src/assets/fonts/symbols-nerd-font-mono.woff2` is `SymbolsNerdFontMono-Regular.ttf` from [Nerd Fonts](https://github.com/ryanoasis/nerd-fonts) v3.5.1 (`NerdFontsSymbolsOnly`), converted to WOFF2 without other changes. It is used only as a fallback font for shell-prompt icons in the terminal pane.
+
+The patcher and font are MIT licensed (below). The glyphs come from the icon sets listed here, each under its own license:
+
+| Icon set name          | upstream                                              | version         | license     |
+|------------------------|-------------------------------------------------------|-----------------|-------------|
+| Codicons               | https://github.com/microsoft/vscode-codicons          | 0.0.45          | CC BY 4.0   |
+| Devicons               | https://github.com/devicons/devicon                   | 2.17.0          | MIT         |
+| extraglyphs            | https://github.com/source-foundry/Hack                | -               | MIT         |
+| Font Awesome           | https://github.com/FortAwesome/Font-Awesome           | 6.5.1           | CC BY 4.0   |
+| Font Awesome Extension | https://github.com/AndreLZGava/font-awesome-extension | 0.0.3           | MIT         |
+| Font Logos             | https://github.com/lukas-w/font-logos                 | 1.3.0           | unlicensed  |
+| MaterialDesign         | https://github.com/Templarian/MaterialDesign-Font     | Oct 6, 2022     | Apache 2.0  |
+| Octicons               | https://github.com/primer/octicons                    | 18.3.0          | MIT         |
+| Seti and original      | https://github.com/jesseweed/seti-ui                  | 0.8.1           | MIT         |
+| Pomicons               | https://github.com/gabrielelana/pomicons              | 1.001           | OFL 1.1 RFN |
+| Powerline Extra        | https://github.com/ryanoasis/powerline-extra-symbols  | 1.200           | MIT         |
+| Powerline Symbols      | https://github.com/powerline/powerline                | 1.000 (ca 2013) | MIT         |
+| Power Symbols IEC      | https://github.com/jloughry/Unicode                   | Feb 2015        | MIT         |
+| Weather Icons          | https://github.com/erikflowers/weather-icons          | 2.0.10 (1.100)  | OFL 1.1     |
+
+
+The MIT License (MIT)
+
+Copyright (c) 2014 Ryan L McIntyre
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bin/tendly.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+// Entry point for `@wnzzer/tendly`. The real program is a Rust binary that
+// ships in a per-platform package; npm installs only the one matching this
+// machine, via the `os`/`cpu` fields on those packages. This file finds it and
+// hands over.
+//
+// CommonJS on purpose: `require.resolve` is how a sibling optional dependency
+// is located, and the package deliberately declares no `type`, so `.js`/`.cjs`
+// here is CJS regardless of what any parent directory says.
+'use strict';
+
+const { spawn } = require('node:child_process');
+const path = require('node:path');
+
+// Keys are `${process.platform}-${process.arch}`, which is what npm itself
+// matches `os`/`cpu` against, so this table and the published packages cannot
+// disagree about what a platform is called.
+const PACKAGES = {
+  'darwin-arm64': '@wnzzer/tendly-darwin-arm64',
+  'darwin-x64': '@wnzzer/tendly-darwin-x64',
+  'linux-x64': '@wnzzer/tendly-linux-x64',
+  'linux-arm64': '@wnzzer/tendly-linux-arm64',
+  'win32-x64': '@wnzzer/tendly-win32-x64',
+};
+
+const BINARY = process.platform === 'win32' ? 'tendly-server.exe' : 'tendly-server';
+
+function fail(message) {
+  process.stderr.write(`tendly: ${message}\n`);
+  process.exit(1);
+}
+
+function locate() {
+  const key = `${process.platform}-${process.arch}`;
+  const pkg = PACKAGES[key];
+  if (!pkg) {
+    fail(
+      `no prebuilt binary for ${key}.\n` +
+        `  Supported: ${Object.keys(PACKAGES).join(', ')}.\n` +
+        '  Build from source instead: https://github.com/wnzzer/tendly',
+    );
+  }
+  // Resolve the manifest rather than the binary: a package.json is resolvable
+  // whatever the file layout, and the error it throws names the missing
+  // package instead of a path inside it.
+  let manifest;
+  try {
+    manifest = require.resolve(`${pkg}/package.json`);
+  } catch {
+    fail(
+      `${pkg} is not installed.\n` +
+        '  It is an optional dependency, so npm skips it silently when the\n' +
+        '  install ran on a different platform or with a lockfile from one.\n' +
+        `  Reinstall on this machine, or add it directly: npm i ${pkg}`,
+    );
+  }
+  return path.join(path.dirname(manifest), 'bin', BINARY);
+}
+
+const child = spawn(locate(), process.argv.slice(2), { stdio: 'inherit' });
+
+// A terminal delivers Ctrl+C to the whole foreground group, so the server
+// already sees it. Forwarding covers the other caller — a process manager
+// signalling this pid alone, which would otherwise leave the server orphaned.
+const FORWARDED = ['SIGINT', 'SIGTERM', 'SIGHUP', 'SIGQUIT'];
+for (const signal of FORWARDED) {
+  process.on(signal, () => {
+    if (child.exitCode === null && child.signalCode === null) child.kill(signal);
+  });
+}
+
+child.on('error', (error) => fail(`could not start the server: ${error.message}`));
+child.on('exit', (code, signal) => {
+  // Report a signalled death as a shell does, so `$?` still distinguishes
+  // "killed" from "exited with that number".
+  process.exit(signal ? 128 + (require('node:os').constants.signals[signal] ?? 0) : (code ?? 0));
+});

package/package.json

@@ -1,6 +1,37 @@
 {
   "name": "@wnzzer/tendly",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.75",
+  "description": "Remote multi-agent development workspace for the official Claude Code and Codex CLIs",
+  "license": "MIT",
+  "homepage": "https://github.com/wnzzer/tendly",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wnzzer/tendly.git"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "claude-code",
+    "codex",
+    "agent",
+    "workspace",
+    "cli"
+  ],
+  "bin": {
+    "tendly": "bin/tendly.js"
+  },
+  "optionalDependencies": {
+    "@wnzzer/tendly-darwin-arm64": "0.1.75",
+    "@wnzzer/tendly-darwin-x64": "0.1.75",
+    "@wnzzer/tendly-linux-x64": "0.1.75",
+    "@wnzzer/tendly-linux-arm64": "0.1.75",
+    "@wnzzer/tendly-win32-x64": "0.1.75"
+  },
+  "files": [
+    "bin/",
+    "LICENSE",
+    "THIRD-PARTY-NOTICES.md",
+    "README.md"
+  ]
+}