bortexcode 1.2.6 → 1.2.9

package/README.md

@@ -47,6 +47,8 @@ export BORTEX_API_KEY=<YOUR_API_KEY>
 bortexcode
 bortexcode "explain this function"
 bortexcode --agent "refactor src/utils.js"
+bortexcode remote-control
+bortexcode --remote-control
 ```
 
 ## REPL Commands
@@ -63,9 +65,36 @@ Common commands:
 /help
 /llm-config show
 /llm-config sync
+/remote-control [name]
+/remote-control --lan
+/rc
 /exit
 ```
 
+## Remote Control
+
+Remote Control exposes the current Bortex Code process through a token-protected
+browser UI. By default it binds to `127.0.0.1`.
+
+```bash
+bortexcode remote-control --name "My Project"
+bortexcode --remote-control "My Project"
+```
+
+For phone access on the same LAN:
+
+```bash
+bortexcode remote-control --remote-lan
+```
+
+Inside the REPL:
+
+```text
+/remote-control My Project
+/remote-control --lan
+/remote-control stop
+```
+
 ## Options
 
 ```text
@@ -84,6 +113,11 @@ Common commands:
     --check-update  Check for updates now
     --no-update-check
                     Disable startup update check
+    --remote-control, --rc [name]
+                    Enable browser remote control
+    --remote-lan    Bind remote control to 0.0.0.0 for LAN/mobile access
+    --remote-host <host>, --remote-port <port>
+                    Remote control bind address
 -v, --version       Show version
 -h, --help          Show help
 ```
@@ -105,4 +139,6 @@ BORTEX_URL
 BORTEX_API_KEY
 BORTEX_CLI_ICONS=1
 BORTEX_NO_UPDATE_CHECK=1
+BORTEX_REMOTE_HOST
+BORTEX_REMOTE_PORT
 ```

package/bin/bortex.js

@@ -31,6 +31,11 @@ function parseArgs(argv) {
     _modelExplicit: false,
     _apiUrlExplicit: false,
     _apiKeyExplicit: false,
+    remoteControl: false,
+    remoteControlServerMode: false,
+    remoteControlName: '',
+    remoteControlHost: process.env.BORTEX_REMOTE_HOST || '127.0.0.1',
+    remoteControlPort: Number(process.env.BORTEX_REMOTE_PORT || 0) || 0,
     ux: {
       verbose: false,
       spinner: true,
@@ -42,6 +47,10 @@ function parseArgs(argv) {
   const rest = [];
   for (let i = 0; i < argv.length; i += 1) {
     const a = argv[i];
+    if (a === 'remote-control' || a === 'remote') {
+      opts.remoteControlServerMode = true;
+      continue;
+    }
     if (a === '--agent' || a === '-a') {
       opts.agent = true;
       continue;
@@ -128,6 +137,46 @@ function parseArgs(argv) {
       opts.forceUpdateCheck = true;
       continue;
     }
+    if (a === '--remote-control' || a === '--rc') {
+      opts.remoteControl = true;
+      if (argv[i + 1] && !String(argv[i + 1]).startsWith('-')) {
+        opts.remoteControlName = argv[i + 1];
+        i += 1;
+      }
+      continue;
+    }
+    if (a.startsWith('--remote-control=')) {
+      opts.remoteControl = true;
+      opts.remoteControlName = a.slice('--remote-control='.length);
+      continue;
+    }
+    if (a === '--remote-lan') {
+      opts.remoteControlHost = '0.0.0.0';
+      continue;
+    }
+    if ((a === '--remote-host' || a === '--rc-host') && argv[i + 1]) {
+      opts.remoteControlHost = argv[i + 1];
+      i += 1;
+      continue;
+    }
+    if (a.startsWith('--remote-host=')) {
+      opts.remoteControlHost = a.slice('--remote-host='.length);
+      continue;
+    }
+    if ((a === '--remote-port' || a === '--rc-port') && argv[i + 1]) {
+      opts.remoteControlPort = Number(argv[i + 1]) || 0;
+      i += 1;
+      continue;
+    }
+    if (a.startsWith('--remote-port=')) {
+      opts.remoteControlPort = Number(a.slice('--remote-port='.length)) || 0;
+      continue;
+    }
+    if ((a === '--name' || a === '--remote-name') && argv[i + 1]) {
+      opts.remoteControlName = argv[i + 1];
+      i += 1;
+      continue;
+    }
     if (a === '--login' || a === '--signin') {
       opts.login = true;
       continue;
@@ -147,6 +196,7 @@ function usage() {
   console.log('');
   console.log('Usage:');
   console.log(`  ${cliName} [options] [prompt]`);
+  console.log(`  ${cliName} remote-control [--name <title>] [--remote-lan]`);
   console.log(`  ${cliName} --api-key <apikey>`);
   console.log(`  ${cliName} "write a python function"`);
   console.log('');
@@ -166,10 +216,15 @@ function usage() {
   console.log('      --check-update  Check for updates now');
   console.log('      --no-update-check');
   console.log('                      Disable startup update check');
+  console.log('      --remote-control, --rc [name]');
+  console.log('                      Enable browser remote control for this session');
+  console.log('      --remote-lan    Bind remote control to 0.0.0.0 for LAN/mobile access');
+  console.log('      --remote-host <host>, --remote-port <port>');
+  console.log('                      Remote control bind address');
   console.log('  -v, --version       Show version');
   console.log('  -h, --help          Show help');
   console.log('');
-  console.log('REPL commands: /agent on|off, /status, /exit, /help, /llm-config');
+  console.log('REPL commands: /agent on|off, /status, /remote-control, /exit, /help, /llm-config');
   console.log('Local tools:   /pwd, /cd, /ls, /tree, /read, /write, /append, /mkdir, /git, /ssh-status, /sys-status, /process-status, /port-status, /tool, /sh');
   console.log('');
   console.log('Environment:');
@@ -1209,6 +1264,20 @@ function extractNaturalFileContent(text, filePath) {
   return stripMatchingQuotes(content);
 }
 
+function extractNaturalReplaceParts(text) {
+  const raw = String(text || '').trim();
+  const quotedPair = raw.match(/(?:sostituisci|rimpiazza|replace)\s+(["'`])([\s\S]*?)\1\s+(?:con|with)\s+(["'`])([\s\S]*?)\3/i);
+  if (quotedPair) {
+    return { search: quotedPair[2], replacement: quotedPair[4] };
+  }
+  const plainPair = raw.match(/(?:sostituisci|rimpiazza|replace)\s+([\s\S]+?)\s+(?:con|with)\s+([\s\S]+?)(?:\s+(?:nel|nella|in|su)\s+(?:file|path|percorso)?\s|$)/i);
+  if (!plainPair) return null;
+  const search = stripMatchingQuotes(plainPair[1]);
+  const replacement = stripMatchingQuotes(plainPair[2]);
+  if (!search) return null;
+  return { search, replacement };
+}
+
 function buildNaturalLocalFileActionCalls(text) {
   const raw = String(text || '').trim();
   const lower = raw.toLowerCase();
@@ -1216,6 +1285,18 @@ function buildNaturalLocalFileActionCalls(text) {
   const filePath = extractNaturalFilePath(raw);
   if (!filePath) return null;
 
+  const replaceParts = extractNaturalReplaceParts(raw);
+  if (replaceParts) {
+    return [{
+      tool: 'replace',
+      path: filePath,
+      search: replaceParts.search,
+      replacement: replaceParts.replacement,
+      all: true,
+      confirm: true
+    }];
+  }
+
   if (/(?:^|\b)(leggi|mostra|apri|read|show|cat)(?:\b|$)/i.test(raw) && /(?:file|path|percorso|\/|\\|\.\.?[\\/])/.test(raw)) {
     return [{ tool: 'read', path: filePath }];
   }
@@ -2723,6 +2804,9 @@ async function executeStructuredBuiltinTool(opts, call) {
       error: res.ok ? null : `${label} exit ${res.code == null ? 'null' : res.code}`
     };
   };
+  if (tool === 'applyPatch') {
+    return runUnifiedPatchTool(opts, call);
+  }
   if (tool === 'read') {
     const filePath = resolveCliPath(opts, call.path);
     try {
@@ -2767,6 +2851,39 @@ async function executeStructuredBuiltinTool(opts, call) {
       return { ok: false, stdout: null, stderr: err.message, data: { path: filePath, mode: tool }, error: err.message };
     }
   }
+  if (tool === 'replace') {
+    const filePath = resolveCliPath(opts, call.path);
+    const search = String(call.search ?? '');
+    const replacement = String(call.replacement ?? '');
+    const replaceAll = call.all !== false;
+    try {
+      if (!search) {
+        return { ok: false, stdout: null, stderr: 'empty search string', data: { path: filePath }, error: 'empty search string' };
+      }
+      const before = fs.readFileSync(filePath, 'utf8');
+      const count = before.split(search).length - 1;
+      if (count <= 0) {
+        const msg = `Replace no match -> ${filePath}`;
+        console.log(msg);
+        return { ok: false, stdout: `${msg}\n`, stderr: 'no matches', data: { path: filePath, search, count: 0 }, error: 'no matches' };
+      }
+      const after = replaceAll
+        ? before.split(search).join(replacement)
+        : before.replace(search, replacement);
+      fs.writeFileSync(filePath, after, 'utf8');
+      const applied = replaceAll ? count : 1;
+      const msg = `Replace ok -> ${filePath} (${applied} occurrence${applied === 1 ? '' : 's'})`;
+      console.log(msg);
+      return {
+        ok: true,
+        stdout: `${msg}\n`,
+        stderr: null,
+        data: { path: filePath, search, replacement, count: applied, all: replaceAll, bytes: Buffer.byteLength(after, 'utf8') }
+      };
+    } catch (err) {
+      return { ok: false, stdout: null, stderr: err.message, data: { path: filePath, search }, error: err.message };
+    }
+  }
   if (tool === 'gitStatus') {
     const res = await runChild('git', ['status', '--short', ...(call.branch ? ['-b'] : [])], { cwd: opts.cwd, shell: false });
     const entries = parseGitStatusShortEntries(res.stdout || '');
@@ -3023,6 +3140,19 @@ function validateStructuredToolCall(raw) {
       if (typeof call.text !== 'string') return { ok: false, error: 'Campo `text` mancante o non valido.' };
       break;
     }
+    case 'replace': {
+      const e1 = requireString('path');
+      if (e1) return { ok: false, error: e1 };
+      const e2 = requireString('search');
+      if (e2) return { ok: false, error: e2 };
+      if (typeof call.replacement !== 'string') return { ok: false, error: 'Campo `replacement` mancante o non valido.' };
+      if (call.all != null && typeof call.all !== 'boolean') return { ok: false, error: '`all` deve essere boolean.' };
+      break;
+    }
+    case 'applyPatch':
+      if (typeof call.patch !== 'string' || !call.patch.trim()) return { ok: false, error: 'Campo `patch` mancante o non valido.' };
+      if (call.checkOnly != null && typeof call.checkOnly !== 'boolean') return { ok: false, error: '`checkOnly` deve essere boolean.' };
+      break;
     case 'diff':
     case 'gitDiff':
       if (call.mode && !['unstaged', 'staged', 'all'].includes(String(call.mode))) {
@@ -3084,6 +3214,8 @@ function structuredToolCallToLocalCommand(call) {
     case 'mkdir': return `/mkdir ${call.path || '.'}`;
     case 'write': return `/write ${call.path} ${call.text}`;
     case 'append': return `/append ${call.path} ${call.text}`;
+    case 'replace': return `replace(${call.path}: ${call.search} -> ${call.replacement}${call.all === false ? ', first' : ', all'})`;
+    case 'applyPatch': return `applyPatch(${call.checkOnly ? 'check' : 'apply'}, ${String(call.patch || '').length} chars)`;
     case 'diff': return `/diff ${call.mode || 'unstaged'}`;
     case 'gitDiff': return `gitDiff(${call.mode || 'all'}${call.statOnly === false ? ',patch' : ',stat'})`;
     case 'search': return `search(${call.pattern}${call.path ? ` in ${call.path}` : ''}${call.glob ? ` glob=${call.glob}` : ''})`;
@@ -3107,7 +3239,8 @@ function structuredToolCallToLocalCommand(call) {
 
 function isRiskyStructuredToolCall(call) {
   const t = String(call.tool || '');
-  if (['write', 'append', 'mkdir', 'sh', 'runTest', 'runBuild', 'runLint'].includes(t)) return true;
+  if (['write', 'append', 'replace', 'mkdir', 'sh', 'runTest', 'runBuild', 'runLint'].includes(t)) return true;
+  if (t === 'applyPatch') return call.checkOnly !== true;
   if (t === 'git') return !isReadonlyGitArgs(call.args);
   return false;
 }
@@ -3484,7 +3617,7 @@ async function buildStructuredToolPlanWithLlm(opts, goal, llmOptions = {}) {
 
   const profile = detectWorkspaceProfile(opts);
   const supportedTools = [
-    'project', 'pwd', 'ls', 'tree', 'glob', 'read', 'readMany', 'mkdir', 'write', 'append',
+    'project', 'pwd', 'ls', 'tree', 'glob', 'read', 'readMany', 'mkdir', 'write', 'append', 'replace', 'applyPatch',
     'diff', 'git', 'gitStatus', 'gitDiff', 'search', 'runTest', 'runBuild', 'runLint', 'sshStatus', 'systemStatus', 'processStatus', 'portStatus', 'sh', 'review', 'commitSuggest'
   ];
   const testCmd = profile.suggested.test?.[0] || '';
@@ -3577,6 +3710,8 @@ async function buildStructuredToolPlanWithLlm(opts, goal, llmOptions = {}) {
     'Regole:',
     '- Preferisci tool read-only prima dei tool rischiosi',
     '- Per controlli di stato locale usa sshStatus/systemStatus/processStatus/portStatus invece di sh quando possibile',
+    '- Per modifiche testuali puntuali usa replace invece di sh',
+    '- Per modifiche multi-file o blocchi ampi usa applyPatch con una unified diff valida; usa checkOnly:true se devi solo validare',
     '- Includi review e commitSuggest verso la fine',
     '- Se proponi `runTest`/`runBuild`/`runLint` preferiscili a `sh` quando possibile',
     '- Se proponi `sh`, usa comandi test/build/lint concreti se disponibili',
@@ -3794,6 +3929,8 @@ function printLocalHelp() {
   console.log('  /sys-status         check system / runtime status');
   console.log('  /process-status     check running processes');
   console.log('  /port-status        check listening ports');
+  console.log('  /remote-control [name] [--lan|--host <host>|--port <port>]');
+  console.log('  /remote-control stop');
   console.log('  /diff [unstaged|staged|all]');
   console.log('  /stage <file>|--all');
   console.log('  /unstage <file>|--all');
@@ -3803,6 +3940,7 @@ function printLocalHelp() {
   console.log('  /patch-apply <patch-file>');
   console.log('  /patch-check-inline    incolla patch e valida (.end per terminare)');
   console.log('  /patch-apply-inline    incolla patch e applica (.end per terminare)');
+  console.log('  /tool {"tool":"applyPatch","patch":"...","checkOnly":true|false}');
   console.log('  /todo add|list|done|rm|clear ...');
   console.log('  /plan [goal]');
   console.log('  /agent-local <goal>    planner locale rapido');
@@ -3934,6 +4072,75 @@ function printPlan(opts) {
   (opts.plan.steps || []).forEach((s, i) => console.log(` ${i + 1}. ${s}`));
 }
 
+async function runUnifiedPatchTool(opts, call) {
+  const patch = String(call.patch || '');
+  const checkOnly = call.checkOnly === true;
+  const data = {
+    cwd: opts.cwd,
+    patchChars: patch.length,
+    checkOnly,
+    checkOk: false,
+    applied: false
+  };
+  if (!patch.trim()) {
+    return { ok: false, stdout: null, stderr: 'empty patch', data, error: 'empty patch' };
+  }
+
+  const tmp = path.join(os.tmpdir(), `bortex-tool-${Date.now()}-${Math.random().toString(16).slice(2)}.patch`);
+  fs.writeFileSync(tmp, patch, 'utf8');
+  try {
+    const check = await runChild('git', ['apply', '--check', '--verbose', tmp], { cwd: opts.cwd, shell: false });
+    const checkStdout = String(check.stdout || '');
+    const checkStderr = String(check.stderr || '');
+    if (checkStdout) process.stdout.write(checkStdout.endsWith('\n') ? checkStdout : `${checkStdout}\n`);
+    if (checkStderr) process.stderr.write(checkStderr.endsWith('\n') ? checkStderr : `${checkStderr}\n`);
+    data.checkOk = !!check.ok;
+    data.checkExitCode = check.code == null ? null : check.code;
+
+    if (!check.ok) {
+      const msg = 'Patch check failed';
+      console.log(msg);
+      return {
+        ok: false,
+        stdout: checkStdout || null,
+        stderr: checkStderr || msg,
+        data,
+        error: msg
+      };
+    }
+
+    if (checkOnly) {
+      const msg = 'Patch check ok';
+      console.log(msg);
+      return {
+        ok: true,
+        stdout: [checkStdout, `${msg}\n`].filter(Boolean).join(''),
+        stderr: checkStderr || null,
+        data
+      };
+    }
+
+    const applied = await runChild('git', ['apply', '--verbose', '--whitespace=nowarn', tmp], { cwd: opts.cwd, shell: false });
+    const applyStdout = String(applied.stdout || '');
+    const applyStderr = String(applied.stderr || '');
+    if (applyStdout) process.stdout.write(applyStdout.endsWith('\n') ? applyStdout : `${applyStdout}\n`);
+    if (applyStderr) process.stderr.write(applyStderr.endsWith('\n') ? applyStderr : `${applyStderr}\n`);
+    data.applied = !!applied.ok;
+    data.applyExitCode = applied.code == null ? null : applied.code;
+    const msg = applied.ok ? 'Patch apply ok' : 'Patch apply failed';
+    console.log(msg);
+    return {
+      ok: !!applied.ok,
+      stdout: [checkStdout, applyStdout, `${msg}\n`].filter(Boolean).join(''),
+      stderr: [checkStderr, applyStderr].filter(Boolean).join('\n') || null,
+      data,
+      error: applied.ok ? null : msg
+    };
+  } finally {
+    try { fs.unlinkSync(tmp); } catch (_) {}
+  }
+}
+
 async function runGitApplyInline(opts, mode) {
   if (typeof opts._readMultiline !== 'function') {
     throw new Error('Patch inline disponibile solo in REPL interattiva.');
@@ -3957,6 +4164,379 @@ async function runGitApplyInline(opts, mode) {
   }
 }
 
+function escapeHtml(value) {
+  return String(value ?? '')
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
+}
+
+function getRemoteLanAddresses(port, token) {
+  const out = [];
+  const nets = os.networkInterfaces();
+  Object.values(nets).forEach((entries) => {
+    (entries || []).forEach((entry) => {
+      if (!entry || entry.internal || entry.family !== 'IPv4') return;
+      out.push(`http://${entry.address}:${port}/?token=${encodeURIComponent(token)}`);
+    });
+  });
+  return out;
+}
+
+function sendJson(res, statusCode, payload) {
+  const body = JSON.stringify(payload);
+  res.writeHead(statusCode, {
+    'content-type': 'application/json; charset=utf-8',
+    'cache-control': 'no-store',
+    'content-length': Buffer.byteLength(body)
+  });
+  res.end(body);
+}
+
+function readHttpBody(req, maxBytes = 1024 * 1024) {
+  return new Promise((resolve, reject) => {
+    let size = 0;
+    const chunks = [];
+    req.on('data', (chunk) => {
+      size += chunk.length;
+      if (size > maxBytes) {
+        reject(new Error('request body too large'));
+        req.destroy();
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+    req.on('error', reject);
+  });
+}
+
+function buildRemoteControlHtml(state) {
+  const title = escapeHtml(state.name || 'Bortex Remote Control');
+  const token = escapeHtml(state.token);
+  const cwd = escapeHtml(state.cwd || process.cwd());
+  return `<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <title>${title}</title>
+  <style>
+    :root { color-scheme: light dark; font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
+    body { margin: 0; background: #0f1115; color: #f4f7fb; }
+    main { max-width: 980px; margin: 0 auto; padding: 20px; }
+    header { display: flex; justify-content: space-between; gap: 16px; align-items: flex-start; border-bottom: 1px solid #2a2f3a; padding-bottom: 14px; }
+    h1 { font-size: 20px; margin: 0 0 6px; font-weight: 700; }
+    .meta { color: #9aa4b2; font-size: 13px; overflow-wrap: anywhere; }
+    .pill { border: 1px solid #334155; border-radius: 999px; padding: 6px 10px; color: #cbd5e1; font-size: 12px; white-space: nowrap; }
+    #log { margin: 18px 0; background: #080a0f; border: 1px solid #242a36; border-radius: 8px; min-height: 45vh; max-height: 62vh; overflow: auto; padding: 12px; }
+    .msg { border-bottom: 1px solid #151923; padding: 10px 0; white-space: pre-wrap; overflow-wrap: anywhere; }
+    .role { color: #8ab4ff; font-size: 12px; text-transform: uppercase; letter-spacing: .04em; margin-bottom: 4px; }
+    .assistant .role { color: #78d7a4; }
+    .system .role { color: #fbbf24; }
+    textarea { width: 100%; min-height: 92px; resize: vertical; border-radius: 8px; border: 1px solid #334155; background: #10141d; color: #f8fafc; padding: 12px; font: 14px/1.45 ui-monospace, SFMono-Regular, Consolas, monospace; box-sizing: border-box; }
+    .bar { display: flex; gap: 10px; margin-top: 10px; align-items: center; }
+    button { border: 0; border-radius: 8px; background: #2563eb; color: white; font-weight: 650; padding: 10px 14px; cursor: pointer; }
+    button:disabled { opacity: .55; cursor: not-allowed; }
+    .hint { color: #94a3b8; font-size: 12px; }
+    code { color: #bfdbfe; }
+  </style>
+</head>
+<body>
+  <main>
+    <header>
+      <div>
+        <h1>${title}</h1>
+        <div class="meta">cwd: <code>${cwd}</code></div>
+      </div>
+      <div id="status" class="pill">connecting</div>
+    </header>
+    <section id="log"></section>
+    <form id="form">
+      <textarea id="prompt" placeholder="Ask Bortex Code or run a slash command, e.g. /status, /tool-plan --run fix lint"></textarea>
+      <div class="bar">
+        <button id="send" type="submit">Send</button>
+        <span class="hint">Token-protected local session. Keep this URL private.</span>
+      </div>
+    </form>
+  </main>
+  <script>
+    const token = ${JSON.stringify(state.token)};
+    const logEl = document.getElementById('log');
+    const statusEl = document.getElementById('status');
+    const promptEl = document.getElementById('prompt');
+    const sendEl = document.getElementById('send');
+    let lastCount = -1;
+    function renderLog(items) {
+      if (!Array.isArray(items) || items.length === lastCount) return;
+      lastCount = items.length;
+      logEl.innerHTML = items.map((item) => {
+        const role = String(item.role || 'system');
+        const text = String(item.text || '');
+        return '<div class="msg ' + role.replace(/[^a-z0-9_-]/gi, '') + '"><div class="role">' + role + '</div><div>' +
+          text.replace(/[&<>"']/g, (c) => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c])) +
+          '</div></div>';
+      }).join('');
+      logEl.scrollTop = logEl.scrollHeight;
+    }
+    async function refresh() {
+      try {
+        const r = await fetch('/api/status?token=' + encodeURIComponent(token), { cache: 'no-store' });
+        const data = await r.json();
+        statusEl.textContent = data.busy ? 'running' : 'connected';
+        sendEl.disabled = !!data.busy;
+        renderLog(data.log || []);
+      } catch (err) {
+        statusEl.textContent = 'disconnected';
+      }
+    }
+    document.getElementById('form').addEventListener('submit', async (event) => {
+      event.preventDefault();
+      const text = promptEl.value.trim();
+      if (!text) return;
+      sendEl.disabled = true;
+      await fetch('/api/prompt?token=' + encodeURIComponent(token), {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ text })
+      }).catch(() => {});
+      promptEl.value = '';
+      await refresh();
+    });
+    promptEl.addEventListener('keydown', (event) => {
+      if ((event.ctrlKey || event.metaKey) && event.key === 'Enter') {
+        document.getElementById('form').requestSubmit();
+      }
+    });
+    refresh();
+    setInterval(refresh, 1200);
+  </script>
+</body>
+</html>`;
+}
+
+async function captureRemoteControlOutput(fn) {
+  let stdout = '';
+  let stderr = '';
+  const originalStdoutWrite = process.stdout.write;
+  const originalStderrWrite = process.stderr.write;
+  process.stdout.write = function patchedStdoutWrite(chunk, encoding, cb) {
+    stdout += Buffer.isBuffer(chunk) ? chunk.toString(typeof encoding === 'string' ? encoding : 'utf8') : String(chunk ?? '');
+    return originalStdoutWrite.apply(process.stdout, arguments);
+  };
+  process.stderr.write = function patchedStderrWrite(chunk, encoding, cb) {
+    stderr += Buffer.isBuffer(chunk) ? chunk.toString(typeof encoding === 'string' ? encoding : 'utf8') : String(chunk ?? '');
+    return originalStderrWrite.apply(process.stderr, arguments);
+  };
+  try {
+    await fn();
+  } finally {
+    process.stdout.write = originalStdoutWrite;
+    process.stderr.write = originalStderrWrite;
+  }
+  return { stdout, stderr };
+}
+
+async function runRemoteControlPrompt(opts, text) {
+  const line = String(text || '').trim();
+  if (!line) return { ok: false, output: 'Empty prompt.' };
+  pushCliHistory(opts, `[remote] ${line}`);
+  try { saveCliWorkspaceState(opts); } catch (_err) {}
+  const captured = await captureRemoteControlOutput(async () => {
+    if (line === '/exit' || line === '/quit') {
+      console.log('Remote clients cannot exit the local terminal process. Stop it locally with Ctrl+C.');
+      return;
+    }
+    const localResult = await handleLocalCommand(opts, line);
+    if (localResult.handled) return;
+    const localIntent = classifyLocalPromptIntent(line);
+    if (localIntent?.command) {
+      const intentResult = await handleLocalCommand(opts, localIntent.command);
+      if (intentResult.handled) return;
+    }
+    const naturalFileAction = await runNaturalLocalFileAction(opts, line);
+    if (naturalFileAction.handled) return;
+    if (opts.offline) {
+      console.log('Offline mode: use slash commands and local tools from this remote session.');
+      return;
+    }
+    const data = await askServer(opts, line);
+    printResponse(opts, data);
+  });
+  const output = `${captured.stdout || ''}${captured.stderr || ''}`.trim();
+  return { ok: true, output: output || '(no output)' };
+}
+
+async function startRemoteControlServer(opts, overrides = {}) {
+  if (opts.remoteControlSession?.server) {
+    console.log(`Remote Control already active: ${opts.remoteControlSession.localUrl}`);
+    return opts.remoteControlSession;
+  }
+
+  const http = require('http');
+  const crypto = require('crypto');
+  const host = String(overrides.host || opts.remoteControlHost || '127.0.0.1').trim() || '127.0.0.1';
+  const port = Math.max(0, Math.min(65535, Number(overrides.port ?? opts.remoteControlPort ?? 0) || 0));
+  const token = crypto.randomBytes(24).toString('hex');
+  const state = {
+    id: crypto.randomUUID ? crypto.randomUUID() : `${Date.now()}-${Math.random().toString(16).slice(2)}`,
+    name: String(overrides.name || opts.remoteControlName || path.basename(opts.cwd || process.cwd()) || os.hostname() || 'Bortex Code').trim(),
+    host,
+    port,
+    token,
+    cwd: opts.cwd,
+    startedAt: Date.now(),
+    busy: false,
+    log: []
+  };
+  const appendLog = (role, text) => {
+    state.log.push({ role, text: String(text || ''), ts: Date.now() });
+    if (state.log.length > 200) state.log.splice(0, state.log.length - 200);
+  };
+  appendLog('system', `Remote Control started for ${state.cwd}`);
+
+  const isAuthorized = (req, urlObj) => {
+    const header = String(req.headers['x-bortex-remote-token'] || '');
+    const query = String(urlObj.searchParams.get('token') || '');
+    return header === token || query === token;
+  };
+
+  const server = http.createServer(async (req, res) => {
+    let urlObj;
+    try { urlObj = new URL(req.url, `http://${host === '0.0.0.0' ? '127.0.0.1' : host}`); } catch (_err) {
+      return sendJson(res, 400, { ok: false, error: 'bad url' });
+    }
+    if (req.method === 'GET' && urlObj.pathname === '/') {
+      if (!isAuthorized(req, urlObj)) {
+        res.writeHead(401, { 'content-type': 'text/plain; charset=utf-8', 'cache-control': 'no-store' });
+        return res.end('Unauthorized: missing or invalid token.');
+      }
+      const body = buildRemoteControlHtml(state);
+      res.writeHead(200, {
+        'content-type': 'text/html; charset=utf-8',
+        'cache-control': 'no-store',
+        'content-length': Buffer.byteLength(body)
+      });
+      return res.end(body);
+    }
+    if (!isAuthorized(req, urlObj)) return sendJson(res, 401, { ok: false, error: 'unauthorized' });
+    if (req.method === 'GET' && urlObj.pathname === '/api/status') {
+      return sendJson(res, 200, {
+        ok: true,
+        id: state.id,
+        name: state.name,
+        version: CLI_VERSION,
+        cwd: opts.cwd,
+        agent: !!opts.agent,
+        busy: !!state.busy,
+        startedAt: state.startedAt,
+        log: state.log
+      });
+    }
+    if (req.method === 'POST' && urlObj.pathname === '/api/prompt') {
+      if (state.busy) return sendJson(res, 409, { ok: false, error: 'remote session busy' });
+      state.busy = true;
+      try {
+        const raw = await readHttpBody(req);
+        let payload;
+        try { payload = JSON.parse(raw || '{}'); } catch (_err) { payload = { text: raw }; }
+        const text = String(payload.text || payload.prompt || '').trim();
+        if (!text) return sendJson(res, 400, { ok: false, error: 'empty prompt' });
+        appendLog('user', text);
+        const result = await runRemoteControlPrompt(opts, text);
+        appendLog('assistant', result.output || '(no output)');
+        return sendJson(res, result.ok ? 200 : 500, { ok: !!result.ok, output: result.output || '' });
+      } catch (err) {
+        appendLog('system', `Error: ${err.message}`);
+        return sendJson(res, 500, { ok: false, error: err.message });
+      } finally {
+        state.busy = false;
+      }
+    }
+    return sendJson(res, 404, { ok: false, error: 'not found' });
+  });
+
+  await new Promise((resolve, reject) => {
+    server.once('error', reject);
+    server.listen(port, host, resolve);
+  });
+  const actualPort = server.address().port;
+  state.port = actualPort;
+  state.server = server;
+  state.localUrl = `http://127.0.0.1:${actualPort}/?token=${encodeURIComponent(token)}`;
+  state.lanUrls = getRemoteLanAddresses(actualPort, token);
+  state.stop = () => new Promise((resolve) => server.close(() => resolve()));
+  opts.remoteControlSession = state;
+
+  console.log(`Remote Control active: ${state.name}`);
+  console.log(`Local URL: ${state.localUrl}`);
+  if (host === '0.0.0.0' || host === '::') {
+    if (state.lanUrls.length) {
+      console.log('LAN URLs:');
+      state.lanUrls.forEach((u) => console.log(`  ${u}`));
+    }
+    console.log('Security: keep this tokenized URL private. Anyone with the URL can control this Bortex Code session.');
+  } else {
+    console.log('Mobile/LAN access: restart with --remote-lan or /remote-control --lan to bind on 0.0.0.0.');
+  }
+  return state;
+}
+
+async function stopRemoteControlServer(opts) {
+  const state = opts.remoteControlSession;
+  if (!state?.server) {
+    console.log('Remote Control is not active.');
+    return false;
+  }
+  await state.stop();
+  opts.remoteControlSession = null;
+  console.log('Remote Control stopped.');
+  return true;
+}
+
+function parseRemoteControlSlashArgs(rest = [], opts = {}) {
+  const out = {
+    name: '',
+    host: opts.remoteControlHost || '127.0.0.1',
+    port: Number(opts.remoteControlPort || 0) || 0
+  };
+  const nameParts = [];
+  for (let i = 0; i < rest.length; i += 1) {
+    const a = String(rest[i] || '');
+    if (a === 'stop' || a === 'off' || a === 'disconnect') {
+      out.stop = true;
+      continue;
+    }
+    if (a === '--lan' || a === '--remote-lan') {
+      out.host = '0.0.0.0';
+      continue;
+    }
+    if ((a === '--host' || a === '--remote-host') && rest[i + 1]) {
+      out.host = String(rest[i + 1]);
+      i += 1;
+      continue;
+    }
+    if (a.startsWith('--host=')) {
+      out.host = a.slice('--host='.length);
+      continue;
+    }
+    if ((a === '--port' || a === '--remote-port') && rest[i + 1]) {
+      out.port = Number(rest[i + 1]) || 0;
+      i += 1;
+      continue;
+    }
+    if (a.startsWith('--port=')) {
+      out.port = Number(a.slice('--port='.length)) || 0;
+      continue;
+    }
+    nameParts.push(a);
+  }
+  out.name = nameParts.join(' ').trim();
+  return out;
+}
+
 function printAgentLocalHelp() {
   console.log('Agent-local (planner CLI):');
   console.log('  /agent-local <goal>   genera un piano operativo CLI');
@@ -5240,6 +5820,33 @@ async function handleLocalCommand(opts, line) {
     });
     return { handled: true };
   }
+  if (lc === '/agent') {
+    const v = String(rest[0] || '').toLowerCase();
+    if (!['on', 'off', 'true', 'false', '1', '0'].includes(v)) {
+      console.log('Uso: /agent on|off');
+      return { handled: true };
+    }
+    opts.agent = v === 'on' || v === 'true' || v === '1';
+    console.log(`Mode: ${opts.agent ? 'agent' : 'chat'}`);
+    return { handled: true };
+  }
+  if (lc === '/status') {
+    const todoItems = Array.isArray(opts.todo) ? opts.todo : [];
+    const done = todoItems.filter((t) => t.done).length;
+    const runPending = Array.isArray(opts.runState?.steps) ? opts.runState.steps.filter((s) => s.status === 'pending').length : 0;
+    console.log(formatModeLine(opts));
+    console.log(`Todo: ${done}/${todoItems.length} | Plan: ${opts.plan?.goal ? 'active' : 'none'} | Run: ${opts.runState?.goal ? `active (${runPending} pending)` : 'none'} | Remote: ${opts.remoteControlSession?.server ? 'active' : 'off'}`);
+    return { handled: true };
+  }
+  if (lc === '/remote-control' || lc === '/remote' || lc === '/rc') {
+    const parsed = parseRemoteControlSlashArgs(rest, opts);
+    if (parsed.stop || opts.remoteControlSession?.server) {
+      await stopRemoteControlServer(opts);
+      return { handled: true };
+    }
+    await startRemoteControlServer(opts, parsed);
+    return { handled: true };
+  }
   if (lc === '/pwd') {
     console.log(opts.cwd);
     return { handled: true };
@@ -6401,6 +7008,9 @@ const SLASH_COMMANDS = [
   ['/status', 'Show session and workspace state'],
   ['/commands', 'Show this command menu'],
   ['/help', 'Show command help'],
+  ['/remote-control [name]', 'Control this local session from a browser'],
+  ['/remote-control --lan', 'Expose Remote Control on the local network'],
+  ['/rc', 'Toggle Remote Control'],
   ['/llm-config show', 'Show cached LLM configuration'],
   ['/llm-config sync', 'Sync LLM configuration from Bortex'],
   ['/pwd', 'Show current working directory'],
@@ -6575,6 +7185,13 @@ async function runRepl(opts) {
     return lines.join('\n');
   };
   opts._askInput = async (prompt) => new Promise((resolve) => rl.question(prompt, resolve));
+  if (opts.remoteControl) {
+    await startRemoteControlServer(opts, {
+      name: opts.remoteControlName,
+      host: opts.remoteControlHost,
+      port: opts.remoteControlPort
+    });
+  }
 
   const question = () => new Promise((resolve) => {
     const prompt = `bortex:${opts.agent ? 'agent' : 'chat'}> `;
@@ -6646,6 +7263,9 @@ async function runRepl(opts) {
 
   rl.close();
   uninstallSlashMenu();
+  if (opts.remoteControlSession?.server) {
+    await stopRemoteControlServer(opts);
+  }
   try { saveCliWorkspaceState(opts); } catch (_err) { }
   delete opts._readMultiline;
   delete opts._askInput;
@@ -6696,6 +7316,27 @@ async function main() {
     opts.sessionReused = false;
   }
 
+  if (opts.remoteControlServerMode) {
+    await startRemoteControlServer(opts, {
+      name: opts.remoteControlName,
+      host: opts.remoteControlHost,
+      port: opts.remoteControlPort
+    });
+    console.log('Server mode: keep this process running. Press Ctrl+C to stop Remote Control.');
+    await new Promise((resolve) => {
+      let stopping = false;
+      const stop = async () => {
+        if (stopping) return;
+        stopping = true;
+        try { await stopRemoteControlServer(opts); } catch (_err) {}
+        resolve();
+      };
+      process.once('SIGINT', stop);
+      process.once('SIGTERM', stop);
+    });
+    return;
+  }
+
   if (opts.prompt) {
     await runSinglePrompt(opts);
     return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bortexcode",
-  "version": "1.2.6",
+  "version": "1.2.9",
   "description": "Bortex Code CLI - AI coding assistant powered by bortex.site",
   "homepage": "https://bortex.site",
   "license": "UNLICENSED",