bortexcode 1.2.9 → 1.4.0

package/README.md

@@ -48,6 +48,7 @@ bortexcode
 bortexcode "explain this function"
 bortexcode --agent "refactor src/utils.js"
 bortexcode remote-control
+bortexcode remote-control --cloud
 bortexcode --remote-control
 ```
 
@@ -67,6 +68,7 @@ Common commands:
 /llm-config sync
 /remote-control [name]
 /remote-control --lan
+/remote-control --cloud
 /rc
 /exit
 ```
@@ -87,11 +89,31 @@ For phone access on the same LAN:
 bortexcode remote-control --remote-lan
 ```
 
+For remote access without opening an inbound port, use the bortex.site relay:
+
+```bash
+bortexcode remote-control --cloud --name "My Project"
+bortexcode --remote-cloud "My Project"
+bortexcode remote-control --cloud --remote-permission full
+```
+
+Cloud Remote Control defaults to `balanced` permissions. It allows inspection,
+status commands, and common test/lint/build shell commands while blocking
+mutating commands such as file writes, patch apply, git stage/commit/discard,
+and arbitrary shell mutations. Use `--remote-permission read-only` for
+inspection-only sessions or `--remote-permission full` only for trusted sessions.
+
+The browser UI includes Cancel and Revoke controls. Cancel requests termination
+of the running command. Revoke invalidates the tokenized URL and stops the
+server-mode cloud session.
+
 Inside the REPL:
 
 ```text
 /remote-control My Project
 /remote-control --lan
+/remote-control --cloud
+/remote-control --cloud --permission full
 /remote-control stop
 ```
 
@@ -115,6 +137,12 @@ Inside the REPL:
                     Disable startup update check
     --remote-control, --rc [name]
                     Enable browser remote control
+    --remote-cloud, --cloud
+                    Use bortex.site relay instead of opening a local port
+    --remote-relay <url>
+                    Remote relay base URL
+    --remote-permission <mode>
+                    Remote permissions: read-only, balanced, full
     --remote-lan    Bind remote control to 0.0.0.0 for LAN/mobile access
     --remote-host <host>, --remote-port <port>
                     Remote control bind address
@@ -141,4 +169,6 @@ BORTEX_CLI_ICONS=1
 BORTEX_NO_UPDATE_CHECK=1
 BORTEX_REMOTE_HOST
 BORTEX_REMOTE_PORT
+BORTEX_REMOTE_RELAY_URL
+BORTEX_REMOTE_PERMISSION
 ```

package/bin/bortex.js

@@ -33,6 +33,9 @@ function parseArgs(argv) {
     _apiKeyExplicit: false,
     remoteControl: false,
     remoteControlServerMode: false,
+    remoteControlCloud: false,
+    remoteControlRelayUrl: process.env.BORTEX_REMOTE_RELAY_URL || '',
+    remoteControlPermission: process.env.BORTEX_REMOTE_PERMISSION || 'balanced',
     remoteControlName: '',
     remoteControlHost: process.env.BORTEX_REMOTE_HOST || '127.0.0.1',
     remoteControlPort: Number(process.env.BORTEX_REMOTE_PORT || 0) || 0,
@@ -51,6 +54,10 @@ function parseArgs(argv) {
       opts.remoteControlServerMode = true;
       continue;
     }
+    if ((a === 'cloud' || a === 'relay') && opts.remoteControlServerMode) {
+      opts.remoteControlCloud = true;
+      continue;
+    }
     if (a === '--agent' || a === '-a') {
       opts.agent = true;
       continue;
@@ -150,6 +157,41 @@ function parseArgs(argv) {
       opts.remoteControlName = a.slice('--remote-control='.length);
       continue;
     }
+    if (a === '--remote-cloud' || a === '--cloud' || a === '--relay') {
+      opts.remoteControl = true;
+      opts.remoteControlCloud = true;
+      if (argv[i + 1] && !String(argv[i + 1]).startsWith('-')) {
+        opts.remoteControlName = argv[i + 1];
+        i += 1;
+      }
+      continue;
+    }
+    if ((a === '--remote-relay' || a === '--relay-url') && argv[i + 1]) {
+      opts.remoteControlRelayUrl = argv[i + 1];
+      i += 1;
+      continue;
+    }
+    if (a.startsWith('--remote-relay=')) {
+      opts.remoteControlRelayUrl = a.slice('--remote-relay='.length);
+      continue;
+    }
+    if (a.startsWith('--relay-url=')) {
+      opts.remoteControlRelayUrl = a.slice('--relay-url='.length);
+      continue;
+    }
+    if ((a === '--remote-permission' || a === '--permission') && argv[i + 1]) {
+      opts.remoteControlPermission = argv[i + 1];
+      i += 1;
+      continue;
+    }
+    if (a.startsWith('--remote-permission=')) {
+      opts.remoteControlPermission = a.slice('--remote-permission='.length);
+      continue;
+    }
+    if (a.startsWith('--permission=')) {
+      opts.remoteControlPermission = a.slice('--permission='.length);
+      continue;
+    }
     if (a === '--remote-lan') {
       opts.remoteControlHost = '0.0.0.0';
       continue;
@@ -197,6 +239,7 @@ function usage() {
   console.log('Usage:');
   console.log(`  ${cliName} [options] [prompt]`);
   console.log(`  ${cliName} remote-control [--name <title>] [--remote-lan]`);
+  console.log(`  ${cliName} remote-control --cloud [--name <title>]`);
   console.log(`  ${cliName} --api-key <apikey>`);
   console.log(`  ${cliName} "write a python function"`);
   console.log('');
@@ -218,6 +261,12 @@ function usage() {
   console.log('                      Disable startup update check');
   console.log('      --remote-control, --rc [name]');
   console.log('                      Enable browser remote control for this session');
+  console.log('      --remote-cloud, --cloud');
+  console.log('                      Use bortex.site relay instead of opening a local port');
+  console.log('      --remote-relay <url>');
+  console.log('                      Remote relay base URL (default: current --url)');
+  console.log('      --remote-permission <mode>');
+  console.log('                      Remote permissions: read-only, balanced, full');
   console.log('      --remote-lan    Bind remote control to 0.0.0.0 for LAN/mobile access');
   console.log('      --remote-host <host>, --remote-port <port>');
   console.log('                      Remote control bind address');
@@ -230,6 +279,8 @@ function usage() {
   console.log('Environment:');
   console.log('  BORTEX_URL      Server URL');
   console.log('  BORTEX_API_KEY  API key');
+  console.log('  BORTEX_REMOTE_RELAY_URL  Remote Control cloud relay URL');
+  console.log('  BORTEX_REMOTE_PERMISSION Remote permissions: read-only, balanced, full');
 }
 
 function formatMs(ms) {
@@ -3897,8 +3948,31 @@ async function runToolRunCommand(opts, line) {
   });
 }
 
+let ACTIVE_REMOTE_CONTROL_EXECUTION_STATE = null;
+
+function terminateChildProcessTree(child) {
+  if (!child || !child.pid) return;
+  if (process.platform === 'win32') {
+    try {
+      spawnSync('taskkill', ['/PID', String(child.pid), '/T', '/F'], {
+        stdio: 'ignore',
+        windowsHide: true
+      });
+      return;
+    } catch (_err) {}
+  }
+  try { child.kill('SIGTERM'); } catch (_err) {}
+  setTimeout(() => {
+    try { child.kill('SIGKILL'); } catch (_err) {}
+  }, 1500).unref?.();
+}
+
 function runChild(command, args, { cwd, shell = false } = {}) {
   return new Promise((resolve) => {
+    const cancelState = ACTIVE_REMOTE_CONTROL_EXECUTION_STATE;
+    if (cancelState?.cancelRequested || cancelState?.revoked || cancelState?.active === false) {
+      return resolve({ ok: false, code: null, stdout: '', stderr: 'Canceled by remote request.' });
+    }
     const child = spawn(command, args, {
       cwd: cwd || process.cwd(),
       shell,
@@ -3907,10 +3981,30 @@ function runChild(command, args, { cwd, shell = false } = {}) {
     });
     let stdout = '';
     let stderr = '';
+    let settled = false;
+    let canceled = false;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      if (cancelTimer) clearInterval(cancelTimer);
+      resolve(result);
+    };
+    const cancelTimer = cancelState ? setInterval(() => {
+      if (cancelState.cancelRequested || cancelState.revoked || cancelState.active === false) {
+        canceled = true;
+        terminateChildProcessTree(child);
+      }
+    }, 250) : null;
+    if (cancelTimer && typeof cancelTimer.unref === 'function') cancelTimer.unref();
     child.stdout.on('data', (c) => { stdout += String(c || ''); });
     child.stderr.on('data', (c) => { stderr += String(c || ''); });
-    child.on('error', (err) => resolve({ ok: false, code: null, stdout, stderr: err.message }));
-    child.on('close', (code) => resolve({ ok: code === 0, code, stdout, stderr }));
+    child.on('error', (err) => finish({ ok: false, code: null, stdout, stderr: err.message }));
+    child.on('close', (code) => {
+      const finalStderr = canceled
+        ? `${stderr || ''}${stderr && !stderr.endsWith('\n') ? '\n' : ''}Canceled by remote request.`
+        : stderr;
+      finish({ ok: !canceled && code === 0, code, stdout, stderr: finalStderr });
+    });
   });
 }
 
@@ -3930,6 +4024,7 @@ function printLocalHelp() {
   console.log('  /process-status     check running processes');
   console.log('  /port-status        check listening ports');
   console.log('  /remote-control [name] [--lan|--host <host>|--port <port>]');
+  console.log('  /remote-control --cloud [name]');
   console.log('  /remote-control stop');
   console.log('  /diff [unstaged|staged|all]');
   console.log('  /stage <file>|--all');
@@ -4342,29 +4437,50 @@ async function captureRemoteControlOutput(fn) {
 async function runRemoteControlPrompt(opts, text) {
   const line = String(text || '').trim();
   if (!line) return { ok: false, output: 'Empty prompt.' };
+  const permission = assessRemoteControlPromptPermission(opts, line);
+  if (!permission.ok) {
+    return {
+      ok: false,
+      output: `Remote command blocked (${permission.mode}): ${permission.reason}.\nRestart with --remote-permission full only for a trusted session.`
+    };
+  }
   pushCliHistory(opts, `[remote] ${line}`);
   try { saveCliWorkspaceState(opts); } catch (_err) {}
-  const captured = await captureRemoteControlOutput(async () => {
-    if (line === '/exit' || line === '/quit') {
-      console.log('Remote clients cannot exit the local terminal process. Stop it locally with Ctrl+C.');
-      return;
-    }
-    const localResult = await handleLocalCommand(opts, line);
-    if (localResult.handled) return;
-    const localIntent = classifyLocalPromptIntent(line);
-    if (localIntent?.command) {
-      const intentResult = await handleLocalCommand(opts, localIntent.command);
-      if (intentResult.handled) return;
-    }
-    const naturalFileAction = await runNaturalLocalFileAction(opts, line);
-    if (naturalFileAction.handled) return;
-    if (opts.offline) {
-      console.log('Offline mode: use slash commands and local tools from this remote session.');
-      return;
-    }
-    const data = await askServer(opts, line);
-    printResponse(opts, data);
-  });
+  const previousRemoteExecution = ACTIVE_REMOTE_CONTROL_EXECUTION_STATE;
+  ACTIVE_REMOTE_CONTROL_EXECUTION_STATE = opts._remoteControlExecutionState || null;
+  let captured;
+  try {
+    captured = await captureRemoteControlOutput(async () => {
+      if (line === '/exit' || line === '/quit') {
+        console.log('Remote clients cannot exit the local terminal process. Stop it locally with Ctrl+C.');
+        return;
+      }
+      const localResult = await handleLocalCommand(opts, line);
+      if (localResult.handled) return;
+      const localIntent = classifyLocalPromptIntent(line);
+      if (localIntent?.command) {
+        const intentPermission = assessRemoteControlPromptPermission(opts, localIntent.command);
+        if (!intentPermission.ok) {
+          console.log(`Remote inferred command blocked (${intentPermission.mode}): ${intentPermission.reason}.`);
+          return;
+        }
+        const intentResult = await handleLocalCommand(opts, localIntent.command);
+        if (intentResult.handled) return;
+      }
+      if (!permission.skipNaturalActions) {
+        const naturalFileAction = await runNaturalLocalFileAction(opts, line);
+        if (naturalFileAction.handled) return;
+      }
+      if (opts.offline) {
+        console.log('Offline mode: use slash commands and local tools from this remote session.');
+        return;
+      }
+      const data = await askServer(opts, line);
+      printResponse(opts, data);
+    });
+  } finally {
+    ACTIVE_REMOTE_CONTROL_EXECUTION_STATE = previousRemoteExecution;
+  }
   const output = `${captured.stdout || ''}${captured.stderr || ''}`.trim();
   return { ok: true, output: output || '(no output)' };
 }
@@ -4377,12 +4493,13 @@ async function startRemoteControlServer(opts, overrides = {}) {
 
   const http = require('http');
   const crypto = require('crypto');
+  opts.remoteControlPermission = getRemoteControlPermissionMode(opts, overrides);
   const host = String(overrides.host || opts.remoteControlHost || '127.0.0.1').trim() || '127.0.0.1';
   const port = Math.max(0, Math.min(65535, Number(overrides.port ?? opts.remoteControlPort ?? 0) || 0));
   const token = crypto.randomBytes(24).toString('hex');
   const state = {
     id: crypto.randomUUID ? crypto.randomUUID() : `${Date.now()}-${Math.random().toString(16).slice(2)}`,
-    name: String(overrides.name || opts.remoteControlName || path.basename(opts.cwd || process.cwd()) || os.hostname() || 'Bortex Code').trim(),
+    name: getRemoteControlDisplayName(opts, overrides),
     host,
     port,
     token,
@@ -4496,11 +4613,377 @@ async function stopRemoteControlServer(opts) {
   return true;
 }
 
+function getRemoteControlDisplayName(opts, overrides = {}) {
+  return String(overrides.name || opts.remoteControlName || path.basename(opts.cwd || process.cwd()) || os.hostname() || 'Bortex Code').trim();
+}
+
+function getRemoteControlStatus(opts) {
+  if (opts.remoteControlCloudSession?.active) return 'cloud';
+  if (opts.remoteControlSession?.server) return 'local';
+  return 'off';
+}
+
+function getRemoteControlRelayBase(opts, overrides = {}) {
+  return String(overrides.relayUrl || opts.remoteControlRelayUrl || opts.url || 'https://bortex.site').replace(/\/+$/, '');
+}
+
+function normalizeRemoteControlPermissionMode(value) {
+  const v = String(value || 'balanced').trim().toLowerCase();
+  if (['full', 'trusted', 'unsafe', 'yolo'].includes(v)) return 'full';
+  if (['read-only', 'readonly', 'read', 'safe', 'ro'].includes(v)) return 'read-only';
+  return 'balanced';
+}
+
+function getRemoteControlPermissionMode(opts, overrides = {}) {
+  return normalizeRemoteControlPermissionMode(overrides.permission || opts.remoteControlPermission || 'balanced');
+}
+
+function isReadOnlyRemoteSlashCommand(line) {
+  const [cmd, ...rest] = parseWords(line);
+  const lc = String(cmd || '').toLowerCase();
+  if (!lc.startsWith('/')) return false;
+  if ([
+    '/help', '/commands', '/menu', '/status', '/pwd', '/ls', '/tree', '/read',
+    '/diff', '/hunks', '/show-hunk', '/ssh-status', '/sys-status',
+    '/process-status', '/port-status', '/history'
+  ].includes(lc)) return true;
+  if (lc === '/llm-config') {
+    const sub = String(rest[0] || 'show').toLowerCase();
+    return !sub || ['show', 'status'].includes(sub);
+  }
+  if (lc === '/git') {
+    const sub = String(rest[0] || '').toLowerCase();
+    return ['status', 'diff', 'log', 'show', 'branch', 'rev-parse', 'remote'].includes(sub);
+  }
+  return false;
+}
+
+function isBalancedRemoteShellCommand(cmdText) {
+  const text = String(cmdText || '').trim();
+  const lower = text.toLowerCase();
+  if (!text) return false;
+  if (/[;&|`$<>]/.test(text)) return false;
+  if (/\b(rm|del|erase|rmdir|rd|move|mv|copy|cp|curl|wget|scp|ssh|chmod|chown|sudo|su|kill|pkill|taskkill|format|shutdown|reboot)\b/i.test(text)) return false;
+  if (/\b(git\s+(add|commit|reset|restore|checkout|switch|clean|stash|push|pull|merge|rebase|apply|am|cherry-pick))\b/i.test(text)) return false;
+  if (/^(npm|pnpm|yarn)\s+(test|run\s+(test|lint|build|check|typecheck)|exec\s+tsc)\b/i.test(text)) return true;
+  if (/^node\s+--check\s+\S+/i.test(text)) return true;
+  if (/^(git\s+(status|diff|log|show|branch|rev-parse)|rg|grep|findstr|ls|dir|pwd|cat|type)\b/i.test(text)) return true;
+  return false;
+}
+
+function isBalancedRemoteSlashCommand(line) {
+  if (isReadOnlyRemoteSlashCommand(line)) return true;
+  const [cmd, ...rest] = parseWords(line);
+  const lc = String(cmd || '').toLowerCase();
+  if (lc === '/sh') {
+    const cmdText = line.slice(line.indexOf('/sh') + 3).trim();
+    return isBalancedRemoteShellCommand(cmdText);
+  }
+  if (lc === '/agent') return true;
+  if (lc === '/ux') return true;
+  if (lc === '/remote-control' || lc === '/remote' || lc === '/rc') return true;
+  if (lc === '/agent-run') {
+    return rest.some((x) => String(x).toLowerCase() === '--dry');
+  }
+  return false;
+}
+
+function assessRemoteControlPromptPermission(opts, line) {
+  const mode = getRemoteControlPermissionMode(opts);
+  const text = String(line || '').trim();
+  if (!text) return { ok: false, mode, reason: 'empty prompt' };
+  if (mode === 'full') return { ok: true, mode };
+  if (!text.startsWith('/')) return { ok: true, mode, skipNaturalActions: true };
+  if (mode === 'read-only') {
+    if (isReadOnlyRemoteSlashCommand(text)) return { ok: true, mode, skipNaturalActions: true };
+    return { ok: false, mode, reason: 'read-only mode allows inspection commands only' };
+  }
+  if (isBalancedRemoteSlashCommand(text)) return { ok: true, mode, skipNaturalActions: true };
+  return { ok: false, mode, reason: 'balanced mode blocks mutating or unsafe remote commands' };
+}
+
+function remoteControlSleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+function withRemoteControlQuery(rawUrl, baseUrl, params = {}) {
+  const urlObj = new URL(rawUrl, baseUrl);
+  Object.entries(params).forEach(([key, value]) => {
+    if (value !== undefined && value !== null && value !== '') {
+      urlObj.searchParams.set(key, String(value));
+    }
+  });
+  return urlObj.toString();
+}
+
+async function fetchRemoteControlJson(url, options = {}, timeoutMs = 30000) {
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+  if (typeof timeoutId.unref === 'function') timeoutId.unref();
+  try {
+    const res = await fetch(url, {
+      ...options,
+      headers: {
+        Accept: 'application/json',
+        ...(options.headers || {})
+      },
+      signal: controller.signal
+    });
+    const text = await res.text();
+    let data = null;
+    if (text) {
+      try { data = JSON.parse(text); } catch (_err) { data = null; }
+    }
+    if (!res.ok) {
+      const detail = data?.error || data?.message || text || res.statusText || 'request failed';
+      throw new Error(`HTTP ${res.status}: ${detail}`);
+    }
+    if (data?.ok === false) {
+      throw new Error(data.error || data.message || 'request failed');
+    }
+    return data || {};
+  } finally {
+    clearTimeout(timeoutId);
+  }
+}
+
+async function postCloudRemoteHeartbeat(state, extra = {}) {
+  const heartbeatUrl = withRemoteControlQuery(
+    state.heartbeatUrl,
+    state.baseUrl,
+    { agentToken: state.agentToken }
+  );
+  await fetchRemoteControlJson(heartbeatUrl, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ cwd: state.cwd, version: CLI_VERSION, ...extra })
+  }, 12000);
+}
+
+async function postCloudRemoteResult(state, commandId, result) {
+  const resultUrl = withRemoteControlQuery(
+    state.resultUrl,
+    state.baseUrl,
+    { agentToken: state.agentToken }
+  );
+  await fetchRemoteControlJson(resultUrl, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      commandId,
+      ok: !!result.ok,
+      output: String(result.output || '')
+    })
+  }, 35000);
+}
+
+async function pollCloudRemoteControlControlLoop(state) {
+  while (state.active) {
+    try {
+      const controlUrl = withRemoteControlQuery(
+        state.controlUrl,
+        state.baseUrl,
+        { agentToken: state.agentToken }
+      );
+      const data = await fetchRemoteControlJson(controlUrl, { method: 'GET' }, 12000);
+      if (data.revoked) {
+        state.revoked = true;
+        state.cancelRequested = true;
+        state.active = false;
+        console.log('Cloud Remote Control revoked by remote client.');
+        break;
+      }
+      if (data.cancelRequested) {
+        state.cancelRequested = true;
+        state.cancelCommandId = data.cancelCommandId || null;
+      }
+      state.controlErrorCount = 0;
+    } catch (err) {
+      state.controlErrorCount = (state.controlErrorCount || 0) + 1;
+      if (/revoked|410/i.test(String(err.message || err))) {
+        state.revoked = true;
+        state.cancelRequested = true;
+        state.active = false;
+        break;
+      }
+    }
+    await remoteControlSleep(Math.min(3000, 1000 + (state.controlErrorCount || 0) * 250));
+  }
+}
+
+async function pollCloudRemoteControlLoop(opts, state) {
+  let lastHeartbeatAt = 0;
+  while (state.active) {
+    let delayMs = 1200;
+    try {
+      const pollUrl = withRemoteControlQuery(
+        state.pollUrl,
+        state.baseUrl,
+        { agentToken: state.agentToken, after: state.lastCommandId || 0 }
+      );
+      const data = await fetchRemoteControlJson(pollUrl, { method: 'GET' }, 35000);
+      if (data.revoked) {
+        state.revoked = true;
+        state.cancelRequested = true;
+        state.active = false;
+        console.log('Cloud Remote Control revoked by remote client.');
+        break;
+      }
+      if (data.cancelRequested) {
+        state.cancelRequested = true;
+        state.cancelCommandId = data.cancelCommandId || null;
+      }
+      const commands = Array.isArray(data.commands) ? data.commands : [];
+      state.lastSeenAt = Date.now();
+      state.errorCount = 0;
+
+      for (const command of commands) {
+        if (!state.active) break;
+        const commandId = Number(command?.id || 0);
+        if (commandId > (state.lastCommandId || 0)) state.lastCommandId = commandId;
+        const text = String(command?.text || command?.prompt || '').trim();
+        if (!text) continue;
+        state.cancelRequested = false;
+        state.cancelCommandId = null;
+        state.busy = true;
+        opts._remoteControlExecutionState = state;
+        let result;
+        try {
+          result = await runRemoteControlPrompt(opts, text);
+        } catch (err) {
+          result = { ok: false, output: err.stack || err.message || String(err) };
+        } finally {
+          state.busy = false;
+          delete opts._remoteControlExecutionState;
+        }
+        if (state.cancelRequested && result.ok) {
+          result = { ok: false, output: 'Canceled by remote request.' };
+        }
+        await postCloudRemoteResult(state, commandId, result);
+        if (state.cancelRequested) {
+          state.cancelRequested = false;
+          state.cancelCommandId = null;
+        }
+      }
+
+      if (!commands.length && state.cancelRequested && !state.busy) {
+        await postCloudRemoteHeartbeat(state, { cancelAck: true });
+        state.cancelRequested = false;
+        state.cancelCommandId = null;
+      }
+      if (!commands.length && Date.now() - lastHeartbeatAt > 10000) {
+        lastHeartbeatAt = Date.now();
+        await postCloudRemoteHeartbeat(state);
+      }
+      if (commands.length) delayMs = 250;
+    } catch (err) {
+      if (state.active) {
+        state.errorCount = (state.errorCount || 0) + 1;
+        const now = Date.now();
+        if (!state.lastErrorAt || now - state.lastErrorAt > 15000) {
+          console.error(`Cloud Remote Control error: ${err.message || String(err)}`);
+          state.lastErrorAt = now;
+        }
+        delayMs = Math.min(5000, 1000 + state.errorCount * 500);
+      }
+    } finally {
+      state.busy = false;
+    }
+    await remoteControlSleep(delayMs);
+  }
+}
+
+async function startCloudRemoteControlSession(opts, overrides = {}) {
+  if (opts.remoteControlCloudSession?.active) {
+    console.log(`Cloud Remote Control already active: ${opts.remoteControlCloudSession.url}`);
+    return opts.remoteControlCloudSession;
+  }
+
+  const baseUrl = getRemoteControlRelayBase(opts, overrides);
+  const name = getRemoteControlDisplayName(opts, overrides);
+  const permission = getRemoteControlPermissionMode(opts, overrides);
+  opts.remoteControlPermission = permission;
+  const payload = {
+    name,
+    cwd: opts.cwd,
+    version: CLI_VERSION,
+    machine: os.hostname(),
+    platform: process.platform,
+    node: process.version,
+    mode: opts.agent ? 'agent' : 'chat',
+    permission
+  };
+  const data = await fetchRemoteControlJson(`${baseUrl}/api/bortex-code/remote/register`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(payload)
+  }, 30000);
+
+  const sessionId = String(data.sessionId || '').trim();
+  const agentToken = String(data.agentToken || '').trim();
+  if (!sessionId || !agentToken) {
+    throw new Error('Remote relay registration did not return a session token.');
+  }
+
+  const state = {
+    active: true,
+    cloud: true,
+    baseUrl,
+    sessionId,
+    agentToken,
+    clientToken: data.clientToken || '',
+    name,
+    permission,
+    cwd: opts.cwd,
+    url: data.url || `${baseUrl}/bortex-code/remote?session=${encodeURIComponent(sessionId)}`,
+    pollUrl: data.pollUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/poll`,
+    resultUrl: data.resultUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/result`,
+    heartbeatUrl: data.heartbeatUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/heartbeat`,
+    controlUrl: data.controlUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/control`,
+    lastCommandId: 0,
+    startedAt: Date.now(),
+    busy: false,
+    errorCount: 0
+  };
+  state.stop = async () => {
+    state.active = false;
+  };
+  opts.remoteControlCloudSession = state;
+  state.pollPromise = pollCloudRemoteControlLoop(opts, state).catch((err) => {
+    if (state.active) console.error(`Cloud Remote Control stopped unexpectedly: ${err.message || String(err)}`);
+  });
+  state.controlPromise = pollCloudRemoteControlControlLoop(state).catch((err) => {
+    if (state.active) console.error(`Cloud Remote Control control loop stopped unexpectedly: ${err.message || String(err)}`);
+  });
+
+  console.log(`Cloud Remote Control active: ${state.name}`);
+  console.log(`URL: ${state.url}`);
+  console.log(`Permission: ${state.permission}`);
+  console.log('No inbound port required. Keep this process running.');
+  console.log('Security: keep this tokenized URL private. Anyone with the URL can control this Bortex Code session.');
+  return state;
+}
+
+async function stopCloudRemoteControlSession(opts) {
+  const state = opts.remoteControlCloudSession;
+  if (!state?.active) {
+    console.log('Cloud Remote Control is not active.');
+    return false;
+  }
+  await state.stop();
+  opts.remoteControlCloudSession = null;
+  console.log('Cloud Remote Control stopped.');
+  return true;
+}
+
 function parseRemoteControlSlashArgs(rest = [], opts = {}) {
   const out = {
     name: '',
     host: opts.remoteControlHost || '127.0.0.1',
-    port: Number(opts.remoteControlPort || 0) || 0
+    port: Number(opts.remoteControlPort || 0) || 0,
+    relayUrl: opts.remoteControlRelayUrl || '',
+    permission: opts.remoteControlPermission || 'balanced',
+    cloud: false
   };
   const nameParts = [];
   for (let i = 0; i < rest.length; i += 1) {
@@ -4513,6 +4996,36 @@ function parseRemoteControlSlashArgs(rest = [], opts = {}) {
       out.host = '0.0.0.0';
       continue;
     }
+    if (a === 'cloud' || a === '--cloud' || a === '--remote-cloud' || a === '--relay') {
+      out.cloud = true;
+      continue;
+    }
+    if ((a === '--relay-url' || a === '--remote-relay') && rest[i + 1]) {
+      out.relayUrl = String(rest[i + 1]);
+      i += 1;
+      continue;
+    }
+    if (a.startsWith('--relay-url=')) {
+      out.relayUrl = a.slice('--relay-url='.length);
+      continue;
+    }
+    if (a.startsWith('--remote-relay=')) {
+      out.relayUrl = a.slice('--remote-relay='.length);
+      continue;
+    }
+    if ((a === '--permission' || a === '--remote-permission') && rest[i + 1]) {
+      out.permission = String(rest[i + 1]);
+      i += 1;
+      continue;
+    }
+    if (a.startsWith('--permission=')) {
+      out.permission = a.slice('--permission='.length);
+      continue;
+    }
+    if (a.startsWith('--remote-permission=')) {
+      out.permission = a.slice('--remote-permission='.length);
+      continue;
+    }
     if ((a === '--host' || a === '--remote-host') && rest[i + 1]) {
       out.host = String(rest[i + 1]);
       i += 1;
@@ -5835,13 +6348,18 @@ async function handleLocalCommand(opts, line) {
     const done = todoItems.filter((t) => t.done).length;
     const runPending = Array.isArray(opts.runState?.steps) ? opts.runState.steps.filter((s) => s.status === 'pending').length : 0;
     console.log(formatModeLine(opts));
-    console.log(`Todo: ${done}/${todoItems.length} | Plan: ${opts.plan?.goal ? 'active' : 'none'} | Run: ${opts.runState?.goal ? `active (${runPending} pending)` : 'none'} | Remote: ${opts.remoteControlSession?.server ? 'active' : 'off'}`);
+    console.log(`Todo: ${done}/${todoItems.length} | Plan: ${opts.plan?.goal ? 'active' : 'none'} | Run: ${opts.runState?.goal ? `active (${runPending} pending)` : 'none'} | Remote: ${getRemoteControlStatus(opts)}`);
     return { handled: true };
   }
   if (lc === '/remote-control' || lc === '/remote' || lc === '/rc') {
     const parsed = parseRemoteControlSlashArgs(rest, opts);
-    if (parsed.stop || opts.remoteControlSession?.server) {
-      await stopRemoteControlServer(opts);
+    if (parsed.stop || opts.remoteControlSession?.server || opts.remoteControlCloudSession?.active) {
+      if (opts.remoteControlSession?.server) await stopRemoteControlServer(opts);
+      if (opts.remoteControlCloudSession?.active) await stopCloudRemoteControlSession(opts);
+      return { handled: true };
+    }
+    if (parsed.cloud) {
+      await startCloudRemoteControlSession(opts, parsed);
       return { handled: true };
     }
     await startRemoteControlServer(opts, parsed);
@@ -7010,6 +7528,7 @@ const SLASH_COMMANDS = [
   ['/help', 'Show command help'],
   ['/remote-control [name]', 'Control this local session from a browser'],
   ['/remote-control --lan', 'Expose Remote Control on the local network'],
+  ['/remote-control --cloud', 'Control this session through bortex.site relay'],
   ['/rc', 'Toggle Remote Control'],
   ['/llm-config show', 'Show cached LLM configuration'],
   ['/llm-config sync', 'Sync LLM configuration from Bortex'],
@@ -7186,11 +7705,18 @@ async function runRepl(opts) {
   };
   opts._askInput = async (prompt) => new Promise((resolve) => rl.question(prompt, resolve));
   if (opts.remoteControl) {
-    await startRemoteControlServer(opts, {
-      name: opts.remoteControlName,
-      host: opts.remoteControlHost,
-      port: opts.remoteControlPort
-    });
+    if (opts.remoteControlCloud) {
+      await startCloudRemoteControlSession(opts, {
+        name: opts.remoteControlName,
+        relayUrl: opts.remoteControlRelayUrl
+      });
+    } else {
+      await startRemoteControlServer(opts, {
+        name: opts.remoteControlName,
+        host: opts.remoteControlHost,
+        port: opts.remoteControlPort
+      });
+    }
   }
 
   const question = () => new Promise((resolve) => {
@@ -7216,7 +7742,7 @@ async function runRepl(opts) {
       const done = todoItems.filter((t) => t.done).length;
       console.log(formatModeLine(opts));
       const runPending = Array.isArray(opts.runState?.steps) ? opts.runState.steps.filter((s) => s.status === 'pending').length : 0;
-      console.log(`Todo: ${done}/${todoItems.length} | Plan: ${opts.plan?.goal ? 'active' : 'none'} | Run: ${opts.runState?.goal ? `active (${runPending} pending)` : 'none'}`);
+      console.log(`Todo: ${done}/${todoItems.length} | Plan: ${opts.plan?.goal ? 'active' : 'none'} | Run: ${opts.runState?.goal ? `active (${runPending} pending)` : 'none'} | Remote: ${getRemoteControlStatus(opts)}`);
       continue;
     }
     if (line === '/help') {
@@ -7266,6 +7792,9 @@ async function runRepl(opts) {
   if (opts.remoteControlSession?.server) {
     await stopRemoteControlServer(opts);
   }
+  if (opts.remoteControlCloudSession?.active) {
+    await stopCloudRemoteControlSession(opts);
+  }
   try { saveCliWorkspaceState(opts); } catch (_err) { }
   delete opts._readMultiline;
   delete opts._askInput;
@@ -7317,23 +7846,47 @@ async function main() {
   }
 
   if (opts.remoteControlServerMode) {
-    await startRemoteControlServer(opts, {
-      name: opts.remoteControlName,
-      host: opts.remoteControlHost,
-      port: opts.remoteControlPort
-    });
+    let remoteState = null;
+    if (opts.remoteControlCloud) {
+      remoteState = await startCloudRemoteControlSession(opts, {
+        name: opts.remoteControlName,
+        relayUrl: opts.remoteControlRelayUrl
+      });
+    } else {
+      remoteState = await startRemoteControlServer(opts, {
+        name: opts.remoteControlName,
+        host: opts.remoteControlHost,
+        port: opts.remoteControlPort
+      });
+    }
     console.log('Server mode: keep this process running. Press Ctrl+C to stop Remote Control.');
-    await new Promise((resolve) => {
+    const signalPromise = new Promise((resolve) => {
       let stopping = false;
       const stop = async () => {
         if (stopping) return;
         stopping = true;
-        try { await stopRemoteControlServer(opts); } catch (_err) {}
+        if (opts.remoteControlSession?.server) {
+          try { await stopRemoteControlServer(opts); } catch (_err) {}
+        }
+        if (opts.remoteControlCloudSession?.active) {
+          try { await stopCloudRemoteControlSession(opts); } catch (_err) {}
+        }
         resolve();
       };
       process.once('SIGINT', stop);
       process.once('SIGTERM', stop);
     });
+    const remoteDonePromises = [];
+    if (remoteState?.pollPromise) remoteDonePromises.push(remoteState.pollPromise);
+    if (remoteState?.controlPromise) remoteDonePromises.push(remoteState.controlPromise);
+    if (remoteDonePromises.length) {
+      await Promise.race([signalPromise, ...remoteDonePromises]);
+      if (opts.remoteControlCloudSession?.active) {
+        await stopCloudRemoteControlSession(opts);
+      }
+    } else {
+      await signalPromise;
+    }
     return;
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bortexcode",
-  "version": "1.2.9",
+  "version": "1.4.0",
   "description": "Bortex Code CLI - AI coding assistant powered by bortex.site",
   "homepage": "https://bortex.site",
   "license": "UNLICENSED",