bortexcode 1.5.0 → 1.6.0

package/bin/bortex.js

@@ -4752,6 +4752,7 @@ function assessRemoteControlPromptPermission(opts, line) {
   const mode = getRemoteControlPermissionMode(opts);
   const text = String(line || '').trim();
   if (!text) return { ok: false, mode, reason: 'empty prompt' };
+  if (opts._remoteControlApprovalBypass) return { ok: true, mode, approved: true };
   if (mode === 'full') return { ok: true, mode };
   if (!text.startsWith('/')) return { ok: true, mode, skipNaturalActions: true };
   if (mode === 'read-only') {
@@ -4855,6 +4856,24 @@ async function postCloudRemoteChunk(state, commandId, stream, text) {
   }, 12000);
 }
 
+async function postCloudRemoteApprovalRequest(state, commandId, permission, text) {
+  const approvalUrl = withRemoteControlQuery(
+    state.approvalUrl || `${state.baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(state.sessionId)}/approval-request`,
+    state.baseUrl,
+    { agentToken: state.agentToken }
+  );
+  await fetchRemoteControlJson(approvalUrl, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      commandId,
+      text: String(text || ''),
+      mode: permission?.mode || state.permission || 'balanced',
+      reason: permission?.reason || 'This command requires explicit approval.'
+    })
+  }, 12000);
+}
+
 function createCloudRemoteChunkStreamer(state, commandId) {
   const queue = [];
   let timer = null;
@@ -4972,10 +4991,32 @@ async function pollCloudRemoteControlLoop(opts, state) {
         if (!text) continue;
         state.cancelRequested = false;
         state.cancelCommandId = null;
+        const approved = !!command.approved;
+        const permission = assessRemoteControlPromptPermission(opts, text);
+        if (!permission.ok && !approved) {
+          state.busy = true;
+          opts._remoteControlExecutionState = state;
+          try {
+            await postCloudRemoteApprovalRequest(state, commandId, permission, text);
+            console.log(`Cloud Remote Control approval requested for command #${commandId}: ${permission.reason}.`);
+          } catch (err) {
+            const message = err.message || String(err);
+            await postCloudRemoteResult(state, commandId, {
+              ok: false,
+              output: `Approval request failed: ${message}`
+            }).catch(() => {});
+          } finally {
+            state.busy = false;
+            delete opts._remoteControlExecutionState;
+          }
+          continue;
+        }
         state.busy = true;
         opts._remoteControlExecutionState = state;
         const streamer = createCloudRemoteChunkStreamer(state, commandId);
         let result;
+        const previousApprovalBypass = opts._remoteControlApprovalBypass;
+        if (approved) opts._remoteControlApprovalBypass = true;
         try {
           result = await runRemoteControlPrompt(opts, text, (stream, chunk) => streamer.push(stream, chunk));
         } catch (err) {
@@ -4984,6 +5025,8 @@ async function pollCloudRemoteControlLoop(opts, state) {
           await streamer.flush().catch(() => {});
           state.busy = false;
           delete opts._remoteControlExecutionState;
+          if (previousApprovalBypass === undefined) delete opts._remoteControlApprovalBypass;
+          else opts._remoteControlApprovalBypass = previousApprovalBypass;
         }
         if (state.cancelRequested && result.ok) {
           result = { ok: false, output: 'Canceled by remote request.' };
@@ -5032,6 +5075,11 @@ async function startCloudRemoteControlSession(opts, overrides = {}) {
   const name = getRemoteControlDisplayName(opts, overrides);
   const permission = getRemoteControlPermissionMode(opts, overrides);
   opts.remoteControlPermission = permission;
+  const sharedSettings = loadSharedSettings();
+  const registerCookie = getCookieHeaderFromSharedSettings();
+  const registerApiKey = String(
+    opts.apiKey || process.env.BORTEX_API_KEY || sharedSettings?.llmSettings?.apiKey || ''
+  ).trim();
   const payload = {
     name,
     cwd: opts.cwd,
@@ -5042,9 +5090,12 @@ async function startCloudRemoteControlSession(opts, overrides = {}) {
     mode: opts.agent ? 'agent' : 'chat',
     permission
   };
+  const registerHeaders = { 'Content-Type': 'application/json' };
+  if (registerCookie) registerHeaders.Cookie = registerCookie;
+  if (registerApiKey) registerHeaders['x-api-key'] = registerApiKey;
   const data = await fetchRemoteControlJson(`${baseUrl}/api/bortex-code/remote/register`, {
     method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
+    headers: registerHeaders,
     body: JSON.stringify(payload)
   }, 30000);
 
@@ -5068,6 +5119,7 @@ async function startCloudRemoteControlSession(opts, overrides = {}) {
     pollUrl: data.pollUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/poll`,
     resultUrl: data.resultUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/result`,
     chunkUrl: data.chunkUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/chunk`,
+    approvalUrl: data.approvalUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/approval-request`,
     heartbeatUrl: data.heartbeatUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/heartbeat`,
     controlUrl: data.controlUrl || `${baseUrl}/api/bortex-code/remote/session/${encodeURIComponent(sessionId)}/control`,
     lastCommandId: 0,
@@ -5088,6 +5140,8 @@ async function startCloudRemoteControlSession(opts, overrides = {}) {
 
   console.log(`Cloud Remote Control active: ${state.name}`);
   console.log(`URL: ${state.url}`);
+  if (data.accountUrl) console.log(`Account URL: ${data.accountUrl}`);
+  if (data.sessionsUrl) console.log(`Sessions: ${data.sessionsUrl}`);
   console.log(`Permission: ${state.permission}`);
   console.log('No inbound port required. Keep this process running.');
   console.log('Security: keep this tokenized URL private. Anyone with the URL can control this Bortex Code session.');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bortexcode",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Bortex Code CLI - AI coding assistant powered by bortex.site",
   "homepage": "https://bortex.site",
   "license": "UNLICENSED",