codeden 0.3.0 → 0.4.0

package/README.md

@@ -165,8 +165,8 @@ More in [Architecture](https://github.com/leonvanzyl/codeden/blob/main/docs/arch
 
 ## Security model
 
-- The server and runner listen on **127.0.0.1 only**. Remote or LAN access is not part of v1.
-- Every HTTP, WebSocket and MCP request needs a **per-install random token**. The browser gets it once through the launch URL, then holds it in an HttpOnly, `SameSite=Strict` cookie.
+- The server and runner listen on **127.0.0.1 only** by default. **Network access** for your phone or tablet is opt-in, needs a password (stored only as a salted hash), and never exposes the runner or the agents' MCP endpoint. See [Phones, tablets and network access](https://github.com/leonvanzyl/codeden/blob/main/docs/remote-access.md).
+- Every local HTTP, WebSocket and MCP request needs a **per-install random token**. The browser gets it once through the launch URL, then holds it in an HttpOnly, `SameSite=Strict` cookie.
 - `Host` and `Origin` headers are checked, which blocks other websites and DNS rebinding from reaching the local API.
 - Agent MCP tokens are **per session and role-scoped**, stored only as hashes, and revoked when the session ends.
 - The default autonomy level, **Auto, risky actions ask**, lets agents edit and run normal commands inside their worktree, and sends risky actions to your inbox: writes outside the worktree, force pushes, branch deletion, global installs, piping downloads into a shell, and secrets access.
@@ -224,6 +224,8 @@ codeden [options]      Start CodeDen and open it in the browser
 codeden doctor         Check the installation (--install: add Claude Code support now)
 codeden update         Install the latest version and switch to it (--rollback: go back)
 codeden stop           Stop the server and the runner
+codeden password       Set the network access password (--generate: make one up)
+codeden network on|off Let phones on your network open CodeDen, or stop it
 
 Options:
   --port <n>     Port to listen on (default 4317)
@@ -277,6 +279,9 @@ The server stops; the runner, and any agent mid-turn, keeps going. The next `cod
 **Which platforms?**
 Windows, macOS and Linux. Windows is tested first.
 
+**Can I use it from my phone?**
+Yes. Turn on **Settings › Network access**, set a password, and scan the QR code with your phone on the same Wi-Fi (or over your own VPN such as Tailscale). The UI adapts to phones and tablets, and **Add to Home Screen** opens it full screen. Plain http addresses mean no notifications or microphone on the phone. See [Phones, tablets and network access](https://github.com/leonvanzyl/codeden/blob/main/docs/remote-access.md).
+
 **Is the dark factory safe to leave running?**
 It's experimental. Read [Autonomy and the dark factory](https://github.com/leonvanzyl/codeden/blob/main/docs/autonomy-and-dark-factory.md) first, start with Autopilot on a sandbox repository, set a budget and protected areas, and keep the kill switch in reach.
 
@@ -294,6 +299,7 @@ It's experimental. Read [Autonomy and the dark factory](https://github.com/leonv
 | [Agent configuration](https://github.com/leonvanzyl/codeden/blob/main/docs/agent-config.md) | Memory, skills, subagents and MCP servers |
 | [Voice and images](https://github.com/leonvanzyl/codeden/blob/main/docs/voice-and-images.md) | Dictation, read-aloud and image generation |
 | [Usage and costs](https://github.com/leonvanzyl/codeden/blob/main/docs/usage-and-costs.md) | The ledger, reports, budgets and rate limits |
+| [Phones, tablets and network access](https://github.com/leonvanzyl/codeden/blob/main/docs/remote-access.md) | Opening CodeDen from your phone, the QR code, Add to Home Screen and VPNs |
 | [Security](https://github.com/leonvanzyl/codeden/blob/main/docs/security.md) | The security model in detail |
 | [Troubleshooting](https://github.com/leonvanzyl/codeden/blob/main/docs/troubleshooting.md) | `doctor`, logs and common issues |
 | [Architecture](https://github.com/leonvanzyl/codeden/blob/main/docs/architecture.md) | How the pieces fit, with a link to the full design |

package/dist/cli.js

@@ -242,7 +242,7 @@ async function run() {
 		console.log(selfVersion);
 		process.exit(0);
 	}
-	await import("./main-BAX1sPiD.js");
+	await import("./main-sEg3GS7X.js");
 }
 /** Settles once this copy's CLI has loaded (an older launcher that switched here awaits it). */
 const started = run();

package/dist/{main-DgpYK_Si.js → main-B7VuaduN.js}

@@ -1,4 +1,4 @@
-import { t as startRunner } from "./runner-DGomZl80.js";
+import { t as startRunner } from "./runner-QPAnitMx.js";
 import { parseArgs } from "node:util";
 // ../runner/src/main.ts
 /**
@@ -56,4 +56,4 @@ try {
 }
 export {};
 
-//# sourceMappingURL=main-DgpYK_Si.js.map
+//# sourceMappingURL=main-B7VuaduN.js.map

package/dist/{main-DgpYK_Si.js.map → main-B7VuaduN.js.map}

@@ -1 +1 @@
-{"version":3,"file":"main-DgpYK_Si.js","names":[],"sources":["../../runner/src/main.ts"],"sourcesContent":["/**\n * Runner process entry. Started detached by the server:\n *   node main.js --home <dir> [--fake] [--no-builtin] [--replay <fixture.json>] [--mcp-upstream <url>]\n */\nimport { parseArgs } from \"node:util\";\nimport { startRunner } from \"./runner\";\n\nconst { values } = parseArgs({\n  options: {\n    home: { type: \"string\" },\n    fake: { type: \"boolean\", default: false },\n    /** Skip the real Claude Code / Codex adapters (tests that only use Fake or Replay). */\n    \"no-builtin\": { type: \"boolean\", default: false },\n    /** Serve a recorded fixture as the `replay` provider (repeatable). */\n    replay: { type: \"string\", multiple: true },\n    \"mcp-upstream\": { type: \"string\" },\n  },\n  allowPositionals: false,\n});\n\nconst home = values.home ?? process.env.CODEDEN_HOME;\nif (!home) {\n  console.error(\"codeden runner: --home or CODEDEN_HOME is required\");\n  process.exit(2);\n}\n\nconst log = (m: string) => console.log(`[${new Date().toISOString()}] ${m}`);\n\ntry {\n  const runner = await startRunner({\n    home,\n    enableFakeProvider: values.fake,\n    builtinProviders: !values[\"no-builtin\"],\n    replayFixtures: values.replay,\n    mcpUpstreamUrl: values[\"mcp-upstream\"],\n    sweepDescendants: true,\n    log,\n    onShutdown: () => process.exit(0),\n  });\n  const stop = () => void runner.close().then(() => process.exit(0));\n  for (const signal of [\"SIGINT\", \"SIGTERM\", \"SIGHUP\", \"SIGBREAK\"] as const) {\n    process.on(signal, stop);\n  }\n} catch (error) {\n  log(`failed to start: ${error instanceof Error ? error.message : String(error)}`);\n  process.exit(1);\n}\n"],"mappings":";;;;;;;AAOA,MAAM,EAAE,WAAW,UAAU;CAC3B,SAAS;EACP,MAAM,EAAE,MAAM,SAAS;EACvB,MAAM;GAAE,MAAM;GAAW,SAAS;EAAM;;EAExC,cAAc;GAAE,MAAM;GAAW,SAAS;EAAM;;EAEhD,QAAQ;GAAE,MAAM;GAAU,UAAU;EAAK;EACzC,gBAAgB,EAAE,MAAM,SAAS;CACnC;CACA,kBAAkB;AACpB,CAAC;AAED,MAAM,OAAO,OAAO,QAAQ,QAAQ,IAAI;AACxC,IAAI,CAAC,MAAM;CACT,QAAQ,MAAM,oDAAoD;CAClE,QAAQ,KAAK,CAAC;AAChB;AAEA,MAAM,OAAO,MAAc,QAAQ,IAAI,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY,EAAE,IAAI,GAAG;AAE3E,IAAI;CACF,MAAM,SAAS,MAAM,YAAY;EAC/B;EACA,oBAAoB,OAAO;EAC3B,kBAAkB,CAAC,OAAO;EAC1B,gBAAgB,OAAO;EACvB,gBAAgB,OAAO;EACvB,kBAAkB;EAClB;EACA,kBAAkB,QAAQ,KAAK,CAAC;CAClC,CAAC;CACD,MAAM,aAAa,KAAK,OAAO,MAAM,CAAC,CAAC,WAAW,QAAQ,KAAK,CAAC,CAAC;CACjE,KAAK,MAAM,UAAU;EAAC;EAAU;EAAW;EAAU;CAAU,GAC7D,QAAQ,GAAG,QAAQ,IAAI;AAE3B,SAAS,OAAO;CACd,IAAI,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;CAChF,QAAQ,KAAK,CAAC;AAChB"}
+{"version":3,"file":"main-B7VuaduN.js","names":[],"sources":["../../runner/src/main.ts"],"sourcesContent":["/**\n * Runner process entry. Started detached by the server:\n *   node main.js --home <dir> [--fake] [--no-builtin] [--replay <fixture.json>] [--mcp-upstream <url>]\n */\nimport { parseArgs } from \"node:util\";\nimport { startRunner } from \"./runner\";\n\nconst { values } = parseArgs({\n  options: {\n    home: { type: \"string\" },\n    fake: { type: \"boolean\", default: false },\n    /** Skip the real Claude Code / Codex adapters (tests that only use Fake or Replay). */\n    \"no-builtin\": { type: \"boolean\", default: false },\n    /** Serve a recorded fixture as the `replay` provider (repeatable). */\n    replay: { type: \"string\", multiple: true },\n    \"mcp-upstream\": { type: \"string\" },\n  },\n  allowPositionals: false,\n});\n\nconst home = values.home ?? process.env.CODEDEN_HOME;\nif (!home) {\n  console.error(\"codeden runner: --home or CODEDEN_HOME is required\");\n  process.exit(2);\n}\n\nconst log = (m: string) => console.log(`[${new Date().toISOString()}] ${m}`);\n\ntry {\n  const runner = await startRunner({\n    home,\n    enableFakeProvider: values.fake,\n    builtinProviders: !values[\"no-builtin\"],\n    replayFixtures: values.replay,\n    mcpUpstreamUrl: values[\"mcp-upstream\"],\n    sweepDescendants: true,\n    log,\n    onShutdown: () => process.exit(0),\n  });\n  const stop = () => void runner.close().then(() => process.exit(0));\n  for (const signal of [\"SIGINT\", \"SIGTERM\", \"SIGHUP\", \"SIGBREAK\"] as const) {\n    process.on(signal, stop);\n  }\n} catch (error) {\n  log(`failed to start: ${error instanceof Error ? error.message : String(error)}`);\n  process.exit(1);\n}\n"],"mappings":";;;;;;;AAOA,MAAM,EAAE,WAAW,UAAU;CAC3B,SAAS;EACP,MAAM,EAAE,MAAM,SAAS;EACvB,MAAM;GAAE,MAAM;GAAW,SAAS;EAAM;;EAExC,cAAc;GAAE,MAAM;GAAW,SAAS;EAAM;;EAEhD,QAAQ;GAAE,MAAM;GAAU,UAAU;EAAK;EACzC,gBAAgB,EAAE,MAAM,SAAS;CACnC;CACA,kBAAkB;AACpB,CAAC;AAED,MAAM,OAAO,OAAO,QAAQ,QAAQ,IAAI;AACxC,IAAI,CAAC,MAAM;CACT,QAAQ,MAAM,oDAAoD;CAClE,QAAQ,KAAK,CAAC;AAChB;AAEA,MAAM,OAAO,MAAc,QAAQ,IAAI,qBAAI,IAAI,KAAK,EAAA,CAAE,YAAY,EAAE,IAAI,GAAG;AAE3E,IAAI;CACF,MAAM,SAAS,MAAM,YAAY;EAC/B;EACA,oBAAoB,OAAO;EAC3B,kBAAkB,CAAC,OAAO;EAC1B,gBAAgB,OAAO;EACvB,gBAAgB,OAAO;EACvB,kBAAkB;EAClB;EACA,kBAAkB,QAAQ,KAAK,CAAC;CAClC,CAAC;CACD,MAAM,aAAa,KAAK,OAAO,MAAM,CAAC,CAAC,WAAW,QAAQ,KAAK,CAAC,CAAC;CACjE,KAAK,MAAM,UAAU;EAAC;EAAU;EAAW;EAAU;CAAU,GAC7D,QAAQ,GAAG,QAAQ,IAAI;AAE3B,SAAS,OAAO;CACd,IAAI,oBAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;CAChF,QAAQ,KAAK,CAAC;AAChB"}