coxpit 2.1.0

package/.env.example

@@ -0,0 +1,10 @@
+# Coxpit OSS — 설정 예시. 실값은 .env 로 복사(커밋 금지). 시크릿 번들 0.
+COXPIT_HOST=127.0.0.1
+COXPIT_PORT=8210
+COXPIT_DB=./coxpit.db
+
+# 인증 게이트(basic). 프로덕션은 앞단에 Cloudflare Access / Tailscale 권장.
+COXPIT_AUTH_USER=admin
+COXPIT_AUTH_PASS=
+# 로컬 개발 시 인증 끄기:
+# COXPIT_AUTH_DISABLED=1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 gc.yang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,76 @@
+# Coxpit
+
+**Own your agent fleet. Run parallel AI coding agents across your own machines — steer them from any browser.**
+
+**[Landing & downloads](https://hanmariyang.github.io/coxpit-oss/)** · [Latest release](https://github.com/hanmariyang/coxpit-oss/releases/latest)
+
+![coxpit fleet board — three agents racing the same task](docs/demo.gif)
+
+Coxpit is a self-hosted cockpit for CLI coding agents (Claude Code first). Give it a task and it launches N agents in parallel — each in its own **isolated git worktree**, on its own branch, inside its own tmux session — then streams everything to a live board where you watch, compare diffs side by side, attach a real terminal, and merge the winner.
+
+Your machines. Your auth. Your code never leaves your network.
+
+## What it does
+
+- **Fleet runs** — one task, N agents. Each run = worktree + branch + tmux window. No agent ever touches your checkout.
+- **Live board** — WebSocket-driven console: status, event timeline (parsed from the agent's stream-json), per-run diff.
+- **Compare & merge** — all runs of a task side by side; pick the winner, merge to the base branch (auto-commits the worktree, guards a clean base, aborts on conflict).
+- **Real terminal** — attach to any run's tmux session in the browser (xterm.js over a server-side PTY; resize propagates, `Ctrl-b d` detaches).
+- **Multi-machine** — register remote machines over SSH (Tailscale/LAN); probe reachability (git·tmux), run fleets there.
+- **Safe stops** — stop kills the whole process group; task close stops and cleans every worktree/branch.
+- **Design Mode** — drag the `⌖ coxpit inspect` bookmarklet to your bar, click it on your running app, click any element: its selector, HTML and computed styles are captured and injected into the agents' prompt as design context.
+
+External tools are spawned, never vendored: `git`, `tmux`, your agent CLI. No editor bundled — terminal-first.
+
+| Fleet board | Compare & merge |
+|---|---|
+| ![board](docs/shot-board.png) | ![compare](docs/shot-compare.png) |
+
+## Quickstart
+
+Requirements: Node 20+, git, tmux, an agent CLI on PATH (e.g. `claude`).
+
+```bash
+npm install
+cp .env.example .env        # set COXPIT_AUTH_PASS (or COXPIT_AUTH_DISABLED=1 locally)
+npm run dev                 # → http://127.0.0.1:8210
+```
+
+Open the board, register a repo (absolute path), write a task, hit **Run fleet**.
+
+By default agents run in **dry-run mode** (a mock that exercises the whole pipeline without spending credits). Flip the "real agent" toggle per launch, or set `COXPIT_AGENT_REAL=1` to default to real.
+
+## Configuration
+
+| env | default | what |
+|---|---|---|
+| `COXPIT_HOST` / `COXPIT_PORT` | `127.0.0.1` / `8210` | daemon bind |
+| `COXPIT_DB` | `./coxpit.db` | SQLite (libSQL) file |
+| `COXPIT_AUTH_PASS` / `COXPIT_AUTH_USER` | — / `admin` | basic auth (empty pass = open; set it) |
+| `COXPIT_AUTH_DISABLED` | — | `1` disables auth (local dev only) |
+| `COXPIT_SSH_KEY` | — | private key for remote machines (else ssh defaults/agent) |
+| `COXPIT_AGENT_REAL` | — | `1` = real agent CLI by default (credits!) |
+| `COXPIT_AGENT_BIN` | `claude` | agent command |
+| `COXPIT_AGENT_PERM` | `acceptEdits` | headless permission mode passed to the agent |
+
+Running on the open internet? Put it behind your own front door (Tailscale, Cloudflare Access, a reverse proxy with TLS) and keep basic auth on — it exposes shells.
+
+## Architecture
+
+```
+browser (board · xterm)
+   │  HTTP + WS
+daemon — Node/TS · Fastify · libSQL(Drizzle)
+   │  spawn / ssh
+machines — git worktrees · tmux sessions · agent CLIs
+```
+
+One daemon, one SQLite file, zero external services. Machines are reached over SSH; the local machine is just `sh`.
+
+## Status
+
+`v2.0` — agent fleet (P1), compare/review + terminal (P2), and Design Mode (P3) are implemented and tested. Roadmap: richer review tooling, more agent providers, packaging (Docker/npm).
+
+## License
+
+MIT

package/bin/coxpit.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+// coxpit CLI — boots the daemon. Ships TS sources and runs them via tsx
+// (no build step, no ESM extension rewrites).
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const entry = join(root, 'src', 'index.ts');
+
+const child = spawn(process.execPath, ['--import', 'tsx', entry, ...process.argv.slice(2)], {
+  stdio: 'inherit',
+  env: process.env,
+});
+child.on('exit', (code, sig) => process.exit(code ?? (sig ? 1 : 0)));

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "coxpit",
+  "version": "2.1.0",
+  "description": "Self-hosted cockpit for running a fleet of AI coding agents across your own machines — parallel worktree runs, live board, compare & merge, web terminal, design capture.",
+  "type": "module",
+  "license": "MIT",
+  "repository": { "type": "git", "url": "git+https://github.com/hanmariyang/coxpit-oss.git" },
+  "homepage": "https://hanmariyang.github.io/coxpit-oss/",
+  "bugs": { "url": "https://github.com/hanmariyang/coxpit-oss/issues" },
+  "keywords": ["ai-agents", "claude-code", "git-worktree", "tmux", "self-hosted", "fleet", "coding-agents", "cockpit"],
+  "engines": { "node": ">=20" },
+  "bin": { "coxpit": "bin/coxpit.js" },
+  "files": ["bin", "src", "README.md", "LICENSE", ".env.example"],
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "start": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "build": "tsc"
+  },
+  "dependencies": {
+    "@fastify/websocket": "^11",
+    "@libsql/client": "^0.14",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/xterm": "^6.0.0",
+    "dotenv": "^16",
+    "drizzle-orm": "^0.38",
+    "fastify": "^5",
+    "node-pty": "^1.1.0",
+    "tsx": "^4"
+  },
+  "devDependencies": {
+    "@types/node": "^22",
+    "drizzle-kit": "^0.30",
+    "typescript": "^5"
+  }
+}

package/src/auth.ts

@@ -0,0 +1,26 @@
+import type { FastifyRequest, FastifyReply } from 'fastify';
+import { config } from './config';
+
+// /api/design/capture · /design/bookmarklet.js 는 외부 앱(북마클릿)에서 오므로
+// basic 헤더를 못 싣는다 — 라우트 자체가 캡처 키(?k=)를 검증한다.
+const EXEMPT = new Set(['/api/health', '/api/design/capture', '/design/bookmarklet.js']);
+
+/**
+ * 인증 게이트 — 현재 basic. 플러그형 좌석: 배포 시 앞단에 Cloudflare Access / Tailscale 을
+ * 두는 것을 권장(그 경우 COXPIT_AUTH_DISABLED=1 로 내부 인증을 끄고 게이트웨이에 위임).
+ */
+export async function authGate(req: FastifyRequest, reply: FastifyReply): Promise<void> {
+  if (config.auth.disabled) return;
+  const path = req.url.split('?')[0] ?? '';
+  if (EXEMPT.has(path)) return;
+
+  const h = req.headers.authorization ?? '';
+  if (h.startsWith('Basic ') && config.auth.pass !== '') {
+    const decoded = Buffer.from(h.slice(6), 'base64').toString('utf8');
+    const idx = decoded.indexOf(':');
+    const u = decoded.slice(0, idx);
+    const p = decoded.slice(idx + 1);
+    if (u === config.auth.user && p === config.auth.pass) return;
+  }
+  await reply.header('WWW-Authenticate', 'Basic realm="coxpit"').code(401).send({ error: 'unauthorized' });
+}