coxpit 4.3.0 → 4.5.0

package/README.md

@@ -22,8 +22,10 @@ Your machines. Your auth. Your code never leaves your network.
 - **Design Mode** — drag the `⌖ coxpit inspect` bookmarklet to your bar, click it on your running app, click any element: its selector, HTML and computed styles are captured and injected into the agents' prompt as design context.
 - **Self-orchestrating agents** — every local run can spawn its own sub-agents by writing `.coxpit/spawn.json` in its worktree (works under default permissions — no network, no escalation). The daemon launches each subtask as an isolated sub-run and maintains `.coxpit/subtasks.json` with live status. Orchestration moves inside the agent's own reasoning loop.
 - **Start from GitHub** — paste an issue/PR URL and the task form drafts itself from its title and body (gh CLI for private repos, public API otherwise). You review, pick a provider, Run fleet.
+- **Start a new project** — point coxpit at an empty (or missing) folder and it runs `git init` + an empty initial commit as the base, then a fleet of agents scaffolds the project in parallel — compare the foundations, merge the one you like onto an empty `main`. Populated folders are never touched.
 - **Share a run** — one click mints a read-only snapshot link (timeline + diff, and the rendered docs, no auth, no actions). Show your fleet's work without opening your cockpit.
 - **The library** — a run's changed documents (Markdown/HTML) are snapshotted when it settles, so the Rendered view survives merge and Close task. Pick a model per launch (any name your CLI accepts), and a close guard warns before it deletes unmerged, unexported output.
+- **Remote access** — one-click Tailscale Serve puts the board on a private `https://<machine>.<tailnet>.ts.net` name (tailnet-only, HTTPS, no port); Funnel (public) is a guarded toggle that refuses to run without a password. No Tailscale? Copy-paste a Cloudflare Tunnel or Caddy reverse-proxy recipe with your port pre-filled. coxpit detects and drives your own tool — it never hosts a relay or bundles tailscale/cloudflared.
 
 External tools are spawned, never vendored: `git`, `tmux`, your agent CLI. No editor bundled — terminal-first.
 
@@ -64,13 +66,15 @@ Coxpit has no accounts of its own — it drives the agent CLI already on your ma
 
 Your keys and login never touch coxpit's config or database.
 
+> **New here?** The **[full guide](docs/GUIDE.md)** ([한국어](docs/GUIDE.ko.md)) walks through starting a new project, your first fleet, comparing and merging, doc mode, the terminal, remote access, and every feature — task by task, with GIFs.
+
 ## Configuration
 
 | env | default | what |
 |---|---|---|
 | `COXPIT_HOST` / `COXPIT_PORT` | `127.0.0.1` / `8210` | daemon bind |
 | `COXPIT_DB` | `~/.coxpit/coxpit.db` | SQLite (libSQL) file (a legacy `./coxpit.db` in the cwd is still honored) |
-| `COXPIT_AUTH_PASS` / `COXPIT_AUTH_USER` | — / `admin` | basic auth (empty pass = open; set it) |
+| `COXPIT_AUTH_PASS` / `COXPIT_AUTH_USER` | — / `admin` | basic auth. **Empty pass = all requests rejected** (fail-closed) — set it, or use `COXPIT_AUTH_DISABLED=1` for local dev |
 | `COXPIT_AUTH_DISABLED` | — | `1` disables auth (local dev only) |
 | `COXPIT_SSH_KEY` | — | private key for remote machines (else ssh defaults/agent) |
 | `COXPIT_AGENT_REAL` | — | `1` = real agent CLI by default (credits!) |

package/bin/coxpit.js

@@ -29,9 +29,10 @@ Usage:
 Configuration is env-only (a .env file in the cwd is loaded):
   COXPIT_HOST            bind host (default 127.0.0.1)
   COXPIT_PORT            bind port (default 8210)
-  COXPIT_DB              SQLite (libSQL) file (default ./coxpit.db)
+  COXPIT_DB              SQLite (libSQL) file (default ~/.coxpit/coxpit.db)
   COXPIT_AUTH_USER       basic auth user (default admin)
-  COXPIT_AUTH_PASS       basic auth password (empty = open; set it)
+  COXPIT_AUTH_PASS       basic auth password (empty = all requests rejected;
+                         set it, or COXPIT_AUTH_DISABLED=1 for local dev)
   COXPIT_AUTH_DISABLED   1 disables auth (local dev only)
   COXPIT_SSH_KEY         private key for remote machines (else ssh defaults/agent)
   COXPIT_AGENT_REAL      1 = real agent CLI by default (credits!)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coxpit",
-  "version": "4.3.0",
+  "version": "4.5.0",
   "description": "Self-hosted cockpit for running a fleet of AI coding agents across your own machines — parallel worktree runs, live board, compare & merge, web terminal, design capture.",
   "type": "module",
   "license": "MIT",

package/src/board.ts

@@ -241,6 +241,52 @@ export const BOARD_HTML = /* html */ `<!doctype html>
   .setup-steps li{margin-bottom:7px}
   .setup-steps b{color:var(--ink)}
 
+  /* ── remote access card (v4.5) ──────────── */
+  .rmt{font-size:13px;color:var(--muted)}
+  .rmt-line{margin:2px 0 10px;line-height:1.55}
+  .rmt-name{font-family:var(--mono);font-size:12px;color:var(--ink);background:#0e1118;
+    border:1px solid var(--line);border-radius:6px;padding:2px 7px;word-break:break-all}
+  .rmt-row{display:flex;align-items:center;gap:10px;padding:9px 0;border-top:1px solid var(--line)}
+  .rmt-row .rmt-l{flex:1;min-width:0}
+  .rmt-row .rmt-t{color:var(--ink);font-weight:600;font-size:13px}
+  .rmt-row .rmt-d{color:var(--faint);font-size:11.5px;margin-top:2px}
+  .rmt-row.risky .rmt-t{color:var(--s-failed)}
+  .rmt-url{display:flex;align-items:center;gap:7px;margin:6px 0 2px}
+  .rmt-url code{flex:1;min-width:0;font-family:var(--mono);font-size:11.5px;color:var(--brand);
+    background:#0e1118;border:1px solid var(--line);border-radius:6px;padding:5px 8px;
+    overflow-x:auto;white-space:nowrap}
+  .rmt-warn{color:var(--s-failed);font-size:11.5px;margin:5px 0 2px;line-height:1.5}
+  .rmt-note{color:var(--faint);font-size:11.5px;margin:4px 0 2px;line-height:1.5}
+  /* toggle switch — quiet until on (brand) or risky (red) */
+  .tgl{position:relative;width:38px;height:22px;flex:none;background:var(--surface2);
+    border:1px solid var(--line);border-radius:999px;cursor:pointer;transition:background .15s,border-color .15s}
+  .tgl::after{content:'';position:absolute;top:2px;left:2px;width:16px;height:16px;border-radius:50%;
+    background:var(--muted);transition:transform .15s,background .15s}
+  .tgl.on{background:var(--brand-dim);border-color:var(--brand)}
+  .tgl.on::after{transform:translateX(16px);background:var(--brand)}
+  .tgl.risky.on{background:rgba(226,91,103,.16);border-color:var(--s-failed)}
+  .tgl.risky.on::after{background:var(--s-failed)}
+  .tgl[aria-disabled="true"]{opacity:.4;cursor:not-allowed}
+  .rmt-cp{font-family:var(--mono);font-size:11px;color:var(--muted);background:var(--surface2);
+    border:1px solid var(--line);border-radius:6px;padding:5px 10px;cursor:pointer;flex:none}
+  .rmt-cp:hover{color:var(--ink);border-color:var(--line-hi)}
+  /* collapsible recipes / url table */
+  .rmt-more{margin-top:12px;border-top:1px solid var(--line);padding-top:10px}
+  .rmt-more summary{cursor:pointer;font-size:12.5px;color:var(--muted);list-style:none;user-select:none}
+  .rmt-more summary::-webkit-details-marker{display:none}
+  .rmt-more summary::before{content:'▸ ';color:var(--faint)}
+  .rmt-more[open] summary::before{content:'▾ '}
+  .rmt-more pre{margin:8px 0 4px;padding:10px 12px;background:#0e1118;border:1px solid var(--line);
+    border-radius:8px;font-family:var(--mono);font-size:11px;color:var(--muted);overflow-x:auto;white-space:pre}
+  .rmt-cap{color:var(--faint);font-size:11px;margin:2px 0 10px;line-height:1.5}
+  .rmt-tbl{width:100%;border-collapse:collapse;margin:8px 0 2px;font-size:11.5px}
+  .rmt-tbl th,.rmt-tbl td{text-align:left;padding:5px 8px;border-bottom:1px solid var(--line);
+    color:var(--muted);vertical-align:top}
+  .rmt-tbl th{color:var(--faint);font-family:var(--mono);font-size:10px;text-transform:uppercase;letter-spacing:.1em}
+  .rmt-tbl code{font-family:var(--mono);font-size:10.5px;color:var(--brand);white-space:nowrap}
+  .rmt-tbl .star{color:var(--brand)}
+  /* header 🔗 affordance shares the ghost-button look */
+
   /* ── toasts ─────────────────────────────── */
   .toasts{position:fixed;top:66px;right:18px;z-index:60;display:flex;flex-direction:column;gap:8px;
     max-width:380px}
@@ -405,6 +451,7 @@ export const BOARD_HTML = /* html */ `<!doctype html>
   </div>
   <div class="ws"><span class="dot" id="wsdot"></span><span id="wstext">connecting</span></div>
   <button class="btn-ghost sm" id="bell" title="notify when a run settles">🔕</button>
+  <button class="btn-ghost sm" id="remoteBtn" title="reach this daemon from elsewhere (Tailscale · recipes)">🔗</button>
   <div class="machines" id="machines"></div>
 </header>
 <div class="scrim" id="scrim"></div>
@@ -418,6 +465,7 @@ export const BOARD_HTML = /* html */ `<!doctype html>
       <select id="taskRepo"></select>
       <div class="row">
         <button type="button" class="btn-ghost sm" id="repoBrowse" style="flex:1">Browse…</button>
+        <button type="button" class="btn-ghost sm" id="repoNew" style="flex:0 0 auto" title="start a new project — empty folder in, scaffolded repo out">New</button>
         <button type="button" class="btn-ghost sm" id="repoManual" style="flex:0 0 auto" title="type an absolute path">Path</button>
         <button type="button" class="btn-ghost sm" id="repoBranch" style="flex:0 0 auto" title="change the base branch — merges, Sync base and PRs all target it">⎇</button>
         <button type="button" class="btn-ghost sm" id="repoRemove" style="flex:0 0 auto" title="remove selected repository from coxpit">×</button>
@@ -618,6 +666,36 @@ export const BOARD_HTML = /* html */ `<!doctype html>
   </div>
 </div>
 
+<div class="overlay" id="npOverlay">
+  <div class="cfm">
+    <div class="cfm-b">
+      <div class="m">Start a new project</div>
+      <div class="s">Creates the folder if needed, then git init + an empty initial commit as the base. Never touches non-empty folders. Then: write a task like 'scaffold a … app', run a fleet of 2–3, and compare the foundations.</div>
+      <p class="flabel" style="margin-top:12px">new project path</p>
+      <input id="npPath" placeholder="/abs/path/to/new-project" />
+      <p class="flabel" style="margin-top:10px">name · optional</p>
+      <input id="npName" placeholder="defaults to the folder name" />
+    </div>
+    <div class="cfm-f">
+      <button class="btn-ghost sm" id="npCancel">Cancel</button>
+      <button class="btn sm" id="npOk">Start new project</button>
+    </div>
+  </div>
+</div>
+
+<div class="overlay" id="remoteOverlay">
+  <div class="cfm" style="width:min(560px,94vw)">
+    <div class="cfm-b">
+      <div class="m">Remote access</div>
+      <div class="s">Reach this daemon from your other devices — coxpit detects your Tailscale and drives it, or hands a copy-paste recipe. It never hosts a relay.</div>
+      <div id="remoteBody" class="rmt" style="margin-top:14px">loading…</div>
+    </div>
+    <div class="cfm-f">
+      <button class="btn-ghost sm" id="remoteClose">Close</button>
+    </div>
+  </div>
+</div>
+
 <div class="overlay" id="brOverlay">
   <div class="cfm">
     <div class="cfm-b">
@@ -666,6 +744,8 @@ const runs = new Map();      // runId -> run object
 const tasks = new Map();     // taskId -> task
 const groups = new Map();    // groupId -> {id, kind, title}
 let repos = [], machines = [], captures = [];
+let daemonPort = 8210;    // real config.port — filled from /api/fleet daemon block (recipes interpolate it)
+let remoteAuthOpen = false; // true = no password → Funnel guard on (from /api/fleet daemon.authOpen)
 
 const $ = (id) => document.getElementById(id);
 const esc = (s) => String(s).replace(/[&<>]/g, (c) => ({'&':'&amp;','<':'&lt;','>':'&gt;'}[c]));
@@ -740,10 +820,16 @@ async function brwRegister(fullPath){
     toast('repo registered — pick it under Launch agents', 'ok');
     $('brwOverlay').classList.remove('open');
     await hydrate();
-  } else {
-    const j = await res.json().catch(()=>({}));
-    toast('register: '+(j.detail||j.error||res.status), 'error');
+    return;
+  }
+  const j = await res.json().catch(()=>({}));
+  if (res.status === 400 && j.code === 'NO_COMMITS'){
+    const yes = await confirmUI('This folder has no commits yet — start a new project here?',
+      { sub: 'coxpit will create an empty initial commit as the base, then register the repo. The folder itself is untouched.', okLabel: 'Start new project' });
+    if (yes && await createNewProject(fullPath)) $('brwOverlay').classList.remove('open');
+    return;
   }
+  toast('register: '+(j.detail||j.error||res.status), 'error');
 }
 $('repoBrowse').addEventListener('click', ()=>{
   const m = machines.find(x=>x.slug===$('repoMachine').value);
@@ -793,7 +879,9 @@ function humanize(e){
   try{
     const o = JSON.parse(payload);
     if (o.type === 'system'){
-      if (o.subtype === 'init' || !o.subtype) return { k:'session', t:'started'+(o.model?' · '+o.model:'') };
+      if (o.subtype === 'init' || !o.subtype) return { k:'session',
+        t:'started'+(o.model?' · '+String(o.model).replace(/\\u001b\\[[0-9;]*m/g,'')
+                                                  .replace(/\\x1b\\[[0-9;]*m/g,'') : '') };
       if (o.subtype === 'permission_denied') return { k:'denied', t:'⛔ '+(o.tool_name||o.tool||'tool use')+' blocked — attach the Terminal to approve, or widen COXPIT_AGENT_PERM' };
       return null; // thinking_tokens 등 스트림 잡음
     }
@@ -1033,7 +1121,11 @@ function paintOnboarding(){
     + '<li><b>Register a repo</b> — absolute path, in the left sidebar</li>'
     + '<li><b>Write a task</b> — title + a prompt that names the target files</li>'
     + '<li><b>Run fleet</b> — try <b>Dry run</b> first (free rehearsal), then <b>Real agent</b></li>'
-    + '</ol></div></div>';
+    + '</ol></div>'
+    + '<div class="setup-sec"><p class="setup-label">Remote access</p>'
+    + '<div id="rmtOnboard" class="rmt">checking Tailscale…</div></div>'
+    + '</div>';
+  loadRemote();
 }
 function cardHTML(r){
   const task = tasks.get(r.taskId);
@@ -1080,6 +1172,8 @@ async function hydrate(){
   (r.runs||[]).forEach(rn => runs.set(rn.id, { ...rn, events: rn.events||[] }));
   if (r.daemon) {
     const d = r.daemon;
+    if (d.port) daemonPort = d.port;
+    remoteAuthOpen = !!d.authOpen;
     const db = String(d.dbPath||'').replace(/^\\/(?:Users|home)\\/[^/]+/, '~');
     const el = $('daemonBadge');
     el.innerHTML = 'daemon <b>v'+esc(String(d.version||'?'))+'</b> · :'+esc(String(d.port||'?'));
@@ -1402,7 +1496,7 @@ $('grid').addEventListener('click',(e)=>{
 });
 $('mClose').addEventListener('click', closeModal);
 $('overlay').addEventListener('click',(e)=>{ if(e.target===$('overlay')) closeModal(); });
-document.addEventListener('keydown',(e)=>{ if(e.key==='Escape'){ closeDropdowns(); cfmClose(false); $('brwOverlay').classList.remove('open'); $('expOverlay').classList.remove('open'); $('ghOverlay').classList.remove('open'); $('brOverlay').classList.remove('open'); closeTerm(); closeModal(); cmpTaskId=null; $('cmpOverlay').classList.remove('open'); } });
+document.addEventListener('keydown',(e)=>{ if(e.key==='Escape'){ closeDropdowns(); cfmClose(false); $('brwOverlay').classList.remove('open'); $('expOverlay').classList.remove('open'); $('ghOverlay').classList.remove('open'); $('npOverlay').classList.remove('open'); $('brOverlay').classList.remove('open'); $('remoteOverlay').classList.remove('open'); closeTerm(); closeModal(); cmpTaskId=null; $('cmpOverlay').classList.remove('open'); } });
 $('mRefreshDiff').addEventListener('click', loadDiff);
 $('mExport').addEventListener('click', ()=>{
   if (openRunId==null) return;
@@ -1780,11 +1874,19 @@ async function submitBench(){
 
 $('repoForm').addEventListener('submit', async (e)=>{
   e.preventDefault();
-  const body = { machineSlug: $('repoMachine').value, path: $('repoPath').value.trim() };
-  if (!body.path) return;
+  const path = $('repoPath').value.trim();
+  const body = { machineSlug: $('repoMachine').value, path };
+  if (!path) return;
   const res = await fetch('/api/repos',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(body)});
-  if (res.ok){ $('repoPath').value=''; toast('repo registered', 'ok'); await hydrate(); }
-  else { const j = await res.json().catch(()=>({})); toast('repo: '+(j.detail||j.error||res.status), 'error'); }
+  if (res.ok){ $('repoPath').value=''; toast('repo registered', 'ok'); await hydrate(); return; }
+  const j = await res.json().catch(()=>({}));
+  if (res.status === 400 && j.code === 'NO_COMMITS'){
+    const yes = await confirmUI('This folder has no commits yet — start a new project here?',
+      { sub: 'coxpit will create an empty initial commit as the base, then register the repo. The folder itself is untouched.', okLabel: 'Start new project' });
+    if (yes && await createNewProject(path)) $('repoPath').value='';
+    return;
+  }
+  toast('repo: '+(j.detail||j.error||res.status), 'error');
 });
 $('taskForm').addEventListener('submit', async (e)=>{
   e.preventDefault();
@@ -1874,6 +1976,42 @@ async function ghFetch(){
 $('ghOk').addEventListener('click', ghFetch);
 $('ghUrl').addEventListener('keydown',(e)=>{ if(e.key==='Enter') ghFetch(); });
 
+/* ── greenfield — start a new project (empty folder in, scaffolded repo out) ── */
+// POST /api/repos/new; 성공 시 hydrate 후 새 repo 를 자동 선택하고 toast.
+async function createNewProject(path, name){
+  const body = { machineSlug: $('repoMachine').value, path };
+  if (name) body.name = name;
+  const res = await fetch('/api/repos/new',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify(body)});
+  const j = await res.json().catch(()=>({}));
+  if (!res.ok){ toast(j.error||('new project: '+res.status), 'error'); return false; }
+  await hydrate();
+  if (j.repo){
+    $('taskRepo').value = String(j.repo.id);
+    syncSelect('taskRepo');
+  }
+  toast('project ready — write a scaffold task and Run fleet', 'ok');
+  return true;
+}
+$('repoNew').addEventListener('click', ()=>{
+  const m = machines.find(x=>x.slug===$('repoMachine').value);
+  $('npPath').value = ''; $('npName').value = '';
+  $('npOverlay').classList.add('open'); $('npPath').focus();
+});
+$('npCancel').addEventListener('click', ()=>$('npOverlay').classList.remove('open'));
+$('npOverlay').addEventListener('click',(e)=>{ if(e.target===$('npOverlay')) $('npOverlay').classList.remove('open'); });
+async function npStart(){
+  const path = $('npPath').value.trim();
+  if (!path){ toast('enter an absolute project path', 'error'); return; }
+  $('npOk').disabled = true; $('npOk').textContent = 'Starting…';
+  try{
+    const ok = await createNewProject(path, $('npName').value.trim());
+    if (ok) $('npOverlay').classList.remove('open');
+  } finally { $('npOk').disabled = false; $('npOk').textContent = 'Start new project'; }
+}
+$('npOk').addEventListener('click', npStart);
+$('npPath').addEventListener('keydown',(e)=>{ if(e.key==='Enter') npStart(); });
+$('npName').addEventListener('keydown',(e)=>{ if(e.key==='Enter') npStart(); });
+
 /* ── 읽기 전용 공유 링크 ── */
 $('mShare').addEventListener('click', async ()=>{
   if (openRunId==null) return;
@@ -1886,6 +2024,156 @@ $('mShare').addEventListener('click', async ()=>{
   toast((j.existing?'share link (existing)':'share link created')+(copied?' — copied':'')+': '+url, 'ok');
 });
 
+/* ── remote access (v4.5) — detect Tailscale, drive Serve/Funnel, or hand a recipe.
+   coxpit never hosts a relay: it detects and drives the user's own tool. ── */
+let remoteData = null, remoteBusy = false;
+
+// clipboard write with a synchronous execCommand fallback (clipboard API alone is
+// unreliable outside secure/focused contexts — mirrors the terminal copy helper).
+function copyText(text){
+  let ok = false;
+  try{ if (navigator.clipboard && navigator.clipboard.writeText) { navigator.clipboard.writeText(text); ok = true; } }catch{}
+  try{
+    const ta = document.createElement('textarea');
+    ta.value = text; ta.setAttribute('readonly',''); ta.style.position='fixed'; ta.style.top='-1000px';
+    document.body.appendChild(ta); ta.select();
+    if (document.execCommand('copy')) ok = true;
+    document.body.removeChild(ta);
+  }catch{}
+  return ok;
+}
+
+// recipe text with the daemon's REAL port interpolated (guidance, not magic).
+function cfRecipe(){
+  return 'cloudflared tunnel --url http://localhost:'+daemonPort+'\\n'
+    + '# or a named tunnel + Cloudflare Access policy (recommended — exposes shells)';
+}
+function caddyRecipe(){
+  return 'coxpit.example.com {\\n  reverse_proxy 127.0.0.1:'+daemonPort+'\\n}';
+}
+function urlTableHTML(){
+  const rows = [
+    ['local', 'http://127.0.0.1:'+daemonPort, 'same machine'],
+    ['LAN', 'http://192.168.x.y:'+daemonPort, 'home network'],
+    ['Tailscale IP', 'http://100.x.y.z:'+daemonPort, 'your tailnet'],
+    ['MagicDNS', 'http://&lt;machine&gt;.&lt;tailnet&gt;.ts.net:'+daemonPort, 'your tailnet'],
+    ['Serve ⭐', 'https://&lt;machine&gt;.&lt;tailnet&gt;.ts.net', 'your tailnet · HTTPS'],
+    ['Funnel', 'https://&lt;machine&gt;.&lt;tailnet&gt;.ts.net', 'public internet'],
+    ['Cloudflare', 'https://coxpit.yourdomain.com', 'public (+ CF Access)'],
+    ['reverse proxy', 'https://coxpit.yourdomain.com', 'public'],
+  ];
+  let body = '';
+  for (const row of rows){
+    const star = row[0].indexOf('⭐') >= 0 ? ' class="star"' : '';
+    body += '<tr'+star+'><td>'+esc(row[0])+'</td><td><code>'+row[1]+'</code></td><td>'+esc(row[2])+'</td></tr>';
+  }
+  return '<table class="rmt-tbl"><tr><th>method</th><th>url shape</th><th>who reaches it</th></tr>'+body+'</table>'
+    + '<div class="rmt-cap">coxpit hands you a <code style="color:var(--brand)">*.ts.net</code> name in one click; a <b>custom</b> domain stays a Cloudflare/proxy recipe.</div>';
+}
+function recipesHTML(){
+  return '<details class="rmt-more"><summary>Recipes — Cloudflare Tunnel &amp; reverse proxy</summary>'
+    + '<pre>'+esc(cfRecipe())+'</pre>'
+    + '<div class="rmt-cap">public = shells exposed; keep coxpit auth on.</div>'
+    + '<pre>'+esc(caddyRecipe())+'</pre>'
+    + '<div class="rmt-cap">public = shells exposed; keep coxpit auth on.</div>'
+    + '</details>';
+}
+
+// authOpen: no password set → Funnel would expose shells to the internet.
+function remoteCardHTML(rd){
+  if (!rd) return '<div class="rmt-line">checking Tailscale…</div>' + recipesHTML();
+  const authOpen = !!rd.authOpen;
+  let h = '';
+  if (rd.tailscale === 'missing'){
+    h += '<div class="rmt-line">Install Tailscale to reach this daemon by name from your other devices — or use a reverse-proxy recipe below. '
+      + '<a href="https://tailscale.com/download" target="_blank" rel="noopener" style="color:var(--brand)">tailscale.com/download</a></div>';
+  } else if (rd.tailscale === 'stopped'){
+    h += '<div class="rmt-line">Tailscale is installed but not running. Start it, then <a href="#" id="rmtRefresh" style="color:var(--brand)">refresh</a>.</div>';
+  } else {
+    // running
+    h += '<div class="rmt-line">This machine on your tailnet: <span class="rmt-name">'+esc(rd.dnsName||'')+'</span></div>';
+    const serveUrl = 'https://'+(rd.dnsName||'');
+    // Serve row (safe default)
+    h += '<div class="rmt-row"><div class="rmt-l"><div class="rmt-t">Serve</div>'
+      + '<div class="rmt-d">your tailnet only · HTTPS · no port</div></div>'
+      + '<div class="tgl'+(rd.serve?' on':'')+'" id="rmtServe" role="switch" aria-checked="'+(rd.serve?'true':'false')+'"></div></div>';
+    if (rd.serve){
+      h += '<div class="rmt-url"><code>'+esc(serveUrl)+'</code>'
+        + '<button class="rmt-cp" data-copy="'+escA(serveUrl)+'">Copy</button></div>';
+    }
+    // Funnel row (risky)
+    h += '<div class="rmt-row risky"><div class="rmt-l"><div class="rmt-t">Funnel · Public internet</div>'
+      + '<div class="rmt-d">'+(authOpen?'set COXPIT_AUTH_PASS first — Funnel exposes shells':'anyone with the URL can reach this — auth is your only gate')+'</div></div>'
+      + '<div class="tgl risky'+(rd.funnel?' on':'')+'" id="rmtFunnel" role="switch" aria-checked="'+(rd.funnel?'true':'false')+'"'+(authOpen?' aria-disabled="true"':'')+'></div></div>';
+    if (rd.funnel){
+      h += '<div class="rmt-url"><code>'+esc(serveUrl)+'</code>'
+        + '<button class="rmt-cp" data-copy="'+escA(serveUrl)+'">Copy</button></div>';
+      h += '<div class="rmt-warn">anyone with the URL can reach this — auth is your only gate.</div>';
+    }
+  }
+  h += recipesHTML();
+  h += '<details class="rmt-more"><summary>how URLs differ</summary>'+urlTableHTML()+'</details>';
+  return h;
+}
+
+async function loadRemote(){
+  // /api/remote stays a pure RemoteState; the auth-open flag comes from /api/fleet
+  // (remoteAuthOpen) so the Funnel toggle can disable itself before any POST.
+  try{
+    const rd = await fetch('/api/remote').then(x=>x.json());
+    remoteData = rd; remoteData.authOpen = remoteAuthOpen;
+    paintRemote();
+  }catch{ remoteData = { tailscale:'missing', serve:false, funnel:false, authOpen: remoteAuthOpen }; paintRemote(); }
+}
+
+function paintRemote(){
+  const html = remoteCardHTML(remoteData);
+  const ov = $('remoteBody'); if (ov) ov.innerHTML = html;
+  const ob = $('rmtOnboard'); if (ob) ob.innerHTML = html;
+  wireRemote($('remoteOverlay'));
+  wireRemote(document.getElementById('empty'));
+}
+
+function wireRemote(scope){
+  if (!scope) return;
+  scope.querySelectorAll('[data-copy]').forEach(b=>{
+    if (b.dataset.wired) return; b.dataset.wired='1';
+    b.addEventListener('click', ()=>{
+      const ok = copyText(b.getAttribute('data-copy')||'');
+      toast(ok?'URL copied':'copy failed — select it manually', ok?'ok':'error');
+    });
+  });
+  const rf = scope.querySelector('#rmtRefresh');
+  if (rf && !rf.dataset.wired){ rf.dataset.wired='1'; rf.addEventListener('click',(e)=>{ e.preventDefault(); loadRemote(); }); }
+  const sv = scope.querySelector('#rmtServe');
+  if (sv && !sv.dataset.wired){ sv.dataset.wired='1'; sv.addEventListener('click', ()=>toggleRemote('serve', !(remoteData&&remoteData.serve))); }
+  const fn = scope.querySelector('#rmtFunnel');
+  if (fn && !fn.dataset.wired){ fn.dataset.wired='1'; fn.addEventListener('click', ()=>{
+    if (fn.getAttribute('aria-disabled')==='true'){ toast('set COXPIT_AUTH_PASS first — Funnel exposes shells', 'error'); return; }
+    toggleRemote('funnel', !(remoteData&&remoteData.funnel));
+  }); }
+}
+
+async function toggleRemote(which, on){
+  if (remoteBusy) return; remoteBusy = true;
+  try{
+    const res = await fetch('/api/remote/'+which,{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({on})});
+    const j = await res.json().catch(()=>({}));
+    if (!res.ok){
+      if (j.code==='NO_AUTH'){ remoteAuthOpen = true; if (remoteData) remoteData.authOpen = true; paintRemote(); toast('set COXPIT_AUTH_PASS first — Funnel exposes shells', 'error'); }
+      else toast(which+': '+(j.error||res.status), 'error');
+      return;
+    }
+    remoteData = j; remoteData.authOpen = remoteAuthOpen;
+    paintRemote();
+    toast(which+(on?' on':' off'), 'ok');
+  } finally { remoteBusy = false; }
+}
+
+$('remoteBtn').addEventListener('click', ()=>{ $('remoteOverlay').classList.add('open'); loadRemote(); });
+$('remoteClose').addEventListener('click', ()=>$('remoteOverlay').classList.remove('open'));
+$('remoteOverlay').addEventListener('click',(e)=>{ if(e.target===$('remoteOverlay')) $('remoteOverlay').classList.remove('open'); });
+
 /* ── mobile drawer ── */
 const asideEl = document.querySelector('aside');
 function setDrawer(on){ asideEl.classList.toggle('open', on); $('scrim').classList.toggle('on', on); }

package/src/index.ts

@@ -39,3 +39,11 @@ try {
   }
   throw e;
 }
+
+// 인증 켜졌는데 비번이 비면 fail-closed(전 요청 401) — 첫 실행자가 401 보고 당황하지 않게 명시.
+if (!config.auth.disabled && config.auth.pass === '') {
+  console.warn(
+    '[coxpit] auth is ON but COXPIT_AUTH_PASS is empty — every request will be rejected (401).\n' +
+    '[coxpit] Set COXPIT_AUTH_PASS to a password, or COXPIT_AUTH_DISABLED=1 for local dev.',
+  );
+}

package/src/providers.ts

@@ -76,9 +76,20 @@ const claudeProvider: Provider = {
       if (obj.type) kind = obj.type;
       if (obj.type === 'system' && typeof obj.session_id === 'string') ev.sessionId = obj.session_id;
       if (obj.type === 'result') ev.resultText = typeof obj.result === 'string' ? obj.result : s;
-      // 2000자 초과 이벤트는 자르면 JSON 이 깨져 잔해가 화면에 노출된다 —
-      // 저장 전에 "요지만 남긴" 유효 JSON 으로 압축한다.
-      if (s.length > 2000) {
+      // system 이벤트는 full fidelity 가 필요 없다 — 길이와 무관하게 항상 컴팩트 재직렬화로
+      // 통일하고 그 시점에 model 의 ANSI 이스케이프를 소독한다(예: 'claude-opus-4-8\x1b[1m').
+      // session_id 캡처는 위에서 이미 ev 에 담았으므로 stored 축약과 무관.
+      // ESC(\x1b) 를 포함해 SGR 시퀀스 전체를 제거 — spec 예시 정규식은 ESC 를 남겨
+      //   'm\x1b[1mx' → 'm\x1bx' 로 잔해가 남아 DoD("ESC 부재")를 못 지킨다. ESC 도 소비한다.
+      const stripAnsi = (x: string) => x.replace(/\x1b?\[[0-9;]*m/g, '');
+      if (obj.type === 'system') {
+        stored = JSON.stringify({
+          type: 'system', subtype: obj.subtype,
+          model: typeof obj.model === 'string' ? stripAnsi(obj.model) : obj.model,
+        });
+      } else if (s.length > 2000) {
+        // 2000자 초과 이벤트는 자르면 JSON 이 깨져 잔해가 화면에 노출된다 —
+        // 저장 전에 "요지만 남긴" 유효 JSON 으로 압축한다.
         if (obj.type === 'assistant' && obj.message) {
           const content = (obj.message.content ?? [])
             .filter((c) => c.type === 'text' || c.type === 'tool_use')
@@ -88,8 +99,6 @@ const claudeProvider: Provider = {
           stored = JSON.stringify({ type: 'assistant', message: { content } }).slice(0, 2000);
         } else if (obj.type === 'user') {
           stored = JSON.stringify({ type: 'user' }); // tool 결과 회신 — 표시 안 함
-        } else if (obj.type === 'system') {
-          stored = JSON.stringify({ type: 'system', subtype: obj.subtype, model: obj.model });
         } else if (obj.type === 'result') {
           stored = JSON.stringify({ type: 'result', result: (obj.result ?? '').slice(0, 1500) });
         } else {

package/src/remote.ts

@@ -0,0 +1,148 @@
+// Remote access detection — read the LOCAL machine's Tailscale state and whether
+// Serve/Funnel already point at our port. This is the whole v4.5 backend surface.
+//
+// GUARDRAIL (non-negotiable): coxpit never hosts a relay and never issues a
+// coxpit-branded public URL. It DETECTS the user's own Tailscale and DRIVES it
+// (serve/funnel), or hands a copy-paste recipe. We never bundle tailscale or
+// cloudflared — absent tools degrade to `missing` + a recipe, never to a coxpit
+// tunnel. All truth is read live from the CLI; nothing is persisted in the DB.
+
+import { runShellOn, shq, type MachineTarget } from './exec';
+
+export interface RemoteState {
+  tailscale: 'missing' | 'stopped' | 'running';
+  dnsName?: string;        // trailing dot stripped (e.g. host.tailnet.ts.net)
+  tailnetSuffix?: string;  // MagicDNS suffix (e.g. tailnet.ts.net)
+  serve: boolean;          // is serve active for OUR port?
+  funnel: boolean;         // is funnel active for OUR port?
+  binPath?: string;        // resolved tailscale bin
+}
+
+// Serve/Funnel are always driven against the local machine (the daemon host) —
+// we cannot reach into a remote node's Tailscale from here.
+const LOCAL: MachineTarget = { slug: 'local', kind: 'local', address: '', sshUser: '' };
+
+// mac app bundles the CLI here; Linux/most installs put `tailscale` on PATH.
+const MAC_APP_BIN = '/Applications/Tailscale.app/Contents/MacOS/Tailscale';
+
+/** Resolve the tailscale binary: PATH first, else the macOS app bundle. '' = none. */
+async function resolveBin(): Promise<string> {
+  const onPath = await runShellOn(LOCAL, 'command -v tailscale 2>/dev/null || true', 6000);
+  const p = onPath.stdout.trim().split('\n').pop()?.trim() ?? '';
+  if (p) return p;
+  const app = await runShellOn(LOCAL, `test -x ${shq(MAC_APP_BIN)} && echo yes || true`, 6000);
+  if (app.stdout.includes('yes')) return MAC_APP_BIN;
+  return '';
+}
+
+/** Does a serve/funnel status JSON (shape varies by version) target http://…:<port>? */
+function jsonTargetsPort(raw: string, port: number): boolean {
+  // Rather than chase the (version-dependent) nested shape, look for any proxy
+  // target string that names our loopback port. `serve status --json` embeds
+  // upstreams as `http://127.0.0.1:<port>` / `http://localhost:<port>`.
+  try {
+    JSON.parse(raw); // ensure it IS json (caller falls back to text grep otherwise)
+  } catch {
+    throw new Error('not json');
+  }
+  return textTargetsPort(raw, port);
+}
+
+/** Plain-text fallback: any `:<port>` upstream mention (defensive across versions). */
+function textTargetsPort(raw: string, port: number): boolean {
+  const p = String(port);
+  return raw.includes('127.0.0.1:' + p)
+    || raw.includes('localhost:' + p)
+    || raw.includes('0.0.0.0:' + p)
+    || raw.includes('[::1]:' + p);
+}
+
+/** Is serve/funnel active for our port? Try `<sub> status --json`, else `<sub> status`. */
+async function subStateForPort(bin: string, sub: 'serve' | 'funnel', port: number): Promise<boolean> {
+  const j = await runShellOn(LOCAL, `${shq(bin)} ${sub} status --json 2>/dev/null || true`, 8000);
+  const jout = j.stdout.trim();
+  if (jout) {
+    try {
+      return jsonTargetsPort(jout, port);
+    } catch { /* not json — fall through to text grep */ }
+  }
+  const t = await runShellOn(LOCAL, `${shq(bin)} ${sub} status 2>/dev/null || true`, 8000);
+  return textTargetsPort(t.stdout, port);
+}
+
+/**
+ * Live Tailscale state for `port`, best-effort. Any failure downgrades to
+ * missing/stopped — this must never throw into the request handler.
+ */
+export async function remoteState(port: number): Promise<RemoteState> {
+  const off: RemoteState = { tailscale: 'missing', serve: false, funnel: false };
+  try {
+    const bin = await resolveBin();
+    if (!bin) return off;
+
+    const st = await runShellOn(LOCAL, `${shq(bin)} status --json 2>/dev/null || true`, 8000);
+    const out = st.stdout.trim();
+    if (!out) return { tailscale: 'stopped', serve: false, funnel: false, binPath: bin };
+
+    let self: { DNSName?: string } | undefined;
+    let magic = '';
+    let backendState = '';
+    try {
+      const j = JSON.parse(out) as {
+        Self?: { DNSName?: string };
+        MagicDNSSuffix?: string;
+        BackendState?: string;
+      };
+      self = j.Self;
+      magic = String(j.MagicDNSSuffix ?? '');
+      backendState = String(j.BackendState ?? '');
+    } catch {
+      // Non-JSON (e.g. "Logged out." / "stopped") — treat as not running.
+      return { tailscale: 'stopped', serve: false, funnel: false, binPath: bin };
+    }
+
+    // Logged out / stopped backends have no usable name.
+    if (/stopped|NoState|NeedsLogin|Logged out/i.test(backendState) || !self?.DNSName) {
+      return { tailscale: 'stopped', serve: false, funnel: false, binPath: bin };
+    }
+
+    const dnsName = String(self.DNSName).replace(/\.$/, ''); // strip trailing dot
+    const tailnetSuffix = magic.replace(/\.$/, '') || undefined;
+
+    const [serve, funnel] = await Promise.all([
+      subStateForPort(bin, 'serve', port),
+      subStateForPort(bin, 'funnel', port),
+    ]);
+
+    return { tailscale: 'running', dnsName, tailnetSuffix, serve, funnel, binPath: bin };
+  } catch {
+    return off;
+  }
+}
+
+/** Turn Serve on/off for our port (tailnet-only, HTTPS — safe by default). */
+export async function setServe(port: number, on: boolean): Promise<RemoteState> {
+  const bin = await resolveBin();
+  if (bin) {
+    const cmd = on
+      ? `${shq(bin)} serve --bg ${String(port)}`
+      : `${shq(bin)} serve reset`;
+    await runShellOn(LOCAL, cmd, 20000);
+  }
+  return remoteState(port);
+}
+
+/**
+ * Turn Funnel on/off for our port (PUBLIC internet). The NO_AUTH guard lives in
+ * the route (Funnel with no basic auth = open shells); this just drives the CLI.
+ */
+export async function setFunnel(port: number, on: boolean): Promise<RemoteState> {
+  const bin = await resolveBin();
+  if (bin) {
+    const cmd = on
+      ? `${shq(bin)} funnel --bg ${String(port)}`
+      : `${shq(bin)} funnel reset`;
+    await runShellOn(LOCAL, cmd, 20000);
+  }
+  return remoteState(port);
+}

package/src/server.ts

@@ -17,6 +17,7 @@ import { launchRun, cleanupRun, stopRun, getRunDiff, loadRunDocs, mergeRun, getR
 import { openTerm } from './term';
 import { addSink, removeSink, broadcast } from './hub';
 import { getProvider, listProviders } from './providers';
+import { remoteState, setServe, setFunnel } from './remote';
 import { BOARD_HTML } from './board';
 
 const require_ = createRequire(import.meta.url);
@@ -202,7 +203,11 @@ export async function buildServer(): Promise<FastifyInstance> {
       runs: rns.map((r) => ({ ...r, events: (byRun.get(r.id) ?? []).slice(-EVENT_CAP) })),
       counts: { activeTasks: activeTasks.length, closedTasks: closedCount },
       // 보드 헤더 "어느 데몬에 붙어 있나" 표시용 (인증 뒤라 dbPath 노출 가능)
-      daemon: { version: config.version, pid: process.pid, port: config.port, dbPath: config.dbPath },
+      // authOpen = 비밀번호 미설정 → Funnel(공개) 가드가 켜져야 함(원격접근 카드용)
+      daemon: {
+        version: config.version, pid: process.pid, port: config.port, dbPath: config.dbPath,
+        authOpen: config.auth.disabled || config.auth.pass === '',
+      },
       providers: listProviders(),
     };
   });
@@ -339,7 +344,8 @@ export async function buildServer(): Promise<FastifyInstance> {
     if (!m) return reply.code(404).send({ error: 'machine not found' });
 
     // 기본 브랜치는 "지금 체크아웃된 브랜치"가 아니라 repo 의 진짜 기본값:
-    // origin/HEAD → 로컬 main/master → 현재 HEAD 순으로 감지.
+    // origin/HEAD → 로컬 main/master → 현재 HEAD(symbolic-ref, unborn 무에러) 순으로 감지.
+    // 마지막 세그먼트는 커밋 존재 여부(--verify HEAD) — 커밋 0개 repo 는 등록 거절.
     const g = `git -C ${shq(path)}`;
     const cmd =
       `${g} rev-parse --is-inside-work-tree 2>&1` +
@@ -348,7 +354,9 @@ export async function buildServer(): Promise<FastifyInstance> {
       ` && echo '---C---'` +
       ` && { ${g} show-ref --verify -q refs/heads/main && echo main || { ${g} show-ref --verify -q refs/heads/master && echo master; } || true; }` +
       ` && echo '---D---'` +
-      ` && ${g} rev-parse --abbrev-ref HEAD 2>&1`;
+      ` && { ${g} symbolic-ref --short HEAD 2>/dev/null || true; }` +   // unborn 에서도 무에러
+      ` && echo '---E---'` +
+      ` && { ${g} rev-parse --verify -q HEAD >/dev/null 2>&1 && echo yes || echo no; }`;
     const r = await runShellOn(m, cmd);
     const isRepo = r.ok && /(^|\n)true(\n|$)/.test(r.stdout);
     if (!isRepo) {
@@ -359,9 +367,17 @@ export async function buildServer(): Promise<FastifyInstance> {
     }
     const seg = (a: string, b: string): string =>
       ((r.stdout.split(a)[1] ?? '').split(b)[0] ?? '').trim();
+    const hasCommit = (r.stdout.split('---E---')[1] ?? '').trim() === 'yes';
+    if (!hasCommit) {
+      return reply.code(400).send({
+        error: 'this repository has no commits yet',
+        code: 'NO_COMMITS',
+        hint: 'make an initial commit first — or use Start a new project to have coxpit do it',
+      });
+    }
     const originHead = seg('---B---', '---C---').replace(/^origin\//, '');
     const localMain = seg('---C---', '---D---');
-    const headNow = (r.stdout.split('---D---')[1] ?? '').trim();
+    const headNow = seg('---D---', '---E---');
     const branch = originHead || localMain || headNow || 'main';
     const name = (b.name ?? '').trim() || path.split('/').filter(Boolean).pop() || path;
 
@@ -372,6 +388,63 @@ export async function buildServer(): Promise<FastifyInstance> {
     return reply.code(201).send({ ok: true, repo: ins[0] });
   });
 
+  // greenfield — "Start a new project": 빈/미존재/커밋없는 경로에만 git init + 빈 초기 커밋을
+  // 심고 등록한다. coxpit 이 git init 을 하는 유일한 자리 — 파일 있는 폴더는 절대 건드리지 않는다.
+  app.post('/api/repos/new', async (req, reply) => {
+    const b = (req.body ?? {}) as { machineSlug?: string; path?: string; name?: string };
+    const machineSlug = (b.machineSlug ?? '').trim();
+    const path = (b.path ?? '').trim();
+    if (!machineSlug || !path) return reply.code(400).send({ error: 'machineSlug and path required' });
+    if (!path.startsWith('/')) return reply.code(400).send({ error: 'path must be absolute' });
+
+    const mr = await db.select().from(machines).where(eq(machines.slug, machineSlug)).limit(1);
+    const m = mr[0];
+    if (!m) return reply.code(404).send({ error: 'machine not found' });
+
+    const g = `git -C ${shq(path)}`;
+    const probe =
+      `if [ ! -e ${shq(path)} ]; then echo MISSING;` +
+      ` elif [ ! -d ${shq(path)} ]; then echo NOTDIR;` +
+      ` elif [ -d ${shq(path)}/.git ]; then { ${g} rev-parse --verify -q HEAD >/dev/null 2>&1 && echo REPO_HAS_COMMITS || echo REPO_EMPTY; };` +
+      ` elif [ -z "$(ls -A ${shq(path)} 2>/dev/null)" ]; then echo EMPTYDIR;` +
+      ` else echo NONEMPTY; fi`;
+    const pr = await runShellOn(m, probe, 20000);
+    if (!pr.ok) return reply.code(400).send({ error: 'could not inspect path', detail: (pr.stdout || pr.stderr).trim().slice(0, 400) });
+    const kind = pr.stdout.trim().split('\n').pop()?.trim() ?? '';
+
+    if (kind === 'NOTDIR') return reply.code(400).send({ error: 'path is not a directory' });
+    if (kind === 'REPO_HAS_COMMITS') return reply.code(409).send({ error: 'already a repository with commits — use Register' });
+    if (kind === 'NONEMPTY') return reply.code(409).send({ error: 'folder is not empty — greenfield never touches existing files' });
+    if (kind !== 'MISSING' && kind !== 'EMPTYDIR' && kind !== 'REPO_EMPTY') {
+      return reply.code(400).send({ error: 'could not classify path', detail: (pr.stdout || pr.stderr).trim().slice(0, 400) });
+    }
+
+    // init(필요 시) + 빈 초기 커밋 — 이 커밋이 worktree 가 브랜치할 base.
+    // mergeRun 과 동일 관례: coxpit ident, gpgsign off.
+    const seed =
+      `mkdir -p ${shq(path)} && cd ${shq(path)}` +
+      ` && { [ -d .git ] || git init -b main; }` +
+      ` && git -c user.name='coxpit' -c user.email='coxpit@local' -c commit.gpgsign=false` +
+      ` commit --allow-empty -m 'coxpit: initial commit'`;
+    const sr = await runShellOn(m, seed, 20000);
+    if (!sr.ok) return reply.code(422).send({ error: 'could not initialize the project', detail: (sr.stdout || sr.stderr).trim().slice(0, 400) });
+
+    // REPO_EMPTY 는 기존 unborn 브랜치가 master 일 수 있음 — seed 후 실제 브랜치를 읽는다.
+    // init 케이스는 항상 main.
+    let branch = 'main';
+    if (kind === 'REPO_EMPTY') {
+      const br = await runShellOn(m, `git -C ${shq(path)} symbolic-ref --short HEAD 2>/dev/null || echo main`, 10000);
+      branch = br.stdout.trim().split('\n').pop()?.trim() || 'main';
+    }
+    const name = (b.name ?? '').trim() || path.split('/').filter(Boolean).pop() || path;
+
+    const ins = await db.insert(repos).values({
+      machineId: m.id, path, name, defaultBranch: branch,
+    }).returning();
+
+    return reply.code(201).send({ ok: true, repo: ins[0] });
+  });
+
   // repo 삭제 — 열린 태스크가 있으면 거부(이력 보호).
   app.delete('/api/repos/:id', async (req, reply) => {
     const id = Number((req.params as { id: string }).id);
@@ -466,6 +539,28 @@ export async function buildServer(): Promise<FastifyInstance> {
   app.get('/design/bookmarklet.js', async (_req, reply) =>
     reply.type('text/javascript').header('cache-control', 'no-store').send(BOOKMARKLET_JS));
 
+  // ─── Remote access (v4.5) ──────────────────────────────────────
+  // coxpit DETECTS the user's own Tailscale and DRIVES serve/funnel — it never
+  // hosts a relay or issues a coxpit-branded URL. Truth is read live from the
+  // CLI each call (no DB state). Owner-only (behind the normal authGate).
+  app.get('/api/remote', async () => remoteState(config.port));
+
+  // Serve = tailnet-only HTTPS (safe by default) — no auth guard needed.
+  app.post('/api/remote/serve', async (req) => {
+    const b = (req.body ?? {}) as { on?: boolean };
+    return setServe(config.port, b.on === true);
+  });
+
+  // Funnel = PUBLIC internet. Refuse to expose shells without a password:
+  // Funnel has no Tailscale-side auth, so coxpit's basic auth is the only gate.
+  app.post('/api/remote/funnel', async (req, reply) => {
+    const b = (req.body ?? {}) as { on?: boolean };
+    if (b.on === true && (config.auth.disabled || config.auth.pass === '')) {
+      return reply.code(409).send({ error: 'set a password first', code: 'NO_AUTH' });
+    }
+    return setFunnel(config.port, b.on === true);
+  });
+
   // ─── Task ──────────────────────────────────────────────────────
   app.get('/api/tasks', async (req) => {
     const q = (req.query ?? {}) as { repo?: string };