openrod 0.1.1 → 0.1.2-rc.2

package/dist/assets/{terminal-view-Bqw3jQjI.js → terminal-view-DzqQnmh2.js}

@@ -1,4 +1,4 @@
-import{u as Jr,a as Zr,r as Te,d as Qr,s as as,b as en,j as U,p as hs,T as tn,L as sn,B as ls,R as rn,D as nn,c as on,C as an,e as hn,f as ln,t as cn}from"./index-Ddo8D1tE.js";/**
+import{u as Jr,a as Zr,r as Te,d as Qr,s as as,b as en,j as U,p as hs,T as tn,L as sn,B as ls,R as rn,D as nn,c as on,C as an,e as hn,f as ln,t as cn}from"./index-DoKK2G9s.js";/**
  * Copyright (c) 2014-2024 The xterm.js authors. All rights reserved.
  * @license MIT
  *

package/dist/index.html

@@ -7,8 +7,8 @@
     <meta name="theme-color" content="#ffffff" />
     <meta name="description" content="OpenShell control plane - sandboxes, approvals and live activity" />
     <title>OpenRod</title>
-    <script type="module" crossorigin src="/assets/index-Ddo8D1tE.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-DbxTgFt9.css">
+    <script type="module" crossorigin src="/assets/index-DoKK2G9s.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-89TNohi_.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/logos/SOURCES.md

@@ -6,7 +6,6 @@ Every SVG in this directory is bundled locally so the console never contacts a l
 | --- | --- | --- |
 | Lobe Icons (`@lobehub/icons-static-svg` 1.95.1) | MIT, Copyright (c) 2023 LobeHub | https://github.com/lobehub/lobe-icons |
 | GitHub Octicons (`@primer/octicons` 19.38.0) | MIT, Copyright (c) 2026 GitHub Inc. | https://github.com/primer/octicons |
-| Simple Icons (`simple-icons`) | CC0-1.0 | https://github.com/simple-icons/simple-icons |
 | Devicon (`devicon` 2.17.0) | MIT, Copyright (c) 2015 konpa | https://github.com/devicons/devicon |
 | OpenRod authors | Apache-2.0 (this project) | - |
 
@@ -14,22 +13,13 @@ Every SVG in this directory is bundled locally so the console never contacts a l
 
 | File | Source | Upstream icon |
 | --- | --- | --- |
-| `anthropic.svg` | Simple Icons | `anthropic` |
-| `aws.svg` | Lobe Icons | `aws-color` |
-| `aws-bedrock.svg` | Lobe Icons | `bedrock-color` |
-| `aws-s3.svg` | OpenRod authors | neutral storage icon |
 | `claude-code.svg` | Lobe Icons | `claudecode-color` |
 | `codex.svg` | Lobe Icons | `codex-color` |
 | `copilot.svg` | GitHub Octicons | `copilot-24` |
 | `cursor.svg` | Lobe Icons | `cursor` |
-| `deepinfra.svg` | Lobe Icons | `deepinfra-color` |
 | `github.svg` | GitHub Octicons | `mark-github-24` |
-| `google-cloud.svg` | Simple Icons | `googlecloud` |
-| `google-vertex-ai.svg` | Lobe Icons | `vertexai-color` |
-| `nvidia.svg` | Lobe Icons | `nvidia-color` |
 | `openai.svg` | Lobe Icons | `openai` |
 | `openrouter.svg` | Lobe Icons | `openrouter-color` |
-| `pypi.svg` | Simple Icons | `pypi` |
 | `vscode.svg` | Devicon | `vscode` |
 | `agents/aider.svg` | OpenRod authors | neutral terminal icon |
 | `agents/antigravity.svg` | Lobe Icons | `antigravity-color` |
@@ -127,7 +117,3 @@ COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
 IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ```
-
-### Simple Icons
-
-Simple Icons are released under CC0-1.0 (https://creativecommons.org/publicdomain/zero/1.0/).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openrod",
-  "version": "0.1.1",
+  "version": "0.1.2-rc.2",
   "description": "A local console for OpenShell gateways, sandboxes, and activity.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/OpenRod/OpenRod#readme",

package/server/api.js

@@ -6,7 +6,7 @@ import { setupTargetsFor, validateSetupTargets } from '../shared/setup-targets.j
 import { localTransfer, importTransfer, exportTransfer } from './cloud-transfer.js'
 import path from 'node:path'
 import { Readable } from 'node:stream'
-import { scopedStateDirectory } from './paths.js'
+import { scopedStateDirectory, stateDirectory } from './paths.js'
 import { createActivityStore } from './activity-store.js'
 import { createActivityDelivery } from './activity-delivery.js'
 import { exportEvent } from '../src/lib/activity-export.js'
@@ -15,14 +15,16 @@ import { randomUUID } from 'node:crypto'
 import { imageTemplateLabels, nameSandboxImages } from '../src/lib/sandbox-images.js'
 import { PROJECT_LABEL, templateSession, isSession, sessionLaunch, persistentTerminalPolicy, persistentGateway, PERSISTENT_TERMINAL_LABEL } from '../src/lib/sandbox-session.js'
 import { sandboxIdentityLabels } from './sandbox-identity.js'
-import { consoleContext, contextConfigured, contextKey, contextSelection, gateway, iso, logView, policyView, providerView, runWithContext, sandboxView, selectConsoleContext } from './gateway.js'
+import { consoleContext, contextConfigured, contextKey, contextSelection, forgetGatewayConnection, gateway, gatewayWorkspaces, iso, listGateways, logView, policyView, providerView, runWithContext, sandboxView, selectConsoleContext, workspaceScope } from './gateway.js'
 import { createRemoteConnections } from './remote-gateway.js'
 import { createSshHostStore } from './ssh-hosts.js'
 import { createLocationInventory } from './location-inventory.js'
 import { policyRoute } from './policy.js'
 import { orgRoute, createInGroups, enforcePolicyOnly, startOrgSweeper, assignGroup } from './org.js'
 import { expose, ingressRoute, startSweeper } from './ingress.js'
-import { imageTemplateRoute, imageTemplateForLaunch, listImageTemplates } from './image-templates.js'
+import { imageTemplateRoute, imageTemplateForLaunch, listImageTemplates, localEngine, runDocker, savingTemplate, setGatewayDocker } from './image-templates.js'
+import { createGatewayDocker } from './gateway-docker.js'
+import { runCli } from './openshell-cli.js'
 import { editorRoute } from './editor.js'
 import { terminalRoute, terminalUpgrade } from './terminal.js'
 import { assertPackagesPrepared } from '../shared/setup-launch.js'
@@ -135,10 +137,11 @@ async function sandboxDetail(name) {
 // ---- writes -----------------------------------------------------------------
 
 export async function createSandbox(input, { sessionOverride = false } = {}) {
-  const { client, target, workspace } = await gateway()
   // An image template is an OpenShell sandbox template: the gateway supplies
   // its image and environment; the console adds how the sandbox starts.
   const saved = input.imageTemplate ? await imageTemplateForLaunch(String(input.imageTemplate)) : null
+  // After the template check, which can restart the local gateway.
+  const { client, target, workspace } = await gateway()
   const imageLabels = imageTemplateLabels(saved)
   // A built template's agents get their sign-in and model destinations from
   // the reviewed table in shared/agent-access.js, never from the recipe.
@@ -347,7 +350,9 @@ export function openshellApi(security = createSecurity(releaseConfig()), token =
 
 // Both Vite and the installed CLI use this exact HTTP/WebSocket lifecycle.
 export function createOpenShellApi({ httpServer, logger = console, security = createSecurity(releaseConfig()), token = createLaunchToken() } = {}) {
-  const gate = security.config.mode === 'local' ? createTokenGate(token) : null
+  const gate = security.config.mode === 'local' ? createTokenGate(token, {
+    onReuse: () => logger.warn('The link OpenRod opened in your browser was used a second time. If that wasn’t you, another program may have opened the console first: stop OpenRod with Ctrl+C and start it again.'),
+  }) : null
   const runtimes = new Map(), streams = new Set(), sockets = new Set(), pending = new Set(), responses = new Set()
   const localCloud = security.config.mode === 'local' ? createLocalCloud({ native: createLocalCloudNative() }) : null
   const cloudOff = security.config.mode === 'local' && !cloudOrigin()
@@ -384,6 +389,8 @@ export function createOpenShellApi({ httpServer, logger = console, security = cr
       active = next
       if (httpServer?.listening) runWithContext(next.context, () => next.hub.start())
     }
+    // Read-only warm-up; edits wait for a build or launch that needs them.
+    void gatewayDocker?.status({ fresh: true }).catch(() => {})
     return next
   }
   const sshHosts = security.config.mode === 'local' ? createSshHostStore() : null
@@ -394,12 +401,43 @@ export function createOpenShellApi({ httpServer, logger = console, security = cr
     },
     logger,
   }) : null
+  // The local gateway's VM driver must use the Docker that builds templates.
+  const gatewayDocker = security.config.mode === 'local' ? createGatewayDocker({
+    target: async () => {
+      const local = (await remoteConnections.locationSnapshot()).returnContext
+      return local ? listGateways().find((entry) => entry.name === local.gateway) ?? null : null
+    },
+    client: async (name) => (await gateway({ gateway: name, workspace: 'default' })).client,
+    forget: forgetGatewayConnection,
+    sandboxes: async (name) => {
+      const { client } = await gateway({ gateway: name, workspace: 'default' })
+      const all = []
+      for (const { name: workspace } of await gatewayWorkspaces(name)) {
+        let pageToken = ''
+        do {
+          const page = await client.raw.listSandboxes({ workspaceScope: workspaceScope(workspace), pageSize: 1000, pageToken })
+          all.push(...page.sandboxes.map(sandboxView).map((s) => ({ name: s.name, workspace: s.workspace || workspace, phase: s.phase, image: s.image })))
+          pageToken = page.nextPageToken
+        } while (pageToken)
+      }
+      return all
+    },
+    localEngine: () => localEngine(), docker: runDocker, run: runCli,
+    busy: () => remoteConnections.changing() ? 'connection' : savingTemplate() ? 'saving' : null,
+    stateFile: path.join(stateDirectory(), 'gateway-docker.json'),
+    onJob: (job) => { pending.add(job); job.then(() => pending.delete(job), () => pending.delete(job)) },
+    logger,
+  }) : null
+  setGatewayDocker(gatewayDocker)
   const inventory = createLocationInventory({
     connections: remoteConnections, listSandboxes, listTemplates: listImageTemplates, logger,
     defaultLabel: security.config.mode === 'local' ? 'Local' : 'Cloud',
   })
-  const start = async () => {
-    if (closed || (security.config.mode === 'local' && !contextConfigured())) return
+  let ready = Promise.resolve()
+  const start = () => { ready = begin(); return ready }
+  const begin = async () => {
+    if (closed) return
+    if (security.config.mode === 'local' && !contextConfigured()) { await remoteConnections?.autoSelect(); return }
     if (remoteConnections && /^console-ssh-[a-f0-9]{24}$/.test(initialContext.gateway)) {
       const remote = (await remoteConnections.locationSnapshot()).remote
       if (remote?.gateway !== initialContext.gateway || remote.status !== 'connected') return
@@ -467,7 +505,7 @@ export function createOpenShellApi({ httpServer, logger = console, security = cr
           const parts = url.pathname.slice('/api/os'.length).split('/').filter(Boolean)
           assertCloudOperation(parts)
           if (cloudOff && ['cloud-export', 'cloud-import', 'cloud-transfer'].includes(parts[0])) return send(res, 409, { error: CLOUD_SOON })
-          if (security.config.mode !== 'local' && (parts[0] === 'connections' || (parts[0] === 'context' && req.method !== 'GET') || (parts[0] === 'sandboxes' && ['ssh', 'ssh-open', 'ssh-config'].includes(parts[2])))) throw fail('Host-local actions are unavailable in OpenRod Cloud.', 403)
+          if (security.config.mode !== 'local' && (parts[0] === 'connections' || parts[0] === 'gateway-docker' || (parts[0] === 'context' && req.method !== 'GET') || (parts[0] === 'sandboxes' && ['ssh', 'ssh-open', 'ssh-config'].includes(parts[2])))) throw fail('Host-local actions are unavailable in OpenRod Cloud.', 403)
           const requestedContext = req.headers['x-openshell-context'] ?? url.searchParams.get('context')
           let owner = contextSelection()
           const explicitLocation = req.headers['x-openshell-location'] === '1' || url.searchParams.get('location') === '1'
@@ -510,6 +548,15 @@ export function createOpenShellApi({ httpServer, logger = console, security = cr
             }
             return send(res, 404, { error: 'Not found' })
           }
+          if (parts[0] === 'gateway-docker') {
+            if (!gatewayDocker) return send(res, 404, { error: 'Not found' })
+            if (req.method === 'GET' && parts.length === 1) return send(res, 200, await gatewayDocker.status({ fresh: url.searchParams.get('fresh') === '1' }))
+            if (req.method !== 'POST' || parts.length !== 2 || !['connect', 'undo'].includes(parts[1])) return send(res, 404, { error: 'Not found' })
+            if (!isMutation(req, security)) return send(res, 403, { error: 'Request rejected' })
+            const input = await body(req)
+            const seen = Array.isArray(input.seen) ? input.seen.slice(0, 500).map(String) : []
+            return send(res, 200, await gatewayDocker[parts[1]]({ confirm: input.confirm === true, seen }))
+          }
           if (req.method === 'GET' && parts.length === 1) {
             if (parts[0] === 'context') {
               const remote = remoteConnections ? (await remoteConnections.locationSnapshot()).remote : null
@@ -631,7 +678,7 @@ export function createOpenShellApi({ httpServer, logger = console, security = cr
         } catch (error) {
           // Gateway errors carry a readable message; nothing here includes credentials.
           if (res.headersSent) res.destroy(error)
-          else send(res, error.status ?? 502, { error: error.rawMessage ?? error.message ?? 'Gateway request failed', ...(error.code === 'TEMPLATE_IN_USE' ? { code: error.code, sandboxes: error.sandboxes } : {}) })
+          else send(res, error.status ?? 502, { error: error.rawMessage ?? error.message ?? 'Gateway request failed', ...(error.code === 'TEMPLATE_IN_USE' || error.code === 'GATEWAY_DOCKER_MISMATCH' ? { code: error.code, sandboxes: error.sandboxes, fix: error.fix } : {}) })
         }
       })
     pending.add(operation)
@@ -644,5 +691,5 @@ export function createOpenShellApi({ httpServer, logger = console, security = cr
     const authenticate = () => security.middleware(req, res, () => route(req, res, next))
     return localCloud ? localCloud.middleware(req, res, authenticate) : authenticate()
   }
-  return { middleware, close, token }
+  return { middleware, close, token, launchCode: gate?.launchCode, ready: () => ready }
 }

package/server/cli.js

@@ -9,21 +9,25 @@ import { parseArgs } from 'node:util'
 
 const HELP = `Usage: openrod [--host 127.0.0.1] [--port 4600] [--open | --no-open]
 
-Serve OpenRod locally for local sandboxes or configured SSH hosts.
-Open the printed link: it carries a secret that changes on every start.
+Serve OpenRod locally for local sandboxes or configured SSH hosts and
+open it in your default browser. The link carries a secret that changes
+on every start. Over SSH, in CI, without a display, or when the output is
+not a terminal, the link is only printed.
 
   --host <host>  Loopback only: 127.0.0.1, localhost, or ::1
   --port <port>  HTTP port from 1 to 65535 (default: 4600)
-  --open         Open the console in your default browser
-  --no-open      Do not open a browser (default)
+  --open         Always open the console in your default browser
+  --no-open      Only print the link
   --help, -h     Show this help
   --version, -v  Show the installed version
 
 Mutable data: OPENSHELL_CONSOLE_DATA_DIR, or
   $XDG_STATE_HOME/openshell-console (~/.local/state/openshell-console).
 Requires Node.js >=22.13.0. SSH hosts need local OpenSSH and OpenSSL,
-plus a running Docker Engine on the remote Linux host. A missing local
-gateway executable is downloaded and checksum-verified on supported platforms.
+plus a running Docker Engine on the remote Linux host.
+If OpenShell is missing, openrod offers to install the pinned 0.1.2
+release (macOS needs Homebrew). Connecting an SSH host downloads a missing
+openshell-gateway executable, checksum-verified, on supported platforms.
 `
 
 export function nodeSupported(version = process.versions.node) {
@@ -51,7 +55,15 @@ export function parseOptions(args = process.argv.slice(2)) {
   if (!['127.0.0.1', 'localhost', '::1'].includes(values.host)) throw new Error('--host must be a loopback address: 127.0.0.1, localhost, or ::1.')
   if (!/^\d+$/.test(values.port) || Number(values.port) < 1 || Number(values.port) > 65535) throw new Error('--port must be an integer from 1 to 65535.')
   if (values.open && values['no-open']) throw new Error('Choose either --open or --no-open, not both.')
-  return { host: values.host, port: Number(values.port), open: Boolean(values.open), help: Boolean(values.help), version: Boolean(values.version) }
+  return { host: values.host, port: Number(values.port), open: values.open ? true : values['no-open'] ? false : undefined, help: Boolean(values.help), version: Boolean(values.version) }
+}
+
+// Opening the page hands over the launch link without copying it, so it is the
+// default. A session with no screen to open on only prints the link.
+export function autoOpen({ env = process.env, platform = process.platform, tty = process.stdout.isTTY } = {}) {
+  const set = (name) => Boolean(env[name]) && !['0', 'false'].includes(env[name].toLowerCase())
+  if (!tty || set('CI') || env.SSH_CONNECTION || env.SSH_CLIENT || env.SSH_TTY) return false
+  return ['darwin', 'win32'].includes(platform) || Boolean(env.DISPLAY || env.WAYLAND_DISPLAY)
 }
 
 const TYPES = {
@@ -104,8 +116,8 @@ function openBrowser(url, logger) {
   const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'rundll32' : 'xdg-open'
   const args = process.platform === 'win32' ? ['url.dll,FileProtocolHandler', url] : [url]
   const child = spawn(command, args, { stdio: 'ignore', detached: true })
-  child.once('error', (error) => logger.warn(`Could not open a browser: ${error.message}. Open ${url} manually.`))
-  child.once('exit', (code) => { if (code) logger.warn(`Browser opener exited with status ${code}. Open ${url} manually.`) })
+  child.once('error', (error) => logger.warn(`Couldn’t open a browser (${error.message}). Open the link above.`))
+  child.once('exit', (code) => { if (code) logger.warn(`Couldn’t open a browser (exit ${code}). Open the link above.`) })
   child.unref()
 }
 
@@ -159,7 +171,11 @@ export async function startConsole(options = parseOptions([]), logger = console)
   // The link carries this launch's secret; it changes on every restart.
   const url = tokenUrl(host, port, token)
   logger.info(`OpenRod console (open this link): ${url}`)
-  if (options.open) openBrowser(url, logger)
+  if (options.open) {
+    // A fresh console first connects to its local gateway, so the page opens on it.
+    await Promise.race([api.ready?.(), new Promise((resolve) => setTimeout(resolve, 5000).unref())])
+    openBrowser(tokenUrl(host, port, api.launchCode?.() ?? token), logger)
+  }
   return { server, url, close }
 }
 
@@ -169,7 +185,12 @@ async function main() {
   if (options.version) { console.log(JSON.parse(await fs.readFile(new URL('../package.json', import.meta.url), 'utf8')).version); return }
   if (!nodeSupported()) throw new Error(`OpenRod needs Node.js 22.13 or newer, and this is ${process.versions.node}. Install a current release from https://nodejs.org, then run it again.`)
   quietSqliteWarning()
-  const runtime = await startConsole(options)
+  // Before the console starts, so the browser opens on a usable local gateway.
+  try {
+    const { offerOpenShellInstall } = await import('./openshell-install.js')
+    if (await offerOpenShellInstall() === 'cancelled') { process.exitCode = 130; return }
+  } catch (error) { console.warn(`Could not check for OpenShell: ${error.message}`) }
+  const runtime = await startConsole({ ...options, open: options.open ?? autoOpen() })
   let stopping = false
   const shutdown = () => {
     if (stopping) return