relmio 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -7,6 +7,52 @@ checks the registry separately after publication.
 
 ## Unreleased
 
+## [0.5.0] - 2026-08-15
+
+### Added
+
+- Add a **Rotate client credential** action for installed local endpoints that
+  shows the replacement capability before activation and preserves the upstream
+  Platform key or Codex credential/workspace volumes.
+
+### Changed
+
+- Keep System, Light, and Dark appearance controls plus Ko-fi, GitHub stars, and
+  the current package version available throughout the local install wizard.
+
+### Fixed
+
+- Install operating-system CA certificates in the isolated Codex image so the
+  official ChatGPT device-code sign-in can establish its trusted TLS connection.
+- Wrap local safety and error notifications instead of clipping longer text.
+
+### Security
+
+- Verify the generated Codex capability with a strict authenticated WebSocket
+  upgrade before reporting installation or rotation success.
+- Serialize installation, sign-in, restart, and credential rotation across
+  Relmio processes, with attested stale-lock recovery and fail-closed rollback
+  that restores the prior verifier and re-attests endpoint readiness.
+
+## [0.4.1] - 2026-08-14
+
+### Changed
+
+- Add a manual **Stop sign-in** action while a fresh ChatGPT login is pending,
+  then detect and reject results from superseded wizard attempts.
+
+### Fixed
+
+- Terminate the OAuth helper process tree when sign-in is stopped or Relmio
+  exits, preventing a rejected or abandoned attempt from continuing to hold
+  the `localhost:1455` callback port.
+
+### Security
+
+- Fail closed when OAuth process cleanup or credential promotion cannot be
+  confirmed, blocking another login until Relmio restarts instead of risking
+  an ambiguous helper or credential state.
+
 ## [0.4.0] - 2026-08-13
 
 ### Added

package/README.md

@@ -78,6 +78,11 @@ the private VPS/n8n sidecar and the separate local Docker endpoint paths.
 > OAuth extension captures that callback, temporarily disable it during local sign-in,
 > complete the wizard sign-in, and then re-enable it.
 
+While a fresh local login is pending, **Stop sign-in** terminates the helper
+Relmio started before allowing another attempt. Results from older tabs are
+rejected after a replacement starts. If cleanup cannot be confirmed, retry
+remains disabled; close the wizard and OAuth helper, then restart Relmio.
+
 <figure>
   <img src="https://cdn.jsdelivr.net/npm/relmio@latest/docs/images/examples/hosted-chat-connected.png" alt="Relmio hosted chat showing a connected ChatGPT session and a ready prompt field" width="720">
   <figcaption>Successful hosted-chat state: the browser extension completed the OAuth handoff and Relmio shows the ChatGPT session as connected.</figcaption>
@@ -96,7 +101,8 @@ On desktop, the local wizard keeps progress and sidecar-only safety notes in a
 persistent rail beside the active task; its compact fixed-screen shell avoids
 document scrolling on common laptop screens. On narrow phones, it switches to
 a horizontal progress strip and keeps task scrolling inside the active panel.
-The hosted site keeps the live GitHub star/version control visible.
+Both the hosted site and local wizard keep Ko-fi support, GitHub stars, and the
+current Relmio version visible beside the appearance control.
 
 ## Local Docker endpoints
 
@@ -117,7 +123,15 @@ The OpenAI-compatible `/v1` endpoint is powered only by a Platform API key,
 which the wizard seeds over stdin into a private, labeled Docker volume; it
 does not create a host key file. Your app uses a
 separate Relmio capability that the wizard displays once.
-The bearer remains valid until it is rotated. Browser requests
+The bearer remains valid until it is rotated. After installation, use
+**Rotate client credential** on the Ready screen to replace only that local
+capability. Relmio shows the new one-time credential before activation, verifies
+the replacement endpoint, and preserves the upstream Platform API key or Codex
+credential/workspace volumes. If replacement cannot be verified, Relmio attempts
+to restore the previous verifier and re-attest service readiness. It does not
+retain the previous raw client credential to replay it during rollback. If
+rollback cannot be confirmed, it targets only the exact managed service for
+shutdown and reports whether that stopped state could be verified. Browser requests
 must come from an exact origin entered during setup; wildcards are not allowed,
 and the capability must never be embedded in a public frontend bundle. Platform
 requests use that API project's billing, credits, limits, and permissions, not

package/docs/local-endpoints.md

@@ -77,19 +77,28 @@ Engine.
 
 ## Safe updates and credential rotation
 
-Rerun the browser wizard, select the same target and port, and review the plan
-again. Relmio verifies the existing marker and Docker resource ownership,
-reuses that installation's unique Compose identity, replaces only that managed
-service, and generates a new local client capability. Copy the new capability
-from the one-time result and update the client; the previous capability no
-longer authenticates.
-
-For `openai-api`, every update requires the current Platform API key again. To
-rotate both credentials, supply the replacement Platform key during the update;
-Relmio atomically reseeds its private named volume and independently rotates the
-local client capability. For `codex-chatgpt`, an update retains the private
-Codex home and workspace volumes unless you explicitly delete them, but still
-rotates the local capability.
+To replace only the credential used by your local client, select **Rotate client
+credential** on the installed endpoint's Ready screen. Relmio first stages and
+shows the new one-time capability while the previous capability remains active.
+It then updates and validates the managed Compose configuration, recreates only
+the attested service, and verifies the new bearer against `/v1/models` or the
+authenticated Codex WebSocket handshake before reporting success.
+
+This client-only rotation preserves the upstream Platform API key in its private
+named volume and preserves the Codex home and workspace volumes. If activation
+or verification fails, Relmio restores the previous verifier and re-attests its
+health and loopback publication. Relmio does not retain the previous raw client
+credential, so rollback does not replay an authenticated request with it. If
+that rollback cannot be confirmed, Relmio attempts to stop only the exact
+managed service and reports whether the stopped state could be verified.
+
+Rerun the browser wizard with the same target and port when you need a complete
+managed update. Relmio verifies the marker and Docker resource ownership and
+reuses the installation's unique Compose identity. For `openai-api`, provide the
+current or replacement Platform API key during that full update; Relmio reseeds
+its private named volume independently from the local client capability. A full
+`codex-chatgpt` update retains the private Codex home and workspace volumes unless
+you explicitly delete them.
 
 Do not hand-edit the marker, Compose file, credential volume, or verifier. If
 the marker or resource labels do not attest as one Relmio installation, the

package/docs/troubleshooting.md

@@ -146,7 +146,7 @@ bypassed.
 | `ChatGPT sign-in did not finish` appears immediately when refreshing an existing credential | Wizard versions through `0.1.3` attempted to reuse `~/.codex/auth.json`, but the bridge CLI requires an interactive terminal before replacing that file. | Update to `0.1.4` or newer. The wizard signs in through its own new credential file and leaves the Codex app credential untouched. |
 | The wizard keeps showing `Waiting for browser sign-in` after approval | Older versions waited for the OAuth helper process to close even after its credential file was ready. | Update to `0.1.5` or newer. Confirm the new **Credential updated** time appears before continuing. |
 | **Credential updated** still shows the old time | The callback reached an old/expired tab, was intercepted, or a different wizard session is open. | Close every old OAuth and wizard tab. Keep one current wizard open, select **Refresh ChatGPT sign-in**, and complete only the newly opened page. |
-| The fresh login cannot bind `localhost:1455` or reports the address is in use | Another OAuth helper or extension process already owns the local callback port. | Close other OAuth login tools and stale wizard processes, then retry. On macOS/Linux, inspect without killing anything using `lsof -nP -iTCP:1455 -sTCP:LISTEN`. |
+| The fresh login cannot bind `localhost:1455` or reports the address is in use | Another OAuth helper or extension process already owns the local callback port. | In the active wizard, use **Stop sign-in** before starting another attempt. If retry remains disabled because cleanup could not be confirmed, close the wizard and OAuth helper, confirm the port is free, and restart Relmio. On macOS/Linux, inspect without killing anything using `lsof -nP -iTCP:1455 -sTCP:LISTEN`. |
 | `SSH connection failed. Check the address, password, firewall, and confirmed fingerprint.` | The TCP connection, password authentication, or confirmed host identity did not succeed. | Copy the full address and port from the provider, confirm root password login is enabled, check the provider firewall, rescan and compare the fingerprint, then test `ssh -p 22 root@YOUR_VPS_IP` from the same computer. |
 | The VPS accepts only an SSH key or passkey | The current wizard supports live password authentication, not SSH keys. | Use the manual installation path or a provider-approved password-authenticated administrator account. Do not weaken SSH security or upload a private key into the wizard. |
 | The SSH fingerprint changed | The server was rebuilt, its host keys changed, or the connection may be reaching a different host. | Stop. Verify the address and the new fingerprint through the VPS provider console before confirming it. Never bypass the comparison. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "relmio",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Install private local OpenAI API and Codex endpoints with explicit provider credential boundaries, plus the existing isolated n8n sidecar.",
   "keywords": [
     "relmio",

package/src/domain/local-endpoints.js

@@ -359,7 +359,10 @@ tool_suggest = false
 export function createCodexDockerfile() {
   return `FROM node:22-bookworm-slim
 
-RUN npm install --global --ignore-scripts @openai/codex@${CODEX_CLI_VERSION} \\
+RUN apt-get update \\
+    && apt-get install --no-install-recommends -y ca-certificates \\
+    && rm -rf /var/lib/apt/lists/* \\
+    && npm install --global --ignore-scripts @openai/codex@${CODEX_CLI_VERSION} \\
     && npm cache clean --force \\
     && mkdir -p /etc/codex /home/node/.codex /workspace \\
     && chown -R node:node /home/node/.codex /workspace