remote-codex 0.11.31 → 0.11.32

package/packages/shared/src/index.ts

@@ -1,6 +1,4 @@
-import type {
-  AgentBackendIdDto,
-} from './agent-providers';
+import type { AgentBackendIdDto } from './agent-providers';
 
 export {
   agentBackendIds,
@@ -110,6 +108,9 @@ export interface RelayDeviceDto {
   connectedAt: string | null;
   lastHeartbeatAt: string | null;
   createdAt: string;
+  hostedStatus?: RelayHostedSandboxStatusDto | null;
+  hostedActiveTurnCount?: number;
+  hostedIdleDeadlineAt?: string | null;
 }
 
 export interface RelayAdminUserDto extends RelayUserDto {
@@ -145,6 +146,12 @@ export interface RelayRegistrationSettingsDto {
   enabled: boolean;
   registrationPassword: string | null;
   approvalRequired: boolean;
+  googleAuthEnabled: boolean;
+  githubAuthEnabled: boolean;
+  emailVerificationEnabled: boolean;
+  googleAuthAvailable: boolean;
+  githubAuthAvailable: boolean;
+  emailVerificationAvailable: boolean;
 }
 
 export interface RelayPendingRegistrationDto {
@@ -152,6 +159,7 @@ export interface RelayPendingRegistrationDto {
   email: string;
   username: string;
   createdAt: string;
+  provider?: 'password' | 'google' | 'github';
 }
 
 export type RelayThreadAccessDto = 'read' | 'control';
@@ -297,6 +305,7 @@ export interface RelaySessionDto {
   authenticated: boolean;
   user: RelayUserDto | null;
   registrationEnabled: boolean;
+  registrationSettings?: RelayRegistrationSettingsDto;
 }
 
 export interface RelayLoginResultDto {
@@ -337,6 +346,153 @@ export interface RelayAdminSummaryDto {
   registrationEnabled: boolean;
 }
 
+export type RelayHostedSandboxProviderDto = 'disabled' | 'incus';
+
+export interface RelayHostedSandboxCapabilityDto {
+  provider: RelayHostedSandboxProviderDto;
+  configured: boolean;
+  reachable: boolean;
+  available: boolean;
+  reasonCode: string | null;
+  reason: string | null;
+  checkedAt: string;
+  limits?: {
+    maxInstances: number;
+    maxRunningInstances: number;
+  };
+  capacity?: {
+    totalInstances: number;
+    runningInstances: number;
+  };
+  metrics?: {
+    cpuCount: number;
+    load1: number;
+    loadPerCpu: number;
+    memoryTotalMiB: number;
+    memoryAvailableMiB: number;
+    diskTotalGiB: number;
+    diskAvailableGiB: number;
+    monitorPath: string;
+  };
+  alerts?: Array<{
+    code: 'host_memory_low' | 'host_disk_low' | 'host_load_high';
+    severity: 'warning';
+    message: string;
+  }>;
+}
+
+export type RelayHostedSandboxStatusDto =
+  | 'requested'
+  | 'creating'
+  | 'starting'
+  | 'provisioning'
+  | 'stopped'
+  | 'online'
+  | 'stopping'
+  | 'error'
+  | 'deleting';
+
+export type RelayHostedSandboxOperationActionDto =
+  | 'create'
+  | 'start'
+  | 'stop'
+  | 'snapshot'
+  | 'delete'
+  | 'rotate_credential';
+
+export type RelayHostedSandboxOperationStatusDto =
+  | 'pending'
+  | 'running'
+  | 'succeeded'
+  | 'failed';
+
+export interface RelayHostedSandboxResourcesDto {
+  cpuCount: number;
+  memoryMiB: number;
+  diskGiB: number;
+}
+
+export interface RelayHostedCodexConfigDto {
+  modelProvider: string;
+  model: string;
+  reviewModel: string;
+  reasoningEffort: 'low' | 'medium' | 'high' | 'xhigh';
+  baseUrl: string;
+  wireApi: 'responses';
+  requiresOpenaiAuth: boolean;
+  disableResponseStorage: boolean;
+  networkAccess: 'enabled' | 'disabled';
+  goals: boolean;
+}
+
+export interface RelayHostedSandboxMemberDto {
+  userId: string;
+  username: string;
+  email: string;
+}
+
+export interface RelayHostedCodexFilesDto {
+  configToml: string;
+  authJson: string;
+}
+
+export interface RelayHostedSandboxDto {
+  id: string;
+  deviceId: string;
+  deviceName: string;
+  assignedUserId: string;
+  assignedUsername: string;
+  assignedUsers: RelayHostedSandboxMemberDto[];
+  workspaceIsolationEnabled: boolean;
+  createdByAdminUserId: string;
+  provider: 'incus';
+  providerInstanceId: string | null;
+  imageVersion: string;
+  resources: RelayHostedSandboxResourcesDto;
+  status: RelayHostedSandboxStatusDto;
+  lastErrorCode: string | null;
+  lastErrorMessage: string | null;
+  activeTurnCount: number;
+  lastUserActivityAt: string | null;
+  idleDeadlineAt: string | null;
+  runningSince: string | null;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface RelayHostedSandboxOperationDto {
+  id: string;
+  sandboxId: string;
+  action: RelayHostedSandboxOperationActionDto;
+  status: RelayHostedSandboxOperationStatusDto;
+  errorCode: string | null;
+  errorMessage: string | null;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface RelayHostedSandboxDetailDto extends RelayHostedSandboxDto {
+  operations: RelayHostedSandboxOperationDto[];
+}
+
+export interface RelayHostedSandboxReconciliationDto {
+  status: 'never_run' | 'healthy' | 'issues' | 'unavailable';
+  checkedAt: string | null;
+  errorCode: string | null;
+  missingInstanceSandboxIds: string[];
+  missingCredentialSandboxIds: string[];
+  orphanInstances: Array<{
+    id: string;
+    status: string;
+    snapshots: string[];
+  }>;
+  orphanCredentials: Array<{
+    credentialRef: string;
+    createdAt: string;
+  }>;
+  orphanSnapshotCount: number;
+}
+
 export type RelaySupervisorEnvelope =
   | {
       type: 'relay.connected';
@@ -348,6 +504,16 @@ export type RelaySupervisorEnvelope =
       timestamp: string;
       deviceId?: string;
     }
+  | {
+      type: 'relay.activity';
+      timestamp: string;
+      deviceId?: string;
+      payload: {
+        kind: 'turn_started' | 'turn_terminal';
+        threadId: string;
+        turnId: string;
+      };
+    }
   | {
       type: 'relay.request';
       timestamp: string;
@@ -408,6 +574,22 @@ export interface AgentRuntimeStatusDto {
   restartCount: number;
 }
 
+export interface AgentSubscriptionUsageWindowDto {
+  id: string;
+  durationMinutes: number | null;
+  label: string;
+  usedPercent: number;
+  resetsAt: string | null;
+}
+
+export interface AgentSubscriptionUsageDto {
+  provider: 'codex' | 'claude';
+  authKind: 'subscription' | 'apiKey' | 'unknown';
+  observedAt: string;
+  stale: boolean;
+  windows: AgentSubscriptionUsageWindowDto[];
+}
+
 export interface AgentProviderCapabilitiesDto {
   sessions: {
     list: boolean;
@@ -535,6 +717,7 @@ export interface VersionDto {
 export interface HealthDto {
   status: 'ok';
   timestamp: string;
+  activeTurnCount: number;
 }
 
 export type ProviderHostFileNameDto = string;
@@ -596,7 +779,9 @@ export interface CreateWorkspaceFromGitInput {
   label?: string;
 }
 
-export type CreateWorkspaceInput = CreateWorkspaceFromPathInput | CreateWorkspaceFromGitInput;
+export type CreateWorkspaceInput =
+  | CreateWorkspaceFromPathInput
+  | CreateWorkspaceFromGitInput;
 
 export interface WorkspaceSettingsDto {
   workspaceRoot: string;
@@ -705,7 +890,10 @@ export type ReasoningEffortDto =
   | 'max'
   | 'ultra';
 export type CollaborationModeDto = 'default' | 'plan';
-export type SandboxModeDto = 'read-only' | 'workspace-write' | 'danger-full-access';
+export type SandboxModeDto =
+  | 'read-only'
+  | 'workspace-write'
+  | 'danger-full-access';
 
 export interface ReasoningEffortOptionDto {
   reasoningEffort: ReasoningEffortDto;
@@ -1053,7 +1241,11 @@ export type AgentHookSourceDto =
   | 'legacyManagedConfigFile'
   | 'legacyManagedConfigMdm'
   | 'unknown';
-export type AgentHookTrustStatusDto = 'managed' | 'untrusted' | 'trusted' | 'modified';
+export type AgentHookTrustStatusDto =
+  | 'managed'
+  | 'untrusted'
+  | 'trusted'
+  | 'modified';
 
 export interface AgentHookDto {
   key: string;
@@ -1156,6 +1348,7 @@ export interface ThreadPendingSteerDto {
   clientRequestId: string | null;
   turnId: string;
   prompt: string;
+  delivery: 'steer' | 'continuation';
   createdAt: string;
 }
 

package/scripts/run-web-service.mjs

@@ -13,9 +13,9 @@ const sourceCheckout =
 const defaultServicePort = sourceCheckout ? 4173 : 45673;
 const defaultApiPort = sourceCheckout ? 8787 : 45674;
 
-const serviceHost = process.env.SERVICE_HOST ?? '127.0.0.1';
+const serviceHost = process.env.SERVICE_HOST ?? '0.0.0.0';
 const servicePort = parsePort(process.env.SERVICE_PORT, defaultServicePort);
-const apiHost = process.env.SERVICE_API_HOST ?? '127.0.0.1';
+const apiHost = process.env.SERVICE_API_HOST ?? '0.0.0.0';
 const apiPort = parsePort(process.env.SERVICE_API_PORT, defaultApiPort);
 const distDir = path.resolve(
   process.env.SERVICE_WEB_DIST_DIR ?? path.join(repoRoot, 'apps/supervisor-web/dist')

package/scripts/service-manager.mjs

@@ -23,9 +23,9 @@ const webIndex = path.join(repoRoot, 'apps', 'supervisor-web', 'dist', 'index.ht
 const defaultServicePort = supportsSourceRestart ? 4173 : 45673;
 const defaultApiPort = supportsSourceRestart ? 8787 : 45674;
 
-const serviceHost = process.env.SERVICE_HOST ?? '127.0.0.1';
+const serviceHost = process.env.SERVICE_HOST ?? '0.0.0.0';
 const servicePort = parsePort(process.env.SERVICE_PORT, defaultServicePort);
-const apiHost = process.env.SERVICE_API_HOST ?? '127.0.0.1';
+const apiHost = process.env.SERVICE_API_HOST ?? '0.0.0.0';
 const apiPort = parsePort(process.env.SERVICE_API_PORT, defaultApiPort);
 
 const command = process.argv[2];