remote-codex 0.11.8 → 0.11.9

package/apps/supervisor-web/dist/assets/xml-sdJ4AIDG.js

@@ -0,0 +1 @@
+import e from"./java-CylS5w8V.js";const n=Object.freeze(JSON.parse(`{"displayName":"XML","name":"xml","patterns":[{"begin":"(<\\\\?)\\\\s*([-0-9A-Z_a-z]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"}},"end":"(\\\\?>)","name":"meta.tag.preprocessor.xml","patterns":[{"match":" ([-A-Za-z]+)","name":"entity.other.attribute-name.xml"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"begin":"(<!)(DOCTYPE)\\\\s+([:A-Z_a-z][-.0-:A-Z_a-z]*)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.doctype.xml"},"3":{"name":"variable.language.documentroot.xml"}},"end":"\\\\s*(>)","name":"meta.tag.sgml.doctype.xml","patterns":[{"include":"#internalSubset"}]},{"include":"#comments"},{"begin":"(<)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(?=(\\\\s[^>]*)?></\\\\2>)","beginCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"},"3":{"name":"entity.name.tag.namespace.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)(</)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(>)","endCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"punctuation.definition.tag.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"entity.name.tag.namespace.xml"},"5":{"name":"punctuation.separator.namespace.xml"},"6":{"name":"entity.name.tag.localname.xml"},"7":{"name":"punctuation.definition.tag.xml"}},"name":"meta.tag.no-content.xml","patterns":[{"include":"#tagStuff"}]},{"begin":"(</?)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(/?>)","name":"meta.tag.xml","patterns":[{"include":"#tagStuff"}]},{"include":"#entity"},{"include":"#bare-ampersand"},{"begin":"<%@","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java-props.embedded.xml","patterns":[{"match":"page|include|taglib","name":"keyword.other.page-props.xml"}]},{"begin":"<%[!=]?(?!--)","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"(?!--)%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java.embedded.xml","patterns":[{"include":"source.java"}]},{"begin":"<!\\\\[CDATA\\\\[","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"]]>","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.unquoted.cdata.xml"}],"repository":{"EntityDecl":{"begin":"(<!)(ENTITY)\\\\s+(%\\\\s+)?([:A-Z_a-z][-.0-:A-Z_a-z]*)(\\\\s+(?:SYSTEM|PUBLIC)\\\\s+)?","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.entity.xml"},"3":{"name":"punctuation.definition.entity.xml"},"4":{"name":"variable.language.entity.xml"},"5":{"name":"keyword.other.entitytype.xml"}},"end":"(>)","patterns":[{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},"bare-ampersand":{"match":"&","name":"invalid.illegal.bad-ampersand.xml"},"comments":{"patterns":[{"begin":"<%--","captures":{"0":{"name":"punctuation.definition.comment.xml"},"end":"--%>","name":"comment.block.xml"}},{"begin":"<!--","captures":{"0":{"name":"punctuation.definition.comment.xml"}},"end":"-->","name":"comment.block.xml","patterns":[{"begin":"--(?!>)","captures":{"0":{"name":"invalid.illegal.bad-comments-or-CDATA.xml"}}}]}]},"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"entity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(&)([:A-Z_a-z][-.0-:A-Z_a-z]*|#[0-9]+|#x\\\\h+)(;)","name":"constant.character.entity.xml"},"internalSubset":{"begin":"(\\\\[)","captures":{"1":{"name":"punctuation.definition.constant.xml"}},"end":"(])","name":"meta.internalsubset.xml","patterns":[{"include":"#EntityDecl"},{"include":"#parameterEntity"},{"include":"#comments"}]},"parameterEntity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(%)([:A-Z_a-z][-.0-:A-Z_a-z]*)(;)","name":"constant.character.parameter-entity.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"tagStuff":{"patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":"(?:^|\\\\s+)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)\\\\s*="},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]}},"scopeName":"text.xml","embeddedLangs":["java"]}`)),a=[...e,n];export{a as default};

package/apps/supervisor-web/dist/assets/xsl-CtQFsRM5.js

@@ -0,0 +1 @@
+import e from"./xml-sdJ4AIDG.js";import"./java-CylS5w8V.js";const n=Object.freeze(JSON.parse(`{"displayName":"XSL","name":"xsl","patterns":[{"begin":"(<)(xsl)((:))(template)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)","name":"meta.tag.xml.template","patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":" (?:([-0-9A-Z_a-z]+)((:)))?([-A-Za-z]+)"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"include":"text.xml"}],"repository":{"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml"}},"scopeName":"text.xml.xsl","embeddedLangs":["xml"]}`)),m=[...e,n];export{m as default};

package/apps/supervisor-web/dist/assets/zenscript-DVFEvuxE.js

@@ -0,0 +1 @@
+const e=Object.freeze(JSON.parse(`{"displayName":"ZenScript","fileTypes":["zs"],"name":"zenscript","patterns":[{"match":"\\\\b((0([Xx])\\\\h*)|(([0-9]+\\\\.?[0-9]*)|(\\\\.[0-9]+))(([Ee])([-+])?[0-9]+)?)([DFLUdflu]|UL|ul)?\\\\b","name":"constant.numeric.zenscript"},{"match":"\\\\b-?(0[BOXbox])(0|[1-9A-Fa-f][_\\\\h]*)[A-Z_a-z]*\\\\b","name":"constant.numeric.zenscript"},{"include":"#code"},{"match":"\\\\b((?:[a-z]\\\\w*\\\\.)*[A-Z]+\\\\w*)(?=\\\\[)","name":"storage.type.object.array.zenscript"}],"repository":{"brackets":{"patterns":[{"captures":{"1":{"name":"keyword.control.zenscript"},"2":{"name":"keyword.other.zenscript"},"3":{"name":"keyword.control.zenscript"},"4":{"name":"variable.other.zenscript"},"5":{"name":"keyword.control.zenscript"},"6":{"name":"constant.numeric.zenscript"},"7":{"name":"keyword.control.zenscript"}},"match":"(<)\\\\b(.*?)(:(.*?(:(\\\\*|\\\\d+)?)?)?)(>)","name":"keyword.other.zenscript"}]},"class":{"captures":{"1":{"name":"storage.type.zenscript"},"2":{"name":"entity.name.type.class.zenscript"}},"match":"(zenClass)\\\\s+(\\\\w+)","name":"meta.class.zenscript"},"code":{"patterns":[{"include":"#class"},{"include":"#functions"},{"include":"#dots"},{"include":"#quotes"},{"include":"#brackets"},{"include":"#comments"},{"include":"#var"},{"include":"#keywords"},{"include":"#constants"},{"include":"#operators"}]},"comments":{"patterns":[{"match":"//[^\\\\n]*","name":"comment.line.double=slash"},{"begin":"/\\\\*","beginCaptures":{"0":{"name":"comment.block"}},"end":"\\\\*/","endCaptures":{"0":{"name":"comment.block"}},"name":"comment.block"}]},"dots":{"captures":{"1":{"name":"storage.type.zenscript"},"2":{"name":"keyword.control.zenscript"},"5":{"name":"keyword.control.zenscript"}},"match":"\\\\b(\\\\w+)(\\\\.)(\\\\w+)((\\\\.)(\\\\w+))*","name":"plain.text.zenscript"},"functions":{"captures":{"0":{"name":"storage.type.function.zenscript"},"1":{"name":"entity.name.function.zenscript"}},"match":"function\\\\s+([$A-Z_a-z][$\\\\w]*)\\\\s*(?=\\\\()","name":"meta.function.zenscript"},"keywords":{"patterns":[{"match":"\\\\b(instanceof|get|implements|set|import|function|override|const|if|else|do|while|for|throw|panic|lock|try|catch|finally|return|break|continue|switch|case|default|in|is|as|match|throws|super|new)\\\\b","name":"keyword.control.zenscript"},{"match":"\\\\b(zenClass|zenConstructor|alias|class|interface|enum|struct|expand|variant|set|void|bool|byte|sbyte|short|ushort|int|uint|long|ulong|usize|float|double|char|string)\\\\b","name":"storage.type.zenscript"},{"match":"\\\\b(variant|abstract|final|private|public|export|internal|static|protected|implicit|virtual|extern|immutable)\\\\b","name":"storage.modifier.zenscript"},{"match":"\\\\b(Native|Precondition)\\\\b","name":"entity.other.attribute-name"},{"match":"\\\\b(null|true|false)\\\\b","name":"constant.language"}]},"operators":{"patterns":[{"match":"\\\\b(\\\\.\\\\.??|\\\\.\\\\.\\\\.|[+,]|\\\\+=|\\\\+\\\\+|-=??|--|~=??|\\\\*=??|/=??|%=??|\\\\|=??|\\\\|\\\\||&=??|&&|\\\\^=??|\\\\?\\\\.??|\\\\?\\\\?|<=??|<<=??|>=??|>>=??|>>>=??|=>?|===??|!=??|!==|[$\`])\\\\b","name":"keyword.control"},{"match":"\\\\b([:;])\\\\b","name":"keyword.control"}]},"quotes":{"patterns":[{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.zenscript"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.zenscript"}},"name":"string.quoted.double.zenscript","patterns":[{"match":"\\\\\\\\.","name":"constant.character.escape.zenscript"}]},{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.zenscript"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.zenscript"}},"name":"string.quoted.single.zenscript","patterns":[{"match":"\\\\\\\\.","name":"constant.character.escape.zenscript"}]}]},"var":{"match":"\\\\b(va[lr])\\\\b","name":"storage.type"}},"scopeName":"source.zenscript"}`)),t=[e];export{t as default};

package/apps/supervisor-web/dist/assets/zig-VOosw3JB.js

@@ -0,0 +1 @@
+const e=Object.freeze(JSON.parse(`{"displayName":"Zig","fileTypes":["zig","zon"],"name":"zig","patterns":[{"include":"#comments"},{"include":"#strings"},{"include":"#keywords"},{"include":"#operators"},{"include":"#punctuation"},{"include":"#numbers"},{"include":"#support"},{"include":"#variables"}],"repository":{"commentContents":{"patterns":[{"match":"\\\\b(TODO|FIXME|XXX|NOTE)\\\\b:?","name":"keyword.todo.zig"}]},"comments":{"patterns":[{"begin":"//[!/](?=[^/])","end":"$","name":"comment.line.documentation.zig","patterns":[{"include":"#commentContents"}]},{"begin":"//","end":"$","name":"comment.line.double-slash.zig","patterns":[{"include":"#commentContents"}]}]},"keywords":{"patterns":[{"match":"\\\\binline\\\\b(?!\\\\s*\\\\bfn\\\\b)","name":"keyword.control.repeat.zig"},{"match":"\\\\b(while|for)\\\\b","name":"keyword.control.repeat.zig"},{"match":"\\\\b(extern|packed|export|pub|noalias|inline|comptime|volatile|align|linksection|threadlocal|allowzero|noinline|callconv)\\\\b","name":"keyword.storage.zig"},{"match":"\\\\b(struct|enum|union|opaque)\\\\b","name":"keyword.structure.zig"},{"match":"\\\\b(asm|unreachable)\\\\b","name":"keyword.statement.zig"},{"match":"\\\\b(break|return|continue|defer|errdefer)\\\\b","name":"keyword.control.flow.zig"},{"match":"\\\\b(resume|suspend|nosuspend)\\\\b","name":"keyword.control.async.zig"},{"match":"\\\\b(try|catch)\\\\b","name":"keyword.control.trycatch.zig"},{"match":"\\\\b(if|else|switch|orelse)\\\\b","name":"keyword.control.conditional.zig"},{"match":"\\\\b(null|undefined)\\\\b","name":"keyword.constant.default.zig"},{"match":"\\\\b(true|false)\\\\b","name":"keyword.constant.bool.zig"},{"match":"\\\\b(test|and|or)\\\\b","name":"keyword.default.zig"},{"match":"\\\\b(bool|void|noreturn|type|error|anyerror|anyframe|anytype|anyopaque)\\\\b","name":"keyword.type.zig"},{"match":"\\\\b(f16|f32|f64|f80|f128|u\\\\d+|i\\\\d+|isize|usize|comptime_int|comptime_float)\\\\b","name":"keyword.type.integer.zig"},{"match":"\\\\b(c_(?:char|short|ushort|int|uint|long|ulong|longlong|ulonglong|longdouble))\\\\b","name":"keyword.type.c.zig"}]},"numbers":{"patterns":[{"match":"\\\\b0x\\\\h[_\\\\h]*(\\\\.\\\\h[_\\\\h]*)?([Pp][-+]?[_\\\\h]+)?\\\\b","name":"constant.numeric.hexfloat.zig"},{"match":"\\\\b[0-9][0-9_]*(\\\\.[0-9][0-9_]*)?([Ee][-+]?[0-9_]+)?\\\\b","name":"constant.numeric.float.zig"},{"match":"\\\\b[0-9][0-9_]*\\\\b","name":"constant.numeric.decimal.zig"},{"match":"\\\\b0x[_\\\\h]+\\\\b","name":"constant.numeric.hexadecimal.zig"},{"match":"\\\\b0o[0-7_]+\\\\b","name":"constant.numeric.octal.zig"},{"match":"\\\\b0b[01_]+\\\\b","name":"constant.numeric.binary.zig"},{"match":"\\\\b[0-9](([EPep][-+])|[0-9A-Z_a-z])*(\\\\.(([EPep][-+])|[0-9A-Z_a-z])*)?([EPep][-+])?[0-9A-Z_a-z]*\\\\b","name":"constant.numeric.invalid.zig"}]},"operators":{"patterns":[{"match":"(?<=\\\\[)\\\\*c(?=])","name":"keyword.operator.c-pointer.zig"},{"match":"\\\\b((and|or))\\\\b|(==|!=|<=|>=|[<>])","name":"keyword.operator.comparison.zig"},{"match":"(-%?|\\\\+%?|\\\\*%?|[%/])=?","name":"keyword.operator.arithmetic.zig"},{"match":"(<<%?|>>|[!\\\\&^|~])=?","name":"keyword.operator.bitwise.zig"},{"match":"(==|\\\\+\\\\+|\\\\*\\\\*|->)","name":"keyword.operator.special.zig"},{"match":"=","name":"keyword.operator.assignment.zig"},{"match":"\\\\?","name":"keyword.operator.question.zig"}]},"punctuation":{"patterns":[{"match":"\\\\.","name":"punctuation.accessor.zig"},{"match":",","name":"punctuation.comma.zig"},{"match":":","name":"punctuation.separator.key-value.zig"},{"match":";","name":"punctuation.terminator.statement.zig"}]},"stringcontent":{"patterns":[{"match":"\\\\\\\\([\\"'\\\\\\\\nrt]|(x\\\\h{2})|(u\\\\{\\\\h+}))","name":"constant.character.escape.zig"},{"match":"\\\\\\\\.","name":"invalid.illegal.unrecognized-string-escape.zig"}]},"strings":{"patterns":[{"begin":"\\"","end":"\\"","name":"string.quoted.double.zig","patterns":[{"include":"#stringcontent"}]},{"begin":"\\\\\\\\\\\\\\\\","end":"$","name":"string.multiline.zig"},{"match":"'([^'\\\\\\\\]|\\\\\\\\(x\\\\h{2}|[012][0-7]{0,2}|3[0-6][0-7]?|37[0-7]?|[4-7][0-7]?|.))'","name":"string.quoted.single.zig"}]},"support":{"patterns":[{"match":"@[A-Z_a-z][0-9A-Z_a-z]*","name":"support.function.builtin.zig"}]},"variables":{"patterns":[{"name":"meta.function.declaration.zig","patterns":[{"captures":{"1":{"name":"storage.type.function.zig"},"2":{"name":"entity.name.type.zig"}},"match":"\\\\b(fn)\\\\s+([A-Z][0-9A-Za-z]*)\\\\b"},{"captures":{"1":{"name":"storage.type.function.zig"},"2":{"name":"entity.name.function.zig"}},"match":"\\\\b(fn)\\\\s+([A-Z_a-z][0-9A-Z_a-z]*)\\\\b"},{"begin":"\\\\b(fn)\\\\s+@\\"","beginCaptures":{"1":{"name":"storage.type.function.zig"}},"end":"\\"","name":"entity.name.function.string.zig","patterns":[{"include":"#stringcontent"}]},{"match":"\\\\b(const|var|fn)\\\\b","name":"keyword.default.zig"}]},{"name":"meta.function.call.zig","patterns":[{"match":"([A-Z][0-9A-Za-z]*)(?=\\\\s*\\\\()","name":"entity.name.type.zig"},{"match":"([A-Z_a-z][0-9A-Z_a-z]*)(?=\\\\s*\\\\()","name":"entity.name.function.zig"}]},{"name":"meta.variable.zig","patterns":[{"match":"\\\\b[A-Z_a-z][0-9A-Z_a-z]*\\\\b","name":"variable.zig"},{"begin":"@\\"","end":"\\"","name":"variable.string.zig","patterns":[{"include":"#stringcontent"}]}]}]}},"scopeName":"source.zig"}`)),n=[e];export{n as default};

package/apps/supervisor-web/dist/index.html

@@ -4,16 +4,15 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Remote Codex Supervisor</title>
-    <script type="module" crossorigin src="/assets/index-CXq73NcP.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/react-vendor-o1Xrx7m4.js">
-    <link rel="modulepreload" crossorigin href="/assets/ui-vendor-D1uxdi-d.js">
-    <link rel="modulepreload" crossorigin href="/assets/graph-vendor-CGzY-MFv.js">
-    <link rel="modulepreload" crossorigin href="/assets/terminal-vendor-CLGgN91S.js">
-    <link rel="modulepreload" crossorigin href="/assets/markdown-vendor-hBDTCSB-.js">
-    <link rel="modulepreload" crossorigin href="/assets/thread-ui-ICfwCbte.js">
-    <link rel="stylesheet" crossorigin href="/assets/graph-vendor-C5ap-Sga.css">
+    <script type="module" crossorigin src="/assets/index-APXuQABa.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/react-vendor-5VdTO_Bg.js">
+    <link rel="modulepreload" crossorigin href="/assets/ui-vendor-xVD8_rhm.js">
+    <link rel="modulepreload" crossorigin href="/assets/markdown-vendor-C22AWDSP.js">
+    <link rel="modulepreload" crossorigin href="/assets/terminal-vendor-BHwWZ4Dd.js">
+    <link rel="modulepreload" crossorigin href="/assets/thread-ui-LDojdlO_.js">
     <link rel="stylesheet" crossorigin href="/assets/terminal-vendor-Beg8tuEN.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-Di1JBevU.css">
+    <link rel="stylesheet" crossorigin href="/assets/thread-ui-BEieA99i.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-Dh2-KXLR.css">
   </head>
   <body class="bg-stone-950">
     <div id="root"></div>

package/bin/remote-codex.mjs

@@ -2,6 +2,9 @@
 
 import fs from 'node:fs';
 import path from 'node:path';
+import os from 'node:os';
+import crypto from 'node:crypto';
+import readline from 'node:readline/promises';
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 
@@ -13,6 +16,9 @@ const relayDistEntry = path.join(packageRoot, 'apps', 'relay-server', 'dist', 'i
 const relaySourceEntry = path.join(packageRoot, 'apps', 'relay-server', 'src', 'index.ts');
 const supervisorDistEntry = path.join(packageRoot, 'apps', 'supervisor-api', 'dist', 'index.js');
 const supervisorSourceEntry = path.join(packageRoot, 'apps', 'supervisor-api', 'src', 'index.ts');
+const relaySupervisorConfigPath = process.env.REMOTE_CODEX_RELAY_SUPERVISOR_CONFIG
+  ? path.resolve(process.env.REMOTE_CODEX_RELAY_SUPERVISOR_CONFIG)
+  : path.join(os.homedir(), '.remote-codex', 'relay-supervisor.json');
 const sourceCheckout =
   fs.existsSync(path.join(packageRoot, 'pnpm-workspace.yaml')) &&
   fs.existsSync(path.join(packageRoot, 'scripts', 'service-restart.mjs'));
@@ -50,7 +56,7 @@ if (command === 'version') {
 if (command === 'relay') {
   runRelayServer();
 } else if (command === 'relay-supervisor') {
-  runRelaySupervisor();
+  await runRelaySupervisor();
 } else if (!['start', 'stop', 'status'].includes(command)) {
   printHelp();
   process.exit(command ? 1 : 0);
@@ -88,8 +94,8 @@ function runRelayServer() {
       ['REMOTE_CODEX_RELAY_SESSION_SECRET', 'Relay session signing secret, at least 16 characters. Defaults to the admin password if omitted.'],
       ['REMOTE_CODEX_RELAY_DATA_DIR', 'Persistent relay user/device/share store. Defaults to .local/relay-server.'],
       ['REMOTE_CODEX_RELAY_REGISTRATION_ENABLED', 'true/false. Use false when only admins should create users.'],
-      ['HOST', 'Relay listen host. Use 0.0.0.0 on a public server. Default 0.0.0.0.'],
-      ['PORT', 'Relay listen port. Default 8788.'],
+      ['REMOTE_CODEX_RELAY_HOST', 'Relay listen host. Use 0.0.0.0 on a public server. Default 0.0.0.0. Falls back to HOST.'],
+      ['REMOTE_CODEX_RELAY_PORT', 'Relay listen port. Default 8788. Falls back to PORT.'],
     ],
     example: [
       'REMOTE_CODEX_ADMIN_USERNAME=admin \\',
@@ -97,9 +103,15 @@ function runRelayServer() {
       'REMOTE_CODEX_RELAY_SESSION_SECRET=at-least-16-characters \\',
       'REMOTE_CODEX_RELAY_DATA_DIR=/var/lib/remote-codex-relay \\',
       'REMOTE_CODEX_RELAY_REGISTRATION_ENABLED=false \\',
-      'HOST=0.0.0.0 PORT=8788 \\',
+      'REMOTE_CODEX_RELAY_HOST=0.0.0.0 REMOTE_CODEX_RELAY_PORT=8788 \\',
       'remote-codex relay',
     ],
+    effective: () => [
+      [
+        'Relay listen address',
+        `${envValue(['REMOTE_CODEX_RELAY_HOST', 'HOST'], '0.0.0.0')}:${envValue(['REMOTE_CODEX_RELAY_PORT', 'PORT'], '8788')}`,
+      ],
+    ],
     validate: () => {
       const issues = [];
       if (process.env.REMOTE_CODEX_ADMIN_PASSWORD && process.env.REMOTE_CODEX_ADMIN_PASSWORD.length < 8) {
@@ -150,7 +162,7 @@ function runRelayServer() {
     }
 
     if (code && code !== 0) {
-      console.error(`remote-codex relay exited with code ${code}. Check the relay port, HOST/PORT, and environment values above.`);
+      console.error(`remote-codex relay exited with code ${code}. Check REMOTE_CODEX_RELAY_HOST/REMOTE_CODEX_RELAY_PORT and environment values above.`);
     }
     process.exit(code ?? 1);
   });
@@ -161,32 +173,40 @@ function runRelayServer() {
   });
 }
 
-function runRelaySupervisor() {
+async function runRelaySupervisor() {
+  if (process.argv[3] === 'reset') {
+    resetRelaySupervisorConfig();
+    return;
+  }
+  await ensureRelaySupervisorConfig();
   const guidance = {
     commandName: 'remote-codex relay-supervisor',
     description: 'Run the private-machine supervisor backend that connects outward to a public relay.',
     required: [
-      ['REMOTE_CODEX_ADMIN_USERNAME', 'Private supervisor admin username. Required because relay mode enables local API auth.'],
-      ['REMOTE_CODEX_ADMIN_PASSWORD', 'Private supervisor admin password. Required because relay mode enables local API auth.'],
-      ['REMOTE_CODEX_SESSION_SECRET', 'Private supervisor session signing secret, at least 16 characters.'],
+      ['REMOTE_CODEX_ADMIN_USERNAME', 'Private supervisor admin username. Defaults to a saved local value.'],
+      ['REMOTE_CODEX_ADMIN_PASSWORD', 'Private supervisor admin password. Defaults to a saved generated value.'],
+      ['REMOTE_CODEX_SESSION_SECRET', 'Private supervisor session signing secret. Defaults to a saved generated value.'],
       ['REMOTE_CODEX_RELAY_SERVER_URL', 'Public relay websocket base URL, for example ws://host:8788 or wss://relay.example.com.'],
       ['REMOTE_CODEX_RELAY_AGENT_TOKEN', 'Device token created in the relay portal. This is not the relay admin password.'],
     ],
     recommended: [
-      ['HOST', 'Private supervisor listen host. Default 127.0.0.1.'],
-      ['PORT', 'Private supervisor listen port. Default 8787.'],
+      ['REMOTE_CODEX_RELAY_SUPERVISOR_HOST', 'Private supervisor listen host. Default 127.0.0.1. Falls back to HOST.'],
+      ['REMOTE_CODEX_RELAY_SUPERVISOR_PORT', 'Private supervisor listen port. Default 8787. Falls back to PORT.'],
       ['DATABASE_URL', 'SQLite database path. Set this when running a separate backend beside another Remote Codex.'],
       ['WORKSPACE_ROOT', 'Root directory that workspace paths must live under. Default is your home directory.'],
       ['CODEX_HOME', 'Codex config directory. Default ~/.codex.'],
     ],
     example: [
-      'REMOTE_CODEX_ADMIN_USERNAME=admin \\',
-      'REMOTE_CODEX_ADMIN_PASSWORD=change-me-locally \\',
-      'REMOTE_CODEX_SESSION_SECRET=at-least-16-characters \\',
-      'REMOTE_CODEX_RELAY_SERVER_URL=wss://relay.example.com \\',
-      'REMOTE_CODEX_RELAY_AGENT_TOKEN=rcd_device_token_from_relay_portal \\',
-      'HOST=127.0.0.1 PORT=8787 \\',
       'remote-codex relay-supervisor',
+      '# or reset saved interactive configuration:',
+      'remote-codex relay-supervisor reset',
+    ],
+    effective: () => [
+      [
+        'Private supervisor listen address',
+        `${envValue(['REMOTE_CODEX_RELAY_SUPERVISOR_HOST', 'HOST'], '127.0.0.1')}:${envValue(['REMOTE_CODEX_RELAY_SUPERVISOR_PORT', 'PORT'], '8787')}`,
+      ],
+      ['Relay server URL', envValue(['REMOTE_CODEX_RELAY_SERVER_URL'], 'missing')],
     ],
     validate: () => {
       const issues = [];
@@ -247,7 +267,7 @@ function runRelaySupervisor() {
     }
 
     if (code && code !== 0) {
-      console.error(`remote-codex relay-supervisor exited with code ${code}. Check the relay server URL, device token, local PORT, and environment values above.`);
+      console.error(`remote-codex relay-supervisor exited with code ${code}. Check the relay server URL, device token, local REMOTE_CODEX_RELAY_SUPERVISOR_PORT, and environment values above.`);
     }
     process.exit(code ?? 1);
   });
@@ -258,6 +278,114 @@ function runRelaySupervisor() {
   });
 }
 
+async function ensureRelaySupervisorConfig() {
+  const existing = readRelaySupervisorConfig();
+  const generated = {
+    REMOTE_CODEX_ADMIN_USERNAME: 'admin',
+    REMOTE_CODEX_ADMIN_PASSWORD: randomSecret(24),
+    REMOTE_CODEX_SESSION_SECRET: randomSecret(32),
+    DATABASE_URL: path.join(os.homedir(), '.remote-codex', 'relay-supervisor.sqlite'),
+  };
+  const config = { ...generated, ...existing };
+  for (const [name, value] of Object.entries(config)) {
+    if (!nonEmptyEnv(name) && typeof value === 'string' && value.trim().length > 0) {
+      process.env[name] = value;
+    }
+  }
+
+  const needsRelayUrl = !nonEmptyEnv('REMOTE_CODEX_RELAY_SERVER_URL');
+  const needsAgentToken = !nonEmptyEnv('REMOTE_CODEX_RELAY_AGENT_TOKEN');
+  if (!needsRelayUrl && !needsAgentToken) {
+    return;
+  }
+  if (!process.stdin.isTTY || !process.stderr.isTTY) {
+    return;
+  }
+
+  console.error('remote-codex relay-supervisor needs relay connection details.');
+  console.error(`Answers will be saved to ${relaySupervisorConfigPath}.`);
+  const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    if (needsRelayUrl) {
+      process.env.REMOTE_CODEX_RELAY_SERVER_URL = await promptRelaySupervisorValue(
+        rl,
+        'Relay websocket URL (ws:// or wss://): ',
+        (value) => value.startsWith('ws://') || value.startsWith('wss://'),
+        'Relay websocket URL must start with ws:// or wss://.',
+      );
+    }
+    if (needsAgentToken) {
+      process.env.REMOTE_CODEX_RELAY_AGENT_TOKEN = await promptRelaySupervisorValue(
+        rl,
+        'Relay device token: ',
+        (value) => value.length > 0,
+        'Relay device token must not be empty.',
+      );
+    }
+  } finally {
+    rl.close();
+  }
+
+  writeRelaySupervisorConfig({
+    ...config,
+    REMOTE_CODEX_RELAY_SERVER_URL: process.env.REMOTE_CODEX_RELAY_SERVER_URL,
+    REMOTE_CODEX_RELAY_AGENT_TOKEN: process.env.REMOTE_CODEX_RELAY_AGENT_TOKEN,
+    REMOTE_CODEX_ADMIN_USERNAME: process.env.REMOTE_CODEX_ADMIN_USERNAME,
+    REMOTE_CODEX_ADMIN_PASSWORD: process.env.REMOTE_CODEX_ADMIN_PASSWORD,
+    REMOTE_CODEX_SESSION_SECRET: process.env.REMOTE_CODEX_SESSION_SECRET,
+    DATABASE_URL: process.env.DATABASE_URL,
+  });
+}
+
+async function promptRelaySupervisorValue(rl, prompt, validate, invalidMessage) {
+  while (true) {
+    const value = (await rl.question(prompt)).trim();
+    if (validate(value)) {
+      return value;
+    }
+    console.error(invalidMessage);
+  }
+}
+
+function readRelaySupervisorConfig() {
+  try {
+    return JSON.parse(fs.readFileSync(relaySupervisorConfigPath, 'utf8'));
+  } catch (error) {
+    if (error?.code !== 'ENOENT') {
+      console.error(`Ignoring invalid relay-supervisor config at ${relaySupervisorConfigPath}: ${error.message}`);
+    }
+    return {};
+  }
+}
+
+function writeRelaySupervisorConfig(config) {
+  fs.mkdirSync(path.dirname(relaySupervisorConfigPath), { recursive: true });
+  fs.writeFileSync(relaySupervisorConfigPath, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
+  try {
+    fs.chmodSync(relaySupervisorConfigPath, 0o600);
+  } catch {
+    // Best-effort on filesystems that do not support chmod.
+  }
+}
+
+function resetRelaySupervisorConfig() {
+  try {
+    fs.unlinkSync(relaySupervisorConfigPath);
+    console.log(`Deleted relay-supervisor config: ${relaySupervisorConfigPath}`);
+  } catch (error) {
+    if (error?.code === 'ENOENT') {
+      console.log(`No relay-supervisor config found at ${relaySupervisorConfigPath}`);
+      return;
+    }
+    console.error(`Failed to delete relay-supervisor config: ${error.message}`);
+    process.exit(1);
+  }
+}
+
+function randomSecret(bytes) {
+  return crypto.randomBytes(bytes).toString('base64url');
+}
+
 function validateRequiredEnv(input) {
   const missing = input.required
     .map(([name]) => name)
@@ -306,31 +434,106 @@ function printEnvSummary(input) {
   console.error(`${input.commandName} configuration:`);
   console.error(input.description);
   console.error('');
+  const effective = input.effective?.() ?? [];
+  if (effective.length > 0) {
+    console.error('Effective values:');
+    for (const [label, value] of effective) {
+      console.error(`  ${label}: ${value}`);
+    }
+    console.error('');
+  }
   console.error('Required:');
   for (const [name, description] of input.required) {
-    console.error(`  ${name}: ${nonEmptyEnv(name) ? 'set' : 'missing'}`);
+    console.error(`  ${name}: ${envStatusLabel(name, 'missing')}`);
     console.error(`    ${description}`);
   }
   if (input.recommended.length > 0) {
     console.error('');
     console.error('Recommended / optional:');
     for (const [name, description] of input.recommended) {
-      console.error(`  ${name}: ${nonEmptyEnv(name) ? 'set' : 'default/unset'}`);
+      console.error(`  ${name}: ${envStatusLabel(name, 'unset')}`);
       console.error(`    ${description}`);
     }
   }
   console.error('');
 }
 
+function envStatusLabel(name, missingLabel) {
+  const directValue = cleanEnvValue(name);
+  if (directValue) {
+    return isSensitiveEnvName(name) ? 'set' : `set: ${directValue}`;
+  }
+
+  const fallback = envFallbackFor(name);
+  if (fallback) {
+    for (const fallbackName of fallback.names) {
+      const fallbackValue = cleanEnvValue(fallbackName);
+      if (fallbackValue) {
+        return isSensitiveEnvName(name) ? `fallback from ${fallbackName}` : `fallback from ${fallbackName}: ${fallbackValue}`;
+      }
+    }
+
+    if (fallback.defaultValue) {
+      return `default: ${fallback.defaultValue}`;
+    }
+  }
+
+  return missingLabel;
+}
+
+function envFallbackFor(name) {
+  switch (name) {
+    case 'REMOTE_CODEX_RELAY_DATA_DIR':
+      return { names: [], defaultValue: '.local/relay-server' };
+    case 'REMOTE_CODEX_RELAY_HOST':
+      return { names: ['HOST'], defaultValue: '0.0.0.0' };
+    case 'REMOTE_CODEX_RELAY_PORT':
+      return { names: ['PORT'], defaultValue: '8788' };
+    case 'REMOTE_CODEX_RELAY_SUPERVISOR_HOST':
+      return { names: ['HOST'], defaultValue: '127.0.0.1' };
+    case 'REMOTE_CODEX_RELAY_SUPERVISOR_PORT':
+      return { names: ['PORT'], defaultValue: '8787' };
+    case 'DATABASE_URL':
+      return { names: [], defaultValue: `sqlite://${path.join('.local', 'remote-codex-relay-supervisor.sqlite')}` };
+    case 'WORKSPACE_ROOT':
+      return { names: [], defaultValue: os.homedir() };
+    case 'CODEX_HOME':
+      return { names: [], defaultValue: path.join(os.homedir(), '.codex') };
+    default:
+      return null;
+  }
+}
+
+function cleanEnvValue(name) {
+  const value = process.env[name];
+  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null;
+}
+
+function isSensitiveEnvName(name) {
+  return /PASSWORD|SECRET|TOKEN/i.test(name);
+}
+
 function nonEmptyEnv(name) {
   return typeof process.env[name] === 'string' && process.env[name].trim().length > 0;
 }
 
+function envValue(names, defaultValue) {
+  for (const name of names) {
+    const value = process.env[name];
+    if (typeof value === 'string' && value.trim().length > 0) {
+      return value.trim();
+    }
+  }
+  return defaultValue;
+}
+
 function relayServerEnv() {
   const env = { ...process.env };
   for (const name of [
     'HOST',
     'PORT',
+    'REMOTE_CODEX_RELAY_HOST',
+    'REMOTE_CODEX_RELAY_PORT',
     'REMOTE_CODEX_RELAY_SUPERVISOR_TOKEN',
     'REMOTE_CODEX_RELAY_CLIENT_TOKEN',
     'REMOTE_CODEX_ADMIN_EMAIL',
@@ -555,10 +758,11 @@ Recommended environment:
     Persistent user/device/share store. Default .local/relay-server.
   REMOTE_CODEX_RELAY_REGISTRATION_ENABLED
     true/false. Default true. Use false when only admins should create users.
-  HOST
+  REMOTE_CODEX_RELAY_HOST
     Relay listen host. Default 0.0.0.0. Use 0.0.0.0 on a public server.
-  PORT
-    Relay listen port. Default 8788.
+    Falls back to HOST for legacy scripts.
+  REMOTE_CODEX_RELAY_PORT
+    Relay listen port. Default 8788. Falls back to PORT for legacy scripts.
   REMOTE_CODEX_ADMIN_EMAIL
     Optional seeded admin email. Defaults to <username>@relay.local.
   REMOTE_CODEX_RELAY_WEB_DIST_DIR
@@ -574,7 +778,7 @@ Example:
   REMOTE_CODEX_RELAY_SESSION_SECRET=at-least-16-characters \\
   REMOTE_CODEX_RELAY_DATA_DIR=/var/lib/remote-codex-relay \\
   REMOTE_CODEX_RELAY_REGISTRATION_ENABLED=false \\
-  HOST=0.0.0.0 PORT=8788 \\
+  REMOTE_CODEX_RELAY_HOST=0.0.0.0 REMOTE_CODEX_RELAY_PORT=8788 \\
   remote-codex relay
 
 After start:
@@ -602,28 +806,41 @@ public internet; it connects outward to a public relay server.
 
 Usage:
   remote-codex relay-supervisor
+  remote-codex relay-supervisor reset
 
 This command automatically sets for the child supervisor:
   REMOTE_CODEX_MODE=relay
 
-Required environment:
-  REMOTE_CODEX_ADMIN_USERNAME
-    Private supervisor admin username. Required because relay mode enables API auth.
-  REMOTE_CODEX_ADMIN_PASSWORD
-    Private supervisor admin password.
-  REMOTE_CODEX_SESSION_SECRET
-    Private supervisor session signing secret. Must be at least 16 characters.
+Interactive setup:
+  When REMOTE_CODEX_RELAY_SERVER_URL or REMOTE_CODEX_RELAY_AGENT_TOKEN is
+  missing and stdin is interactive, the command asks for those values and saves
+  them to:
+    ${relaySupervisorConfigPath}
+
+  The saved config also includes generated local supervisor auth/session values
+  so the normal first-run path only asks for relay URL and device token.
+
+  Use "remote-codex relay-supervisor reset" to delete the saved config.
+
+Environment overrides:
   REMOTE_CODEX_RELAY_SERVER_URL
     Public relay websocket base URL. Use ws://host:port for plain relay ports or
     wss://relay.example.com behind TLS.
   REMOTE_CODEX_RELAY_AGENT_TOKEN
     Device token created in the relay portal. This is not the relay admin password.
+  REMOTE_CODEX_ADMIN_USERNAME
+    Private supervisor admin username. Defaults to saved "admin".
+  REMOTE_CODEX_ADMIN_PASSWORD
+    Private supervisor admin password. Defaults to a saved generated value.
+  REMOTE_CODEX_SESSION_SECRET
+    Private supervisor session signing secret. Defaults to a saved generated value.
 
 Recommended environment:
-  HOST
+  REMOTE_CODEX_RELAY_SUPERVISOR_HOST
     Private supervisor listen host. Default 127.0.0.1.
-  PORT
-    Private supervisor listen port. Default 8787.
+    Falls back to HOST for legacy scripts.
+  REMOTE_CODEX_RELAY_SUPERVISOR_PORT
+    Private supervisor listen port. Default 8787. Falls back to PORT for legacy scripts.
   DATABASE_URL
     SQLite database path. Set this when running beside another Remote Codex.
   WORKSPACE_ROOT
@@ -636,18 +853,16 @@ Recommended environment:
     Comma-separated provider ids, for example codex,claude.
 
 Example:
-  REMOTE_CODEX_ADMIN_USERNAME=admin \\
-  REMOTE_CODEX_ADMIN_PASSWORD=change-me-locally \\
-  REMOTE_CODEX_SESSION_SECRET=at-least-16-characters \\
+  remote-codex relay-supervisor
+
+Non-interactive example:
   REMOTE_CODEX_RELAY_SERVER_URL=wss://relay.example.com \\
   REMOTE_CODEX_RELAY_AGENT_TOKEN=rcd_device_token_from_relay_portal \\
-  HOST=127.0.0.1 PORT=8787 \\
-  DATABASE_URL=$HOME/.remote-codex/relay-supervisor.sqlite \\
   remote-codex relay-supervisor
 
 When running a separate test backend beside an existing Remote Codex service,
 set separate values for:
-  PORT
+  REMOTE_CODEX_RELAY_SUPERVISOR_PORT
   DATABASE_URL
   WORKSPACE_ROOT
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "remote-codex",
-  "version": "0.11.8",
+  "version": "0.11.9",
   "description": "Local web supervisor for Codex workspaces and threads.",
   "license": "MIT",
   "type": "module",