Launch readiness: CI, security policy, screenshots, Node guard, package metadata

CI on windows-latest (the only platform the safety properties have been verified on), SECURITY.md with private-reporting instructions and an honest scope, real UI screenshots embedded in the README (captured from the running app in headless Edge), a friendly Node>=22.5 check in the launcher instead of a node:sqlite stack trace, and public package metadata (coderelay, MIT, repository/bugs/keywords).

Author: Tayebbb

.github/workflows/ci.yml

@@ -0,0 +1,24 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  test:
+    # Windows only, deliberately: it is the platform every safety property has
+    # been verified on (cmd.exe quoting, CreateProcess CWD search, path
+    # semantics). A green Linux run would imply support this project has not
+    # earned yet.
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+      - run: npm ci
+      # lint (strict tsc) + build + 378 tests. Uses a mock agent CLI — no AI
+      # calls, no credits, no secrets required.
+      - run: npm test

README.md

@@ -14,6 +14,12 @@ Your personal remote coding agent. Send a coding task from your phone — your h
 - **Two ways in.** Telegram bot, an installable web app, or both — same tasks, same history, either one is optional.
 - **Built paranoid.** Your uncommitted work is snapshotted before every task, nothing is pushed without your approval, and secrets never leave the machine.
 
+<p align="center">
+  <img src="docs/assets/web-desktop-dark.png" alt="CodeRelay web interface, dark theme" width="72%" />
+  <img src="docs/assets/web-mobile-dark.png" alt="CodeRelay on a phone" width="20.5%" />
+</p>
+<p align="center"><sub>The web interface — desktop and phone. Light theme included. Every screenshot is the real app.</sub></p>
+
 ## Get started in five minutes
 
 On the PC that has your code (needs [Node 22.5+](https://nodejs.org), git, and a GitHub Copilot subscription):

SECURITY.md

@@ -0,0 +1,46 @@
+# Security Policy
+
+CodeRelay is an AI agent that runs unattended on a personal computer with the
+operator's own permissions. Security reports are taken seriously and handled
+with priority over feature work.
+
+## Reporting a vulnerability
+
+Please **do not** open a public issue for security problems. Instead, use
+GitHub's private reporting: **Security → Report a vulnerability** on this
+repository. Include what you found, how to reproduce it, and what an attacker
+gains.
+
+You can expect an acknowledgement within a few days. There is no bounty — this
+is a free, self-hosted personal tool — but real findings get fixed, credited,
+and added to the red-team regression suite so they stay fixed.
+
+## Scope — what counts
+
+The threat model treats the **target repository as hostile input** and the
+operator as trusted. In scope, roughly in order of severity:
+
+1. Escaping the deny-lists or the child-environment allow-list (e.g. reaching
+   the Telegram bot token or the operator's credentials from a task, a test
+   run, or repository content).
+2. Making the agent execute repository-supplied configuration (git hooks,
+   filter/diff drivers, planted binaries, agent-instruction files, MCP/LSP
+   config) despite the existing detections.
+3. Web interface: authentication bypass, CSRF, XSS via agent output or
+   repository content, path traversal, session weaknesses, the service worker
+   caching anything from `/api/`.
+4. Destroying the operator's uncommitted work, or bypassing an approval gate
+   (protected branch, push, dirty tree, manifest tamper).
+5. Unbounded spend: defeating the credit budgets or the unreported-usage guard.
+
+Out of scope: attacks requiring an already-compromised operator account or
+machine, the inherent fact that running a project's tests executes that
+project's code (documented as a known limitation), and denial-of-service
+against your own instance.
+
+## What already exists
+
+The design assumptions and verified attack history are documented in
+[project-analysis.md](project-analysis.md) §7, and every previously working
+exploit has a regression test in `tests/redteam.test.ts`. Reading those two
+first will tell you what has already been tried.

bin/remote-agent.js

@@ -4,6 +4,14 @@ import { existsSync } from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 
+// Checked here, before anything touches node:sqlite, so an old Node gets one
+// clear sentence instead of a module-not-found stack trace.
+const [major, minor] = process.versions.node.split('.').map(Number);
+if (major < 22 || (major === 22 && minor < 5)) {
+  console.error(`\nCodeRelay needs Node.js 22.5 or newer (for the built-in SQLite module).\nYou are running ${process.versions.node}. Get a current version from https://nodejs.org\n`);
+  process.exit(1);
+}
+
 const here = path.dirname(fileURLToPath(import.meta.url));
 const built = path.join(here, '..', 'dist', 'src', 'cli.js');
 

docs/assets/web-desktop-dark.png

@@ -1,8 +1,23 @@
 {
-  "name": "remote-personal-coding-agent",
+  "name": "coderelay",
   "version": "1.0.0",
   "private": true,
-  "description": "Self-hosted remote coding agent: Telegram -> home PC -> GitHub Copilot CLI -> local repository.",
+  "description": "Your personal remote coding agent: send a task from your phone, your home PC runs GitHub Copilot against your local repo, tests it, and reports back. Telegram + installable web app, zero recurring cost.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Tayebbb/Mobile-agent-controller.git"
+  },
+  "homepage": "https://github.com/Tayebbb/Mobile-agent-controller#readme",
+  "bugs": "https://github.com/Tayebbb/Mobile-agent-controller/issues",
+  "keywords": [
+    "coding-agent",
+    "github-copilot",
+    "telegram-bot",
+    "pwa",
+    "self-hosted",
+    "remote-development"
+  ],
   "type": "module",
   "engines": {
     "node": ">=22.5.0"