feat: ship enterprise control and desktop governance

deployment/Caddyfile

@@ -10,6 +10,14 @@ boss.hyzq.net {
   reverse_proxy 127.0.0.1:3000
 }
 
+admin.boss.hyzq.net {
+  encode zstd gzip
+
+  redir / /admin 308
+
+  reverse_proxy 127.0.0.1:3000
+}
+
 http://106.53.170.158 {
   encode zstd gzip
 

deployment/launchd/com.hyzq.boss.codex-desktop-bridge.plist

@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>Label</key>
+    <string>com.hyzq.boss.codex-desktop-bridge</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+      <key>BOSS_CODEX_DESKTOP_BRIDGE_HOST</key>
+      <string>127.0.0.1</string>
+      <key>BOSS_CODEX_DESKTOP_BRIDGE_PORT</key>
+      <string>4318</string>
+    </dict>
+    <key>ProgramArguments</key>
+    <array>
+      <string>/bin/zsh</string>
+      <string>-lc</string>
+      <string>cd /Users/kris/code/boss &amp;&amp; node scripts/codex-desktop-refresh-bridge-daemon.mjs</string>
+    </array>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+    <key>StandardOutPath</key>
+    <string>/tmp/boss-codex-desktop-bridge.out</string>
+    <key>StandardErrorPath</key>
+    <string>/tmp/boss-codex-desktop-bridge.err</string>
+  </dict>
+</plist>