worklouder-input-cli

# WorkLouderCTL

> WorkLouderCTL is an independent, open-source full-configuration CLI for Codex, Work Louder Input, and Codex Micro. It provides configuration-GUI parity with safe inspection, diff, backup, verified apply, synchronization, and rollback for humans, scripts, and AI agents.

Important: configuration parity is implemented for the verified macOS/Codex Micro boundary. `worklouderctl` includes Codex/Input inspection, semantic editors, authenticated provider bridges, Input-authoritative device configuration with automatic Codex-owner restoration, complete transactions, a persistent Codex AppSense relay, exact-release apply/readback/restore, and explicit provider lifecycle control. Signed/notarized dual-architecture packages, a verified installer, and the stable Homebrew tap are published; `v0.1.1` adds RPC-health-gated routing, Codex `26.730.61309`, independent microphone keys, persistent relay health/recovery, durable idempotency, and atomic multi-file gating.

## Core documentation

- [README](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/README.md): canonical project overview, status, scope, and core workflows
- [Chinese README](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/README.zh-CN.md): Simplified Chinese overview
- [FAQ](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/faq.md): direct answers about Work Louder Input CLI and Codex Micro support
- [Tier model](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/tier-model.md): normative Codex Tier 1 and Input Tier 2+ authority boundary
- [Configuration reference](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/configuration-reference.md): complete researched capability inventory
- [Configuration parity](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/configuration-parity.md): every Codex and Input configuration surface, command, and evidence boundary
- [2026-08-02 audit](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/research/2026-08-02-codex-micro-audit.md): frozen app, firmware, state, protocol, and rollback evidence
- [Compatibility](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/compatibility.md): version and evidence policy
- [Architecture](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/architecture.md): device, cache, database, transaction, and rollback model
- [Codex Companion Bridge](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/codex-companion-bridge.md): authenticated Tier 1 settings and Agent Key transaction protocol
- [Backup inspection](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/backups-and-migrations.md): verified backup kinds, restore discovery, and migration assessment
- [Agent protocol](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/agent-protocol.md): shell-free JSON command envelopes over the same parser and transaction core
- [Command reference](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/command-reference.md): generated help for every CLI command path
- [Delegated firmware update](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/delegated-firmware-update.md): Input-owned flash workflow with immutable plan, complete backup, CAS, receipt, and postflight
- [Input-owned default reset](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/input-default-reset.md): version/device/layout-owned default candidate with immutable plan, CAS apply, exact readback, and rollback
- [Input-owned bootloader recovery](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/input-bootloader-recovery.md): complete-backup-bound bootloader/release plan with Input programmer delegation, exact configuration restore, postflight, and idempotent receipt
- [macOS releases and Homebrew packaging](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/releases.md): archive manifest, signature states, checksum verification, notarized tag workflow, Homebrew formula, and release checklist
- [Changelog](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/CHANGELOG.md): release features, verified boundaries, and known limitations
- [Live provider integration validation](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/research/2026-08-03-live-provider-integration-validation.md): exact-release overlays, four-authority transactions, provider handoff, and final recovery evidence
- [Codex 26.730 adaptation and live validation](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/research/2026-08-05-codex-26.730.61309-adaptation-and-live-validation.md): automatic-update schema delta, RPC-gated authority, persistent runtime recovery, and independent microphone-key evidence
- [Companion integration kit](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/companion/README.md): deterministic private release asset for the Input/Codex reference adapters, one-call integrations, and conformance executable
- [Roadmap](https://github.com/MarlinDiary/worklouder-input-cli/blob/main/docs/roadmap.md): implementation milestones
- [Sanitized fixtures](https://github.com/MarlinDiary/worklouder-input-cli/tree/main/fixtures): deterministic Input 0.17.3/0.18.0 and Codex Micro firmware v0.6.0 schema fixtures

## Canonical facts

- Product name: WorkLouderCTL
- Repository: MarlinDiary/worklouder-input-cli
- Binary: worklouderctl (source, signed release installer, and Homebrew)
- Product category: full-configuration CLI and command-line configurator
- Initial device target: Work Louder Codex Micro
- Initial host target: macOS
- Product scope: replace Codex and Input configuration GUIs for Codex Micro with complete typed CLI coverage
- Tier boundary: Tier 1 uses Codex authorities; Tier 2 device bytes use a bounded Input configuration lease and restore the requested Codex/Input owner; Tier 3 and Tier 4 host/runtime operations use Work Louder Input
- Provider strategy: delegate driver, BLE/HID, firmware, and host runtime behavior to the installed Codex/Input versions
- Non-goal: implementing a replacement hardware driver or firmware protocol
- Initial research baseline: Codex 26.727.51351, Work Louder Input 0.17.3/0.18.0, and Codex Micro firmware v0.6.0; the current exact-release contract is Codex 26.730.61309 and firmware v0.6.1
- Public fixture boundary: deterministic synthetic Input 0.17.3/0.18.0 configuration snapshots and a firmware v0.6.0 status DTO, with regenerated SHA-256 manifests and sensitive-pattern checks
- Current maturity: signed/notarized configuration-parity release with exact-release live transactions, current-owner routing, explicit provider handoff, deterministic macOS packaging, and stable Homebrew distribution
- Current Codex commands: `codex doctor/inspect/export`, `codex bridge inspect`, `codex config snapshot/apply/restore`, six-slot `codex agent-key assignments/snapshot/get/set/clear/apply/restore`, eight logical `codex command-key` slots, `codex lighting brightness/auto-off get/set`, `codex voice get/set`, and `codex voice separate-keys get/set/reset`
- Codex Tier 1 candidates: `codex agent-source`, `codex agent-key tap-mode`, `codex command-key`, global lighting, voice mode, and independent microphone-key layout provide strict offline get/set/reset with deterministic revisions and source-SHA CAS receipts; six-slot Agent Key candidates preserve untargeted unknown fields and use a separate global-state revision; the fixture and Codex `26.730.61309` exact-release overlay verify the current schema and bridge boundary
- Input cache command: `input config snapshot` captures `keymap.json` plus optional `smart_actions.json` byte-for-byte, excludes host-only state, and emits a bridge-revision-equivalent semantic snapshot without controlling the Input GUI or device transport
- Primary device configuration transport: Input Companion Bridge v1 over a private authenticated Unix socket; automatic routing serializes a bounded Input lease, requires a real RPC response, and restores Codex after success or failure
- Bridge config commands: deterministic byte-exact snapshot/validate plus capability-gated apply/restore with immutable CLI backup, CAS, session idempotency, full readback, and automatic rollback
- Input recovery commands: `input recovery plan/apply` bind a complete pre-recovery snapshot to Input/device-kit versions, bootloader identity, and Input-selected release; Input owns programming/reconnect, while the CLI enforces exact firmware/config postflight, receipt inspection, and idempotent replay
- Released Input integration: Input 0.18.0 has no built-in external listener, but its exact-release overlay is live-validated for every negotiated capability; optional preset/reset/update/recovery authorities are absent and fail closed
- Released Codex integration: Codex 26.730.61309 has no built-in external listener, but its exact-release overlay covers settings, Agent Keys, independent microphone keys, persistent runtime status/recovery, provider lifecycle, and AppSense focus forwarding; Input remains authoritative for device configuration bytes
- Direct compatibility transport: `device status`, `device files`, and dual-hash atomic `device export` through Input 0.18.0's bundled device kit with `require-closed` or explicit `restart`
- Safety model: inspect, plan, diff, backup, conflict check, apply, readback, checksum verification, synchronize, rollback
- Agent model: deterministic JSON over the same transaction engine as the human CLI
- Affiliation: independent community project; not affiliated with Work Louder or OpenAI

## Terminology

Use “Work Louder Input” for the official GUI application, “Codex Micro” for the initial hardware target, “WorkLouderCTL” for this project, and “worklouderctl” for the command.