Dev (#164)

* chore(release): stop publishing legacy Windows update packages

* feat(agents): support OpenCode Desktop across platforms

Detect CLI and desktop installations on Windows, macOS, and Linux, and add separate launch and restart controls.

Closes #156

* fix(codex): align model display names and show total session count

- preserve runtime model identity in generated catalogs
- count distinct sessions across database and rollout sources
- update session count labels in all supported languages

* fix(codex): keep config and auth files in sync

- generate auth.json for API key configuration
- preserve and validate OAuth credentials
- include auth.json in transactional updates and rollback
- retain compatibility with legacy Codex configuration states

* fix(cpa-gui): update version to 0.2.59 in Cargo files

* fix(codex): preserve OAuth mode after closing configuration

* feat(config): add TLS management and protocol-aware local URLs

- add TLS controls to advanced settings
- persist certificate and private key paths
- restart the core after TLS changes
- switch WebUI, API and management URLs between HTTP and HTTPS
- synchronize agent configurations and detection with the active protocol

* refactor(config): reorganize network, routing, and TLS settings

- split network settings and session routing into separate tabs
- move TLS configuration into network settings
- preserve TLS restart and HTTPS URL synchronization behavior

* feat(config): add independent network settings and custom listen IP

* fix(navigation): allow access to usage records while core is stopped

* refactor(home): show a single API URL based on the configured listen IP

* feat(config): add file pickers for TLS certificate and private key

src/styles.css

@@ -1769,6 +1769,70 @@ textarea:focus-visible {
   gap: 18px;
 }
 
+.config-tls-content {
+  display: grid;
+  gap: 16px;
+}
+
+.config-tls-toggle-row {
+  padding: 4px 0;
+  border: 0;
+  background: transparent;
+}
+
+.config-tls-section-heading,
+.config-section-heading-with-actions {
+  justify-content: space-between;
+}
+
+.config-tls-section-title,
+.config-network-section-title {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.config-tls-section-title h3,
+.config-network-section-title h3 {
+  margin: 0;
+  font-size: var(--font-size-section);
+  line-height: var(--line-height-body);
+}
+
+.config-tls-fields {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 18px;
+}
+
+.config-tls-fields .config-network-field {
+  min-height: 142px;
+  height: auto;
+}
+
+.config-tls-path-control {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  align-items: center;
+  gap: 8px;
+}
+
+.config-tls-browse-button {
+  min-width: max-content;
+  white-space: nowrap;
+}
+
+.config-tls-message {
+  min-height: 20px;
+  color: var(--theme-6d6760);
+  font-size: var(--font-size-label);
+  line-height: var(--line-height-body);
+}
+
+.config-tls-message.error {
+  color: var(--theme-9f2d20);
+}
+
 .config-network-sections {
   display: grid;
   grid-template-columns: minmax(0, 1fr);
@@ -1786,6 +1850,10 @@ textarea:focus-visible {
   background: var(--theme-fffdf8);
 }
 
+.config-network-section[hidden] {
+  display: none;
+}
+
 .config-network-section-heading {
   display: flex;
   align-items: center;
@@ -7845,6 +7913,10 @@ textarea:focus-visible {
     grid-auto-rows: auto;
   }
 
+  .config-tls-fields {
+    grid-template-columns: 1fr;
+  }
+
   .config-management-form {
     grid-template-columns: 1fr;
   }