@bryanhu/codexly 0.22.0 → 0.23.0

package/CHANGELOG.md

@@ -4,6 +4,24 @@
 
 ## [Unreleased]
 
+## [0.23.0] - 2026-09-18
+
+### 新增
+
+- 添加生产级 Docker 镜像与可独立下载的 Docker Compose 配置，支持自定义工作区、Codex Home、端口、配对密码及会话期限。
+- 扩展发布流程，在 npm 包通过验证后同步发布带 SBOM 和 provenance 的 `linux/amd64`、`linux/arm64` GHCR 镜像。
+
+### 修复
+
+- 限制项目选择只能落在配置工作区的真实路径内，阻止通过符号链接越过工作区边界。
+- 修复运行中切换自定义 API 后仍复用旧 ChatGPT 认证、导致部分自定义模型不可用的问题。
+
+## [0.22.1] - 2026-09-16
+
+### 修复
+
+- 修复内置更新和全局安装复用过期 npm 元数据、可能无法及时发现新版本的问题。
+
 ## [0.22.0] - 2026-09-16
 
 ### 新增

package/README.md

@@ -74,11 +74,45 @@ On first launch, sign in with ChatGPT or configure an OpenAI-compatible service
 For regular use, install Codexly globally:
 
 ```bash
-npm install --global @bryanhu/codexly@latest --registry=https://registry.npmmirror.com --prefer-offline || npm install --global @bryanhu/codexly@latest --registry=https://registry.npmjs.org --prefer-offline
+npm install --global @bryanhu/codexly@latest --registry=https://registry.npmmirror.com || npm install --global @bryanhu/codexly@latest --registry=https://registry.npmjs.org
 codexly
 ```
 
-The installation command tries the China mirror first, falls back to the official registry on failure, and reuses the npm cache. `||` works in Bash, Zsh, cmd, and PowerShell 7+. In Windows PowerShell 5.1, run the command to the right of `||` separately if the first command fails.
+The installation command tries the China mirror first, falls back to the official registry on failure, reuses the npm cache, and revalidates stale package metadata. `||` works in Bash, Zsh, cmd, and PowerShell 7+. In Windows PowerShell 5.1, run the command to the right of `||` separately if the first command fails.
+
+## Docker
+
+Download the user-facing Compose file and start the published image:
+
+```bash
+mkdir codexly && cd codexly
+curl -fsSLO https://raw.githubusercontent.com/BryanHoo/Codexly/main/compose.yaml
+curl -fsSLo .env.example https://raw.githubusercontent.com/BryanHoo/Codexly/main/.env.example
+cp .env.example .env
+docker compose pull
+docker compose up --detach
+docker compose logs --tail=50 codexly
+```
+
+Open `http://127.0.0.1:3210` and use the random pairing code printed in the logs. The default named volume preserves Codex login data and Codexly's SQLite state. On Linux and macOS, the Compose file mounts the host root at `/workspace`, so every mounted disk is available to the project picker. Set `CODEXLY_WORKSPACE` to expose only one directory:
+
+```bash
+CODEXLY_WORKSPACE=/path/to/projects docker compose up --detach
+```
+
+Docker can only access host paths shared with the Docker engine. On Windows, set `CODEXLY_WORKSPACE` to a shared drive such as `C:/`; add extra bind mounts and repeat `--workspace` in `command` when multiple drives are required.
+
+| Variable                | Purpose                                                              |
+| ----------------------- | -------------------------------------------------------------------- |
+| `CODEXLY_VERSION`       | Select the GHCR image tag; defaults to `latest`                      |
+| `CODEXLY_PORT`          | Set both the host and container port; defaults to `3210`             |
+| `CODEXLY_WORKSPACE`     | Restrict the host directory mounted at `/workspace`; defaults to `/` |
+| `CODEXLY_CODEX_HOME`    | Bind a host Codex home instead of the managed `codexly-data` volume  |
+| `CODEXLY_LAN_PASSWORD`  | Set a strong fixed access password instead of the logged random code |
+| `CODEXLY_ALLOWED_HOSTS` | Allow comma-separated exact reverse proxy domains                    |
+| `CODEXLY_SESSION_TTL`   | Set a fixed session lifetime such as `12h`                           |
+
+The image entrypoint accepts all normal CLI arguments, so orchestration platforms can replace `command` when needed. See the [complete Docker Compose deployment guide](docs/docker-deployment.md) for workspace, multiple-disk, Codex Home, update, backup, and troubleshooting instructions. Run `pnpm docker:build && pnpm docker:test` in a development checkout to build and smoke-test the local image.
 
 ## Usage
 
@@ -104,6 +138,7 @@ The terminal prints the LAN address and a random access password. Common options
 | `--lan-password <password>` | Set a 16-128 character password containing uppercase, lowercase, number, and symbol        |
 | `--allowed-host <domain>`   | Allow an exact reverse proxy domain; repeat the option for multiple domains                |
 | `--session-ttl <duration>`  | Set a fixed LAN session lifetime such as `12h`; omitted sessions last until server restart |
+| `--workspace <path>`        | Restrict project selection to this absolute root; repeat for multiple roots                |
 
 Quote passwords containing shell-special characters. LAN mode uses unencrypted HTTP, so use it only on a trusted network and never expose it directly to the internet. Restarting Codexly invalidates the password and all sessions.
 
@@ -114,7 +149,7 @@ Run `codexly doctor` when startup, Codex, or local data checks fail. Run `codexl
 Interactive startup and **Settings > About** check for new releases. Built-in updates try the China mirror first for version checks, package downloads, and dependency installation, falling back to the official registry on failure and reusing your npm cache. New releases may appear later while the mirror synchronizes. A global installation can also be updated with:
 
 ```bash
-npm install --global @bryanhu/codexly@latest --registry=https://registry.npmmirror.com --prefer-offline || npm install --global @bryanhu/codexly@latest --registry=https://registry.npmjs.org --prefer-offline
+npm install --global @bryanhu/codexly@latest --registry=https://registry.npmmirror.com || npm install --global @bryanhu/codexly@latest --registry=https://registry.npmjs.org
 ```
 
 If an older Linux release was installed into a system directory with `sudo npm install --global`, manually run the command above with `sudo` once to reach a release that supports elevated updates. Later built-in updates request `sudo` access when needed.

package/README.zh-CN.md

@@ -44,11 +44,45 @@ Codexly 会自动打开浏览器。若未打开，请访问终端输出的地址
 经常使用时可以全局安装：
 
 ```bash
-npm install --global @bryanhu/codexly@latest --registry=https://registry.npmmirror.com --prefer-offline || npm install --global @bryanhu/codexly@latest --registry=https://registry.npmjs.org --prefer-offline
+npm install --global @bryanhu/codexly@latest --registry=https://registry.npmmirror.com || npm install --global @bryanhu/codexly@latest --registry=https://registry.npmjs.org
 codexly
 ```
 
-安装命令优先使用国内镜像，失败后回退官方源，并复用 npm 缓存。`||` 适用于 Bash、Zsh、cmd 和 PowerShell 7+；Windows PowerShell 5.1 请在第一条命令失败后单独执行 `||` 右侧的命令。
+安装命令优先使用国内镜像，失败后回退官方源，复用 npm 缓存并重新校验过期的包元数据。`||` 适用于 Bash、Zsh、cmd 和 PowerShell 7+；Windows PowerShell 5.1 请在第一条命令失败后单独执行 `||` 右侧的命令。
+
+## Docker 部署
+
+下载用户版 Compose 配置并启动已发布镜像：
+
+```bash
+mkdir codexly && cd codexly
+curl -fsSLO https://raw.githubusercontent.com/BryanHoo/Codexly/main/compose.yaml
+curl -fsSLo .env.example https://raw.githubusercontent.com/BryanHoo/Codexly/main/.env.example
+cp .env.example .env
+docker compose pull
+docker compose up --detach
+docker compose logs --tail=50 codexly
+```
+
+打开 `http://127.0.0.1:3210`，使用日志中的随机配对码。默认命名卷会持久化 Codex 登录数据和 Codexly SQLite 状态。在 Linux 和 macOS 上，Compose 默认把宿主根目录挂载到 `/workspace`，项目选择器可读取所有已挂载磁盘。设置 `CODEXLY_WORKSPACE` 后只暴露指定目录：
+
+```bash
+CODEXLY_WORKSPACE=/path/to/projects docker compose up --detach
+```
+
+Docker 只能访问 Docker Engine 已共享的宿主路径。Windows 需将 `CODEXLY_WORKSPACE` 设置为已共享盘符，例如 `C:/`；需要多个盘符时，在 Compose 中增加 bind mount，并在 `command` 中重复传入 `--workspace`。
+
+| 变量                    | 用途                                                |
+| ----------------------- | --------------------------------------------------- |
+| `CODEXLY_VERSION`       | 指定 GHCR 镜像标签，默认 `latest`                   |
+| `CODEXLY_PORT`          | 同时设置宿主与容器端口，默认 `3210`                 |
+| `CODEXLY_WORKSPACE`     | 限制挂载到 `/workspace` 的宿主目录，默认 `/`        |
+| `CODEXLY_CODEX_HOME`    | 绑定宿主 Codex Home，替代默认 `codexly-data` 命名卷 |
+| `CODEXLY_LAN_PASSWORD`  | 设置固定强密码，替代日志中生成的随机配对码          |
+| `CODEXLY_ALLOWED_HOSTS` | 设置逗号分隔的反向代理精确域名                      |
+| `CODEXLY_SESSION_TTL`   | 设置固定会话期限，例如 `12h`                        |
+
+镜像入口支持全部 CLI 参数，编排平台可按需覆盖 `command`。工作区、多磁盘、Codex Home、更新、备份和故障排查参见[完整 Docker Compose 部署指南](docs/docker-deployment.md)。开发仓库可运行 `pnpm docker:build && pnpm docker:test` 构建并冒烟测试本地镜像。
 
 ## 使用方式
 
@@ -74,6 +108,7 @@ codexly start --lan
 | `--lan-password <password>` | 设置 16 至 128 位密码，必须包含大小写字母、数字和符号 |
 | `--allowed-host <domain>`   | 允许精确的反向代理域名；多个域名可重复传入            |
 | `--session-ttl <duration>`  | 设置固定会话期限，如 `12h`；省略时持续到 Server 重启  |
+| `--workspace <path>`        | 限制项目选择的绝对根目录；多个根目录可重复传入        |
 
 密码含 Shell 特殊字符时请使用引号。局域网模式使用未加密 HTTP，只能用于可信网络，禁止直接暴露到互联网。重启 Codexly 会使密码和全部会话失效。
 
@@ -84,7 +119,7 @@ codexly start --lan
 交互式启动和“设置 > 关于”会检查新版本。内置更新的版本查询、包下载和依赖安装优先使用国内镜像，失败后回退官方源；下载和安装复用用户的 npm 缓存。镜像同步期间可能稍晚显示新版本。全局安装也可以通过以下命令更新：
 
 ```bash
-npm install --global @bryanhu/codexly@latest --registry=https://registry.npmmirror.com --prefer-offline || npm install --global @bryanhu/codexly@latest --registry=https://registry.npmjs.org --prefer-offline
+npm install --global @bryanhu/codexly@latest --registry=https://registry.npmmirror.com || npm install --global @bryanhu/codexly@latest --registry=https://registry.npmjs.org
 ```
 
 如果 Linux 上的旧版本通过 `sudo npm install --global` 安装到系统目录，首次升级到支持提权更新的版本时需要手动执行一次上述命令并在前面加上 `sudo`。后续内置更新会在需要时请求 `sudo` 权限。

package/dist/{chunk-4VM2ZUPT.js → chunk-HGSPZCBB.js}

@@ -1,13 +1,13 @@
 import { createRequire } from 'node:module';
 import { value_exports } from './chunk-6JWQNFM2.js';
-import { require_pino, require_safe_stable_stringify, CodexProtocolMappingError, CodexProviderConnectionError, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError } from './chunk-NUJPWN62.js';
+import { require_pino, require_safe_stable_stringify, CodexProtocolMappingError, CodexProviderConnectionError, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError } from './chunk-PRIMEL2G.js';
 import { WorkbenchPetProviderError, listTaskCatalog, PendingRequestResolutionError, deleteArchivedTasks, queryCompletedTasks, CompletedTasksQueryError, submitTask, TaskSubmissionError, collectQuestionGroups, formatQuestionAnswers, ProjectTodoError, saveProjectTodo } from './chunk-B2673ODM.js';
 import { Type, SkillInstallScopeSchema, ScheduledTaskSchema, SubmitTaskResponseSchema, AgentTaskSchema, AsyncQuestionGroupSchema, AnswerAsyncQuestionResultSchema, AgentTurnSchema, DEFAULT_COMMIT_MESSAGE_MODEL, TEMPORARY_TASK_API_PATH, TEMPORARY_TASK_SCOPE_ID, MAX_AGENT_FILE_BYTES, AccessStatusResponseSchema, PairAccessRequestSchema, BingWallpaperCatalogSchema, HealthResponseSchema, AppInfoResponseSchema, AppUpdateProgressResponseSchema, AgentMutationErrorSchema, InstallAppUpdateResponseSchema, InstallAppUpdateRequestSchema, EventStreamMetricsResponseSchema, AgentCapabilitiesSchema, AgentModelPageSchema, AgentGlobalSettingsResponseSchema, AgentGlobalSettingsSchema, MAX_AGENT_IMAGE_BYTES, MAX_AGENT_TEXT_BYTES, GlobalInstructionsSchema, MemorySettingsSchema, AgentPreferencesSchema, SaveGlobalInstructionsSchema, MemorySettingsUpdateSchema, PersonalizationResetSchema, AgentProviderConnectionStatusSchema, StartOfficialProviderLoginResponseSchema, StartOfficialProviderLoginRequestSchema, AgentProviderConnectionMutationResponseSchema, CancelProviderLoginRequestSchema, ConfigureCustomProviderResponseSchema, ConfigureCustomProviderRequestSchema, WorkbenchPetCatalogResponseSchema, WorkbenchPetDownloadResponseSchema, WorkbenchPetDownloadRequestSchema, ProjectPageSchema, HostFileListingSchema, HostFileQuerySchema, ProjectDirectoryListingSchema, ProjectDirectoryQuerySchema, ProjectOpenCapabilitiesResponseSchema, OpenProjectResponseSchema, ProjectRootQuerySchema, OpenProjectRequestSchema, ReorderProjectsResponseSchema, ReorderProjectsRequestSchema, AgentSkillPageSchema, AgentProjectDefaultsResponseSchema, AgentProjectDefaultsSchema, AddProjectResponseSchema, AddProjectRequestSchema, RenameProjectResponseSchema, RenameProjectRequestSchema, RemoveProjectResponseSchema, RemoveProjectRequestSchema, InstalledSkillPageSchema, OfficialPluginPageSchema, OfficialPluginDetailSchema, OfficialPluginInstallResponseSchema, OfficialPluginUninstallResponseSchema, ClawhubSkillPageSchema, ClawhubSkillDetailSchema, ConfiguredMcpServerPageSchema, OpenSkillDirectoryResponseSchema, SetSkillEnabledResponseSchema, SetMcpServerEnabledResponseSchema, SkillInstallResponseSchema, ScheduledTaskPreviewSchema, ScheduledTaskPreviewRequestSchema, ScheduledTaskPageSchema, ScheduledTaskMutationResponseSchema, ScheduledTaskInputSchema, DeleteScheduledTaskResponseSchema, SetScheduledTaskEnabledRequestSchema, AgentTaskPageSchema, UnsubscribeAgentTaskResponseSchema, AgentTaskSnapshotResponseSchema, AgentMcpServerPageSchema, AgentBackgroundTerminalPageSchema, TerminateAgentBackgroundTerminalResponseSchema, PinAgentTaskResponseSchema, PinAgentTaskRequestSchema, RenameAgentTaskResponseSchema, RenameAgentTaskRequestSchema, ArchiveAgentTaskResponseSchema, ArchiveAgentTaskRequestSchema, UnarchiveAgentTaskResponseSchema, UnarchiveAgentTaskRequestSchema, DeleteAgentTaskResponseSchema, DeleteAgentTaskRequestSchema, TaskSearchPageSchema, TaskSearchQuerySchema, SearchOccurrencesPageSchema, SearchOccurrencesQuerySchema, StartAgentTaskResponseSchema, StartAgentTaskRequestSchema, StartAgentTurnResponseSchema, StartAgentTurnRequestSchema, SteerAgentTurnResponseSchema, SteerAgentTurnRequestSchema, InterruptAgentTurnResponseSchema, InterruptAgentTurnRequestSchema, ResolvePendingRequestResponseSchema, ResolvePendingRequestRequestSchema, SubmitTaskRequestSchema, AsyncQuestionPageSchema, AnswerAsyncQuestionResponseSchema, AnswerAsyncQuestionRequestSchema, DismissAsyncQuestionsRequestSchema, ProjectTodoPageSchema, ProjectTodoResponseSchema, ProjectTodoDraftSchema, SaveProjectTodoRequestSchema, DeleteProjectTodoResponseSchema, DeleteProjectTodoRequestSchema, AgentQueuedSubmissionListSchema, AddAgentQueuedSubmissionResponseSchema, AddAgentQueuedSubmissionRequestSchema, UpdateAgentQueuedSubmissionResponseSchema, UpdateAgentQueuedSubmissionRequestSchema, DeleteAgentQueuedSubmissionResponseSchema, ReorderAgentQueuedSubmissionsResponseSchema, ReorderAgentQueuedSubmissionsRequestSchema, StartAgentQueuedSubmissionResponseSchema, StartAgentQueuedSubmissionRequestSchema, AgentPromptInputSchema, AgentProviderConnectionRecordSchema, MAX_AGENT_IMAGES, MAX_AGENT_IMAGE_TOTAL_BYTES, MAX_AGENT_FILE_TOTAL_BYTES, ProjectGitStatusSchema, ProjectGitStatusQuerySchema, ProjectGitHistoryPageSchema, ProjectGitHistoryQuerySchema, ProjectGitCommitFilesPageSchema, ProjectGitCommitFilesQuerySchema, ProjectGitCommitFileDiffSchema, ProjectGitCommitFileDiffQuerySchema, SwitchProjectBranchRequestSchema, CreateProjectBranchRequestSchema, GenerateCommitMessageResponseSchema, GenerateCommitMessageRequestSchema, CommitProjectChangesResponseSchema, CommitProjectChangesRequestSchema, ProjectFileTreeSchema, ProjectFileTreeQuerySchema, ProjectFileSearchPageSchema, ProjectFileSearchQuerySchema, StopProjectFileSearchResponseSchema, StopProjectFileSearchRequestSchema, ProjectSourceFileQuerySchema, ProjectSourceFileSchema, AgentAttachmentUploadResponseSchema, HostFileKindSchema, ImportHostAttachmentRequestSchema, AgentAttachmentKindSchema, AgentTaskSettingsResponseSchema, AgentTaskSettingsSchema, ReloadAgentMcpServersResponseSchema, ReloadAgentMcpServersRequestSchema, ReviewAgentTaskResponseSchema, ReviewAgentTaskRequestSchema, CompactAgentTaskResponseSchema, CompactAgentTaskRequestSchema, ForkAgentTaskResponseSchema, ForkAgentTaskRequestSchema, UploadAgentFeedbackResponseSchema, UploadAgentFeedbackRequestSchema, DeleteArchivedTasksResponseSchema, DeleteArchivedTasksRequestSchema, AgentTaskCatalogSchema, TaskCatalogQuerySchema, CompletedTasksPageSchema, CompletedTasksQuerySchema, UpdateTaskSettingsAndDefaultsResponseSchema, UpdateTaskSettingsAndDefaultsRequestSchema, NavigableAgentTaskResponseSchema, OpenAgentTaskAttachmentResponseSchema, OpenAgentTaskAttachmentRequestSchema, UpdateAgentGoalResponseSchema, UpdateAgentGoalRequestSchema, ClearAgentGoalResponseSchema, ProjectTodoSchema, AgentMessageAttachmentSchema, ProjectGitWorktreePageSchema, CreateProjectWorktreeResponseSchema, CreateProjectWorktreeRequestSchema, ProjectWorktreeMutationResponseSchema, SwitchProjectWorktreeRequestSchema, RenameProjectFileResponseSchema, RenameProjectFileRequestSchema, DeleteProjectFileResponseSchema, DeleteProjectFileRequestSchema, MAX_EVENT_BATCH_SIZE } from './chunk-ZXTTTT25.js';
 import { __commonJS, __require, __toESM } from './chunk-K6J42667.js';
 import { Buffer as Buffer$1 } from 'buffer';
 import { randomBytes, createHash, timingSafeEqual, randomUUID } from 'crypto';
 import { createWriteStream, constants, createReadStream } from 'fs';
-import { mkdtemp, rm, realpath, lstat, stat, readFile, open, mkdir, readdir, access, writeFile, rename, unlink, link, rmdir, readlink } from 'fs/promises';
+import { mkdtemp, rm, realpath, lstat, stat, readFile, open, readdir, mkdir, access, writeFile, rename, unlink, link, rmdir, readlink } from 'fs/promises';
 import { tmpdir, homedir } from 'os';
 import { join, isAbsolute, dirname, resolve, relative, sep, basename, extname, normalize, win32, posix } from 'path';
 import { Transform, Readable } from 'stream';
@@ -13180,49 +13180,49 @@ var require_fast_uri = __commonJS({
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base, relative8, options, skipNormalization) {
+    function resolveComponent(base, relative9, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base = parse2(serialize(base, options), options);
-        relative8 = parse2(serialize(relative8, options), options);
+        relative9 = parse2(serialize(relative9, options), options);
       }
       options = options || {};
-      if (!options.tolerant && relative8.scheme) {
-        target.scheme = relative8.scheme;
-        target.userinfo = relative8.userinfo;
-        target.host = relative8.host;
-        target.port = relative8.port;
-        target.path = removeDotSegments(relative8.path || "");
-        target.query = relative8.query;
+      if (!options.tolerant && relative9.scheme) {
+        target.scheme = relative9.scheme;
+        target.userinfo = relative9.userinfo;
+        target.host = relative9.host;
+        target.port = relative9.port;
+        target.path = removeDotSegments(relative9.path || "");
+        target.query = relative9.query;
       } else {
-        if (relative8.userinfo !== void 0 || relative8.host !== void 0 || relative8.port !== void 0) {
-          target.userinfo = relative8.userinfo;
-          target.host = relative8.host;
-          target.port = relative8.port;
-          target.path = removeDotSegments(relative8.path || "");
-          target.query = relative8.query;
+        if (relative9.userinfo !== void 0 || relative9.host !== void 0 || relative9.port !== void 0) {
+          target.userinfo = relative9.userinfo;
+          target.host = relative9.host;
+          target.port = relative9.port;
+          target.path = removeDotSegments(relative9.path || "");
+          target.query = relative9.query;
         } else {
-          if (!relative8.path) {
+          if (!relative9.path) {
             target.path = base.path;
-            if (relative8.query !== void 0) {
-              target.query = relative8.query;
+            if (relative9.query !== void 0) {
+              target.query = relative9.query;
             } else {
               target.query = base.query;
             }
           } else {
-            if (relative8.path[0] === "/") {
-              target.path = removeDotSegments(relative8.path);
+            if (relative9.path[0] === "/") {
+              target.path = removeDotSegments(relative9.path);
             } else {
               if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
-                target.path = "/" + relative8.path;
+                target.path = "/" + relative9.path;
               } else if (!base.path) {
-                target.path = relative8.path;
+                target.path = relative9.path;
               } else {
-                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative8.path;
+                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative9.path;
               }
               target.path = removeDotSegments(target.path);
             }
-            target.query = relative8.query;
+            target.query = relative9.query;
           }
           target.userinfo = base.userinfo;
           target.host = base.host;
@@ -13230,7 +13230,7 @@ var require_fast_uri = __commonJS({
         }
         target.scheme = base.scheme;
       }
-      target.fragment = relative8.fragment;
+      target.fragment = relative9.fragment;
       return target;
     }
     function equal(uriA, uriB, options) {
@@ -19715,49 +19715,49 @@ var require_fast_uri2 = __commonJS({
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base, relative8, options, skipNormalization) {
+    function resolveComponent(base, relative9, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base = parse2(serialize(base, options), options);
-        relative8 = parse2(serialize(relative8, options), options);
+        relative9 = parse2(serialize(relative9, options), options);
       }
       options = options || {};
-      if (!options.tolerant && relative8.scheme) {
-        target.scheme = relative8.scheme;
-        target.userinfo = relative8.userinfo;
-        target.host = relative8.host;
-        target.port = relative8.port;
-        target.path = removeDotSegments(relative8.path || "");
-        target.query = relative8.query;
+      if (!options.tolerant && relative9.scheme) {
+        target.scheme = relative9.scheme;
+        target.userinfo = relative9.userinfo;
+        target.host = relative9.host;
+        target.port = relative9.port;
+        target.path = removeDotSegments(relative9.path || "");
+        target.query = relative9.query;
       } else {
-        if (relative8.userinfo !== void 0 || relative8.host !== void 0 || relative8.port !== void 0) {
-          target.userinfo = relative8.userinfo;
-          target.host = relative8.host;
-          target.port = relative8.port;
-          target.path = removeDotSegments(relative8.path || "");
-          target.query = relative8.query;
+        if (relative9.userinfo !== void 0 || relative9.host !== void 0 || relative9.port !== void 0) {
+          target.userinfo = relative9.userinfo;
+          target.host = relative9.host;
+          target.port = relative9.port;
+          target.path = removeDotSegments(relative9.path || "");
+          target.query = relative9.query;
         } else {
-          if (!relative8.path) {
+          if (!relative9.path) {
             target.path = base.path;
-            if (relative8.query !== void 0) {
-              target.query = relative8.query;
+            if (relative9.query !== void 0) {
+              target.query = relative9.query;
             } else {
               target.query = base.query;
             }
           } else {
-            if (relative8.path[0] === "/") {
-              target.path = removeDotSegments(relative8.path);
+            if (relative9.path[0] === "/") {
+              target.path = removeDotSegments(relative9.path);
             } else {
               if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
-                target.path = "/" + relative8.path;
+                target.path = "/" + relative9.path;
               } else if (!base.path) {
-                target.path = relative8.path;
+                target.path = relative9.path;
               } else {
-                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative8.path;
+                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative9.path;
               }
               target.path = removeDotSegments(target.path);
             }
-            target.query = relative8.query;
+            target.query = relative9.query;
           }
           target.userinfo = base.userinfo;
           target.host = base.host;
@@ -19765,7 +19765,7 @@ var require_fast_uri2 = __commonJS({
         }
         target.scheme = base.scheme;
       }
-      target.fragment = relative8.fragment;
+      target.fragment = relative9.fragment;
       return target;
     }
     function equal(uriA, uriB, options) {
@@ -36591,10 +36591,10 @@ var require_resolve_block_map = __commonJS({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start, key, sep: sep7, value } = collItem;
+        const { start, key, sep: sep8, value } = collItem;
         const keyProps = resolveProps.resolveProps(start, {
           indicator: "explicit-key-ind",
-          next: key ?? sep7?.[0],
+          next: key ?? sep8?.[0],
           offset,
           onError: onError2,
           parentIndent: bm.indent,
@@ -36608,7 +36608,7 @@ var require_resolve_block_map = __commonJS({
             else if ("indent" in key && key.indent !== bm.indent)
               onError2(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep7) {
+          if (!keyProps.anchor && !keyProps.tag && !sep8) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -36632,7 +36632,7 @@ var require_resolve_block_map = __commonJS({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError2(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep7 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep8 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -36648,7 +36648,7 @@ var require_resolve_block_map = __commonJS({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError2(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError2) : composeEmptyNode(ctx, offset, sep7, null, valueProps, onError2);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError2) : composeEmptyNode(ctx, offset, sep8, null, valueProps, onError2);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError2);
           offset = valueNode.range[2];
@@ -36737,7 +36737,7 @@ var require_resolve_end = __commonJS({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep7 = "";
+        let sep8 = "";
         for (const token of end) {
           const { source, type } = token;
           switch (type) {
@@ -36751,13 +36751,13 @@ var require_resolve_end = __commonJS({
               if (!comment)
                 comment = cb;
               else
-                comment += sep7 + cb;
-              sep7 = "";
+                comment += sep8 + cb;
+              sep8 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep7 += source;
+                sep8 += source;
               hasSpace = true;
               break;
             default:
@@ -36799,18 +36799,18 @@ var require_resolve_flow_collection = __commonJS({
       let offset = fc.offset + fc.start.source.length;
       for (let i2 = 0; i2 < fc.items.length; ++i2) {
         const collItem = fc.items[i2];
-        const { start, key, sep: sep7, value } = collItem;
+        const { start, key, sep: sep8, value } = collItem;
         const props = resolveProps.resolveProps(start, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep7?.[0],
+          next: key ?? sep8?.[0],
           offset,
           onError: onError2,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep7 && !value) {
+          if (!props.anchor && !props.tag && !sep8 && !value) {
             if (i2 === 0 && props.comma)
               onError2(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i2 < fc.items.length - 1)
@@ -36864,8 +36864,8 @@ var require_resolve_flow_collection = __commonJS({
             }
           }
         }
-        if (!isMap && !sep7 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError2) : composeEmptyNode(ctx, props.end, sep7, null, props, onError2);
+        if (!isMap && !sep8 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError2) : composeEmptyNode(ctx, props.end, sep8, null, props, onError2);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -36877,7 +36877,7 @@ var require_resolve_flow_collection = __commonJS({
           if (isBlock(key))
             onError2(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep7 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep8 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -36888,8 +36888,8 @@ var require_resolve_flow_collection = __commonJS({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep7)
-                for (const st of sep7) {
+              if (sep8)
+                for (const st of sep8) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -36906,7 +36906,7 @@ var require_resolve_flow_collection = __commonJS({
             else
               onError2(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError2) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep7, null, valueProps, onError2) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError2) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep8, null, valueProps, onError2) : null;
           if (valueNode) {
             if (isBlock(value))
               onError2(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -37084,7 +37084,7 @@ var require_resolve_block_scalar = __commonJS({
           chompStart = i2 + 1;
       }
       let value = "";
-      let sep7 = "";
+      let sep8 = "";
       let prevMoreIndented = false;
       for (let i2 = 0; i2 < contentStart; ++i2)
         value += lines[i2][0].slice(trimIndent) + "\n";
@@ -37101,24 +37101,24 @@ var require_resolve_block_scalar = __commonJS({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep7 + indent.slice(trimIndent) + content;
-          sep7 = "\n";
+          value += sep8 + indent.slice(trimIndent) + content;
+          sep8 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep7 === " ")
-            sep7 = "\n";
-          else if (!prevMoreIndented && sep7 === "\n")
-            sep7 = "\n\n";
-          value += sep7 + indent.slice(trimIndent) + content;
-          sep7 = "\n";
+          if (sep8 === " ")
+            sep8 = "\n";
+          else if (!prevMoreIndented && sep8 === "\n")
+            sep8 = "\n\n";
+          value += sep8 + indent.slice(trimIndent) + content;
+          sep8 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep7 === "\n")
+          if (sep8 === "\n")
             value += "\n";
           else
-            sep7 = "\n";
+            sep8 = "\n";
         } else {
-          value += sep7 + content;
-          sep7 = " ";
+          value += sep8 + content;
+          sep8 = " ";
           prevMoreIndented = false;
         }
       }
@@ -37299,25 +37299,25 @@ var require_resolve_flow_scalar = __commonJS({
       if (!match)
         return source;
       let res = match[1];
-      let sep7 = " ";
+      let sep8 = " ";
       let pos = first2.lastIndex;
       line.lastIndex = pos;
       while (match = line.exec(source)) {
         if (match[1] === "") {
-          if (sep7 === "\n")
-            res += sep7;
+          if (sep8 === "\n")
+            res += sep8;
           else
-            sep7 = "\n";
+            sep8 = "\n";
         } else {
-          res += sep7 + match[1];
-          sep7 = " ";
+          res += sep8 + match[1];
+          sep8 = " ";
         }
         pos = line.lastIndex;
       }
       const last2 = /[ \t]*(.*)/sy;
       last2.lastIndex = pos;
       match = last2.exec(source);
-      return res + sep7 + (match?.[1] ?? "");
+      return res + sep8 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source, onError2) {
       let res = "";
@@ -38120,14 +38120,14 @@ var require_cst_stringify = __commonJS({
         }
       }
     }
-    function stringifyItem({ start, key, sep: sep7, value }) {
+    function stringifyItem({ start, key, sep: sep8, value }) {
       let res = "";
       for (const st of start)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep7)
-        for (const st of sep7)
+      if (sep8)
+        for (const st of sep8)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -39289,18 +39289,18 @@ var require_parser = __commonJS({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
-          let sep7;
+          let sep8;
           if (scalar.end) {
-            sep7 = scalar.end;
-            sep7.push(this.sourceToken);
+            sep8 = scalar.end;
+            sep8.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep7 = [this.sourceToken];
+            sep8 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start, key: scalar, sep: sep7 }]
+            items: [{ start, key: scalar, sep: sep8 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -39453,15 +39453,15 @@ var require_parser = __commonJS({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start2 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep7 = it.sep;
-                  sep7.push(this.sourceToken);
+                  const sep8 = it.sep;
+                  sep8.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start2, key, sep: sep7 }]
+                    items: [{ start: start2, key, sep: sep8 }]
                   });
                 } else if (start.length > 0) {
                   it.sep = it.sep.concat(start, this.sourceToken);
@@ -39655,13 +39655,13 @@ var require_parser = __commonJS({
             const prev = getPrevProps(parent);
             const start = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep7 = fc.end.splice(1, fc.end.length);
-            sep7.push(this.sourceToken);
+            const sep8 = fc.end.splice(1, fc.end.length);
+            sep8.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start, key: fc, sep: sep7 }]
+              items: [{ start, key: fc, sep: sep8 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -41495,7 +41495,7 @@ var require_parseParams = __commonJS({
 // node_modules/.pnpm/@fastify+busboy@3.2.0/node_modules/@fastify/busboy/lib/utils/basename.js
 var require_basename = __commonJS({
   "node_modules/.pnpm/@fastify+busboy@3.2.0/node_modules/@fastify/busboy/lib/utils/basename.js"(exports, module) {
-    module.exports = function basename7(path) {
+    module.exports = function basename8(path) {
       if (typeof path !== "string") {
         return "";
       }
@@ -41521,7 +41521,7 @@ var require_multipart = __commonJS({
     var Dicer = require_Dicer();
     var parseParams = require_parseParams();
     var decodeText = require_decodeText();
-    var basename7 = require_basename();
+    var basename8 = require_basename();
     var getLimit = require_getLimit();
     var RE_BOUNDARY = /^boundary$/i;
     var RE_FIELD = /^form-data$/i;
@@ -41638,7 +41638,7 @@ var require_multipart = __commonJS({
               } else if (RE_FILENAME.test(parsed[i2][0])) {
                 filename = parsed[i2][1];
                 if (!preservePath) {
-                  filename = basename7(filename);
+                  filename = basename8(filename);
                 }
               }
             }
@@ -46561,7 +46561,7 @@ var require_parseTokenList = __commonJS({
 // node_modules/.pnpm/depd@2.0.0/node_modules/depd/index.js
 var require_depd = __commonJS({
   "node_modules/.pnpm/depd@2.0.0/node_modules/depd/index.js"(exports, module) {
-    var relative8 = __require("path").relative;
+    var relative9 = __require("path").relative;
     module.exports = depd;
     var basePath = process.cwd();
     function containsNamespace(str, namespace) {
@@ -46753,7 +46753,7 @@ var require_depd = __commonJS({
       return formatted;
     }
     function formatLocation(callSite) {
-      return relative8(basePath, callSite[0]) + ":" + callSite[1] + ":" + callSite[2];
+      return relative9(basePath, callSite[0]) + ":" + callSite[1] + ":" + callSite[2];
     }
     function getStack() {
       var limit = Error.stackTraceLimit;
@@ -47283,7 +47283,7 @@ var require_send = __commonJS({
     var join12 = path.join;
     var normalize2 = path.normalize;
     var resolve8 = path.resolve;
-    var sep7 = path.sep;
+    var sep8 = path.sep;
     var Readable4 = stream.Readable;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
@@ -47360,20 +47360,20 @@ var require_send = __commonJS({
       let parts;
       if (root !== null) {
         if (path2) {
-          path2 = normalize2("." + sep7 + path2);
+          path2 = normalize2("." + sep8 + path2);
         }
         if (UP_PATH_REGEXP.test(path2)) {
           debug2('malicious path "%s"', path2);
           return { statusCode: 403 };
         }
-        parts = path2.split(sep7);
+        parts = path2.split(sep8);
         path2 = normalize2(join12(root, path2));
       } else {
         if (UP_PATH_REGEXP.test(path2)) {
           debug2('malicious path "%s"', path2);
           return { statusCode: 403 };
         }
-        parts = normalize2(path2).split(sep7);
+        parts = normalize2(path2).split(sep8);
         path2 = resolve8(path2);
       }
       return { path: path2, parts };
@@ -47666,7 +47666,7 @@ var require_send = __commonJS({
     }
     async function sendFile(request2, path2, options) {
       const { error, stat: stat6 } = await tryStat(path2);
-      if (error && error.code === "ENOENT" && !extname3(path2) && path2[path2.length - 1] !== sep7) {
+      if (error && error.code === "ENOENT" && !extname3(path2) && path2[path2.length - 1] !== sep8) {
         let err2 = error;
         for (let i2 = 0; i2 < options.extensions.length; i2++) {
           const extension = options.extensions[i2];
@@ -48404,7 +48404,7 @@ var require_static = __commonJS({
     var path = __require("path");
     var { fileURLToPath } = __require("url");
     var { statSync } = __require("fs");
-    var { basename: basename7 } = __require("path");
+    var { basename: basename8 } = __require("path");
     var { glob } = require_index_min();
     var fp = require_fastify_plugin();
     var send = require_send2();
@@ -48429,7 +48429,7 @@ var require_static = __commonJS({
       deflate: ".deflate"
     };
     function contentDisposition(filename) {
-      return create(basename7(filename));
+      return create(basename8(filename));
     }
     async function fastifyStatic2(fastify, opts) {
       const suppressWarning = opts.suppressWarning ?? false;
@@ -66470,6 +66470,31 @@ var ProjectDirectoryBrowserError = class extends Error {
   }
   reason;
 };
+function isWithinRoot(root, path) {
+  const relativePath = relative(root, path);
+  return relativePath === "" || !relativePath.startsWith(`..${sep}`) && relativePath !== ".." && !isAbsolute(relativePath);
+}
+async function normalizeWorkspaceRoots(roots) {
+  if (roots === void 0) return [];
+  return Promise.all(
+    roots.map(async (root) => {
+      if (!isAbsolute(root)) {
+        throw new ProjectDirectoryBrowserError(
+          "Workspace root path must be absolute",
+          "invalid-directory"
+        );
+      }
+      const normalizedRoot = await realpath(root);
+      if (!(await lstat(normalizedRoot)).isDirectory()) {
+        throw new ProjectDirectoryBrowserError(
+          "Workspace root path must identify a directory",
+          "invalid-directory"
+        );
+      }
+      return normalizedRoot;
+    })
+  );
+}
 function toDirectoryError(error) {
   const code = error.code;
   const unavailable = code === "EACCES" || code === "EPERM";
@@ -66483,7 +66508,14 @@ function compareDirectories(left, right) {
   return left.name.localeCompare(right.name, "en", { sensitivity: "base" }) || left.name.localeCompare(right.name, "en");
 }
 async function resolveProjectDirectory(requestedPath, options = {}) {
-  const path = requestedPath ?? options.homePath ?? homedir();
+  let workspaceRoots;
+  try {
+    workspaceRoots = await normalizeWorkspaceRoots(options.workspaceRoots);
+  } catch (error) {
+    if (error instanceof ProjectDirectoryBrowserError) throw error;
+    throw toDirectoryError(error);
+  }
+  const path = requestedPath ?? workspaceRoots[0] ?? options.homePath ?? homedir();
   if (!isAbsolute(path)) {
     throw new ProjectDirectoryBrowserError(
       "Project directory path must be absolute",
@@ -66498,6 +66530,12 @@ async function resolveProjectDirectory(requestedPath, options = {}) {
         "invalid-directory"
       );
     }
+    if (workspaceRoots.length > 0 && !workspaceRoots.some((root) => isWithinRoot(root, normalizedPath))) {
+      throw new ProjectDirectoryBrowserError(
+        "Project directory is outside the configured workspace roots",
+        "invalid-directory"
+      );
+    }
     return normalizedPath;
   } catch (error) {
     if (error instanceof ProjectDirectoryBrowserError) {
@@ -66507,10 +66545,11 @@ async function resolveProjectDirectory(requestedPath, options = {}) {
   }
 }
 async function readProjectDirectory(requestedPath, options = {}) {
-  const [path, roots] = await Promise.all([
+  const [path, workspaceRoots] = await Promise.all([
     resolveProjectDirectory(requestedPath, options),
-    (options.filesystemRoots ?? listFilesystemRoots)()
+    normalizeWorkspaceRoots(options.workspaceRoots)
   ]);
+  const roots = workspaceRoots.length > 0 ? workspaceRoots.map((root) => ({ name: basename(root), path: root })) : await (options.filesystemRoots ?? listFilesystemRoots)();
   let entries;
   try {
     const children = await readdir(path, { withFileTypes: true });
@@ -66525,7 +66564,7 @@ async function readProjectDirectory(requestedPath, options = {}) {
   const parentPath = dirname(path);
   return {
     entries,
-    parentPath: parentPath === path ? null : parentPath,
+    parentPath: parentPath === path || workspaceRoots.some((root) => root === path) ? null : parentPath,
     path,
     roots
   };
@@ -72961,6 +73000,9 @@ async function createCodexlyServer(options) {
   const readImageFile = options.readProjectImageFile ?? readProjectImageFile;
   const readSourceFile = options.readProjectSourceFile ?? readProjectSourceFile;
   const projectOpenService = options.projectOpenService ?? createProjectOpenService();
+  const workspaceBrowserOptions = options.workspaceRoots === void 0 ? {} : { workspaceRoots: options.workspaceRoots };
+  const browseProjectDirectory = options.readProjectDirectory ?? ((path, browserOptions) => readProjectDirectory(path, { ...browserOptions, ...workspaceBrowserOptions }));
+  const selectProjectDirectory = options.resolveProjectDirectory ?? ((path) => resolveProjectDirectory(path, workspaceBrowserOptions));
   const skillMarketService = options.skillMarketService ?? createSkillMarketService({
     catalog: createClawhubClient(),
     projectOpenService,
@@ -73203,7 +73245,7 @@ async function createCodexlyServer(options) {
     searchProjectFiles,
     stopProjectFileSearch,
     readHostFileDirectory: options.readHostFileDirectory ?? readHostFileDirectory,
-    readProjectDirectory: options.readProjectDirectory ?? readProjectDirectory,
+    readProjectDirectory: browseProjectDirectory,
     readImageFile,
     readInheritedTaskSettings,
     readProjectGitHistory: options.readProjectGitHistory ?? readProjectGitHistory,
@@ -73215,7 +73257,7 @@ async function createCodexlyServer(options) {
     releaseProjectContext,
     resolveProviderTurnInput,
     runIdempotent: idempotencyRunner.run,
-    resolveProjectDirectory: options.resolveProjectDirectory ?? resolveProjectDirectory,
+    resolveProjectDirectory: selectProjectDirectory,
     resolveHostAttachment: options.resolveHostAttachment ?? resolveHostAttachment,
     readScheduledTaskAttachment: async (projectId, attachmentId) => scheduledTaskAttachmentManager === void 0 ? void 0 : scheduledTaskAttachmentManager.read(projectId, attachmentId),
     settingsRepository: options.settingsRepository,

package/dist/{chunk-NUJPWN62.js → chunk-PRIMEL2G.js}

@@ -12020,6 +12020,7 @@ var CodexProviderConnectionService = class {
     try {
       readProviderCapabilities(await this.#client.request("modelProvider/capabilities/read", {}));
       if (apiKey !== void 0) {
+        await this.#client.request("account/logout");
         const loginResponse = await this.#client.request("account/login/start", {
           apiKey,
           type: "apiKey"

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { createCodexlyServer, SqliteStateRepository, normalizeAllowedHost } from './chunk-4VM2ZUPT.js';
+import { createCodexlyServer, SqliteStateRepository, normalizeAllowedHost } from './chunk-HGSPZCBB.js';
 import './chunk-6JWQNFM2.js';
-import { startCodexAppServer, locateCodexBinary, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, CodexProjectRepository, checkCodexVersion } from './chunk-NUJPWN62.js';
+import { startCodexAppServer, locateCodexBinary, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, CodexProjectRepository, checkCodexVersion } from './chunk-PRIMEL2G.js';
 import './chunk-B2673ODM.js';
 import { DEFAULT_COMMIT_MESSAGE_MODEL } from './chunk-ZXTTTT25.js';
 import './chunk-GT7XTSEG.js';
@@ -22,7 +22,7 @@ createRequire(import.meta.url);
 
 // package.json
 var package_default = {
-  version: "0.22.0"};
+  version: "0.23.0"};
 var INSTALL_TIMEOUT_MS = 2 * 6e4;
 function resolveNpmCommandInvocation(args, platform = process.platform, execPath = process.execPath, elevated = false) {
   const invocation = platform === "win32" ? {
@@ -107,9 +107,7 @@ function runNpmWithRegistryFallback(runNpm, args, options = {}) {
         `--registry=${registry}`,
         `--@openai:registry=${registry}`,
         `--@bryanhu:registry=${registry}`,
-        // 沿用用户的持久 npm cache，缺失内容仍联网获取，不创建随更新删除的缓存。
-        "--prefer-offline",
-        "--prefer-online=false",
+        // 沿用用户的持久 npm cache，并保留 npm 默认的过期元数据重新校验行为。
         // 限制单源等待，避免 npm 默认重试退避延迟官方源兜底。
         "--fetch-retries=0",
         "--fetch-timeout=30000",
@@ -438,6 +436,8 @@ Start options:
   --codex-bin <path>         Use the Codex executable at the specified path.
   --codex-home <path>        Use a custom Codex home directory instead of CODEX_HOME
                              or the default ~/.codex directory.
+  --workspace <path>         Restrict project selection to an absolute workspace root.
+                             May be repeated for multiple roots.
 
 Doctor options:
   --codex-bin <path>         Check the Codex executable at the specified path.
@@ -452,6 +452,7 @@ Examples:
   codexly start --lan --lan-password 'Strong-Lan_Pass9!'
   codexly start --allowed-host code.example.com
   codexly start --lan --session-ttl 12h
+  codexly start --workspace /workspace
   codexly doctor --codex-bin /path/to/codex
   codexly version
 
@@ -465,7 +466,7 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
     if (!option || !valueOptions.has(option) && !flagOptions.has(option)) {
       throw new Error(`\u672A\u77E5\u9009\u9879: ${option ?? "<empty>"}`);
     }
-    const repeatable = option === "--allowed-host";
+    const repeatable = option === "--allowed-host" || option === "--workspace";
     if (seen.has(option) && !repeatable) {
       throw new Error(`\u9009\u9879\u91CD\u590D: ${option}`);
     }
@@ -488,6 +489,8 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
       parsed.lanPassword = value;
     } else if (option === "--allowed-host") {
       parsed.allowedHosts = [...parsed.allowedHosts ?? [], value];
+    } else if (option === "--workspace") {
+      parsed.workspaceRoots = [...parsed.workspaceRoots ?? [], value];
     } else if (option === "--port") {
       if (!/^\d+$/u.test(value)) {
         throw new Error("--port \u5FC5\u987B\u662F 1 \u5230 65535 \u4E4B\u95F4\u7684\u6574\u6570");
@@ -504,6 +507,24 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
   }
   return parsed;
 }
+function applyStartEnvironmentDefaults(options, environment) {
+  const environmentArgs = [];
+  const append = (option, value) => {
+    if (value !== void 0 && value.trim() !== "") environmentArgs.push(option, value.trim());
+  };
+  append("--lan-password", environment["CODEXLY_LAN_PASSWORD"]);
+  append("--port", environment["CODEXLY_PORT"]);
+  append("--session-ttl", environment["CODEXLY_SESSION_TTL"]);
+  append("--workspace", environment["CODEXLY_WORKSPACE"]);
+  for (const host of environment["CODEXLY_ALLOWED_HOSTS"]?.split(",") ?? []) {
+    append("--allowed-host", host);
+  }
+  const defaults = parseCommandOptions(
+    environmentArgs,
+    /* @__PURE__ */ new Set(["--allowed-host", "--lan-password", "--port", "--session-ttl", "--workspace"])
+  );
+  return { ...defaults, ...options };
+}
 
 // src/cli-shutdown.ts
 function createProcessShutdownSignal() {
@@ -922,17 +943,21 @@ async function runDoctor(args, dependencies, output) {
   return 0;
 }
 async function runStart(args, dependencies, signal, output) {
-  const options = parseCommandOptions(
-    args,
-    /* @__PURE__ */ new Set([
-      "--allowed-host",
-      "--codex-bin",
-      "--codex-home",
-      "--lan-password",
-      "--port",
-      "--session-ttl"
-    ]),
-    /* @__PURE__ */ new Set(["--lan"])
+  const options = applyStartEnvironmentDefaults(
+    parseCommandOptions(
+      args,
+      /* @__PURE__ */ new Set([
+        "--allowed-host",
+        "--codex-bin",
+        "--codex-home",
+        "--lan-password",
+        "--port",
+        "--session-ttl",
+        "--workspace"
+      ]),
+      /* @__PURE__ */ new Set(["--lan"])
+    ),
+    process.env
   );
   if (options.sessionTtl !== void 0 && options.lan !== true) {
     throw new Error("--session-ttl \u53EA\u80FD\u4E0E --lan \u4E00\u8D77\u4F7F\u7528");
@@ -1038,8 +1063,9 @@ async function runStart(args, dependencies, signal, output) {
       projectTodoRepository: stateRepository,
       settingsRepository: stateRepository,
       staticRoot: dependencies.webRoot,
-      // Standalone Thread 继承 app-server 的 cwd，不再创建伪项目目录。
-      standaloneCwd: process.cwd()
+      // 受限部署让临时任务继承首个工作区，避免绕过项目目录边界。
+      standaloneCwd: options.workspaceRoots?.[0] ?? process.cwd(),
+      ...options.workspaceRoots === void 0 ? {} : { workspaceRoots: options.workspaceRoots }
     });
     const host = options.lan === true ? "0.0.0.0" : "127.0.0.1";
     const activePort = await listenOnAvailablePort(server, host, port);

package/dist/providers/codex/index.js

@@ -1,5 +1,5 @@
 import { createRequire } from 'node:module';
-export { CodexAppServerExitedError, CodexAppServerProcess, CodexAppServerShutdownError, CodexAppServerSpawnError, CodexProjectRepository, CodexProtocolMappingError, CodexProviderConnectionError, CodexProviderConnectionService, CodexRuntimeProvider, CodexWorkbenchPetProvider, JsonlRpcClient, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError, SUPPORTED_CODEX_VERSION, SUPPORTED_CODEX_VERSION_RANGE, checkCodexVersion, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, locateCodexBinary, startCodexAppServer } from '../../chunk-NUJPWN62.js';
+export { CodexAppServerExitedError, CodexAppServerProcess, CodexAppServerShutdownError, CodexAppServerSpawnError, CodexProjectRepository, CodexProtocolMappingError, CodexProviderConnectionError, CodexProviderConnectionService, CodexRuntimeProvider, CodexWorkbenchPetProvider, JsonlRpcClient, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError, SUPPORTED_CODEX_VERSION, SUPPORTED_CODEX_VERSION_RANGE, checkCodexVersion, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, locateCodexBinary, startCodexAppServer } from '../../chunk-PRIMEL2G.js';
 import '../../chunk-B2673ODM.js';
 import '../../chunk-ZXTTTT25.js';
 import '../../chunk-GT7XTSEG.js';

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import { createRequire } from 'node:module';
-export { AccessSessionService, AgentEventStream, GitCommitError, GitCommitReviewError, SqliteStateRepository, commitSelectedProjectChanges, createCodexlyServer, normalizeAllowedHost, readProjectGitCommitFileDiff, readProjectGitCommitFiles } from '../chunk-4VM2ZUPT.js';
+export { AccessSessionService, AgentEventStream, GitCommitError, GitCommitReviewError, SqliteStateRepository, commitSelectedProjectChanges, createCodexlyServer, normalizeAllowedHost, readProjectGitCommitFileDiff, readProjectGitCommitFiles } from '../chunk-HGSPZCBB.js';
 import '../chunk-6JWQNFM2.js';
-import '../chunk-NUJPWN62.js';
+import '../chunk-PRIMEL2G.js';
 import '../chunk-B2673ODM.js';
 import '../chunk-ZXTTTT25.js';
 import '../chunk-GT7XTSEG.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bryanhu/codexly",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "通过 Web 操作本地 Coding Agent 的应用",
   "type": "module",
   "author": "BryanHu",
@@ -66,6 +66,8 @@
     "codex:schema:check": "node ./tools/verify-codex-schema.mjs",
     "codex:schema:update": "node ./tools/verify-codex-schema.mjs --update",
     "dev": "pnpm --filter @codexly/web dev",
+    "docker:build": "docker build --tag codexly:local .",
+    "docker:test": "node ./tools/test-docker-image.mjs",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
     "lint": "oxlint . --max-warnings 0 --report-unused-disable-directives",