@bryanhu/codexly 0.22.1 → 0.23.0

package/CHANGELOG.md

@@ -4,6 +4,18 @@
 
 ## [Unreleased]
 
+## [0.23.0] - 2026-09-18
+
+### 新增
+
+- 添加生产级 Docker 镜像与可独立下载的 Docker Compose 配置，支持自定义工作区、Codex Home、端口、配对密码及会话期限。
+- 扩展发布流程，在 npm 包通过验证后同步发布带 SBOM 和 provenance 的 `linux/amd64`、`linux/arm64` GHCR 镜像。
+
+### 修复
+
+- 限制项目选择只能落在配置工作区的真实路径内，阻止通过符号链接越过工作区边界。
+- 修复运行中切换自定义 API 后仍复用旧 ChatGPT 认证、导致部分自定义模型不可用的问题。
+
 ## [0.22.1] - 2026-09-16
 
 ### 修复

package/README.md

@@ -80,6 +80,40 @@ codexly
 
 The installation command tries the China mirror first, falls back to the official registry on failure, reuses the npm cache, and revalidates stale package metadata. `||` works in Bash, Zsh, cmd, and PowerShell 7+. In Windows PowerShell 5.1, run the command to the right of `||` separately if the first command fails.
 
+## Docker
+
+Download the user-facing Compose file and start the published image:
+
+```bash
+mkdir codexly && cd codexly
+curl -fsSLO https://raw.githubusercontent.com/BryanHoo/Codexly/main/compose.yaml
+curl -fsSLo .env.example https://raw.githubusercontent.com/BryanHoo/Codexly/main/.env.example
+cp .env.example .env
+docker compose pull
+docker compose up --detach
+docker compose logs --tail=50 codexly
+```
+
+Open `http://127.0.0.1:3210` and use the random pairing code printed in the logs. The default named volume preserves Codex login data and Codexly's SQLite state. On Linux and macOS, the Compose file mounts the host root at `/workspace`, so every mounted disk is available to the project picker. Set `CODEXLY_WORKSPACE` to expose only one directory:
+
+```bash
+CODEXLY_WORKSPACE=/path/to/projects docker compose up --detach
+```
+
+Docker can only access host paths shared with the Docker engine. On Windows, set `CODEXLY_WORKSPACE` to a shared drive such as `C:/`; add extra bind mounts and repeat `--workspace` in `command` when multiple drives are required.
+
+| Variable                | Purpose                                                              |
+| ----------------------- | -------------------------------------------------------------------- |
+| `CODEXLY_VERSION`       | Select the GHCR image tag; defaults to `latest`                      |
+| `CODEXLY_PORT`          | Set both the host and container port; defaults to `3210`             |
+| `CODEXLY_WORKSPACE`     | Restrict the host directory mounted at `/workspace`; defaults to `/` |
+| `CODEXLY_CODEX_HOME`    | Bind a host Codex home instead of the managed `codexly-data` volume  |
+| `CODEXLY_LAN_PASSWORD`  | Set a strong fixed access password instead of the logged random code |
+| `CODEXLY_ALLOWED_HOSTS` | Allow comma-separated exact reverse proxy domains                    |
+| `CODEXLY_SESSION_TTL`   | Set a fixed session lifetime such as `12h`                           |
+
+The image entrypoint accepts all normal CLI arguments, so orchestration platforms can replace `command` when needed. See the [complete Docker Compose deployment guide](docs/docker-deployment.md) for workspace, multiple-disk, Codex Home, update, backup, and troubleshooting instructions. Run `pnpm docker:build && pnpm docker:test` in a development checkout to build and smoke-test the local image.
+
 ## Usage
 
 Select **New task** for work that does not need a project. For repository work, add one or more host directories as ordered project roots, create a task, and submit your request with any required files, images, project references, or Skills. Archived tasks can be restored or permanently deleted from the project task list.
@@ -104,6 +138,7 @@ The terminal prints the LAN address and a random access password. Common options
 | `--lan-password <password>` | Set a 16-128 character password containing uppercase, lowercase, number, and symbol        |
 | `--allowed-host <domain>`   | Allow an exact reverse proxy domain; repeat the option for multiple domains                |
 | `--session-ttl <duration>`  | Set a fixed LAN session lifetime such as `12h`; omitted sessions last until server restart |
+| `--workspace <path>`        | Restrict project selection to this absolute root; repeat for multiple roots                |
 
 Quote passwords containing shell-special characters. LAN mode uses unencrypted HTTP, so use it only on a trusted network and never expose it directly to the internet. Restarting Codexly invalidates the password and all sessions.
 

package/README.zh-CN.md

@@ -50,6 +50,40 @@ codexly
 
 安装命令优先使用国内镜像，失败后回退官方源，复用 npm 缓存并重新校验过期的包元数据。`||` 适用于 Bash、Zsh、cmd 和 PowerShell 7+；Windows PowerShell 5.1 请在第一条命令失败后单独执行 `||` 右侧的命令。
 
+## Docker 部署
+
+下载用户版 Compose 配置并启动已发布镜像：
+
+```bash
+mkdir codexly && cd codexly
+curl -fsSLO https://raw.githubusercontent.com/BryanHoo/Codexly/main/compose.yaml
+curl -fsSLo .env.example https://raw.githubusercontent.com/BryanHoo/Codexly/main/.env.example
+cp .env.example .env
+docker compose pull
+docker compose up --detach
+docker compose logs --tail=50 codexly
+```
+
+打开 `http://127.0.0.1:3210`，使用日志中的随机配对码。默认命名卷会持久化 Codex 登录数据和 Codexly SQLite 状态。在 Linux 和 macOS 上，Compose 默认把宿主根目录挂载到 `/workspace`，项目选择器可读取所有已挂载磁盘。设置 `CODEXLY_WORKSPACE` 后只暴露指定目录：
+
+```bash
+CODEXLY_WORKSPACE=/path/to/projects docker compose up --detach
+```
+
+Docker 只能访问 Docker Engine 已共享的宿主路径。Windows 需将 `CODEXLY_WORKSPACE` 设置为已共享盘符，例如 `C:/`；需要多个盘符时，在 Compose 中增加 bind mount，并在 `command` 中重复传入 `--workspace`。
+
+| 变量                    | 用途                                                |
+| ----------------------- | --------------------------------------------------- |
+| `CODEXLY_VERSION`       | 指定 GHCR 镜像标签，默认 `latest`                   |
+| `CODEXLY_PORT`          | 同时设置宿主与容器端口，默认 `3210`                 |
+| `CODEXLY_WORKSPACE`     | 限制挂载到 `/workspace` 的宿主目录，默认 `/`        |
+| `CODEXLY_CODEX_HOME`    | 绑定宿主 Codex Home，替代默认 `codexly-data` 命名卷 |
+| `CODEXLY_LAN_PASSWORD`  | 设置固定强密码，替代日志中生成的随机配对码          |
+| `CODEXLY_ALLOWED_HOSTS` | 设置逗号分隔的反向代理精确域名                      |
+| `CODEXLY_SESSION_TTL`   | 设置固定会话期限，例如 `12h`                        |
+
+镜像入口支持全部 CLI 参数，编排平台可按需覆盖 `command`。工作区、多磁盘、Codex Home、更新、备份和故障排查参见[完整 Docker Compose 部署指南](docs/docker-deployment.md)。开发仓库可运行 `pnpm docker:build && pnpm docker:test` 构建并冒烟测试本地镜像。
+
 ## 使用方式
 
 不依赖项目时，直接选择“新建任务”。处理仓库时，先添加一个或多个运行端目录作为有序的项目根，再创建任务，并按需附加文件、图片、项目引用或 Skills 后提交需求。归档的任务可以从项目任务列表中恢复或永久删除。
@@ -74,6 +108,7 @@ codexly start --lan
 | `--lan-password <password>` | 设置 16 至 128 位密码，必须包含大小写字母、数字和符号 |
 | `--allowed-host <domain>`   | 允许精确的反向代理域名；多个域名可重复传入            |
 | `--session-ttl <duration>`  | 设置固定会话期限，如 `12h`；省略时持续到 Server 重启  |
+| `--workspace <path>`        | 限制项目选择的绝对根目录；多个根目录可重复传入        |
 
 密码含 Shell 特殊字符时请使用引号。局域网模式使用未加密 HTTP，只能用于可信网络，禁止直接暴露到互联网。重启 Codexly 会使密码和全部会话失效。
 

package/dist/{chunk-4VM2ZUPT.js → chunk-HGSPZCBB.js}

@@ -1,13 +1,13 @@
 import { createRequire } from 'node:module';
 import { value_exports } from './chunk-6JWQNFM2.js';
-import { require_pino, require_safe_stable_stringify, CodexProtocolMappingError, CodexProviderConnectionError, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError } from './chunk-NUJPWN62.js';
+import { require_pino, require_safe_stable_stringify, CodexProtocolMappingError, CodexProviderConnectionError, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError } from './chunk-PRIMEL2G.js';
 import { WorkbenchPetProviderError, listTaskCatalog, PendingRequestResolutionError, deleteArchivedTasks, queryCompletedTasks, CompletedTasksQueryError, submitTask, TaskSubmissionError, collectQuestionGroups, formatQuestionAnswers, ProjectTodoError, saveProjectTodo } from './chunk-B2673ODM.js';
 import { Type, SkillInstallScopeSchema, ScheduledTaskSchema, SubmitTaskResponseSchema, AgentTaskSchema, AsyncQuestionGroupSchema, AnswerAsyncQuestionResultSchema, AgentTurnSchema, DEFAULT_COMMIT_MESSAGE_MODEL, TEMPORARY_TASK_API_PATH, TEMPORARY_TASK_SCOPE_ID, MAX_AGENT_FILE_BYTES, AccessStatusResponseSchema, PairAccessRequestSchema, BingWallpaperCatalogSchema, HealthResponseSchema, AppInfoResponseSchema, AppUpdateProgressResponseSchema, AgentMutationErrorSchema, InstallAppUpdateResponseSchema, InstallAppUpdateRequestSchema, EventStreamMetricsResponseSchema, AgentCapabilitiesSchema, AgentModelPageSchema, AgentGlobalSettingsResponseSchema, AgentGlobalSettingsSchema, MAX_AGENT_IMAGE_BYTES, MAX_AGENT_TEXT_BYTES, GlobalInstructionsSchema, MemorySettingsSchema, AgentPreferencesSchema, SaveGlobalInstructionsSchema, MemorySettingsUpdateSchema, PersonalizationResetSchema, AgentProviderConnectionStatusSchema, StartOfficialProviderLoginResponseSchema, StartOfficialProviderLoginRequestSchema, AgentProviderConnectionMutationResponseSchema, CancelProviderLoginRequestSchema, ConfigureCustomProviderResponseSchema, ConfigureCustomProviderRequestSchema, WorkbenchPetCatalogResponseSchema, WorkbenchPetDownloadResponseSchema, WorkbenchPetDownloadRequestSchema, ProjectPageSchema, HostFileListingSchema, HostFileQuerySchema, ProjectDirectoryListingSchema, ProjectDirectoryQuerySchema, ProjectOpenCapabilitiesResponseSchema, OpenProjectResponseSchema, ProjectRootQuerySchema, OpenProjectRequestSchema, ReorderProjectsResponseSchema, ReorderProjectsRequestSchema, AgentSkillPageSchema, AgentProjectDefaultsResponseSchema, AgentProjectDefaultsSchema, AddProjectResponseSchema, AddProjectRequestSchema, RenameProjectResponseSchema, RenameProjectRequestSchema, RemoveProjectResponseSchema, RemoveProjectRequestSchema, InstalledSkillPageSchema, OfficialPluginPageSchema, OfficialPluginDetailSchema, OfficialPluginInstallResponseSchema, OfficialPluginUninstallResponseSchema, ClawhubSkillPageSchema, ClawhubSkillDetailSchema, ConfiguredMcpServerPageSchema, OpenSkillDirectoryResponseSchema, SetSkillEnabledResponseSchema, SetMcpServerEnabledResponseSchema, SkillInstallResponseSchema, ScheduledTaskPreviewSchema, ScheduledTaskPreviewRequestSchema, ScheduledTaskPageSchema, ScheduledTaskMutationResponseSchema, ScheduledTaskInputSchema, DeleteScheduledTaskResponseSchema, SetScheduledTaskEnabledRequestSchema, AgentTaskPageSchema, UnsubscribeAgentTaskResponseSchema, AgentTaskSnapshotResponseSchema, AgentMcpServerPageSchema, AgentBackgroundTerminalPageSchema, TerminateAgentBackgroundTerminalResponseSchema, PinAgentTaskResponseSchema, PinAgentTaskRequestSchema, RenameAgentTaskResponseSchema, RenameAgentTaskRequestSchema, ArchiveAgentTaskResponseSchema, ArchiveAgentTaskRequestSchema, UnarchiveAgentTaskResponseSchema, UnarchiveAgentTaskRequestSchema, DeleteAgentTaskResponseSchema, DeleteAgentTaskRequestSchema, TaskSearchPageSchema, TaskSearchQuerySchema, SearchOccurrencesPageSchema, SearchOccurrencesQuerySchema, StartAgentTaskResponseSchema, StartAgentTaskRequestSchema, StartAgentTurnResponseSchema, StartAgentTurnRequestSchema, SteerAgentTurnResponseSchema, SteerAgentTurnRequestSchema, InterruptAgentTurnResponseSchema, InterruptAgentTurnRequestSchema, ResolvePendingRequestResponseSchema, ResolvePendingRequestRequestSchema, SubmitTaskRequestSchema, AsyncQuestionPageSchema, AnswerAsyncQuestionResponseSchema, AnswerAsyncQuestionRequestSchema, DismissAsyncQuestionsRequestSchema, ProjectTodoPageSchema, ProjectTodoResponseSchema, ProjectTodoDraftSchema, SaveProjectTodoRequestSchema, DeleteProjectTodoResponseSchema, DeleteProjectTodoRequestSchema, AgentQueuedSubmissionListSchema, AddAgentQueuedSubmissionResponseSchema, AddAgentQueuedSubmissionRequestSchema, UpdateAgentQueuedSubmissionResponseSchema, UpdateAgentQueuedSubmissionRequestSchema, DeleteAgentQueuedSubmissionResponseSchema, ReorderAgentQueuedSubmissionsResponseSchema, ReorderAgentQueuedSubmissionsRequestSchema, StartAgentQueuedSubmissionResponseSchema, StartAgentQueuedSubmissionRequestSchema, AgentPromptInputSchema, AgentProviderConnectionRecordSchema, MAX_AGENT_IMAGES, MAX_AGENT_IMAGE_TOTAL_BYTES, MAX_AGENT_FILE_TOTAL_BYTES, ProjectGitStatusSchema, ProjectGitStatusQuerySchema, ProjectGitHistoryPageSchema, ProjectGitHistoryQuerySchema, ProjectGitCommitFilesPageSchema, ProjectGitCommitFilesQuerySchema, ProjectGitCommitFileDiffSchema, ProjectGitCommitFileDiffQuerySchema, SwitchProjectBranchRequestSchema, CreateProjectBranchRequestSchema, GenerateCommitMessageResponseSchema, GenerateCommitMessageRequestSchema, CommitProjectChangesResponseSchema, CommitProjectChangesRequestSchema, ProjectFileTreeSchema, ProjectFileTreeQuerySchema, ProjectFileSearchPageSchema, ProjectFileSearchQuerySchema, StopProjectFileSearchResponseSchema, StopProjectFileSearchRequestSchema, ProjectSourceFileQuerySchema, ProjectSourceFileSchema, AgentAttachmentUploadResponseSchema, HostFileKindSchema, ImportHostAttachmentRequestSchema, AgentAttachmentKindSchema, AgentTaskSettingsResponseSchema, AgentTaskSettingsSchema, ReloadAgentMcpServersResponseSchema, ReloadAgentMcpServersRequestSchema, ReviewAgentTaskResponseSchema, ReviewAgentTaskRequestSchema, CompactAgentTaskResponseSchema, CompactAgentTaskRequestSchema, ForkAgentTaskResponseSchema, ForkAgentTaskRequestSchema, UploadAgentFeedbackResponseSchema, UploadAgentFeedbackRequestSchema, DeleteArchivedTasksResponseSchema, DeleteArchivedTasksRequestSchema, AgentTaskCatalogSchema, TaskCatalogQuerySchema, CompletedTasksPageSchema, CompletedTasksQuerySchema, UpdateTaskSettingsAndDefaultsResponseSchema, UpdateTaskSettingsAndDefaultsRequestSchema, NavigableAgentTaskResponseSchema, OpenAgentTaskAttachmentResponseSchema, OpenAgentTaskAttachmentRequestSchema, UpdateAgentGoalResponseSchema, UpdateAgentGoalRequestSchema, ClearAgentGoalResponseSchema, ProjectTodoSchema, AgentMessageAttachmentSchema, ProjectGitWorktreePageSchema, CreateProjectWorktreeResponseSchema, CreateProjectWorktreeRequestSchema, ProjectWorktreeMutationResponseSchema, SwitchProjectWorktreeRequestSchema, RenameProjectFileResponseSchema, RenameProjectFileRequestSchema, DeleteProjectFileResponseSchema, DeleteProjectFileRequestSchema, MAX_EVENT_BATCH_SIZE } from './chunk-ZXTTTT25.js';
 import { __commonJS, __require, __toESM } from './chunk-K6J42667.js';
 import { Buffer as Buffer$1 } from 'buffer';
 import { randomBytes, createHash, timingSafeEqual, randomUUID } from 'crypto';
 import { createWriteStream, constants, createReadStream } from 'fs';
-import { mkdtemp, rm, realpath, lstat, stat, readFile, open, mkdir, readdir, access, writeFile, rename, unlink, link, rmdir, readlink } from 'fs/promises';
+import { mkdtemp, rm, realpath, lstat, stat, readFile, open, readdir, mkdir, access, writeFile, rename, unlink, link, rmdir, readlink } from 'fs/promises';
 import { tmpdir, homedir } from 'os';
 import { join, isAbsolute, dirname, resolve, relative, sep, basename, extname, normalize, win32, posix } from 'path';
 import { Transform, Readable } from 'stream';
@@ -13180,49 +13180,49 @@ var require_fast_uri = __commonJS({
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base, relative8, options, skipNormalization) {
+    function resolveComponent(base, relative9, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base = parse2(serialize(base, options), options);
-        relative8 = parse2(serialize(relative8, options), options);
+        relative9 = parse2(serialize(relative9, options), options);
       }
       options = options || {};
-      if (!options.tolerant && relative8.scheme) {
-        target.scheme = relative8.scheme;
-        target.userinfo = relative8.userinfo;
-        target.host = relative8.host;
-        target.port = relative8.port;
-        target.path = removeDotSegments(relative8.path || "");
-        target.query = relative8.query;
+      if (!options.tolerant && relative9.scheme) {
+        target.scheme = relative9.scheme;
+        target.userinfo = relative9.userinfo;
+        target.host = relative9.host;
+        target.port = relative9.port;
+        target.path = removeDotSegments(relative9.path || "");
+        target.query = relative9.query;
       } else {
-        if (relative8.userinfo !== void 0 || relative8.host !== void 0 || relative8.port !== void 0) {
-          target.userinfo = relative8.userinfo;
-          target.host = relative8.host;
-          target.port = relative8.port;
-          target.path = removeDotSegments(relative8.path || "");
-          target.query = relative8.query;
+        if (relative9.userinfo !== void 0 || relative9.host !== void 0 || relative9.port !== void 0) {
+          target.userinfo = relative9.userinfo;
+          target.host = relative9.host;
+          target.port = relative9.port;
+          target.path = removeDotSegments(relative9.path || "");
+          target.query = relative9.query;
         } else {
-          if (!relative8.path) {
+          if (!relative9.path) {
             target.path = base.path;
-            if (relative8.query !== void 0) {
-              target.query = relative8.query;
+            if (relative9.query !== void 0) {
+              target.query = relative9.query;
             } else {
               target.query = base.query;
             }
           } else {
-            if (relative8.path[0] === "/") {
-              target.path = removeDotSegments(relative8.path);
+            if (relative9.path[0] === "/") {
+              target.path = removeDotSegments(relative9.path);
             } else {
               if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
-                target.path = "/" + relative8.path;
+                target.path = "/" + relative9.path;
               } else if (!base.path) {
-                target.path = relative8.path;
+                target.path = relative9.path;
               } else {
-                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative8.path;
+                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative9.path;
               }
               target.path = removeDotSegments(target.path);
             }
-            target.query = relative8.query;
+            target.query = relative9.query;
           }
           target.userinfo = base.userinfo;
           target.host = base.host;
@@ -13230,7 +13230,7 @@ var require_fast_uri = __commonJS({
         }
         target.scheme = base.scheme;
       }
-      target.fragment = relative8.fragment;
+      target.fragment = relative9.fragment;
       return target;
     }
     function equal(uriA, uriB, options) {
@@ -19715,49 +19715,49 @@ var require_fast_uri2 = __commonJS({
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base, relative8, options, skipNormalization) {
+    function resolveComponent(base, relative9, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base = parse2(serialize(base, options), options);
-        relative8 = parse2(serialize(relative8, options), options);
+        relative9 = parse2(serialize(relative9, options), options);
       }
       options = options || {};
-      if (!options.tolerant && relative8.scheme) {
-        target.scheme = relative8.scheme;
-        target.userinfo = relative8.userinfo;
-        target.host = relative8.host;
-        target.port = relative8.port;
-        target.path = removeDotSegments(relative8.path || "");
-        target.query = relative8.query;
+      if (!options.tolerant && relative9.scheme) {
+        target.scheme = relative9.scheme;
+        target.userinfo = relative9.userinfo;
+        target.host = relative9.host;
+        target.port = relative9.port;
+        target.path = removeDotSegments(relative9.path || "");
+        target.query = relative9.query;
       } else {
-        if (relative8.userinfo !== void 0 || relative8.host !== void 0 || relative8.port !== void 0) {
-          target.userinfo = relative8.userinfo;
-          target.host = relative8.host;
-          target.port = relative8.port;
-          target.path = removeDotSegments(relative8.path || "");
-          target.query = relative8.query;
+        if (relative9.userinfo !== void 0 || relative9.host !== void 0 || relative9.port !== void 0) {
+          target.userinfo = relative9.userinfo;
+          target.host = relative9.host;
+          target.port = relative9.port;
+          target.path = removeDotSegments(relative9.path || "");
+          target.query = relative9.query;
         } else {
-          if (!relative8.path) {
+          if (!relative9.path) {
             target.path = base.path;
-            if (relative8.query !== void 0) {
-              target.query = relative8.query;
+            if (relative9.query !== void 0) {
+              target.query = relative9.query;
             } else {
               target.query = base.query;
             }
           } else {
-            if (relative8.path[0] === "/") {
-              target.path = removeDotSegments(relative8.path);
+            if (relative9.path[0] === "/") {
+              target.path = removeDotSegments(relative9.path);
             } else {
               if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
-                target.path = "/" + relative8.path;
+                target.path = "/" + relative9.path;
               } else if (!base.path) {
-                target.path = relative8.path;
+                target.path = relative9.path;
               } else {
-                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative8.path;
+                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative9.path;
               }
               target.path = removeDotSegments(target.path);
             }
-            target.query = relative8.query;
+            target.query = relative9.query;
           }
           target.userinfo = base.userinfo;
           target.host = base.host;
@@ -19765,7 +19765,7 @@ var require_fast_uri2 = __commonJS({
         }
         target.scheme = base.scheme;
       }
-      target.fragment = relative8.fragment;
+      target.fragment = relative9.fragment;
       return target;
     }
     function equal(uriA, uriB, options) {
@@ -36591,10 +36591,10 @@ var require_resolve_block_map = __commonJS({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start, key, sep: sep7, value } = collItem;
+        const { start, key, sep: sep8, value } = collItem;
         const keyProps = resolveProps.resolveProps(start, {
           indicator: "explicit-key-ind",
-          next: key ?? sep7?.[0],
+          next: key ?? sep8?.[0],
           offset,
           onError: onError2,
           parentIndent: bm.indent,
@@ -36608,7 +36608,7 @@ var require_resolve_block_map = __commonJS({
             else if ("indent" in key && key.indent !== bm.indent)
               onError2(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep7) {
+          if (!keyProps.anchor && !keyProps.tag && !sep8) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -36632,7 +36632,7 @@ var require_resolve_block_map = __commonJS({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError2(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep7 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep8 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -36648,7 +36648,7 @@ var require_resolve_block_map = __commonJS({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError2(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError2) : composeEmptyNode(ctx, offset, sep7, null, valueProps, onError2);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError2) : composeEmptyNode(ctx, offset, sep8, null, valueProps, onError2);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError2);
           offset = valueNode.range[2];
@@ -36737,7 +36737,7 @@ var require_resolve_end = __commonJS({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep7 = "";
+        let sep8 = "";
         for (const token of end) {
           const { source, type } = token;
           switch (type) {
@@ -36751,13 +36751,13 @@ var require_resolve_end = __commonJS({
               if (!comment)
                 comment = cb;
               else
-                comment += sep7 + cb;
-              sep7 = "";
+                comment += sep8 + cb;
+              sep8 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep7 += source;
+                sep8 += source;
               hasSpace = true;
               break;
             default:
@@ -36799,18 +36799,18 @@ var require_resolve_flow_collection = __commonJS({
       let offset = fc.offset + fc.start.source.length;
       for (let i2 = 0; i2 < fc.items.length; ++i2) {
         const collItem = fc.items[i2];
-        const { start, key, sep: sep7, value } = collItem;
+        const { start, key, sep: sep8, value } = collItem;
         const props = resolveProps.resolveProps(start, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep7?.[0],
+          next: key ?? sep8?.[0],
           offset,
           onError: onError2,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep7 && !value) {
+          if (!props.anchor && !props.tag && !sep8 && !value) {
             if (i2 === 0 && props.comma)
               onError2(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i2 < fc.items.length - 1)
@@ -36864,8 +36864,8 @@ var require_resolve_flow_collection = __commonJS({
             }
           }
         }
-        if (!isMap && !sep7 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError2) : composeEmptyNode(ctx, props.end, sep7, null, props, onError2);
+        if (!isMap && !sep8 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError2) : composeEmptyNode(ctx, props.end, sep8, null, props, onError2);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -36877,7 +36877,7 @@ var require_resolve_flow_collection = __commonJS({
           if (isBlock(key))
             onError2(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep7 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep8 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -36888,8 +36888,8 @@ var require_resolve_flow_collection = __commonJS({
           });
           if (valueProps.found) {
             if (!isMap && !props.found && ctx.options.strict) {
-              if (sep7)
-                for (const st of sep7) {
+              if (sep8)
+                for (const st of sep8) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -36906,7 +36906,7 @@ var require_resolve_flow_collection = __commonJS({
             else
               onError2(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError2) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep7, null, valueProps, onError2) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError2) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep8, null, valueProps, onError2) : null;
           if (valueNode) {
             if (isBlock(value))
               onError2(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -37084,7 +37084,7 @@ var require_resolve_block_scalar = __commonJS({
           chompStart = i2 + 1;
       }
       let value = "";
-      let sep7 = "";
+      let sep8 = "";
       let prevMoreIndented = false;
       for (let i2 = 0; i2 < contentStart; ++i2)
         value += lines[i2][0].slice(trimIndent) + "\n";
@@ -37101,24 +37101,24 @@ var require_resolve_block_scalar = __commonJS({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep7 + indent.slice(trimIndent) + content;
-          sep7 = "\n";
+          value += sep8 + indent.slice(trimIndent) + content;
+          sep8 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep7 === " ")
-            sep7 = "\n";
-          else if (!prevMoreIndented && sep7 === "\n")
-            sep7 = "\n\n";
-          value += sep7 + indent.slice(trimIndent) + content;
-          sep7 = "\n";
+          if (sep8 === " ")
+            sep8 = "\n";
+          else if (!prevMoreIndented && sep8 === "\n")
+            sep8 = "\n\n";
+          value += sep8 + indent.slice(trimIndent) + content;
+          sep8 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep7 === "\n")
+          if (sep8 === "\n")
             value += "\n";
           else
-            sep7 = "\n";
+            sep8 = "\n";
         } else {
-          value += sep7 + content;
-          sep7 = " ";
+          value += sep8 + content;
+          sep8 = " ";
           prevMoreIndented = false;
         }
       }
@@ -37299,25 +37299,25 @@ var require_resolve_flow_scalar = __commonJS({
       if (!match)
         return source;
       let res = match[1];
-      let sep7 = " ";
+      let sep8 = " ";
       let pos = first2.lastIndex;
       line.lastIndex = pos;
       while (match = line.exec(source)) {
         if (match[1] === "") {
-          if (sep7 === "\n")
-            res += sep7;
+          if (sep8 === "\n")
+            res += sep8;
           else
-            sep7 = "\n";
+            sep8 = "\n";
         } else {
-          res += sep7 + match[1];
-          sep7 = " ";
+          res += sep8 + match[1];
+          sep8 = " ";
         }
         pos = line.lastIndex;
       }
       const last2 = /[ \t]*(.*)/sy;
       last2.lastIndex = pos;
       match = last2.exec(source);
-      return res + sep7 + (match?.[1] ?? "");
+      return res + sep8 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source, onError2) {
       let res = "";
@@ -38120,14 +38120,14 @@ var require_cst_stringify = __commonJS({
         }
       }
     }
-    function stringifyItem({ start, key, sep: sep7, value }) {
+    function stringifyItem({ start, key, sep: sep8, value }) {
       let res = "";
       for (const st of start)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep7)
-        for (const st of sep7)
+      if (sep8)
+        for (const st of sep8)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -39289,18 +39289,18 @@ var require_parser = __commonJS({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
-          let sep7;
+          let sep8;
           if (scalar.end) {
-            sep7 = scalar.end;
-            sep7.push(this.sourceToken);
+            sep8 = scalar.end;
+            sep8.push(this.sourceToken);
             delete scalar.end;
           } else
-            sep7 = [this.sourceToken];
+            sep8 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar.offset,
             indent: scalar.indent,
-            items: [{ start, key: scalar, sep: sep7 }]
+            items: [{ start, key: scalar, sep: sep8 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -39453,15 +39453,15 @@ var require_parser = __commonJS({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start2 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep7 = it.sep;
-                  sep7.push(this.sourceToken);
+                  const sep8 = it.sep;
+                  sep8.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start2, key, sep: sep7 }]
+                    items: [{ start: start2, key, sep: sep8 }]
                   });
                 } else if (start.length > 0) {
                   it.sep = it.sep.concat(start, this.sourceToken);
@@ -39655,13 +39655,13 @@ var require_parser = __commonJS({
             const prev = getPrevProps(parent);
             const start = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep7 = fc.end.splice(1, fc.end.length);
-            sep7.push(this.sourceToken);
+            const sep8 = fc.end.splice(1, fc.end.length);
+            sep8.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start, key: fc, sep: sep7 }]
+              items: [{ start, key: fc, sep: sep8 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -41495,7 +41495,7 @@ var require_parseParams = __commonJS({
 // node_modules/.pnpm/@fastify+busboy@3.2.0/node_modules/@fastify/busboy/lib/utils/basename.js
 var require_basename = __commonJS({
   "node_modules/.pnpm/@fastify+busboy@3.2.0/node_modules/@fastify/busboy/lib/utils/basename.js"(exports, module) {
-    module.exports = function basename7(path) {
+    module.exports = function basename8(path) {
       if (typeof path !== "string") {
         return "";
       }
@@ -41521,7 +41521,7 @@ var require_multipart = __commonJS({
     var Dicer = require_Dicer();
     var parseParams = require_parseParams();
     var decodeText = require_decodeText();
-    var basename7 = require_basename();
+    var basename8 = require_basename();
     var getLimit = require_getLimit();
     var RE_BOUNDARY = /^boundary$/i;
     var RE_FIELD = /^form-data$/i;
@@ -41638,7 +41638,7 @@ var require_multipart = __commonJS({
               } else if (RE_FILENAME.test(parsed[i2][0])) {
                 filename = parsed[i2][1];
                 if (!preservePath) {
-                  filename = basename7(filename);
+                  filename = basename8(filename);
                 }
               }
             }
@@ -46561,7 +46561,7 @@ var require_parseTokenList = __commonJS({
 // node_modules/.pnpm/depd@2.0.0/node_modules/depd/index.js
 var require_depd = __commonJS({
   "node_modules/.pnpm/depd@2.0.0/node_modules/depd/index.js"(exports, module) {
-    var relative8 = __require("path").relative;
+    var relative9 = __require("path").relative;
     module.exports = depd;
     var basePath = process.cwd();
     function containsNamespace(str, namespace) {
@@ -46753,7 +46753,7 @@ var require_depd = __commonJS({
       return formatted;
     }
     function formatLocation(callSite) {
-      return relative8(basePath, callSite[0]) + ":" + callSite[1] + ":" + callSite[2];
+      return relative9(basePath, callSite[0]) + ":" + callSite[1] + ":" + callSite[2];
     }
     function getStack() {
       var limit = Error.stackTraceLimit;
@@ -47283,7 +47283,7 @@ var require_send = __commonJS({
     var join12 = path.join;
     var normalize2 = path.normalize;
     var resolve8 = path.resolve;
-    var sep7 = path.sep;
+    var sep8 = path.sep;
     var Readable4 = stream.Readable;
     var BYTES_RANGE_REGEXP = /^ *bytes=/;
     var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1e3;
@@ -47360,20 +47360,20 @@ var require_send = __commonJS({
       let parts;
       if (root !== null) {
         if (path2) {
-          path2 = normalize2("." + sep7 + path2);
+          path2 = normalize2("." + sep8 + path2);
         }
         if (UP_PATH_REGEXP.test(path2)) {
           debug2('malicious path "%s"', path2);
           return { statusCode: 403 };
         }
-        parts = path2.split(sep7);
+        parts = path2.split(sep8);
         path2 = normalize2(join12(root, path2));
       } else {
         if (UP_PATH_REGEXP.test(path2)) {
           debug2('malicious path "%s"', path2);
           return { statusCode: 403 };
         }
-        parts = normalize2(path2).split(sep7);
+        parts = normalize2(path2).split(sep8);
         path2 = resolve8(path2);
       }
       return { path: path2, parts };
@@ -47666,7 +47666,7 @@ var require_send = __commonJS({
     }
     async function sendFile(request2, path2, options) {
       const { error, stat: stat6 } = await tryStat(path2);
-      if (error && error.code === "ENOENT" && !extname3(path2) && path2[path2.length - 1] !== sep7) {
+      if (error && error.code === "ENOENT" && !extname3(path2) && path2[path2.length - 1] !== sep8) {
         let err2 = error;
         for (let i2 = 0; i2 < options.extensions.length; i2++) {
           const extension = options.extensions[i2];
@@ -48404,7 +48404,7 @@ var require_static = __commonJS({
     var path = __require("path");
     var { fileURLToPath } = __require("url");
     var { statSync } = __require("fs");
-    var { basename: basename7 } = __require("path");
+    var { basename: basename8 } = __require("path");
     var { glob } = require_index_min();
     var fp = require_fastify_plugin();
     var send = require_send2();
@@ -48429,7 +48429,7 @@ var require_static = __commonJS({
       deflate: ".deflate"
     };
     function contentDisposition(filename) {
-      return create(basename7(filename));
+      return create(basename8(filename));
     }
     async function fastifyStatic2(fastify, opts) {
       const suppressWarning = opts.suppressWarning ?? false;
@@ -66470,6 +66470,31 @@ var ProjectDirectoryBrowserError = class extends Error {
   }
   reason;
 };
+function isWithinRoot(root, path) {
+  const relativePath = relative(root, path);
+  return relativePath === "" || !relativePath.startsWith(`..${sep}`) && relativePath !== ".." && !isAbsolute(relativePath);
+}
+async function normalizeWorkspaceRoots(roots) {
+  if (roots === void 0) return [];
+  return Promise.all(
+    roots.map(async (root) => {
+      if (!isAbsolute(root)) {
+        throw new ProjectDirectoryBrowserError(
+          "Workspace root path must be absolute",
+          "invalid-directory"
+        );
+      }
+      const normalizedRoot = await realpath(root);
+      if (!(await lstat(normalizedRoot)).isDirectory()) {
+        throw new ProjectDirectoryBrowserError(
+          "Workspace root path must identify a directory",
+          "invalid-directory"
+        );
+      }
+      return normalizedRoot;
+    })
+  );
+}
 function toDirectoryError(error) {
   const code = error.code;
   const unavailable = code === "EACCES" || code === "EPERM";
@@ -66483,7 +66508,14 @@ function compareDirectories(left, right) {
   return left.name.localeCompare(right.name, "en", { sensitivity: "base" }) || left.name.localeCompare(right.name, "en");
 }
 async function resolveProjectDirectory(requestedPath, options = {}) {
-  const path = requestedPath ?? options.homePath ?? homedir();
+  let workspaceRoots;
+  try {
+    workspaceRoots = await normalizeWorkspaceRoots(options.workspaceRoots);
+  } catch (error) {
+    if (error instanceof ProjectDirectoryBrowserError) throw error;
+    throw toDirectoryError(error);
+  }
+  const path = requestedPath ?? workspaceRoots[0] ?? options.homePath ?? homedir();
   if (!isAbsolute(path)) {
     throw new ProjectDirectoryBrowserError(
       "Project directory path must be absolute",
@@ -66498,6 +66530,12 @@ async function resolveProjectDirectory(requestedPath, options = {}) {
         "invalid-directory"
       );
     }
+    if (workspaceRoots.length > 0 && !workspaceRoots.some((root) => isWithinRoot(root, normalizedPath))) {
+      throw new ProjectDirectoryBrowserError(
+        "Project directory is outside the configured workspace roots",
+        "invalid-directory"
+      );
+    }
     return normalizedPath;
   } catch (error) {
     if (error instanceof ProjectDirectoryBrowserError) {
@@ -66507,10 +66545,11 @@ async function resolveProjectDirectory(requestedPath, options = {}) {
   }
 }
 async function readProjectDirectory(requestedPath, options = {}) {
-  const [path, roots] = await Promise.all([
+  const [path, workspaceRoots] = await Promise.all([
     resolveProjectDirectory(requestedPath, options),
-    (options.filesystemRoots ?? listFilesystemRoots)()
+    normalizeWorkspaceRoots(options.workspaceRoots)
   ]);
+  const roots = workspaceRoots.length > 0 ? workspaceRoots.map((root) => ({ name: basename(root), path: root })) : await (options.filesystemRoots ?? listFilesystemRoots)();
   let entries;
   try {
     const children = await readdir(path, { withFileTypes: true });
@@ -66525,7 +66564,7 @@ async function readProjectDirectory(requestedPath, options = {}) {
   const parentPath = dirname(path);
   return {
     entries,
-    parentPath: parentPath === path ? null : parentPath,
+    parentPath: parentPath === path || workspaceRoots.some((root) => root === path) ? null : parentPath,
     path,
     roots
   };
@@ -72961,6 +73000,9 @@ async function createCodexlyServer(options) {
   const readImageFile = options.readProjectImageFile ?? readProjectImageFile;
   const readSourceFile = options.readProjectSourceFile ?? readProjectSourceFile;
   const projectOpenService = options.projectOpenService ?? createProjectOpenService();
+  const workspaceBrowserOptions = options.workspaceRoots === void 0 ? {} : { workspaceRoots: options.workspaceRoots };
+  const browseProjectDirectory = options.readProjectDirectory ?? ((path, browserOptions) => readProjectDirectory(path, { ...browserOptions, ...workspaceBrowserOptions }));
+  const selectProjectDirectory = options.resolveProjectDirectory ?? ((path) => resolveProjectDirectory(path, workspaceBrowserOptions));
   const skillMarketService = options.skillMarketService ?? createSkillMarketService({
     catalog: createClawhubClient(),
     projectOpenService,
@@ -73203,7 +73245,7 @@ async function createCodexlyServer(options) {
     searchProjectFiles,
     stopProjectFileSearch,
     readHostFileDirectory: options.readHostFileDirectory ?? readHostFileDirectory,
-    readProjectDirectory: options.readProjectDirectory ?? readProjectDirectory,
+    readProjectDirectory: browseProjectDirectory,
     readImageFile,
     readInheritedTaskSettings,
     readProjectGitHistory: options.readProjectGitHistory ?? readProjectGitHistory,
@@ -73215,7 +73257,7 @@ async function createCodexlyServer(options) {
     releaseProjectContext,
     resolveProviderTurnInput,
     runIdempotent: idempotencyRunner.run,
-    resolveProjectDirectory: options.resolveProjectDirectory ?? resolveProjectDirectory,
+    resolveProjectDirectory: selectProjectDirectory,
     resolveHostAttachment: options.resolveHostAttachment ?? resolveHostAttachment,
     readScheduledTaskAttachment: async (projectId, attachmentId) => scheduledTaskAttachmentManager === void 0 ? void 0 : scheduledTaskAttachmentManager.read(projectId, attachmentId),
     settingsRepository: options.settingsRepository,

package/dist/{chunk-NUJPWN62.js → chunk-PRIMEL2G.js}

@@ -12020,6 +12020,7 @@ var CodexProviderConnectionService = class {
     try {
       readProviderCapabilities(await this.#client.request("modelProvider/capabilities/read", {}));
       if (apiKey !== void 0) {
+        await this.#client.request("account/logout");
         const loginResponse = await this.#client.request("account/login/start", {
           apiKey,
           type: "apiKey"

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { createCodexlyServer, SqliteStateRepository, normalizeAllowedHost } from './chunk-4VM2ZUPT.js';
+import { createCodexlyServer, SqliteStateRepository, normalizeAllowedHost } from './chunk-HGSPZCBB.js';
 import './chunk-6JWQNFM2.js';
-import { startCodexAppServer, locateCodexBinary, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, CodexProjectRepository, checkCodexVersion } from './chunk-NUJPWN62.js';
+import { startCodexAppServer, locateCodexBinary, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, CodexProjectRepository, checkCodexVersion } from './chunk-PRIMEL2G.js';
 import './chunk-B2673ODM.js';
 import { DEFAULT_COMMIT_MESSAGE_MODEL } from './chunk-ZXTTTT25.js';
 import './chunk-GT7XTSEG.js';
@@ -22,7 +22,7 @@ createRequire(import.meta.url);
 
 // package.json
 var package_default = {
-  version: "0.22.1"};
+  version: "0.23.0"};
 var INSTALL_TIMEOUT_MS = 2 * 6e4;
 function resolveNpmCommandInvocation(args, platform = process.platform, execPath = process.execPath, elevated = false) {
   const invocation = platform === "win32" ? {
@@ -436,6 +436,8 @@ Start options:
   --codex-bin <path>         Use the Codex executable at the specified path.
   --codex-home <path>        Use a custom Codex home directory instead of CODEX_HOME
                              or the default ~/.codex directory.
+  --workspace <path>         Restrict project selection to an absolute workspace root.
+                             May be repeated for multiple roots.
 
 Doctor options:
   --codex-bin <path>         Check the Codex executable at the specified path.
@@ -450,6 +452,7 @@ Examples:
   codexly start --lan --lan-password 'Strong-Lan_Pass9!'
   codexly start --allowed-host code.example.com
   codexly start --lan --session-ttl 12h
+  codexly start --workspace /workspace
   codexly doctor --codex-bin /path/to/codex
   codexly version
 
@@ -463,7 +466,7 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
     if (!option || !valueOptions.has(option) && !flagOptions.has(option)) {
       throw new Error(`\u672A\u77E5\u9009\u9879: ${option ?? "<empty>"}`);
     }
-    const repeatable = option === "--allowed-host";
+    const repeatable = option === "--allowed-host" || option === "--workspace";
     if (seen.has(option) && !repeatable) {
       throw new Error(`\u9009\u9879\u91CD\u590D: ${option}`);
     }
@@ -486,6 +489,8 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
       parsed.lanPassword = value;
     } else if (option === "--allowed-host") {
       parsed.allowedHosts = [...parsed.allowedHosts ?? [], value];
+    } else if (option === "--workspace") {
+      parsed.workspaceRoots = [...parsed.workspaceRoots ?? [], value];
     } else if (option === "--port") {
       if (!/^\d+$/u.test(value)) {
         throw new Error("--port \u5FC5\u987B\u662F 1 \u5230 65535 \u4E4B\u95F4\u7684\u6574\u6570");
@@ -502,6 +507,24 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
   }
   return parsed;
 }
+function applyStartEnvironmentDefaults(options, environment) {
+  const environmentArgs = [];
+  const append = (option, value) => {
+    if (value !== void 0 && value.trim() !== "") environmentArgs.push(option, value.trim());
+  };
+  append("--lan-password", environment["CODEXLY_LAN_PASSWORD"]);
+  append("--port", environment["CODEXLY_PORT"]);
+  append("--session-ttl", environment["CODEXLY_SESSION_TTL"]);
+  append("--workspace", environment["CODEXLY_WORKSPACE"]);
+  for (const host of environment["CODEXLY_ALLOWED_HOSTS"]?.split(",") ?? []) {
+    append("--allowed-host", host);
+  }
+  const defaults = parseCommandOptions(
+    environmentArgs,
+    /* @__PURE__ */ new Set(["--allowed-host", "--lan-password", "--port", "--session-ttl", "--workspace"])
+  );
+  return { ...defaults, ...options };
+}
 
 // src/cli-shutdown.ts
 function createProcessShutdownSignal() {
@@ -920,17 +943,21 @@ async function runDoctor(args, dependencies, output) {
   return 0;
 }
 async function runStart(args, dependencies, signal, output) {
-  const options = parseCommandOptions(
-    args,
-    /* @__PURE__ */ new Set([
-      "--allowed-host",
-      "--codex-bin",
-      "--codex-home",
-      "--lan-password",
-      "--port",
-      "--session-ttl"
-    ]),
-    /* @__PURE__ */ new Set(["--lan"])
+  const options = applyStartEnvironmentDefaults(
+    parseCommandOptions(
+      args,
+      /* @__PURE__ */ new Set([
+        "--allowed-host",
+        "--codex-bin",
+        "--codex-home",
+        "--lan-password",
+        "--port",
+        "--session-ttl",
+        "--workspace"
+      ]),
+      /* @__PURE__ */ new Set(["--lan"])
+    ),
+    process.env
   );
   if (options.sessionTtl !== void 0 && options.lan !== true) {
     throw new Error("--session-ttl \u53EA\u80FD\u4E0E --lan \u4E00\u8D77\u4F7F\u7528");
@@ -1036,8 +1063,9 @@ async function runStart(args, dependencies, signal, output) {
       projectTodoRepository: stateRepository,
       settingsRepository: stateRepository,
       staticRoot: dependencies.webRoot,
-      // Standalone Thread 继承 app-server 的 cwd，不再创建伪项目目录。
-      standaloneCwd: process.cwd()
+      // 受限部署让临时任务继承首个工作区，避免绕过项目目录边界。
+      standaloneCwd: options.workspaceRoots?.[0] ?? process.cwd(),
+      ...options.workspaceRoots === void 0 ? {} : { workspaceRoots: options.workspaceRoots }
     });
     const host = options.lan === true ? "0.0.0.0" : "127.0.0.1";
     const activePort = await listenOnAvailablePort(server, host, port);

package/dist/providers/codex/index.js

@@ -1,5 +1,5 @@
 import { createRequire } from 'node:module';
-export { CodexAppServerExitedError, CodexAppServerProcess, CodexAppServerShutdownError, CodexAppServerSpawnError, CodexProjectRepository, CodexProtocolMappingError, CodexProviderConnectionError, CodexProviderConnectionService, CodexRuntimeProvider, CodexWorkbenchPetProvider, JsonlRpcClient, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError, SUPPORTED_CODEX_VERSION, SUPPORTED_CODEX_VERSION_RANGE, checkCodexVersion, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, locateCodexBinary, startCodexAppServer } from '../../chunk-NUJPWN62.js';
+export { CodexAppServerExitedError, CodexAppServerProcess, CodexAppServerShutdownError, CodexAppServerSpawnError, CodexProjectRepository, CodexProtocolMappingError, CodexProviderConnectionError, CodexProviderConnectionService, CodexRuntimeProvider, CodexWorkbenchPetProvider, JsonlRpcClient, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError, SUPPORTED_CODEX_VERSION, SUPPORTED_CODEX_VERSION_RANGE, checkCodexVersion, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, locateCodexBinary, startCodexAppServer } from '../../chunk-PRIMEL2G.js';
 import '../../chunk-B2673ODM.js';
 import '../../chunk-ZXTTTT25.js';
 import '../../chunk-GT7XTSEG.js';

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import { createRequire } from 'node:module';
-export { AccessSessionService, AgentEventStream, GitCommitError, GitCommitReviewError, SqliteStateRepository, commitSelectedProjectChanges, createCodexlyServer, normalizeAllowedHost, readProjectGitCommitFileDiff, readProjectGitCommitFiles } from '../chunk-4VM2ZUPT.js';
+export { AccessSessionService, AgentEventStream, GitCommitError, GitCommitReviewError, SqliteStateRepository, commitSelectedProjectChanges, createCodexlyServer, normalizeAllowedHost, readProjectGitCommitFileDiff, readProjectGitCommitFiles } from '../chunk-HGSPZCBB.js';
 import '../chunk-6JWQNFM2.js';
-import '../chunk-NUJPWN62.js';
+import '../chunk-PRIMEL2G.js';
 import '../chunk-B2673ODM.js';
 import '../chunk-ZXTTTT25.js';
 import '../chunk-GT7XTSEG.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bryanhu/codexly",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "description": "通过 Web 操作本地 Coding Agent 的应用",
   "type": "module",
   "author": "BryanHu",
@@ -66,6 +66,8 @@
     "codex:schema:check": "node ./tools/verify-codex-schema.mjs",
     "codex:schema:update": "node ./tools/verify-codex-schema.mjs --update",
     "dev": "pnpm --filter @codexly/web dev",
+    "docker:build": "docker build --tag codexly:local .",
+    "docker:test": "node ./tools/test-docker-image.mjs",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
     "lint": "oxlint . --max-warnings 0 --report-unused-disable-directives",