@bryanhu/codexly 0.22.1 → 0.24.0

package/dist/cli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { createCodexlyServer, SqliteStateRepository, normalizeAllowedHost } from './chunk-4VM2ZUPT.js';
+import { createCodexlyServer, SqliteStateRepository, normalizeAllowedHost } from './chunk-MDJUQPOL.js';
 import './chunk-6JWQNFM2.js';
-import { startCodexAppServer, locateCodexBinary, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, CodexProjectRepository, checkCodexVersion } from './chunk-NUJPWN62.js';
+import { startCodexAppServer, locateCodexBinary, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, CodexProjectRepository, checkCodexVersion } from './chunk-YG3QMLCD.js';
 import './chunk-B2673ODM.js';
 import { DEFAULT_COMMIT_MESSAGE_MODEL } from './chunk-ZXTTTT25.js';
 import './chunk-GT7XTSEG.js';
@@ -22,7 +22,7 @@ createRequire(import.meta.url);
 
 // package.json
 var package_default = {
-  version: "0.22.1"};
+  version: "0.24.0"};
 var INSTALL_TIMEOUT_MS = 2 * 6e4;
 function resolveNpmCommandInvocation(args, platform = process.platform, execPath = process.execPath, elevated = false) {
   const invocation = platform === "win32" ? {
@@ -428,14 +428,16 @@ Start options:
                              Automatically increases the port when it is occupied.
   --lan                      Listen on all network interfaces for trusted LAN access.
                              This disables automatic browser opening.
-  --lan-password <password>  Use a custom strong LAN access password instead of a random one.
-                             Requires 16-128 characters and all character types. Requires --lan.
+  --lan-password <password>  Use a custom LAN access password instead of a random one.
+                             Requires 16-128 characters with uppercase, lowercase, and number. Requires --lan.
   --allowed-host <domain>    Allow an exact reverse proxy domain. May be repeated.
   --session-ttl <duration>   Set the fixed LAN session lifetime using ms, s, m, h, or d.
                              Sessions do not expire when omitted. Requires --lan.
   --codex-bin <path>         Use the Codex executable at the specified path.
   --codex-home <path>        Use a custom Codex home directory instead of CODEX_HOME
                              or the default ~/.codex directory.
+  --workspace <path>         Restrict project selection to an absolute workspace root.
+                             May be repeated for multiple roots.
 
 Doctor options:
   --codex-bin <path>         Check the Codex executable at the specified path.
@@ -450,6 +452,7 @@ Examples:
   codexly start --lan --lan-password 'Strong-Lan_Pass9!'
   codexly start --allowed-host code.example.com
   codexly start --lan --session-ttl 12h
+  codexly start --workspace /workspace
   codexly doctor --codex-bin /path/to/codex
   codexly version
 
@@ -463,7 +466,7 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
     if (!option || !valueOptions.has(option) && !flagOptions.has(option)) {
       throw new Error(`\u672A\u77E5\u9009\u9879: ${option ?? "<empty>"}`);
     }
-    const repeatable = option === "--allowed-host";
+    const repeatable = option === "--allowed-host" || option === "--workspace";
     if (seen.has(option) && !repeatable) {
       throw new Error(`\u9009\u9879\u91CD\u590D: ${option}`);
     }
@@ -486,6 +489,8 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
       parsed.lanPassword = value;
     } else if (option === "--allowed-host") {
       parsed.allowedHosts = [...parsed.allowedHosts ?? [], value];
+    } else if (option === "--workspace") {
+      parsed.workspaceRoots = [...parsed.workspaceRoots ?? [], value];
     } else if (option === "--port") {
       if (!/^\d+$/u.test(value)) {
         throw new Error("--port \u5FC5\u987B\u662F 1 \u5230 65535 \u4E4B\u95F4\u7684\u6574\u6570");
@@ -502,6 +507,24 @@ function parseCommandOptions(args, valueOptions, flagOptions = /* @__PURE__ */ n
   }
   return parsed;
 }
+function applyStartEnvironmentDefaults(options, environment) {
+  const environmentArgs = [];
+  const append = (option, value) => {
+    if (value !== void 0 && value.trim() !== "") environmentArgs.push(option, value.trim());
+  };
+  append("--lan-password", environment["CODEXLY_LAN_PASSWORD"]);
+  append("--port", environment["CODEXLY_PORT"]);
+  append("--session-ttl", environment["CODEXLY_SESSION_TTL"]);
+  append("--workspace", environment["CODEXLY_WORKSPACE"]);
+  for (const host of environment["CODEXLY_ALLOWED_HOSTS"]?.split(",") ?? []) {
+    append("--allowed-host", host);
+  }
+  const defaults = parseCommandOptions(
+    environmentArgs,
+    /* @__PURE__ */ new Set(["--allowed-host", "--lan-password", "--port", "--session-ttl", "--workspace"])
+  );
+  return { ...defaults, ...options };
+}
 
 // src/cli-shutdown.ts
 function createProcessShutdownSignal() {
@@ -809,10 +832,10 @@ function parseSessionTtl(value) {
   return Number(milliseconds);
 }
 function validateLanPassword(value) {
-  const hasRequiredStrength = value.length >= MIN_LAN_PASSWORD_LENGTH && value.length <= MAX_LAN_PASSWORD_LENGTH && /[A-Z]/u.test(value) && /[a-z]/u.test(value) && /[0-9]/u.test(value) && /[^A-Za-z0-9]/u.test(value);
+  const hasRequiredStrength = value.length >= MIN_LAN_PASSWORD_LENGTH && value.length <= MAX_LAN_PASSWORD_LENGTH && /[A-Z]/u.test(value) && /[a-z]/u.test(value) && /[0-9]/u.test(value);
   if (!hasRequiredStrength) {
     throw new Error(
-      "Invalid LAN password; expected 16 to 128 characters with uppercase, lowercase, number, and symbol"
+      "Invalid LAN password; expected 16 to 128 characters with uppercase, lowercase, and number"
     );
   }
 }
@@ -920,17 +943,21 @@ async function runDoctor(args, dependencies, output) {
   return 0;
 }
 async function runStart(args, dependencies, signal, output) {
-  const options = parseCommandOptions(
-    args,
-    /* @__PURE__ */ new Set([
-      "--allowed-host",
-      "--codex-bin",
-      "--codex-home",
-      "--lan-password",
-      "--port",
-      "--session-ttl"
-    ]),
-    /* @__PURE__ */ new Set(["--lan"])
+  const options = applyStartEnvironmentDefaults(
+    parseCommandOptions(
+      args,
+      /* @__PURE__ */ new Set([
+        "--allowed-host",
+        "--codex-bin",
+        "--codex-home",
+        "--lan-password",
+        "--port",
+        "--session-ttl",
+        "--workspace"
+      ]),
+      /* @__PURE__ */ new Set(["--lan"])
+    ),
+    process.env
   );
   if (options.sessionTtl !== void 0 && options.lan !== true) {
     throw new Error("--session-ttl \u53EA\u80FD\u4E0E --lan \u4E00\u8D77\u4F7F\u7528");
@@ -1036,8 +1063,9 @@ async function runStart(args, dependencies, signal, output) {
       projectTodoRepository: stateRepository,
       settingsRepository: stateRepository,
       staticRoot: dependencies.webRoot,
-      // Standalone Thread 继承 app-server 的 cwd，不再创建伪项目目录。
-      standaloneCwd: process.cwd()
+      // 受限部署让临时任务继承首个工作区，避免绕过项目目录边界。
+      standaloneCwd: options.workspaceRoots?.[0] ?? process.cwd(),
+      ...options.workspaceRoots === void 0 ? {} : { workspaceRoots: options.workspaceRoots }
     });
     const host = options.lan === true ? "0.0.0.0" : "127.0.0.1";
     const activePort = await listenOnAvailablePort(server, host, port);

package/dist/providers/codex/index.js

@@ -1,5 +1,5 @@
 import { createRequire } from 'node:module';
-export { CodexAppServerExitedError, CodexAppServerProcess, CodexAppServerShutdownError, CodexAppServerSpawnError, CodexProjectRepository, CodexProtocolMappingError, CodexProviderConnectionError, CodexProviderConnectionService, CodexRuntimeProvider, CodexWorkbenchPetProvider, JsonlRpcClient, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError, SUPPORTED_CODEX_VERSION, SUPPORTED_CODEX_VERSION_RANGE, checkCodexVersion, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, locateCodexBinary, startCodexAppServer } from '../../chunk-NUJPWN62.js';
+export { CodexAppServerExitedError, CodexAppServerProcess, CodexAppServerShutdownError, CodexAppServerSpawnError, CodexProjectRepository, CodexProtocolMappingError, CodexProviderConnectionError, CodexProviderConnectionService, CodexRuntimeProvider, CodexWorkbenchPetProvider, JsonlRpcClient, RpcConnectionClosedError, RpcProtocolError, RpcResponseError, RpcTimeoutError, SUPPORTED_CODEX_VERSION, SUPPORTED_CODEX_VERSION_RANGE, checkCodexVersion, createCodexRuntimeProvider, createCodexWorkbenchPetProvider, locateCodexBinary, startCodexAppServer } from '../../chunk-YG3QMLCD.js';
 import '../../chunk-B2673ODM.js';
 import '../../chunk-ZXTTTT25.js';
 import '../../chunk-GT7XTSEG.js';

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import { createRequire } from 'node:module';
-export { AccessSessionService, AgentEventStream, GitCommitError, GitCommitReviewError, SqliteStateRepository, commitSelectedProjectChanges, createCodexlyServer, normalizeAllowedHost, readProjectGitCommitFileDiff, readProjectGitCommitFiles } from '../chunk-4VM2ZUPT.js';
+export { AccessSessionService, AgentEventStream, GitCommitError, GitCommitReviewError, SqliteStateRepository, commitSelectedProjectChanges, createCodexlyServer, normalizeAllowedHost, readProjectGitCommitFileDiff, readProjectGitCommitFiles } from '../chunk-MDJUQPOL.js';
 import '../chunk-6JWQNFM2.js';
-import '../chunk-NUJPWN62.js';
+import '../chunk-YG3QMLCD.js';
 import '../chunk-B2673ODM.js';
 import '../chunk-ZXTTTT25.js';
 import '../chunk-GT7XTSEG.js';