@bryanhu/codexly 0.23.0 → 0.25.2

package/CHANGELOG.md

@@ -4,6 +4,44 @@
 
 ## [Unreleased]
 
+## [0.25.2] - 2026-09-23
+
+### 新增
+
+- 支持在局域网访问时下载任务文件。
+- 在 AI 回复中渲染 Mermaid 图表，并使用严格安全解析。
+- 自动发现自定义 Provider 模型目录，完善在线、CLI 与持久化目录的回退。
+
+### 优化
+
+- 升级内置 Codex 至 `0.156.0`，刷新 App Server Schema 基线并适配远程文件图片输入。
+- 为缺少推理元数据的自定义模型提供基础思考档位，并统一推理摘要展示与异步错误提示。
+
+### 修复
+
+- 修复异步问题在任务终态或快照刷新后错误恢复，以及历史回答缺失的问题。
+- 修复流式恢复后的运行时警告，以及已完成推理摘要仍持续展开的问题。
+
+## [0.24.0] - 2026-09-20
+
+### 新增
+
+- 支持在 Docker 部署中保留宿主工作区绝对路径、挂载全局 Git 配置与 SSH 凭据，便于复用已有项目和访问远程仓库。
+- 持久化 Thread 历史附件元数据与正文，使附件在任务恢复、分叉和服务重启后仍可安全读取。
+
+### 优化
+
+- 升级内置 Codex 至 `0.155.1`，刷新 App Server Schema 基线并适配 Thread Attachment 通知协议。
+
+### 修复
+
+- 放宽自定义局域网密码对 Shell 特殊字符的限制，并限制局域网客户端调用仅适用于宿主设备的操作。
+- 修复流式 Markdown 强调标记跨片段到达时可能错误渲染的问题。
+
+### 工程
+
+- 升级 Docker 构建、登录、元数据与多架构模拟相关 GitHub Actions。
+
 ## [0.23.0] - 2026-09-18
 
 ### 新增

package/README.md

@@ -10,7 +10,7 @@
   <img src="https://img.shields.io/badge/TypeScript-6.0-3178c6" alt="TypeScript" />
   <img src="https://img.shields.io/badge/Vite-8-646cff" alt="Vite" />
   <img src="https://img.shields.io/badge/Fastify-5-000000" alt="Fastify" />
-  <img src="https://img.shields.io/badge/OpenAI_Codex-0.154.0-412991" alt="OpenAI Codex" />
+  <img src="https://img.shields.io/badge/OpenAI_Codex-0.156.0-412991" alt="OpenAI Codex" />
   <a href="./LICENSE">
     <img src="https://img.shields.io/badge/License-MIT-0f766e" alt="MIT" />
   </a>
@@ -44,18 +44,19 @@
 - Manage installed Skills, official Plugins, MCP servers, and compatible third-party Skills from ClawHub in one extension center
 - Organize ordered multi-root projects, archive project or temporary tasks, and permanently delete tasks when needed
 - Search tasks, conversation history, and project files globally, then jump to a matching message or preview a file
+- View Mermaid diagrams in AI responses
 - Inspect, preview, rename, and delete project files; review diffs; manage branches and worktrees; and commit or push changes
 - Fork a task from an AI response and continue it in a new Git worktree
 - Add animated workspace pets with separate task activity bubbles and custom PNG or WebP sprite manifests
 - Manage a collection of custom workspace backgrounds, or use Bing daily images, with automatic foreground colors, overlay opacity, and blur
-- Access the workspace from another device on a trusted local network
+- Access the workspace and download task files from another device on a trusted local network
 
 ## Requirements
 
 - Node.js >=22.14.0
 - Chrome/Chromium 116+, Firefox 124+, or Safari 17.4+
 
-Codexly includes Codex CLI `0.154.0` through `@openai/codex`; a separate installation is not required. External binaries supplied through `--codex-bin <path>` or `CODEXLY_CODEX_BIN` must satisfy `>=0.154.0,<0.155.0`.
+Codexly includes Codex CLI `0.156.0` through `@openai/codex`; a separate installation is not required. External binaries supplied through `--codex-bin <path>` or `CODEXLY_CODEX_BIN` must satisfy `>=0.156.0,<0.157.0`.
 
 ## Quick Start
 
@@ -70,6 +71,7 @@ Codexly opens the browser automatically. If it does not, use the address printed
 Only one Codexly instance can use a data directory. The instance lock is released automatically on exit or crash. Use different `--codex-home <directory>` values for independent instances.
 
 On first launch, sign in with ChatGPT or configure an OpenAI-compatible service that supports the Responses API and `GET /models`.
+Custom providers discover available models; basic reasoning levels remain selectable when model metadata omits them.
 
 For regular use, install Codexly globally:
 
@@ -94,23 +96,30 @@ docker compose up --detach
 docker compose logs --tail=50 codexly
 ```
 
-Open `http://127.0.0.1:3210` and use the random pairing code printed in the logs. The default named volume preserves Codex login data and Codexly's SQLite state. On Linux and macOS, the Compose file mounts the host root at `/workspace`, so every mounted disk is available to the project picker. Set `CODEXLY_WORKSPACE` to expose only one directory:
+Open `http://127.0.0.1:3210` and use the random pairing code printed in the logs. The default named volume preserves Codex login data and Codexly's SQLite state. On Linux and macOS, the Compose file mounts the host root at `/workspace`, so every mounted disk is available to the project picker. Set `CODEXLY_WORKSPACE` to expose only one directory and preserve its absolute path inside the container:
 
 ```bash
 CODEXLY_WORKSPACE=/path/to/projects docker compose up --detach
 ```
 
-Docker can only access host paths shared with the Docker engine. On Windows, set `CODEXLY_WORKSPACE` to a shared drive such as `C:/`; add extra bind mounts and repeat `--workspace` in `command` when multiple drives are required.
+When binding the host `CODEXLY_CODEX_HOME`, also set `CODEXLY_WORKSPACE` to a common parent of the existing projects. Their absolute paths then remain identical on the host and in the container.
 
-| Variable                | Purpose                                                              |
-| ----------------------- | -------------------------------------------------------------------- |
-| `CODEXLY_VERSION`       | Select the GHCR image tag; defaults to `latest`                      |
-| `CODEXLY_PORT`          | Set both the host and container port; defaults to `3210`             |
-| `CODEXLY_WORKSPACE`     | Restrict the host directory mounted at `/workspace`; defaults to `/` |
-| `CODEXLY_CODEX_HOME`    | Bind a host Codex home instead of the managed `codexly-data` volume  |
-| `CODEXLY_LAN_PASSWORD`  | Set a strong fixed access password instead of the logged random code |
-| `CODEXLY_ALLOWED_HOSTS` | Allow comma-separated exact reverse proxy domains                    |
-| `CODEXLY_SESSION_TTL`   | Set a fixed session lifetime such as `12h`                           |
+The container does not automatically inherit the host Git identity. Set `CODEXLY_GIT_CONFIG` to a global Git config file visible inside the container. With an identity-mapped Linux or macOS workspace, use the absolute path to the host `~/.gitconfig` directly. For SSH remotes, set `CODEXLY_SSH_HOME` to the absolute path of the host `~/.ssh` directory.
+
+Docker can only access host paths shared with the Docker engine. On Windows, set `CODEXLY_WORKSPACE` to a shared drive such as `C:/` and set `CODEXLY_WORKSPACE_TARGET=/workspace`. Windows and Linux container paths use different absolute path formats, so a Codex Home containing host project records cannot be reused directly. Add extra bind mounts and repeat `--workspace` in `command` when multiple drives are required.
+
+| Variable                   | Purpose                                                                |
+| -------------------------- | ---------------------------------------------------------------------- |
+| `CODEXLY_VERSION`          | Select the GHCR image tag; defaults to `latest`                        |
+| `CODEXLY_PORT`             | Set both the host and container port; defaults to `3210`               |
+| `CODEXLY_WORKSPACE`        | Restrict the workspace and preserve its absolute path; defaults to `/` |
+| `CODEXLY_WORKSPACE_TARGET` | Override the container path; use `/workspace` on Windows               |
+| `CODEXLY_GIT_CONFIG`       | Select a container-visible global Git config file                      |
+| `CODEXLY_SSH_HOME`         | Mount host SSH config, keys, and `known_hosts` read-only               |
+| `CODEXLY_CODEX_HOME`       | Bind a host Codex home instead of the managed `codexly-data` volume    |
+| `CODEXLY_LAN_PASSWORD`     | Set a strong fixed access password instead of the logged random code   |
+| `CODEXLY_ALLOWED_HOSTS`    | Allow comma-separated exact reverse proxy domains                      |
+| `CODEXLY_SESSION_TTL`      | Set a fixed session lifetime such as `12h`                             |
 
 The image entrypoint accepts all normal CLI arguments, so orchestration platforms can replace `command` when needed. See the [complete Docker Compose deployment guide](docs/docker-deployment.md) for workspace, multiple-disk, Codex Home, update, backup, and troubleshooting instructions. Run `pnpm docker:build && pnpm docker:test` in a development checkout to build and smoke-test the local image.
 
@@ -135,7 +144,7 @@ The terminal prints the LAN address and a random access password. Common options
 | Option                      | Purpose                                                                                    |
 | --------------------------- | ------------------------------------------------------------------------------------------ |
 | `--port <port>`             | Choose the starting port; occupied ports are skipped automatically                         |
-| `--lan-password <password>` | Set a 16-128 character password containing uppercase, lowercase, number, and symbol        |
+| `--lan-password <password>` | Set a 16-128 character password containing uppercase, lowercase, and number                |
 | `--allowed-host <domain>`   | Allow an exact reverse proxy domain; repeat the option for multiple domains                |
 | `--session-ttl <duration>`  | Set a fixed LAN session lifetime such as `12h`; omitted sessions last until server restart |
 | `--workspace <path>`        | Restrict project selection to this absolute root; repeat for multiple roots                |

package/README.zh-CN.md

@@ -14,18 +14,19 @@ Codexly 是一个在浏览器中使用 Codex 的本地 AI 编程工作台。它
 - 在扩展中心统一管理已安装 Skills、官方 Plugins、MCP Servers，以及来自 ClawHub 的兼容第三方 Skills
 - 组织有序的多根项目、归档项目或临时任务，并按需永久删除任务
 - 全局搜索任务、历史消息和项目文件，并定位匹配消息或预览文件
+- 在 AI 回复中查看 Mermaid 图表
 - 查看、预览、重命名和删除项目文件，审查差异，管理分支与 worktree，并提交或推送变更
 - 从 AI 回复处分叉任务，在新的 Git worktree 中继续工作
 - 添加工作台宠物动画，用独立气泡区分任务活动，并支持自定义 PNG 或 WebP 精灵图清单
 - 管理自定义工作台背景图片集合，或使用 Bing 每日壁纸，并自动适配前景色、浮层遮罩与背景模糊
-- 从可信局域网中的其他设备访问工作台
+- 从可信局域网中的其他设备访问工作台并下载任务文件
 
 ## 环境要求
 
 - Node.js >=22.14.0
 - Chrome/Chromium 116+、Firefox 124+ 或 Safari 17.4+
 
-Codexly 通过 `@openai/codex` 自带 Codex CLI `0.154.0`，无需单独安装。通过 `--codex-bin <path>` 或 `CODEXLY_CODEX_BIN` 指定的外部版本必须满足 `>=0.154.0,<0.155.0`。
+Codexly 通过 `@openai/codex` 自带 Codex CLI `0.156.0`，无需单独安装。通过 `--codex-bin <path>` 或 `CODEXLY_CODEX_BIN` 指定的外部版本必须满足 `>=0.156.0,<0.157.0`。
 
 ## 快速开始
 
@@ -40,6 +41,7 @@ Codexly 会自动打开浏览器。若未打开，请访问终端输出的地址
 同一数据目录只能运行一个 Codexly 实例，重复启动会被拒绝；进程退出或崩溃后自动释放锁。需要独立实例时使用不同的 `--codex-home <目录>`。
 
 首次启动时，使用 ChatGPT 登录，或配置兼容 Responses API 和 `GET /models` 的 OpenAI-compatible 服务。
+自定义 Provider 会发现可用模型；模型未提供思考档位时可选择基础档位。
 
 经常使用时可以全局安装：
 
@@ -64,23 +66,30 @@ docker compose up --detach
 docker compose logs --tail=50 codexly
 ```
 
-打开 `http://127.0.0.1:3210`，使用日志中的随机配对码。默认命名卷会持久化 Codex 登录数据和 Codexly SQLite 状态。在 Linux 和 macOS 上，Compose 默认把宿主根目录挂载到 `/workspace`，项目选择器可读取所有已挂载磁盘。设置 `CODEXLY_WORKSPACE` 后只暴露指定目录：
+打开 `http://127.0.0.1:3210`，使用日志中的随机配对码。默认命名卷会持久化 Codex 登录数据和 Codexly SQLite 状态。在 Linux 和 macOS 上，Compose 默认把宿主根目录挂载到 `/workspace`，项目选择器可读取所有已挂载磁盘。设置 `CODEXLY_WORKSPACE` 后只暴露指定目录，并在容器中保留其绝对路径：
 
 ```bash
 CODEXLY_WORKSPACE=/path/to/projects docker compose up --detach
 ```
 
-Docker 只能访问 Docker Engine 已共享的宿主路径。Windows 需将 `CODEXLY_WORKSPACE` 设置为已共享盘符，例如 `C:/`；需要多个盘符时，在 Compose 中增加 bind mount，并在 `command` 中重复传入 `--workspace`。
+绑定宿主 `CODEXLY_CODEX_HOME` 时，应同时把 `CODEXLY_WORKSPACE` 设置为已有项目的公共父目录。Codex 保存的项目绝对路径随后可在宿主和容器中保持一致。
 
-| 变量                    | 用途                                                |
-| ----------------------- | --------------------------------------------------- |
-| `CODEXLY_VERSION`       | 指定 GHCR 镜像标签，默认 `latest`                   |
-| `CODEXLY_PORT`          | 同时设置宿主与容器端口，默认 `3210`                 |
-| `CODEXLY_WORKSPACE`     | 限制挂载到 `/workspace` 的宿主目录，默认 `/`        |
-| `CODEXLY_CODEX_HOME`    | 绑定宿主 Codex Home，替代默认 `codexly-data` 命名卷 |
-| `CODEXLY_LAN_PASSWORD`  | 设置固定强密码，替代日志中生成的随机配对码          |
-| `CODEXLY_ALLOWED_HOSTS` | 设置逗号分隔的反向代理精确域名                      |
-| `CODEXLY_SESSION_TTL`   | 设置固定会话期限，例如 `12h`                        |
+容器不会自动继承宿主 Git 身份。将 `CODEXLY_GIT_CONFIG` 设置为容器可见的全局 Git 配置文件；在 Linux 和 macOS 的同路径工作区中可直接填写宿主 `~/.gitconfig` 的绝对路径。使用 SSH 远程时，将 `CODEXLY_SSH_HOME` 设置为宿主 `~/.ssh` 的绝对路径。
+
+Docker 只能访问 Docker Engine 已共享的宿主路径。Windows 需将 `CODEXLY_WORKSPACE` 设置为已共享盘符（例如 `C:/`），并设置 `CODEXLY_WORKSPACE_TARGET=/workspace`。Windows 与 Linux 容器的绝对路径格式不同，不能直接复用包含宿主项目记录的 Codex Home；需要多个盘符时，在 Compose 中增加 bind mount，并在 `command` 中重复传入 `--workspace`。
+
+| 变量                       | 用途                                                |
+| -------------------------- | --------------------------------------------------- |
+| `CODEXLY_VERSION`          | 指定 GHCR 镜像标签，默认 `latest`                   |
+| `CODEXLY_PORT`             | 同时设置宿主与容器端口，默认 `3210`                 |
+| `CODEXLY_WORKSPACE`        | 限制工作区并在容器内保留相同绝对路径，默认 `/`      |
+| `CODEXLY_WORKSPACE_TARGET` | 覆盖容器工作区路径，Windows 使用 `/workspace`       |
+| `CODEXLY_GIT_CONFIG`       | 指定容器可见的全局 Git 配置文件                     |
+| `CODEXLY_SSH_HOME`         | 只读挂载宿主 SSH 配置、私钥和 `known_hosts`         |
+| `CODEXLY_CODEX_HOME`       | 绑定宿主 Codex Home，替代默认 `codexly-data` 命名卷 |
+| `CODEXLY_LAN_PASSWORD`     | 设置固定强密码，替代日志中生成的随机配对码          |
+| `CODEXLY_ALLOWED_HOSTS`    | 设置逗号分隔的反向代理精确域名                      |
+| `CODEXLY_SESSION_TTL`      | 设置固定会话期限，例如 `12h`                        |
 
 镜像入口支持全部 CLI 参数，编排平台可按需覆盖 `command`。工作区、多磁盘、Codex Home、更新、备份和故障排查参见[完整 Docker Compose 部署指南](docs/docker-deployment.md)。开发仓库可运行 `pnpm docker:build && pnpm docker:test` 构建并冒烟测试本地镜像。
 
@@ -102,13 +111,13 @@ codexly start --lan
 
 终端会输出局域网地址和随机访问密码。常用选项如下：
 
-| 选项                        | 用途                                                  |
-| --------------------------- | ----------------------------------------------------- |
-| `--port <port>`             | 指定起始端口；端口被占用时自动尝试后续端口            |
-| `--lan-password <password>` | 设置 16 至 128 位密码，必须包含大小写字母、数字和符号 |
-| `--allowed-host <domain>`   | 允许精确的反向代理域名；多个域名可重复传入            |
-| `--session-ttl <duration>`  | 设置固定会话期限，如 `12h`；省略时持续到 Server 重启  |
-| `--workspace <path>`        | 限制项目选择的绝对根目录；多个根目录可重复传入        |
+| 选项                        | 用途                                                 |
+| --------------------------- | ---------------------------------------------------- |
+| `--port <port>`             | 指定起始端口；端口被占用时自动尝试后续端口           |
+| `--lan-password <password>` | 设置 16 至 128 位密码，必须包含大小写字母和数字      |
+| `--allowed-host <domain>`   | 允许精确的反向代理域名；多个域名可重复传入           |
+| `--session-ttl <duration>`  | 设置固定会话期限，如 `12h`；省略时持续到 Server 重启 |
+| `--workspace <path>`        | 限制项目选择的绝对根目录；多个根目录可重复传入       |
 
 密码含 Shell 特殊字符时请使用引号。局域网模式使用未加密 HTTP，只能用于可信网络，禁止直接暴露到互联网。重启 Codexly 会使密码和全部会话失效。
 

package/dist/{chunk-B2673ODM.js → chunk-REIMOLGX.js}

@@ -111,6 +111,7 @@ async function saveProjectTodo(repository, projectId, id, draft, expectedVersion
 }
 
 // packages/core/src/async-question.ts
+var questionSignature = (questions) => JSON.stringify(questions.map(({ title, options }) => ({ title, options })));
 function collectQuestionGroups(turns, identify) {
   return turns.flatMap((turn) => {
     const occurrences = /* @__PURE__ */ new Map();
@@ -118,7 +119,7 @@ function collectQuestionGroups(turns, identify) {
       if (item.type !== "message" || item.role !== "assistant" || !item.questions?.length)
         return [];
       const questions = item.questions.map(({ title, options }) => ({ title, options }));
-      const signature = JSON.stringify(questions);
+      const signature = questionSignature(questions);
       const occurrence = occurrences.get(signature) ?? 0;
       occurrences.set(signature, occurrence + 1);
       return [
@@ -141,6 +142,40 @@ ${answers[index]?.trim() ?? ""}`).join("\n\n");
   if (text.length > 1e5) throw new Error("Invalid question answers");
   return text;
 }
+function restoreAsyncQuestionAnswers(snapshot, records) {
+  const occurrences = /* @__PURE__ */ new Map();
+  let turns = snapshot.turns;
+  for (const record of records) {
+    const signature = questionSignature(record.group.questions);
+    const occurrenceKey = JSON.stringify([record.group.turnId, signature]);
+    const occurrence = occurrences.get(occurrenceKey) ?? 0;
+    occurrences.set(occurrenceKey, occurrence + 1);
+    const result = record.result;
+    if (record.group.status !== "answered" || result === void 0 || result.turn !== null)
+      continue;
+    const turnIndex = turns.findIndex((turn2) => turn2.id === result.turnId);
+    const turn = turns[turnIndex];
+    if (turnIndex < 0 || turn === void 0) continue;
+    const questionIndexes = turn.items.flatMap(
+      (item, index) => item.type === "message" && item.role === "assistant" && questionSignature(item.questions ?? []) === signature ? [index] : []
+    );
+    const questionIndex = questionIndexes[occurrence];
+    if (questionIndex === void 0) continue;
+    const alreadyPresent = turn.items.slice(questionIndex + 1).some(
+      (item) => item.type === "message" && item.role === "user" && item.text === result.input.text
+    );
+    if (alreadyPresent) continue;
+    const items = [...turn.items];
+    items.splice(questionIndex + 1, 0, {
+      id: result.messageId,
+      role: "user",
+      text: result.input.text,
+      type: "message"
+    });
+    turns = turns.map((candidate, index) => index === turnIndex ? { ...turn, items } : candidate);
+  }
+  return turns === snapshot.turns ? snapshot : { ...snapshot, turns };
+}
 
 // packages/core/src/archived-task-deletion.ts
 async function deleteArchivedTasks(provider, scopeId) {
@@ -257,4 +292,26 @@ async function queryCompletedTasks(resolve, input) {
   };
 }
 
-export { CompletedTasksQueryError, PendingRequestResolutionError, ProjectTodoError, TaskSubmissionError, WorkbenchPetProviderError, collectQuestionGroups, deleteArchivedTasks, formatQuestionAnswers, listTaskCatalog, queryCompletedTasks, saveProjectTodo, submitTask };
+// packages/core/src/custom-model-reasoning.ts
+var CUSTOM_MODEL_REASONING_FALLBACK = [
+  { description: "", id: "low" },
+  { description: "", id: "medium" },
+  { description: "", id: "high" }
+];
+function needsReasoningFallback(model) {
+  return model.supportedReasoningEfforts.length === 0 || model.supportedReasoningEfforts.every((effort) => effort.id === "none");
+}
+function normalizeCustomModelReasoning(page) {
+  if (!page.data.some(needsReasoningFallback)) return page;
+  const data = page.data.map((model) => {
+    if (!needsReasoningFallback(model)) return model;
+    return {
+      ...model,
+      defaultReasoningEffort: "medium",
+      supportedReasoningEfforts: CUSTOM_MODEL_REASONING_FALLBACK.map((effort) => ({ ...effort }))
+    };
+  });
+  return { ...page, data };
+}
+
+export { CUSTOM_MODEL_REASONING_FALLBACK, CompletedTasksQueryError, PendingRequestResolutionError, ProjectTodoError, TaskSubmissionError, WorkbenchPetProviderError, collectQuestionGroups, deleteArchivedTasks, formatQuestionAnswers, listTaskCatalog, normalizeCustomModelReasoning, queryCompletedTasks, restoreAsyncQuestionAnswers, saveProjectTodo, submitTask };