@bryanhu/codexly 0.31.0 → 0.32.0

package/CHANGELOG.md

@@ -4,6 +4,24 @@
 
 ## [Unreleased]
 
+## [0.32.0] - 2026-10-08
+
+### 新增
+
+- Web 与桌面端支持直接预览聊天附件、文件链接和项目文件树中的 PDF；复用原生预览与流式读取，Web 支持范围请求，桌面端按单文件授权访问。
+- 两端侧栏在项目收起时显示任务状态，优先提示未读完成、等待审批与正在运行的任务。
+
+### 优化
+
+- 升级内置 Codex CLI 与桌面私有运行时至 `0.161.0`，同步共享协议基线和六个平台下载校验；适配用户目标来源与默认启用的 API Key 模型发现，减少重复配置写入和重启。
+- 更新生产依赖以修复八项已知安全问题，并同步桌面开发工具依赖。
+
+### 修复
+
+- 将两端项目的 Git 状态、分支、提交与历史操作限定于项目根目录对应的仓库，避免普通子目录误用父仓库；同步浏览器回归覆盖。
+- 移除 GitHub Release 正文中的重复版本标题，直接展示合并更新内容，并保留桌面更新检查所需的隐藏版本标记。
+- 修复 Windows 上 Web 与桌面端校验中的路径、脚本执行及测试隔离问题。
+
 ## [0.31.0] - 2026-10-05
 
 ### 新增

package/README.md

@@ -37,15 +37,16 @@ Desktop packages are available for Windows 10/11 x64, Ubuntu 24.04+ x64, macOS 1
 
 - Follow task responses, commands, approvals, reasoning summaries, and file changes as they arrive, with file edit timing and completion summaries; keep follow-up messages in a persistent queue.
 - Read streaming Markdown responses and copy their source text; zoom and pan message images, project images, and wallpapers, or view them at their original size.
+- Preview PDFs directly from chat attachments, file links, and the project file tree.
 - Choose a model, reasoning effort, Fast mode, approval policy, and file access level for each task.
-- Create projects and directories, search tasks, message history, and project files; inspect changes, work with branches and worktrees, and commit or push selected files.
-- Identify each task's project through labels in the sidebar.
+- Create projects and directories, search tasks, message history, and project files; inspect changes, work with branches and worktrees, and commit or push selected files. Git actions require a repository at the project root; ordinary subdirectories do not use the parent repository.
+- Identify each task's project through labels in the sidebar; collapsed projects still show unread completions, pending approvals, or running tasks.
 - Manage Skills, plugins, MCP services, projects, archived tasks, notifications, and scheduled work. Refresh official plugins to synchronize their state and report partial failures.
 - Request background compression of history files untouched for over 7 days under Settings → Agent → History storage. Web compresses server history; desktop compresses local history. Other Codex clients sharing that directory must support compressed history.
 
 **Desktop** adds a native project terminal, global shortcuts, a separate task window, tray integration, and an app-private Codex installation. It supports Windows, Ubuntu, and macOS. See the [desktop guide](desktop/README.en.md) for its full feature set and update behavior.
 
-**Web** runs a local server and opens in your browser. It supports trusted LAN access from phones and other devices, Docker deployment, task boards, Mermaid diagrams, and customizable workspace backgrounds. The Web edition includes Codex CLI `0.160.0` through `@openai/codex`; external binaries supplied through `--codex-bin <path>` or `CODEXLY_CODEX_BIN` must satisfy `>=0.160.0,<0.161.0`.
+**Web** runs a local server and opens in your browser. It supports trusted LAN access from phones and other devices, Docker deployment, task boards, Mermaid diagrams, and customizable workspace backgrounds. The Web edition includes Codex CLI `0.161.0` through `@openai/codex`; external binaries supplied through `--codex-bin <path>` or `CODEXLY_CODEX_BIN` must satisfy `>=0.161.0,<0.162.0`.
 
 ## Start the Web Edition
 

package/README.zh-CN.md

@@ -17,15 +17,16 @@ Codexly 是本地 AI 编程工作台，提供桌面应用和 Web 版。它将编
 
 - 实时查看任务回复、命令、审批、推理摘要和文件变更，查看文件编辑耗时与完成汇总，并用持久化队列安排后续消息。
 - 阅读流式 Markdown 回复并复制原始文本；缩放、拖动消息图片、项目图片与壁纸，或以原始尺寸查看。
+- 直接预览聊天附件、文件链接与项目文件树中的 PDF。
 - 为任务选择模型、思考量、快速模式、审批策略和文件访问范围。
-- 新建项目及目录，跨项目搜索任务、历史消息和文件；检查变更、管理分支与 worktree，并选择文件提交或推送。
-- 通过侧栏任务的项目标签识别任务来源。
+- 新建项目及目录，跨项目搜索任务、历史消息和文件；检查变更、管理分支与 worktree，并选择文件提交或推送。Git 操作仅作用于项目根目录对应的仓库，普通子目录不会借用父仓库。
+- 通过侧栏任务的项目标签识别任务来源；项目收起时仍显示未读完成、等待审批或运行状态。
 - 管理 Skills、插件、MCP 服务、项目、归档任务、通知与定时工作；刷新官方插件可同步状态，并提示部分失败。
 - 在「设置 → 智能体配置 → 历史文件存储」手动请求后台压缩超过 7 天未写入的历史；Web 作用于服务端，桌面端作用于本机。共用历史目录的其他 Codex 客户端需支持压缩格式。
 
 **桌面版**提供原生项目终端、全局快捷键、独立任务窗口、托盘集成和应用私有 Codex 安装。支持 Windows、Ubuntu 和 macOS；完整功能与更新方式见[桌面版指南](desktop/README.md)。
 
-**Web 版**在本机运行服务并由浏览器访问，支持手机等设备从可信局域网接入、Docker 部署、任务看板、Mermaid 图表和自定义工作台背景。Web 版通过 `@openai/codex` 自带 Codex CLI `0.160.0`；使用 `--codex-bin <path>` 或 `CODEXLY_CODEX_BIN` 指定外部版本时，版本必须满足 `>=0.160.0,<0.161.0`。
+**Web 版**在本机运行服务并由浏览器访问，支持手机等设备从可信局域网接入、Docker 部署、任务看板、Mermaid 图表和自定义工作台背景。Web 版通过 `@openai/codex` 自带 Codex CLI `0.161.0`；使用 `--codex-bin <path>` 或 `CODEXLY_CODEX_BIN` 指定外部版本时，版本必须满足 `>=0.161.0,<0.162.0`。
 
 ## 启动 Web 版
 

package/dist/{chunk-IQDWF7SH.js → chunk-DKYA55ID.js}

@@ -4548,6 +4548,8 @@ var CODEX_IGNORED_NOTIFICATION_METHODS = /* @__PURE__ */ new Set([
   "thread/compacted",
   "thread/environment/connected",
   "thread/environment/disconnected",
+  // 线程预测尚无产品入口；主动关闭通知，避免额外传输和解析。
+  "thread/prediction/updated",
   "thread/project/updated",
   "thread/realtime/closed",
   "thread/realtime/error",
@@ -9710,8 +9712,8 @@ function readReviewWorkerThread(value) {
   };
 }
 var execFileAsync = promisify(execFile);
-var SUPPORTED_CODEX_VERSION = "0.160.0";
-var SUPPORTED_CODEX_VERSION_RANGE = ">=0.160.0,<0.161.0";
+var SUPPORTED_CODEX_VERSION = "0.161.0";
+var SUPPORTED_CODEX_VERSION_RANGE = ">=0.161.0,<0.162.0";
 var BUNDLED_CODEX_TARGETS = {
   "darwin-arm64": {
     executableName: "codex",
@@ -9853,7 +9855,7 @@ async function checkCodexVersion(binaryPath, options = {}) {
   }
   const [major, minor, patch] = version.split("-", 1)[0]?.split(".").map(Number) ?? [];
   const isPrerelease = version.includes("-");
-  if (major !== 0 || minor !== 160 || patch === void 0 || isPrerelease) {
+  if (major !== 0 || minor !== 161 || patch === void 0 || isPrerelease) {
     throw new Error(
       `Unsupported Codex version ${version}; expected ${SUPPORTED_CODEX_VERSION_RANGE}`
     );
@@ -10657,6 +10659,8 @@ var CodexAgentProviderTurns = class extends CodexAgentProviderQueue {
         const goalResponse = expectRecord(
           await this.client.request("thread/goal/set", {
             objective,
+            // 显式标记用户目标操作，让 Codex 在恢复执行前持久化用户指令。
+            origin: "user",
             status: "active",
             threadId: taskId
           }),
@@ -10721,7 +10725,7 @@ var CodexAgentProviderTurns = class extends CodexAgentProviderQueue {
   async updateGoal(taskId, input) {
     this.assertKnownProjectTask(taskId);
     const response = expectRecord(
-      await this.client.request("thread/goal/set", { ...input, threadId: taskId }),
+      await this.client.request("thread/goal/set", { ...input, origin: "user", threadId: taskId }),
       "thread/goal/set response"
     );
     return mapCodexGoal(response["goal"], taskId);
@@ -10729,7 +10733,7 @@ var CodexAgentProviderTurns = class extends CodexAgentProviderQueue {
   async clearGoal(taskId) {
     this.assertKnownProjectTask(taskId);
     const response = expectRecord(
-      await this.client.request("thread/goal/clear", { threadId: taskId }),
+      await this.client.request("thread/goal/clear", { origin: "user", threadId: taskId }),
       "thread/goal/clear response"
     );
     expectBoolean(response["cleared"], "thread/goal/clear cleared");
@@ -12510,7 +12514,7 @@ function hasCurrentCustomModelCatalog(config) {
   if (configuredBaseUrl === null || configuredCatalogUrl === null) return false;
   const baseUrl = configuredBaseUrl.replace(/\/+$/u, "");
   const catalogUrl = configuredCatalogUrl.replace(/\/+$/u, "");
-  return catalogUrl === `${baseUrl}/models` && features?.["api_key_model_discovery"] === true;
+  return catalogUrl === `${baseUrl}/models` && features?.["api_key_model_discovery"] !== false;
 }
 function readActiveProvider(config) {
   const providerId = readConfiguredProviderId(config) ?? "openai";
@@ -13399,7 +13403,6 @@ var CodexFuzzyFileSearchService = class {
   }
 };
 var DEFAULT_CHANGE_DEBOUNCE_MS = 100;
-var MAX_GIT_REPOSITORIES_PER_ROOT = 32;
 var MAX_CODEX_GIT_METADATA_WATCHES = 128;
 function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -13446,21 +13449,7 @@ async function resolveGitMetadata(repositoryRoot) {
   return { commonDir, gitDir };
 }
 async function discoverRepositoryRoots(rootPath) {
-  if (await pathExists(join(rootPath, ".git"))) return [rootPath];
-  let entries;
-  try {
-    entries = (await readdir(rootPath, { withFileTypes: true })).filter((entry) => entry.isDirectory()).toSorted((left, right) => left.name.localeCompare(right.name));
-  } catch (error) {
-    if (error.code === "ENOENT") return [];
-    throw error;
-  }
-  const repositories = [];
-  for (const entry of entries) {
-    const candidate = join(rootPath, entry.name);
-    if (await pathExists(join(candidate, ".git"))) repositories.push(candidate);
-    if (repositories.length >= MAX_GIT_REPOSITORIES_PER_ROOT) break;
-  }
-  return repositories;
+  return await pathExists(join(rootPath, ".git")) ? [rootPath] : [];
 }
 function resolveHeadRef(commonDir, head) {
   const refName = /^ref:\s*(refs\/.+)$/u.exec(head?.trim() ?? "")?.[1];
@@ -14343,15 +14332,7 @@ function createCodexRuntimeProvider(options) {
     ...options.readTaskTitleModel === void 0 ? {} : { readTaskTitleModel: options.readTaskTitleModel }
   });
 }
-var APP_SERVER_ARGUMENTS = [
-  "app-server",
-  "--enable",
-  "plugins",
-  "--enable",
-  "api_key_model_discovery",
-  "--listen",
-  "stdio://"
-];
+var APP_SERVER_ARGUMENTS = ["app-server", "--enable", "plugins", "--listen", "stdio://"];
 var CodexAppServerExitedError = class extends RpcConnectionClosedError {
   exitCode;
   signal;