@covro/covro 0.5.1-dev.3 → 0.5.1-dev.5

package/README.md

@@ -34,13 +34,7 @@
 - 📖 **Read results while you chat.** Preview documents, diagrams, and code changes beside the conversation on desktop, or full-screen on mobile.
 - 🔔 **Know when your attention is needed.** Enable browser notifications for completed work, questions, and approvals; keep the page open in a supported desktop browser.
 
-Use **＋** in the message box to attach images from your phone or computer. Open the combined model control to choose the model, reasoning effort, and Fast mode.
-
-When the selected model is at capacity, Covro shows native retry progress and can make up to three additional attempts after 5, 10, and 20 seconds when Codex does not retry and no output or tool work has started. You can cancel, or choose another model and retry manually. See [retry behavior](docs/capacity-retry.md) for recovery boundaries.
-
-See the [usage guide · 中文](docs/usage.zh-CN.md) for workflow details and controls.
-
-Start a new conversation in the current workspace with **⌘ + Option + N** on macOS or **Ctrl + Alt + N** on Windows/Linux. The message box receives focus and existing drafts stay available. When the workspace has a recognized GitHub remote, the GitHub icon in the header opens its repository in a new tab. See [workspace details](docs/workspaces.md#open-the-github-repository) for remote selection rules.
+Find controls, shortcuts, and supported commands in the [usage guide · 中文](docs/usage.zh-CN.md) and [command guide](docs/slash-commands.md).
 
 <details>
   <summary><strong>📱 A workspace that fits your phone</strong></summary>
@@ -70,9 +64,9 @@ npm install -g @covro/covro
 covro
 ```
 
-`covro` starts in the background and prints the local address. Use `covro stop` to stop it. See [installation and service management](docs/distribution.md) for configuration, logs, login auto-start, macOS credential diagnostics, and release channels.
+`covro` runs in the background; stop it with `covro stop`. See the [installation guide](docs/distribution.md) for configuration, logs, and login auto-start.
 
-Open **<http://127.0.0.1:8787>** and click **＋** beside **Unassigned** to send your first task. Or use **Add project** to import a host directory or clone a Git repository. See [project setup](docs/project-clone.md) and [conversation workspaces](docs/workspaces.md) for directory options.
+Open **<http://127.0.0.1:8787>** and click **＋** beside **Unassigned** to start a task, or use **Add project** to [import a directory or clone a repository](docs/project-clone.md).
 
 <a id="run-from-source"></a>
 
@@ -101,11 +95,7 @@ The host computer must stay awake and online. When adding projects remotely, ent
 
 ## Updates and release channels
 
-Use the update panel to check versions and choose stable, beta, or dev. Beta and Dev also receive newer stable releases. **macOS and Linux npm global installations** support managed upgrades from this panel or `covro update`; other installations use their original update method.
-
-Automatic installation is off by default and requires a verified Codex combination. Unverified combinations need explicit confirmation; unknown versions, missing or invalid compatibility declarations, and explicitly unsupported combinations block managed upgrades. Covro does not upgrade Codex CLI. See [updates and recovery](docs/distribution.md) for commands, compatibility checks, and backups.
-
-DB Schema **7** is tracked separately from the application version; older applications cannot open newer databases. Backups cover Covro’s database and service configuration, excluding project files, Codex history, and credentials. Restore requires stopping the service; see [backups](docs/backups.md) and [database compatibility](docs/database.md).
+Choose stable, beta, or dev in the update panel or with `covro update`. Managed upgrades support **macOS and Linux npm global installations**; other installations use their original update method. Automatic installation is off by default and requires verified Codex compatibility; unverified combinations need explicit confirmation. Covro does not upgrade Codex CLI. See [updates and recovery](docs/distribution.md).
 
 ## Your computer, your workspace
 
@@ -113,42 +103,23 @@ Covro connects to your existing CLI through `codex app-server`. Tasks, projects,
 
 Covro is for a single user. The [Shell panel](docs/shell.md) runs non-interactive commands using Codex’s configured sandbox. An interactive terminal, file editor, Git GUI, and multi-user team management are outside the current scope.
 
-## Development and contribution
-
-```sh
-pnpm format:check
-pnpm typecheck
-pnpm lint
-pnpm test
-pnpm build
-pnpm test:e2e
-```
-
-Browser tests require the Chromium version used by the existing Playwright dependency. Tests and CI use explicit fixtures; they do not send real model requests.
+DB Schema **7** is independent of the application version; older applications cannot open newer databases. Backups cover only Covro’s database and service configuration, excluding project files, Codex history, and credentials. Restore requires stopping the service. See [backups](docs/backups.md) and [database compatibility](docs/database.md).
 
-Use `pnpm format` to fix formatting; PR titles follow Conventional Commits. See [contribution and release conventions](docs/contributing.md).
+## Development and contribution
 
-Found a problem or have an idea? [Open an issue](https://github.com/yuzheng14/covro/issues) with your OS, Node.js and Codex versions, installation method, and steps to reproduce. Small, focused PRs are welcome; update both READMEs when changing user-facing facts or setup instructions.
+See the [contribution guide](docs/contributing.md) for development setup, checks, and PR conventions. [Open an issue](https://github.com/yuzheng14/covro/issues) or send a focused PR; update both READMEs when changing user-facing facts.
 
 <a id="documentation"></a>
 
 ## 📚 Documentation
 
-| Guide                                                                  | Contents                                                                |
-| ---------------------------------------------------------------------- | ----------------------------------------------------------------------- |
-| [Detailed usage · 中文](docs/usage.zh-CN.md)                           | Projects, conversations, approvals, notifications, images, and recovery |
-| [Deployment](docs/deployment.md)                                       | Local access, Tailscale, and Cloudflare Access                          |
-| [Distribution](docs/distribution.md)                                   | CLI, services, data locations, upgrades, and repair                     |
-| [Compatibility](docs/compatibility.md)                                 | Verified Codex versions and behavior boundaries                         |
-| [Slash commands](docs/slash-commands.md)                               | Supported commands and usage                                            |
-| [Architecture](docs/architecture.md)                                   | How the gateway, Codex adapter, and browser fit together                |
-| [Verification](docs/verification.md)                                   | Test coverage and recorded live checks                                  |
-| [Projects](docs/project-clone.md) · [Workspaces](docs/workspaces.md)   | Importing, cloning, and conversation directories                        |
-| [Languages](docs/i18n.md) · [History loading](docs/session-history.md) | Interface language and conversation loading                             |
-| [Shell](docs/shell.md)                                                 | Command execution and sandbox limits                                    |
-| [Backups](docs/backups.md) · [Database](docs/database.md)              | Snapshot scope, compatibility, and offline recovery                     |
-| [Contributing](docs/contributing.md) · [Releases](docs/releases.md)    | Formatting, PRs, and publishing                                         |
-| [Brand assets](docs/brand.md)                                          | Editable SVG logo and wordmarks                                         |
+| Topic                      | Guides                                                                                                                                                                            |
+| -------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Everyday use               | [Usage · 中文](docs/usage.zh-CN.md) · [Commands](docs/slash-commands.md) · [Shell](docs/shell.md) · [Capacity retries](docs/capacity-retry.md)                                    |
+| Projects and conversations | [Import and clone](docs/project-clone.md) · [Workspaces](docs/workspaces.md) · [History loading](docs/session-history.md)                                                         |
+| Setup and access           | [Install and update](docs/distribution.md) · [Deployment](docs/deployment.md) · [Interface languages](docs/i18n.md)                                                               |
+| Data and compatibility     | [Backups](docs/backups.md) · [Database](docs/database.md) · [Codex compatibility](docs/compatibility.md)                                                                          |
+| Development and releases   | [Contributing](docs/contributing.md) · [Architecture](docs/architecture.md) · [Verification](docs/verification.md) · [Releases](docs/releases.md) · [Brand assets](docs/brand.md) |
 
 ## License
 

package/README.zh-CN.md

@@ -34,13 +34,7 @@
 - 📖 **一边看产出，一边讨论。** 电脑上将文档、图表和代码变更与会话并排阅读，手机上使用全屏阅读器。
 - 🔔 **及时收到待办提醒。** 开启浏览器通知，在工作结束、需要回答或审批时收到提醒；需在支持通知的桌面浏览器中保持页面运行。
 
-点击输入框中的 **＋**，可从手机或电脑选择图片附件。模型、推理强度和 Fast 模式统一收进模型设置入口。
-
-当前模型容量不足时，Covro 会展示原生重试进度；如果 Codex 没有自行重试，且本轮尚无输出或工具操作，会在 5、10、20 秒后最多补偿重试 3 次。可以取消，也可以选择其他模型后手动重试。恢复边界见[容量重试说明](docs/capacity-retry.md)。
-
-操作方式与使用细节见[使用指南](docs/usage.zh-CN.md)。
-
-在当前工作区新建会话：macOS 按 **⌘ + Option + N**，Windows/Linux 按 **Ctrl + Alt + N**。输入框会自动获得焦点，已有草稿继续保留。工作区有可识别的 GitHub remote 时，点击顶部 GitHub 图标即可在新标签页打开仓库；remote 选择规则见[工作区说明](docs/workspaces.md#快捷打开-github-仓库)。
+操作、快捷键和命令用法见[使用指南](docs/usage.zh-CN.md)与[Slash 命令说明](docs/slash-commands.md)。
 
 <details>
   <summary><strong>📱 手机上也能舒服地使用</strong></summary>
@@ -70,9 +64,9 @@ npm install -g @covro/covro
 covro
 ```
 
-`covro` 默认在后台启动并输出本机访问地址，使用 `covro stop` 停止。配置、日志、登录自启、macOS 凭证诊断和版本渠道见[安装与服务管理](docs/distribution.md)。
+`covro` 在后台启动，使用 `covro stop` 停止。配置、日志与登录自启见[安装指南](docs/distribution.md)。
 
-打开 **<http://127.0.0.1:8787>**，点击 **未关联项目** 右侧的 **＋** 即可发送第一条任务。也可通过 **添加项目** 导入主机目录或克隆 Git 仓库。目录选项见[项目配置](docs/project-clone.md)和[会话工作目录](docs/workspaces.md)。
+打开 **<http://127.0.0.1:8787>**，点击 **未关联项目** 旁的 **＋** 开始任务，或通过 **添加项目** [导入目录或克隆仓库](docs/project-clone.md)。
 
 <a id="从源码运行"></a>
 
@@ -101,11 +95,7 @@ pnpm start -- --config ./config.local.json
 
 ## 更新与版本渠道
 
-在更新面板检查版本，选择稳定版、预览版或开发版；预览版和开发版也会接收更新的稳定版本。**macOS 和 Linux 的 npm 全局安装**支持在此面板或通过 `covro update` 受管升级；其他安装方式沿用原更新方法。
-
-自动安装默认关闭，且只接受已验证的 Codex 组合。未验证组合需要明确确认；版本未知、兼容声明缺失或无效、明确不支持的组合会阻止受管升级。Covro 不会升级 Codex CLI。完整命令、兼容检查和备份说明见[更新与恢复](docs/distribution.md)。
-
-DB Schema **7** 独立于应用版本管理，旧应用不能打开更新的数据库。备份覆盖 Covro 数据库和服务配置，不包含项目文件、Codex 历史或凭据。恢复需要停服，详见[备份与恢复](docs/backups.md)和[数据库兼容规则](docs/database.md)。
+在更新面板或通过 `covro update` 选择稳定、预览或开发渠道。受管升级支持 **macOS 和 Linux 的 npm 全局安装**，其他安装方式沿用原更新方法。自动安装默认关闭，且只接受已验证的 Codex 组合；未验证组合需明确确认。Covro 不会升级 Codex CLI。详见[更新与恢复](docs/distribution.md)。
 
 ## 你的电脑，你的工作台
 
@@ -113,42 +103,23 @@ Covro 通过 `codex app-server` 连接已有 CLI，沿用你的 Codex 登录与
 
 Covro 面向单用户。[Shell 面板](docs/shell.md)沿用 Codex 配置的沙箱执行非交互命令。交互终端、文件编辑器、Git 图形界面与多人团队管理不在当前范围内。
 
-## 开发与参与
-
-```sh
-pnpm format:check
-pnpm typecheck
-pnpm lint
-pnpm test
-pnpm build
-pnpm test:e2e
-```
-
-浏览器测试需要现有 Playwright 依赖所对应的 Chromium。测试与 CI 使用明确的测试夹具，不发起真实模型请求。
+DB Schema **7** 独立于应用版本，旧应用不能打开更新的数据库。备份只覆盖 Covro 数据库和服务配置，不包含项目文件、Codex 历史或凭据；恢复需停服。详见[备份](docs/backups.md)与[数据库兼容规则](docs/database.md)。
 
-使用 `pnpm format` 修复格式，PR 标题遵循 Conventional Commits，详见[开发与发版约定](docs/contributing.md)。
+## 开发与参与
 
-遇到问题或有想法，欢迎[提交 Issue](https://github.com/yuzheng14/covro/issues)，附上操作系统、Node.js 与 Codex 版本、安装方式和复现步骤。也欢迎范围明确的小 PR；修改面向使用者的事实或安装步骤时，请同步更新两份 README。
+开发环境、检查命令与 PR 约定见[贡献指南](docs/contributing.md)。欢迎[提交 Issue](https://github.com/yuzheng14/covro/issues) 或范围明确的 PR；面向使用者的变更需同步更新两份 README。
 
 <a id="文档导航"></a>
 
 ## 📚 文档导航
 
-| 指南                                                           | 内容                                 |
-| -------------------------------------------------------------- | ------------------------------------ |
-| [详细使用指南](docs/usage.zh-CN.md)                            | 项目、会话、审批、通知、图片和恢复   |
-| [部署](docs/deployment.md)                                     | 本机、Tailscale 与 Cloudflare Access |
-| [分发](docs/distribution.md)                                   | CLI、服务、数据位置、升级与修复      |
-| [兼容性](docs/compatibility.md)                                | 已验证的 Codex 版本与行为边界        |
-| [Slash 命令](docs/slash-commands.md)                           | 支持的命令和用法                     |
-| [架构](docs/architecture.md)                                   | 网关、Codex 适配器与浏览器的协作方式 |
-| [验证记录](docs/verification.md)                               | 测试范围与真实环境检查记录           |
-| [项目](docs/project-clone.md) · [工作目录](docs/workspaces.md) | 导入、克隆与会话目录                 |
-| [语言](docs/i18n.md) · [历史加载](docs/session-history.md)     | 界面语言与会话加载                   |
-| [Shell](docs/shell.md)                                         | 命令执行与沙箱限制                   |
-| [备份](docs/backups.md) · [数据库](docs/database.md)           | 快照范围、兼容性与停服恢复           |
-| [开发约定](docs/contributing.md) · [发版](docs/releases.md)    | 格式、PR 与发布流程                  |
-| [品牌素材](docs/brand.md)                                      | 可编辑的 SVG 图标与完整标识          |
+| 主题       | 指南                                                                                                                                              |
+| ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 日常使用   | [使用指南](docs/usage.zh-CN.md) · [命令](docs/slash-commands.md) · [Shell](docs/shell.md) · [容量重试](docs/capacity-retry.md)                    |
+| 项目与会话 | [导入与克隆](docs/project-clone.md) · [工作目录](docs/workspaces.md) · [历史加载](docs/session-history.md)                                        |
+| 安装与访问 | [安装与更新](docs/distribution.md) · [部署](docs/deployment.md) · [界面语言](docs/i18n.md)                                                        |
+| 数据与兼容 | [备份](docs/backups.md) · [数据库](docs/database.md) · [Codex 兼容性](docs/compatibility.md)                                                      |
+| 开发与发布 | [贡献](docs/contributing.md) · [架构](docs/architecture.md) · [验证](docs/verification.md) · [发版](docs/releases.md) · [品牌素材](docs/brand.md) |
 
 ## 许可证
 

package/dist/codex/adapter.js

@@ -3,7 +3,13 @@ import { SHELL_TIMEOUT_MS, SHELL_OUTPUT_BYTES } from "../shared/shell.js";
 import { spawn, execFile } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { promisify } from "node:util";
+import { readGoal } from "./thread-goals.js";
+import { GuardianDenials } from "./guardian-denials.js";
 import { ThreadTitles } from "./thread-titles.js";
+import {
+  collaborationSelection,
+  reportedCollaborationMode
+} from "./collaboration.js";
 import { TurnTokenUsage } from "./turn-token-usage.js";
 import { AppError } from "../shared/errors.js";
 import { threadNameError } from "../shared/thread-name.js";
@@ -54,6 +60,10 @@ const CAPABILITIES = [
   "thread/items/list",
   "turn/start",
   "review/start",
+  "thread/goal/get",
+  "thread/goal/set",
+  "thread/goal/clear",
+  "thread/approveGuardianDeniedAction",
   "turn/steer",
   "turn/interrupt",
   "model/list",
@@ -98,6 +108,7 @@ class CodexAdapter {
   restartTimer;
   restartAttempt = 0;
   titles;
+  denials = new GuardianDenials();
   tokenUsage = new TurnTokenUsage();
   // Ordering only. Persisted archive state belongs exclusively to Codex.
   archiveSequence = 0;
@@ -175,6 +186,7 @@ class CodexAdapter {
       const version = stdout.trim().replace(/^codex-cli\s+/, "");
       this.state.codexVersion = version;
       this.permissionState.clear();
+      this.denials.clear();
       this.state.compatibility = CODEX_COMPATIBILITY.verified.includes(version) ? "verified" : "unverified";
       const child = spawn(
         this.options.binary,
@@ -221,6 +233,7 @@ class CodexAdapter {
         const wasReady = this.ready;
         this.state.ready = false;
         this.tokenUsage.clear();
+        this.denials.clear();
         this.state.connection = "unavailable";
         this.state.error = error.message;
         this.expireActions();
@@ -765,6 +778,9 @@ class CodexAdapter {
     const previous = this.permissionState.get(result.thread.id);
     const settings = {
       model: result.model ?? result.thread.model ?? null,
+      ...reportedCollaborationMode(
+        result.collaborationMode
+      ),
       reasoningEffort: result.reasoningEffort ?? null,
       ...serviceTierSettings(result.serviceTier),
       ...permissionSettings(
@@ -848,15 +864,16 @@ class CodexAdapter {
         threadId: id,
         cwd,
         input: taskInput(text, images),
-        ...turnSettings(cwd, settings)
+        ...turnSettings(cwd, settings),
+        ...collaborationSelection(settings, this.permissionState.get(id))
       })).turn
     );
     return turn;
   }
-  async startReview(id) {
+  async startReview(id, target = { type: "uncommittedChanges" }) {
     const result = await this.call("review/start", {
       threadId: id,
-      target: { type: "uncommittedChanges" },
+      target: target.type === "commit" ? { ...target, title: null } : target,
       delivery: "inline"
     });
     if (!isRecord(result) || result.reviewThreadId !== id)
@@ -877,6 +894,37 @@ class CodexAdapter {
   async interruptTurn(id, turnId) {
     await this.call("turn/interrupt", { threadId: id, turnId });
   }
+  async getGoal(id) {
+    try {
+      return readGoal((await this.call("thread/goal/get", { threadId: id })).goal, id);
+    } catch (error) {
+      if (error instanceof Error && /goals feature is disabled/i.test(error.message))
+        throw new AppError("GOAL_UNAVAILABLE", "\u5F53\u524D Codex \u672A\u542F\u7528 goals \u529F\u80FD", 409);
+      throw error;
+    }
+  }
+  async mutateGoal(id, mutation) {
+    if (mutation.action === "clear") {
+      await this.call("thread/goal/clear", { threadId: id, origin: "user" });
+      return null;
+    }
+    const { action: _, ...fields } = mutation;
+    return readGoal(
+      (await this.call("thread/goal/set", { threadId: id, origin: "user", ...fields })).goal,
+      id
+    );
+  }
+  async recapThread(id, prompt) {
+    if (!this.titles) throw new CodexError("CODEX_UNAVAILABLE", "Codex unavailable");
+    return this.titles.recap(id, prompt);
+  }
+  listGuardianDenials(id) {
+    return this.denials.list(id);
+  }
+  async approveGuardianDenial(id, denialId) {
+    const event = this.denials.take(id, denialId);
+    await this.call("thread/approveGuardianDeniedAction", { threadId: id, event });
+  }
   async compactThread(id) {
     await this.call("thread/compact/start", { threadId: id });
   }
@@ -920,9 +968,18 @@ class CodexAdapter {
         );
         break;
       }
+      case "thread/goal/updated":
+        this.emit({ type: "goal", threadId: event.params.threadId, goal: event.params.goal });
+        break;
+      case "thread/goal/cleared":
+        this.emit({ type: "goal", threadId: event.params.threadId, goal: null });
+        break;
       case "thread/settings/updated":
         {
           const observed = {
+            ...reportedCollaborationMode(
+              event.params.threadSettings.collaborationMode
+            ),
             model: event.params.threadSettings.model ?? null,
             reasoningEffort: event.params.threadSettings.effort ?? null,
             ...serviceTierSettings(event.params.threadSettings.serviceTier),
@@ -945,6 +1002,7 @@ class CodexAdapter {
         break;
       case "item/autoApprovalReview/started":
       case "item/autoApprovalReview/completed":
+        if (event.method === "item/autoApprovalReview/completed") this.denials.record(event.params);
         this.emit({
           type: "autoReview",
           threadId: event.params.threadId,
@@ -1102,7 +1160,7 @@ class CodexAdapter {
       await this.rpc?.reject(
         message.id,
         -32601,
-        "Interactive tools are disabled for title generation"
+        "Interactive tools are disabled for isolated helper requests"
       );
       return;
     }