@nervmor/codexui 1.0.3 → 1.0.5

package/dist-cli/index.js

@@ -3,9 +3,9 @@
 // src/cli/index.ts
 import { createServer as createServer2 } from "http";
 import { chmodSync, createWriteStream, existsSync as existsSync3, mkdirSync } from "fs";
-import { readFile as readFile5 } from "fs/promises";
+import { readFile as readFile5, stat as stat6, writeFile as writeFile5 } from "fs/promises";
 import { homedir as homedir4, networkInterfaces } from "os";
-import { join as join6 } from "path";
+import { isAbsolute as isAbsolute3, join as join6, resolve as resolve2 } from "path";
 import { spawn as spawn4, spawnSync } from "child_process";
 import { createInterface } from "readline/promises";
 import { fileURLToPath as fileURLToPath2 } from "url";
@@ -58,6 +58,9 @@ function readNumber(value) {
 function readBoolean(value) {
   return typeof value === "boolean" ? value : null;
 }
+function normalizeAccountUnavailableReason(value) {
+  return value === "payment_required" ? value : null;
+}
 function setJson(res, statusCode, payload) {
   res.statusCode = statusCode;
   res.setHeader("Content-Type", "application/json; charset=utf-8");
@@ -77,6 +80,14 @@ function getErrorMessage(payload, fallback) {
   }
   return fallback;
 }
+function isPaymentRequiredErrorMessage(value) {
+  if (!value) return false;
+  const normalized = value.toLowerCase();
+  return normalized.includes("payment required") || /\b402\b/.test(normalized);
+}
+function detectAccountUnavailableReason(error) {
+  return isPaymentRequiredErrorMessage(getErrorMessage(error, "")) ? "payment_required" : null;
+}
 function getCodexHomeDir() {
   const codexHome = process.env.CODEX_HOME?.trim();
   return codexHome && codexHome.length > 0 ? codexHome : join(homedir(), ".codex");
@@ -159,7 +170,8 @@ function normalizeStoredAccountEntry(value) {
     quotaSnapshot: normalizeRateLimitSnapshot(record?.quotaSnapshot),
     quotaUpdatedAtIso: readString(record?.quotaUpdatedAtIso),
     quotaStatus,
-    quotaError: readString(record?.quotaError)
+    quotaError: readString(record?.quotaError),
+    unavailableReason: normalizeAccountUnavailableReason(record?.unavailableReason) ?? (isPaymentRequiredErrorMessage(readString(record?.quotaError)) ? "payment_required" : null)
   };
 }
 async function readStoredAccountsState() {
@@ -248,6 +260,9 @@ async function writeSnapshot(storageId, raw) {
   await mkdir(dir, { recursive: true, mode: 448 });
   await writeFile(getSnapshotPath(storageId), raw, { encoding: "utf8", mode: 384 });
 }
+async function removeSnapshot(storageId) {
+  await rm(join(getAccountsSnapshotRoot(), storageId), { recursive: true, force: true });
+}
 async function readRuntimeAccountMetadata(appServer) {
   const payload = asRecord(await appServer.rpc("account/read", { refreshToken: false }));
   const account = asRecord(payload?.account);
@@ -345,8 +360,8 @@ async function withTemporaryCodexAppServer(authRaw, run) {
   };
   const call = async (method, params) => {
     const id = nextId++;
-    return await new Promise((resolve2, reject) => {
-      pending.set(id, { resolve: resolve2, reject });
+    return await new Promise((resolve3, reject) => {
+      pending.set(id, { resolve: resolve3, reject });
       sendLine({
         jsonrpc: "2.0",
         id,
@@ -435,6 +450,16 @@ async function replaceStoredAccount(nextEntry, activeAccountId) {
     accounts: nextState.accounts
   });
 }
+async function pickReplacementActiveAccount(accounts) {
+  const sorted = sortAccounts(accounts, null);
+  for (const entry of sorted) {
+    if (entry.unavailableReason === "payment_required") continue;
+    if (await fileExists(getSnapshotPath(entry.storageId))) {
+      return entry;
+    }
+  }
+  return null;
+}
 async function refreshAccountsInBackground(accountIds, activeAccountId) {
   for (const accountId of accountIds) {
     const state = await readStoredAccountsState();
@@ -449,14 +474,16 @@ async function refreshAccountsInBackground(accountIds, activeAccountId) {
         quotaSnapshot: inspected.quotaSnapshot ?? entry.quotaSnapshot,
         quotaUpdatedAtIso: (/* @__PURE__ */ new Date()).toISOString(),
         quotaStatus: "ready",
-        quotaError: null
+        quotaError: null,
+        unavailableReason: null
       }, activeAccountId);
     } catch (error) {
       await replaceStoredAccount({
         ...entry,
         quotaUpdatedAtIso: (/* @__PURE__ */ new Date()).toISOString(),
         quotaStatus: "error",
-        quotaError: getErrorMessage(error, "Failed to refresh account quota")
+        quotaError: getErrorMessage(error, "Failed to refresh account quota"),
+        unavailableReason: detectAccountUnavailableReason(error)
       }, activeAccountId);
     }
   }
@@ -509,7 +536,8 @@ async function importAccountFromAuthPath(path) {
     quotaSnapshot: existing?.quotaSnapshot ?? null,
     quotaUpdatedAtIso: existing?.quotaUpdatedAtIso ?? null,
     quotaStatus: existing?.quotaStatus ?? "idle",
-    quotaError: existing?.quotaError ?? null
+    quotaError: existing?.quotaError ?? null,
+    unavailableReason: existing?.unavailableReason ?? null
   };
   const nextState = withUpsertedAccount(state, nextEntry);
   await writeStoredAccountsState(nextState);
@@ -559,7 +587,8 @@ async function handleAccountRoutes(req, res, url, context) {
           quotaSnapshot: inspection.quotaSnapshot ?? target.quotaSnapshot,
           quotaUpdatedAtIso: (/* @__PURE__ */ new Date()).toISOString(),
           quotaStatus: "ready",
-          quotaError: null
+          quotaError: null,
+          unavailableReason: null
         };
         const nextState = withUpsertedAccount({
           activeAccountId: importedAccountId,
@@ -606,13 +635,13 @@ async function handleAccountRoutes(req, res, url, context) {
         });
         return true;
       }
-      const rawBody = await new Promise((resolve2, reject) => {
+      const rawBody = await new Promise((resolve3, reject) => {
         let body = "";
         req.setEncoding("utf8");
         req.on("data", (chunk) => {
           body += chunk;
         });
-        req.on("end", () => resolve2(body));
+        req.on("end", () => resolve3(body));
         req.on("error", reject);
       });
       const payload = asRecord(rawBody.length > 0 ? JSON.parse(rawBody) : {});
@@ -651,7 +680,8 @@ async function handleAccountRoutes(req, res, url, context) {
           quotaSnapshot: inspection.quotaSnapshot ?? target.quotaSnapshot,
           quotaUpdatedAtIso: (/* @__PURE__ */ new Date()).toISOString(),
           quotaStatus: "ready",
-          quotaError: null
+          quotaError: null,
+          unavailableReason: null
         };
         const nextState = withUpsertedAccount({
           activeAccountId: accountId,
@@ -676,6 +706,13 @@ async function handleAccountRoutes(req, res, url, context) {
       } catch (error) {
         await restoreActiveAuth(previousRaw);
         appServer.dispose();
+        await replaceStoredAccount({
+          ...target,
+          quotaUpdatedAtIso: (/* @__PURE__ */ new Date()).toISOString(),
+          quotaStatus: "error",
+          quotaError: getErrorMessage(error, "Failed to switch account"),
+          unavailableReason: detectAccountUnavailableReason(error)
+        }, state.activeAccountId);
         setJson(res, 502, {
           error: "account_switch_failed",
           message: getErrorMessage(error, "Failed to switch account")
@@ -689,6 +726,145 @@ async function handleAccountRoutes(req, res, url, context) {
     }
     return true;
   }
+  if (req.method === "POST" && url.pathname === "/codex-api/accounts/remove") {
+    try {
+      const rawBody = await new Promise((resolve3, reject) => {
+        let body = "";
+        req.setEncoding("utf8");
+        req.on("data", (chunk) => {
+          body += chunk;
+        });
+        req.on("end", () => resolve3(body));
+        req.on("error", reject);
+      });
+      const payload = asRecord(rawBody.length > 0 ? JSON.parse(rawBody) : {});
+      const accountId = typeof payload?.accountId === "string" ? payload.accountId.trim() : "";
+      if (!accountId) {
+        setJson(res, 400, { error: "account_not_found", message: "Missing accountId." });
+        return true;
+      }
+      const state = await readStoredAccountsState();
+      const target = state.accounts.find((entry) => entry.accountId === accountId) ?? null;
+      if (!target) {
+        setJson(res, 404, { error: "account_not_found", message: "The requested account was not found." });
+        return true;
+      }
+      const remainingAccounts = state.accounts.filter((entry) => entry.accountId !== accountId);
+      if (state.activeAccountId !== accountId) {
+        await removeSnapshot(target.storageId);
+        await writeStoredAccountsState({
+          activeAccountId: state.activeAccountId,
+          accounts: remainingAccounts
+        });
+        setJson(res, 200, {
+          ok: true,
+          data: {
+            activeAccountId: state.activeAccountId,
+            accounts: sortAccounts(remainingAccounts, state.activeAccountId).map((entry) => toPublicAccountEntry(entry, state.activeAccountId))
+          }
+        });
+        return true;
+      }
+      if (appServer.listPendingServerRequests().length > 0) {
+        setJson(res, 409, {
+          error: "account_remove_blocked",
+          message: "Finish pending approval requests before removing the active account."
+        });
+        return true;
+      }
+      let previousRaw = null;
+      try {
+        previousRaw = await readFile(getActiveAuthPath(), "utf8");
+      } catch {
+        previousRaw = null;
+      }
+      const replacement = await pickReplacementActiveAccount(remainingAccounts);
+      if (!replacement) {
+        await restoreActiveAuth(null);
+        appServer.dispose();
+        await removeSnapshot(target.storageId);
+        await writeStoredAccountsState({
+          activeAccountId: null,
+          accounts: remainingAccounts
+        });
+        void scheduleAccountsBackgroundRefresh({
+          force: true,
+          accountIds: remainingAccounts.map((entry) => entry.accountId)
+        });
+        setJson(res, 200, {
+          ok: true,
+          data: {
+            activeAccountId: null,
+            accounts: sortAccounts(remainingAccounts, null).map((entry) => toPublicAccountEntry(entry, null))
+          }
+        });
+        return true;
+      }
+      const replacementSnapshotPath = getSnapshotPath(replacement.storageId);
+      if (!await fileExists(replacementSnapshotPath)) {
+        setJson(res, 404, {
+          error: "account_not_found",
+          message: "The replacement account snapshot is missing."
+        });
+        return true;
+      }
+      const replacementRaw = await readFile(replacementSnapshotPath, "utf8");
+      await writeFile(getActiveAuthPath(), replacementRaw, { encoding: "utf8", mode: 384 });
+      try {
+        appServer.dispose();
+        const inspection = await validateSwitchedAccount(appServer);
+        const activatedReplacement = {
+          ...replacement,
+          email: inspection.metadata.email ?? replacement.email,
+          planType: inspection.metadata.planType ?? replacement.planType,
+          lastActivatedAtIso: (/* @__PURE__ */ new Date()).toISOString(),
+          quotaSnapshot: inspection.quotaSnapshot ?? replacement.quotaSnapshot,
+          quotaUpdatedAtIso: (/* @__PURE__ */ new Date()).toISOString(),
+          quotaStatus: "ready",
+          quotaError: null,
+          unavailableReason: null
+        };
+        const nextAccounts = remainingAccounts.map((entry) => entry.accountId === activatedReplacement.accountId ? activatedReplacement : entry);
+        await removeSnapshot(target.storageId);
+        await writeStoredAccountsState({
+          activeAccountId: activatedReplacement.accountId,
+          accounts: nextAccounts
+        });
+        void scheduleAccountsBackgroundRefresh({
+          force: true,
+          prioritizeAccountId: activatedReplacement.accountId,
+          accountIds: nextAccounts.filter((entry) => entry.accountId !== activatedReplacement.accountId).map((entry) => entry.accountId)
+        });
+        setJson(res, 200, {
+          ok: true,
+          data: {
+            activeAccountId: activatedReplacement.accountId,
+            accounts: sortAccounts(nextAccounts, activatedReplacement.accountId).map((entry) => toPublicAccountEntry(entry, activatedReplacement.accountId))
+          }
+        });
+      } catch (error) {
+        await restoreActiveAuth(previousRaw);
+        appServer.dispose();
+        await replaceStoredAccount({
+          ...replacement,
+          quotaUpdatedAtIso: (/* @__PURE__ */ new Date()).toISOString(),
+          quotaStatus: "error",
+          quotaError: getErrorMessage(error, "Failed to switch account"),
+          unavailableReason: detectAccountUnavailableReason(error)
+        }, state.activeAccountId);
+        setJson(res, 502, {
+          error: "account_remove_failed",
+          message: getErrorMessage(error, "Failed to remove account")
+        });
+      }
+    } catch (error) {
+      setJson(res, 400, {
+        error: "invalid_auth_json",
+        message: getErrorMessage(error, "Failed to remove account")
+      });
+    }
+    return true;
+  }
   return false;
 }
 
@@ -729,7 +905,7 @@ function getSkillsInstallDir() {
   return join2(getCodexHomeDir2(), "skills");
 }
 async function runCommand(command, args, options = {}) {
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     const proc = spawn2(command, args, {
       cwd: options.cwd,
       env: process.env,
@@ -746,7 +922,7 @@ async function runCommand(command, args, options = {}) {
     proc.on("error", reject);
     proc.on("close", (code) => {
       if (code === 0) {
-        resolve2();
+        resolve3();
         return;
       }
       const details = [stderr.trim(), stdout.trim()].filter(Boolean).join("\n");
@@ -756,7 +932,7 @@ async function runCommand(command, args, options = {}) {
   });
 }
 async function runCommandWithOutput(command, args, options = {}) {
-  return await new Promise((resolve2, reject) => {
+  return await new Promise((resolve3, reject) => {
     const proc = spawn2(command, args, {
       cwd: options.cwd,
       env: process.env,
@@ -773,7 +949,7 @@ async function runCommandWithOutput(command, args, options = {}) {
     proc.on("error", reject);
     proc.on("close", (code) => {
       if (code === 0) {
-        resolve2(stdout.trim());
+        resolve3(stdout.trim());
         return;
       }
       const details = [stderr.trim(), stdout.trim()].filter(Boolean).join("\n");
@@ -818,9 +994,9 @@ async function getGhToken() {
     proc.stdout.on("data", (d) => {
       out += d.toString();
     });
-    return new Promise((resolve2) => {
-      proc.on("close", (code) => resolve2(code === 0 ? out.trim() : null));
-      proc.on("error", () => resolve2(null));
+    return new Promise((resolve3) => {
+      proc.on("close", (code) => resolve3(code === 0 ? out.trim() : null));
+      proc.on("error", () => resolve3(null));
     });
   } catch {
     return null;
@@ -1059,7 +1235,7 @@ async function ensurePrivateForkFromUpstream(token, username, repoName) {
       ready = true;
       break;
     }
-    await new Promise((resolve2) => setTimeout(resolve2, 1e3));
+    await new Promise((resolve3) => setTimeout(resolve3, 1e3));
   }
   if (!ready) throw new Error("Private mirror repo was created but is not available yet");
   if (!created) return;
@@ -1854,7 +2030,7 @@ function scoreFileCandidate(path, query) {
   return 10;
 }
 async function listFilesWithRipgrep(cwd) {
-  return await new Promise((resolve2, reject) => {
+  return await new Promise((resolve3, reject) => {
     const proc = spawn3("rg", ["--files", "--hidden", "-g", "!.git", "-g", "!node_modules"], {
       cwd,
       env: process.env,
@@ -1872,7 +2048,7 @@ async function listFilesWithRipgrep(cwd) {
     proc.on("close", (code) => {
       if (code === 0) {
         const rows = stdout.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
-        resolve2(rows);
+        resolve3(rows);
         return;
       }
       const details = [stderr.trim(), stdout.trim()].filter(Boolean).join("\n");
@@ -1885,7 +2061,7 @@ function getCodexHomeDir3() {
   return codexHome && codexHome.length > 0 ? codexHome : join3(homedir3(), ".codex");
 }
 async function runCommand2(command, args, options = {}) {
-  await new Promise((resolve2, reject) => {
+  await new Promise((resolve3, reject) => {
     const proc = spawn3(command, args, {
       cwd: options.cwd,
       env: process.env,
@@ -1902,7 +2078,7 @@ async function runCommand2(command, args, options = {}) {
     proc.on("error", reject);
     proc.on("close", (code) => {
       if (code === 0) {
-        resolve2();
+        resolve3();
         return;
       }
       const details = [stderr.trim(), stdout.trim()].filter(Boolean).join("\n");
@@ -1934,7 +2110,7 @@ async function ensureRepoHasInitialCommit(repoRoot) {
   );
 }
 async function runCommandCapture(command, args, options = {}) {
-  return await new Promise((resolve2, reject) => {
+  return await new Promise((resolve3, reject) => {
     const proc = spawn3(command, args, {
       cwd: options.cwd,
       env: process.env,
@@ -1951,7 +2127,7 @@ async function runCommandCapture(command, args, options = {}) {
     proc.on("error", reject);
     proc.on("close", (code) => {
       if (code === 0) {
-        resolve2(stdout.trim());
+        resolve3(stdout.trim());
         return;
       }
       const details = [stderr.trim(), stdout.trim()].filter(Boolean).join("\n");
@@ -1997,6 +2173,9 @@ async function readCodexAuth() {
 function getCodexGlobalStatePath() {
   return join3(getCodexHomeDir3(), ".codex-global-state.json");
 }
+function getCodexSessionIndexPath() {
+  return join3(getCodexHomeDir3(), "session_index.jsonl");
+}
 var MAX_THREAD_TITLES = 500;
 function normalizeThreadTitleCache(value) {
   const record = asRecord3(value);
@@ -2024,6 +2203,47 @@ function removeFromThreadTitleCache(cache, id) {
   const { [id]: _, ...titles } = cache.titles;
   return { titles, order: cache.order.filter((o) => o !== id) };
 }
+function normalizeSessionIndexThreadTitle(value) {
+  const record = asRecord3(value);
+  if (!record) return null;
+  const id = typeof record.id === "string" ? record.id.trim() : "";
+  const title = typeof record.thread_name === "string" ? record.thread_name.trim() : "";
+  const updatedAtIso = typeof record.updated_at === "string" ? record.updated_at.trim() : "";
+  const updatedAtMs = updatedAtIso ? Date.parse(updatedAtIso) : Number.NaN;
+  if (!id || !title) return null;
+  return {
+    id,
+    title,
+    updatedAtMs: Number.isFinite(updatedAtMs) ? updatedAtMs : 0
+  };
+}
+function trimThreadTitleCache(cache) {
+  const titles = { ...cache.titles };
+  const order = cache.order.filter((id) => {
+    if (!titles[id]) return false;
+    return true;
+  }).slice(0, MAX_THREAD_TITLES);
+  for (const id of Object.keys(titles)) {
+    if (!order.includes(id)) {
+      delete titles[id];
+    }
+  }
+  return { titles, order };
+}
+function mergeThreadTitleCaches(base, overlay) {
+  const titles = { ...base.titles, ...overlay.titles };
+  const order = [];
+  for (const id of [...overlay.order, ...base.order]) {
+    if (!titles[id] || order.includes(id)) continue;
+    order.push(id);
+  }
+  for (const id of Object.keys(titles)) {
+    if (!order.includes(id)) {
+      order.push(id);
+    }
+  }
+  return trimThreadTitleCache({ titles, order });
+}
 async function readThreadTitleCache() {
   const statePath = getCodexGlobalStatePath();
   try {
@@ -2046,6 +2266,42 @@ async function writeThreadTitleCache(cache) {
   payload["thread-titles"] = cache;
   await writeFile3(statePath, JSON.stringify(payload), "utf8");
 }
+async function readThreadTitlesFromSessionIndex() {
+  try {
+    const raw = await readFile3(getCodexSessionIndexPath(), "utf8");
+    const latestById = /* @__PURE__ */ new Map();
+    for (const line of raw.split(/\r?\n/u)) {
+      const trimmed = line.trim();
+      if (!trimmed) continue;
+      try {
+        const entry = normalizeSessionIndexThreadTitle(JSON.parse(trimmed));
+        if (!entry) continue;
+        const previous = latestById.get(entry.id);
+        if (!previous || entry.updatedAtMs >= previous.updatedAtMs) {
+          latestById.set(entry.id, entry);
+        }
+      } catch {
+      }
+    }
+    const entries = Array.from(latestById.values()).sort((first, second) => second.updatedAtMs - first.updatedAtMs);
+    const titles = {};
+    const order = [];
+    for (const entry of entries) {
+      titles[entry.id] = entry.title;
+      order.push(entry.id);
+    }
+    return trimThreadTitleCache({ titles, order });
+  } catch {
+    return { titles: {}, order: [] };
+  }
+}
+async function readMergedThreadTitleCache() {
+  const [sessionIndexCache, persistedCache] = await Promise.all([
+    readThreadTitlesFromSessionIndex(),
+    readThreadTitleCache()
+  ]);
+  return mergeThreadTitleCaches(sessionIndexCache, persistedCache);
+}
 async function readWorkspaceRootsState() {
   const statePath = getCodexGlobalStatePath();
   let payload = {};
@@ -2170,14 +2426,14 @@ async function proxyTranscribe(body, contentType, authToken, accountId) {
   if (accountId) {
     headers["ChatGPT-Account-Id"] = accountId;
   }
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const req = httpsRequest(
       "https://chatgpt.com/backend-api/transcribe",
       { method: "POST", headers },
       (res) => {
         const chunks = [];
         res.on("data", (c) => chunks.push(c));
-        res.on("end", () => resolve2({ status: res.statusCode ?? 500, body: Buffer.concat(chunks).toString("utf8") }));
+        res.on("end", () => resolve3({ status: res.statusCode ?? 500, body: Buffer.concat(chunks).toString("utf8") }));
         res.on("error", reject);
       }
     );
@@ -2334,8 +2590,8 @@ var AppServerProcess = class {
   async call(method, params) {
     this.start();
     const id = this.nextId++;
-    return new Promise((resolve2, reject) => {
-      this.pending.set(id, { resolve: resolve2, reject });
+    return new Promise((resolve3, reject) => {
+      this.pending.set(id, { resolve: resolve3, reject });
       this.sendLine({
         jsonrpc: "2.0",
         id,
@@ -2443,7 +2699,7 @@ var MethodCatalog = class {
     this.notificationCache = null;
   }
   async runGenerateSchemaCommand(outDir) {
-    await new Promise((resolve2, reject) => {
+    await new Promise((resolve3, reject) => {
       const process2 = spawn3("codex", ["app-server", "generate-json-schema", "--out", outDir], {
         stdio: ["ignore", "ignore", "pipe"]
       });
@@ -2455,7 +2711,7 @@ var MethodCatalog = class {
       process2.on("error", reject);
       process2.on("exit", (code) => {
         if (code === 0) {
-          resolve2();
+          resolve3();
           return;
         }
         reject(new Error(stderr.trim() || `generate-json-schema exited with code ${String(code)}`));
@@ -2881,7 +3137,7 @@ function createCodexBridgeMiddleware() {
         return;
       }
       if (req.method === "GET" && url.pathname === "/codex-api/thread-titles") {
-        const cache = await readThreadTitleCache();
+        const cache = await readMergedThreadTitleCache();
         setJson3(res, 200, { data: cache });
         return;
       }
@@ -3245,9 +3501,9 @@ async function createDirectoryListingHtml(localPath) {
   const rows = items.map((item) => {
     const suffix = item.isDirectory ? "/" : "";
     const editAction = item.editable ? ` <a class="icon-btn" aria-label="Edit ${escapeHtml(item.name)}" href="${escapeHtml(toEditHref(item.path))}" title="Edit">\u270F\uFE0F</a>` : "";
-    return `<li class="file-row"><a class="file-link" href="${escapeHtml(toBrowseHref(item.path))}">${escapeHtml(item.name)}${suffix}</a>${editAction}</li>`;
+    return `<li class="file-row"><a class="file-link" href="${escapeHtml(toBrowseHref(item.path))}">${escapeHtml(item.name)}${suffix}</a><span class="row-actions">${editAction}</span></li>`;
   }).join("\n");
-  const parentLink = localPath !== parentPath ? `<p><a href="${escapeHtml(toBrowseHref(parentPath))}">..</a></p>` : "";
+  const parentLink = localPath !== parentPath ? `<a href="${escapeHtml(toBrowseHref(parentPath))}">..</a>` : "";
   return `<!doctype html>
 <html lang="en">
 <head>
@@ -3261,8 +3517,27 @@ async function createDirectoryListingHtml(localPath) {
     ul { list-style: none; padding: 0; margin: 12px 0 0; display: flex; flex-direction: column; gap: 8px; }
     .file-row { display: grid; grid-template-columns: minmax(0,1fr) auto; align-items: center; gap: 10px; }
     .file-link { display: block; padding: 10px 12px; border: 1px solid #28405f; border-radius: 10px; background: #0f1b33; overflow-wrap: anywhere; }
-    .icon-btn { display: inline-flex; align-items: center; justify-content: center; width: 42px; height: 42px; border: 1px solid #36557a; border-radius: 10px; background: #162643; text-decoration: none; }
+    .header-actions { display: flex; align-items: center; gap: 10px; margin-top: 10px; flex-wrap: wrap; }
+    .header-parent-link { color: #9ec8ff; font-size: 14px; padding: 8px 10px; border: 1px solid #2a4569; border-radius: 10px; background: #101f3a; }
+    .header-parent-link:hover { text-decoration: none; filter: brightness(1.08); }
+    .header-open-btn {
+      height: 42px;
+      padding: 0 14px;
+      border: 1px solid #4f8de0;
+      border-radius: 10px;
+      background: linear-gradient(135deg, #2e6ee6 0%, #3d8cff 100%);
+      color: #eef6ff;
+      font-weight: 700;
+      letter-spacing: 0.01em;
+      cursor: pointer;
+      box-shadow: 0 6px 18px rgba(33, 90, 199, 0.35);
+    }
+    .header-open-btn:hover { filter: brightness(1.08); }
+    .header-open-btn:disabled { opacity: 0.6; cursor: default; }
+    .row-actions { display: inline-flex; align-items: center; gap: 8px; min-width: 42px; justify-content: flex-end; }
+    .icon-btn { display: inline-flex; align-items: center; justify-content: center; width: 42px; height: 42px; border: 1px solid #36557a; border-radius: 10px; background: #162643; color: #dbe6ff; text-decoration: none; cursor: pointer; }
     .icon-btn:hover { filter: brightness(1.08); text-decoration: none; }
+    .status { margin: 10px 0 0; color: #8cc2ff; min-height: 1.25em; }
     h1 { font-size: 18px; margin: 0; word-break: break-all; }
     @media (max-width: 640px) {
       body { margin: 12px; }
@@ -3274,8 +3549,46 @@ async function createDirectoryListingHtml(localPath) {
 </head>
 <body>
   <h1>Index of ${escapeHtml(localPath)}</h1>
-  ${parentLink}
+  <div class="header-actions">
+    ${parentLink ? `<a class="header-parent-link" href="${escapeHtml(toBrowseHref(parentPath))}">..</a>` : ""}
+    <button class="header-open-btn open-folder-btn" type="button" aria-label="Open current folder in Codex" title="Open folder in Codex" data-path="${escapeHtml(localPath)}">Open folder in Codex</button>
+  </div>
+  <p id="status" class="status"></p>
   <ul>${rows}</ul>
+  <script>
+    const status = document.getElementById('status');
+    document.addEventListener('click', async (event) => {
+      const target = event.target;
+      if (!(target instanceof Element)) return;
+      const button = target.closest('.open-folder-btn');
+      if (!(button instanceof HTMLButtonElement)) return;
+
+      const path = button.getAttribute('data-path') || '';
+      if (!path) return;
+      button.disabled = true;
+      status.textContent = 'Opening folder in Codex...';
+      try {
+        const response = await fetch('/codex-api/project-root', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({
+            path,
+            createIfMissing: false,
+            label: '',
+          }),
+        });
+        if (!response.ok) {
+          status.textContent = 'Failed to open folder.';
+          button.disabled = false;
+          return;
+        }
+        window.location.assign('/#/');
+      } catch {
+        status.textContent = 'Failed to open folder.';
+        button.disabled = false;
+      }
+    });
+  </script>
 </body>
 </html>`;
 }
@@ -3554,6 +3867,22 @@ function generatePassword() {
 // src/cli/index.ts
 var program = new Command().name("codexui").description("Web interface for Codex app-server");
 var __dirname2 = dirname3(fileURLToPath2(import.meta.url));
+var hasPromptedCloudflaredInstall = false;
+function getCodexHomePath() {
+  return process.env.CODEX_HOME?.trim() || join6(homedir4(), ".codex");
+}
+function getCloudflaredPromptMarkerPath() {
+  return join6(getCodexHomePath(), ".cloudflared-install-prompted");
+}
+function hasPromptedCloudflaredInstallPersisted() {
+  return existsSync3(getCloudflaredPromptMarkerPath());
+}
+async function persistCloudflaredInstallPrompted() {
+  const codexHome = getCodexHomePath();
+  mkdirSync(codexHome, { recursive: true });
+  await writeFile5(getCloudflaredPromptMarkerPath(), `${Date.now()}
+`, "utf8");
+}
 async function readCliVersion() {
   try {
     const packageJsonPath = join6(__dirname2, "..", "package.json");
@@ -3622,7 +3951,7 @@ function mapCloudflaredLinuxArch(arch) {
   return null;
 }
 function downloadFile(url, destination) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const request = (currentUrl) => {
       httpsGet(currentUrl, (response) => {
         const code = response.statusCode ?? 0;
@@ -3640,7 +3969,7 @@ function downloadFile(url, destination) {
         response.pipe(file);
         file.on("finish", () => {
           file.close();
-          resolve2();
+          resolve3();
         });
         file.on("error", reject);
       }).on("error", reject);
@@ -3676,6 +4005,14 @@ async function ensureCloudflaredInstalledLinux() {
   return installed;
 }
 async function shouldInstallCloudflaredInteractively() {
+  if (hasPromptedCloudflaredInstall || hasPromptedCloudflaredInstallPersisted()) {
+    return false;
+  }
+  hasPromptedCloudflaredInstall = true;
+  await persistCloudflaredInstallPrompted();
+  if (process.platform === "win32") {
+    return false;
+  }
   if (!process.stdin.isTTY || !process.stdout.isTTY) {
     console.warn("\n[cloudflared] cloudflared is missing and terminal is non-interactive, skipping install.");
     return false;
@@ -3694,6 +4031,9 @@ async function resolveCloudflaredForTunnel() {
   if (current) {
     return current;
   }
+  if (process.platform === "win32") {
+    return null;
+  }
   const installApproved = await shouldInstallCloudflaredInteractively();
   if (!installApproved) {
     return null;
@@ -3701,7 +4041,7 @@ async function resolveCloudflaredForTunnel() {
   return ensureCloudflaredInstalledLinux();
 }
 function hasCodexAuth() {
-  const codexHome = process.env.CODEX_HOME?.trim() || join6(homedir4(), ".codex");
+  const codexHome = getCodexHomePath();
   return existsSync3(join6(codexHome, "auth.json"));
 }
 function ensureCodexInstalled() {
@@ -3800,7 +4140,7 @@ function getAccessibleUrls(port) {
   return Array.from(urls);
 }
 async function startCloudflaredTunnel(command, localPort) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const child = spawn4(command, ["tunnel", "--url", `http://localhost:${String(localPort)}`], {
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -3817,7 +4157,7 @@ async function startCloudflaredTunnel(command, localPort) {
       clearTimeout(timeout);
       child.stdout?.off("data", handleData);
       child.stderr?.off("data", handleData);
-      resolve2({ process: child, url: parsedUrl });
+      resolve3({ process: child, url: parsedUrl });
     };
     const onError = (error) => {
       clearTimeout(timeout);
@@ -3836,7 +4176,7 @@ async function startCloudflaredTunnel(command, localPort) {
   });
 }
 function listenWithFallback(server, startPort) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const attempt = (port) => {
       const onError = (error) => {
         server.off("listening", onListening);
@@ -3848,7 +4188,7 @@ function listenWithFallback(server, startPort) {
       };
       const onListening = () => {
         server.off("error", onError);
-        resolve2(port);
+        resolve3(port);
       };
       server.once("error", onError);
       server.once("listening", onListening);
@@ -3857,8 +4197,72 @@ function listenWithFallback(server, startPort) {
     attempt(startPort);
   });
 }
+function getCodexGlobalStatePath2() {
+  const codexHome = getCodexHomePath();
+  return join6(codexHome, ".codex-global-state.json");
+}
+function normalizeUniqueStrings(value) {
+  if (!Array.isArray(value)) return [];
+  const next = [];
+  for (const item of value) {
+    if (typeof item !== "string") continue;
+    const trimmed = item.trim();
+    if (!trimmed || next.includes(trimmed)) continue;
+    next.push(trimmed);
+  }
+  return next;
+}
+async function persistLaunchProject(projectPath) {
+  const trimmed = projectPath.trim();
+  if (!trimmed) return;
+  const normalizedPath = isAbsolute3(trimmed) ? trimmed : resolve2(trimmed);
+  const directoryInfo = await stat6(normalizedPath);
+  if (!directoryInfo.isDirectory()) {
+    throw new Error(`Not a directory: ${normalizedPath}`);
+  }
+  const statePath = getCodexGlobalStatePath2();
+  let payload = {};
+  try {
+    const raw = await readFile5(statePath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      payload = parsed;
+    }
+  } catch {
+    payload = {};
+  }
+  const roots = normalizeUniqueStrings(payload["electron-saved-workspace-roots"]);
+  const activeRoots = normalizeUniqueStrings(payload["active-workspace-roots"]);
+  payload["electron-saved-workspace-roots"] = [
+    normalizedPath,
+    ...roots.filter((value) => value !== normalizedPath)
+  ];
+  payload["active-workspace-roots"] = [
+    normalizedPath,
+    ...activeRoots.filter((value) => value !== normalizedPath)
+  ];
+  await writeFile5(statePath, JSON.stringify(payload), "utf8");
+}
+async function addProjectOnly(projectPath) {
+  const trimmed = projectPath.trim();
+  if (!trimmed) {
+    throw new Error("Missing project path");
+  }
+  await persistLaunchProject(trimmed);
+}
 async function startServer(options) {
   const version = await readCliVersion();
+  const projectPath = options.projectPath?.trim() ?? "";
+  if (projectPath.length > 0) {
+    try {
+      await persistLaunchProject(projectPath);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      console.warn(`
+[project] Could not open launch project: ${message}
+`);
+    }
+  }
   const codexCommand = ensureCodexInstalled() ?? resolveCodexCommand();
   if (!hasCodexAuth() && codexCommand) {
     console.log("\nCodex is not logged in. Starting `codex login`...\n");
@@ -3942,8 +4346,20 @@ async function runLogin() {
   console.log("\nStarting `codex login`...\n");
   runOrFail(codexCommand, ["login"], "Codex login");
 }
-program.option("-p, --port <port>", "port to listen on", "5999").option("--password <pass>", "set a specific password").option("--no-password", "disable password protection").option("--tunnel", "start cloudflared tunnel", true).option("--no-tunnel", "disable cloudflared tunnel startup").action(async (opts) => {
-  await startServer(opts);
+program.argument("[projectPath]", "project directory to open on launch").option("--open-project <path>", "open project directory on launch (Codex desktop parity)").option("-p, --port <port>", "port to listen on", "5999").option("--password <pass>", "set a specific password").option("--no-password", "disable password protection").option("--tunnel", "start cloudflared tunnel", true).option("--no-tunnel", "disable cloudflared tunnel startup").action(async (projectPath, opts) => {
+  const rawArgv = process.argv.slice(2);
+  const openProjectFlagIndex = rawArgv.findIndex((arg) => arg === "--open-project" || arg.startsWith("--open-project="));
+  let openProjectOnly = (opts.openProject ?? "").trim();
+  if (!openProjectOnly && openProjectFlagIndex >= 0 && projectPath?.trim()) {
+    openProjectOnly = projectPath.trim();
+  }
+  if (openProjectOnly.length > 0) {
+    await addProjectOnly(openProjectOnly);
+    console.log(`Added project: ${openProjectOnly}`);
+    return;
+  }
+  const launchProject = (projectPath ?? "").trim();
+  await startServer({ ...opts, projectPath: launchProject });
 });
 program.command("login").description("Install/check Codex CLI and run `codex login`").action(runLogin);
 program.command("help").description("Show codexui command help").action(() => {