@youdie006/prodex 0.40.18 → 0.40.20

package/README.md

@@ -77,7 +77,9 @@ Finish any native browser or OS confirmation before requesting the handoff: Chro
 
 A Chrome account-connection chooser is separate from ChatGPT sign-in. If prodex confirms that chooser is displayed, choose for yourself whether to connect Chrome to the account; "Use Chrome without an account" declines that separate connection. A hidden or unreadable internal target still blocks the handoff but is not proof that a prompt is visible or that ChatGPT is logged out.
 
-"Login readiness is not yet confirmed" does not mean the saved login was lost. Inspect the dedicated browser before signing in again. An explicit `login_required`, `cloudflare_check`, `captcha_required`, or `permission_required` during a headless/virtual-display wait stops promptly. For a running headless browser, use `prodex pro browser login --headed --recover-visible` to open that same profile and page visibly. This explicit recovery refuses other tabs, active work, filled inputs, and uncertain browser identity; it never clicks a security check or sends a prompt. A usage limit or missing composer has its own next step instead of a blanket login instruction.
+The login guide explains this separate Chrome choice before the authentication steps. Keep the ChatGPT tab open after making it. If a verified signed-in headed session reaches another authentication or protection blocker immediately after the headless handoff, prodex stops without prescribing another login cycle. Repeating login is not a demonstrated fix for that headless failure; `login: READY` before the handoff is not `background: READY` after it.
+
+"Login readiness is not yet confirmed" does not mean the saved login was lost. Inspect the dedicated browser before signing in again. An explicit `login_required`, `cloudflare_check`, `captcha_required`, or `permission_required` during a headless/virtual-display wait stops promptly. Outside the just-verified handoff case above, `prodex pro browser login --headed --recover-visible` is available for explicit visible inspection of a running headless browser's same profile and page. This recovery refuses other tabs, active work, filled inputs, and uncertain browser identity; it never clicks a security check or sends a prompt. A usage limit or missing composer has its own next step instead of a blanket login instruction.
 
 While Pro thinks, progress goes to stderr: connecting, prompt sent, elapsed time while generating. A Pro selection raises the send budget to twenty minutes on its own; `--timeout-ms` overrides it. Answers are read from the rendered page, so formatting can differ from the original message. If the dedicated browser is not running, an interactive `ask` starts it, waits for your saved session, and retries once (`--no-auto-login` turns that off; scripts opt in with `--auto-login`).
 

package/dist/browser-diagnostics.js

@@ -31,7 +31,7 @@ export function pageShapeExpression() {
     return `(() => {
     const vis = (el) => !!(el.offsetWidth || el.offsetHeight || el.getClientRects().length);
     const box = (el) => { const r = el.getBoundingClientRect(); return { x: Math.round(r.x), y: Math.round(r.y), w: Math.round(r.width), h: Math.round(r.height) }; };
-    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"]');
+    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
     const describe = (el) => ({
       role: el.getAttribute("role"),
       testid: el.getAttribute("data-testid"),

package/dist/browser-handoff.js

@@ -160,7 +160,7 @@ async function verifyIdle(page) {
       draft: composer.ok !== false || composer.reason !== 'Composer stayed empty after text insertion',
       dialog: [...document.querySelectorAll('dialog[open],[role="dialog"],[aria-modal="true"]')].some(visible),
       attachments: attachmentState.removed > 0 || [...document.querySelectorAll('input[type="file"]')].some(e => e.files?.length > 0) || [...document.querySelectorAll('[role="progressbar"]')].some(visible),
-      unpersisted: !location.pathname.includes('/c/') && !!document.querySelector('[data-message-author-role]')
+      unpersisted: !location.pathname.includes('/c/') && !!document.querySelector('[data-message-author-role],[data-chatgpt-search-unit-key]')
     };
   })()`;
     const reply = await request(page.webSocketDebuggerUrl, "Runtime.evaluate", { expression, returnByValue: true });
@@ -190,7 +190,7 @@ async function verifyVisibleAuthRecovery(page) {
     return { status, filledTextControl,
       dialog: [...document.querySelectorAll('dialog[open],[role="dialog"],[aria-modal="true"]')].some(visible),
       attachments: attachmentState.removed > 0 || [...document.querySelectorAll('input[type="file"]')].some(e => e.files?.length > 0) || [...document.querySelectorAll('[role="progressbar"]')].some(visible),
-      unpersisted: !location.pathname.includes('/c/') && !!document.querySelector('[data-message-author-role]')
+      unpersisted: !location.pathname.includes('/c/') && !!document.querySelector('[data-message-author-role],[data-chatgpt-search-unit-key]')
     };
   })()`;
     const reply = await request(page.webSocketDebuggerUrl, "Runtime.evaluate", { expression, returnByValue: true });

package/dist/chatgpt-browser.js

@@ -174,12 +174,44 @@ export function resolveCdpPort(explicit) {
 // Text/buttons for login and status detection: exclude message bodies and the
 // composer, but KEEP the sidebar/nav - the logged-in signals ("New chat",
 // "Projects", the profile button, the plan hint) live there.
-export const CHATGPT_RUNTIME_BLOCKER_TEXT_EXCLUDED_ANCESTORS = '[data-message-author-role],script,style,noscript,[aria-hidden="true"],div[role="textbox"],textarea,[contenteditable="true"]';
+export const CHATGPT_RUNTIME_BLOCKER_TEXT_EXCLUDED_ANCESTORS = '[data-message-author-role],[data-chatgpt-search-unit-key],script,style,noscript,[aria-hidden="true"],div[role="textbox"],textarea,[contenteditable="true"]';
 // Text scanned for PAGE BLOCKERS (captcha/usage-limit/cloudflare/...) also
 // excludes the sidebar/nav: a past-chat title like "usage limit reset" or
 // "verify human" in the history list must not be matched as a live blocker.
-export const CHATGPT_BLOCKER_SCAN_EXCLUDED_ANCESTORS = `${'[data-message-author-role],script,style,noscript,[aria-hidden="true"],div[role="textbox"],textarea,[contenteditable="true"]'},nav,aside,[role="navigation"]`;
-export const CHATGPT_COMPOSER_CANDIDATE_EXCLUDED_ANCESTORS = '[data-message-author-role],script,style,noscript,[aria-hidden="true"]';
+export const CHATGPT_BLOCKER_SCAN_EXCLUDED_ANCESTORS = `${'[data-message-author-role],[data-chatgpt-search-unit-key],script,style,noscript,[aria-hidden="true"],div[role="textbox"],textarea,[contenteditable="true"]'},nav,aside,[role="navigation"]`;
+/**
+ * The conversation's messages, whichever markup ChatGPT is rendering.
+ *
+ * Measured 2026-09-29: messages no longer carry data-message-author-role. A
+ * turn is a [data-chatgpt-search-unit-key] whose value ends in ":user" or
+ * ":assistant", the answer text sits in [data-chatgpt-selection-message-id],
+ * and the user's text in [data-user-message-bubble]. prodex counted zero
+ * messages on a page holding a prompt and its answer, so a send that had
+ * posted and been answered timed out as "acceptance unconfirmed" - a Pro reply
+ * sat in the thread for ten minutes while prodex waited for it. The model slug
+ * attribute went with it; where it is absent the model is simply not known.
+ */
+const CHATGPT_MESSAGE_NODES_JS = `
+    const chatMessageNodes = () => {
+      const legacy = [...document.querySelectorAll('[data-message-author-role]')];
+      if (legacy.length > 0) {
+        return legacy.map((node) => ({ role: node.getAttribute('data-message-author-role'), node, textNode: node }));
+      }
+      const units = [...document.querySelectorAll('[data-chatgpt-search-unit-key]')];
+      return units
+        .filter((unit) => !units.some((other) => other !== unit && unit.contains(other)))
+        .map((unit) => {
+          const key = unit.getAttribute('data-chatgpt-search-unit-key') || '';
+          const role = /:assistant$/.test(key) ? 'assistant' : /:user$/.test(key) ? 'user' : null;
+          const textNode =
+            role === 'assistant'
+              ? unit.querySelector('[data-chatgpt-selection-message-id]') || unit
+              : unit.querySelector('[data-user-message-bubble]') || unit;
+          return { role, node: unit, textNode };
+        })
+        .filter((message) => message.role);
+    };`;
+export const CHATGPT_COMPOSER_CANDIDATE_EXCLUDED_ANCESTORS = '[data-message-author-role],[data-chatgpt-search-unit-key],script,style,noscript,[aria-hidden="true"]';
 export const PRODEX_ACTIVE_COMPOSER_ATTRIBUTE = "data-prodex-active-composer";
 const MAX_PAGE_DISCOVERY_TIMEOUT_MS = 5_000;
 const PAGE_VISIBILITY_PROBE_TIMEOUT_MS = 1_000;
@@ -1655,10 +1687,10 @@ const MENU_OPEN_TIMEOUT_MS = 5_000;
 const MENU_SETTLE_TIMEOUT_MS = 5_000;
 const PROJECT_NAVIGATION_TIMEOUT_MS = 8_000;
 export function menuOpenExpression() {
-    return `Boolean(document.querySelector('[data-testid="composer-intelligence-picker-content"]'))`;
+    return `Boolean(document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])'))`;
 }
 export function menuClosedExpression() {
-    return `!document.querySelector('[data-testid="composer-intelligence-picker-content"]')`;
+    return `!document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])')`;
 }
 function toLabelCandidates(label) {
     return typeof label === "string" ? [label] : [...label];
@@ -1786,7 +1818,7 @@ export function powerSliderStateExpression() {
     // Scoped to the picker, with a document-wide fallback for pickers that
     // predate the testid. Asking the whole document first meant any other
     // slider on the page became the one that got read and driven.
-    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"]');
+    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
     const slider = (menu && menu.querySelector('[role="slider"]')) || (menu ? null : document.querySelector('[role="slider"]'));
     const lines = menu ? (menu.innerText || "").split(String.fromCharCode(10)).map((l) => l.trim()).filter(Boolean) : [];
     if (!slider) return { ok: false, reason: "power slider not found", lines };
@@ -1815,7 +1847,7 @@ export function activeMenuItemExpression() {
     return `(() => {
     const a = document.activeElement;
     if (!a) return null;
-    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"]');
+    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
     if (menu && !menu.contains(a)) return null;
     const label = ((a.innerText || a.textContent || "").trim().split(String.fromCharCode(10))[0] || "").trim();
     return { role: a.getAttribute("role"), label };
@@ -2055,15 +2087,21 @@ export function composerProjectBinding(input) {
         return "elsewhere";
     return "unknown";
 }
+// The picker menu used to carry data-testid="composer-intelligence-picker-content".
+// Measured 2026-09-29: ChatGPT dropped that testid; the picker is now a plain
+// Radix role="menu" still holding the effort slider and the model radios, so
+// every lookup below found nothing and a send died on "model menu did not open"
+// with the menu open on screen. Each lookup accepts the old testid or a menu
+// that contains the slider - the one thing that makes it this picker.
 export function powerSliderPresentExpression() {
-    return `Boolean(document.querySelector('[data-testid="composer-intelligence-picker-content"] [role="slider"]'))`;
+    return `Boolean(document.querySelector('[data-testid="composer-intelligence-picker-content"] [role="slider"],[role="menu"] [role="slider"]'))`;
 }
 export function pickerClosedExpression() {
-    return `!document.querySelector('[data-testid="composer-intelligence-picker-content"]')`;
+    return `!document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])')`;
 }
 export function focusPickerMenuExpression() {
     return `(() => {
-    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"]');
+    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
     if (!menu) return { ok: false, reason: "picker menu not open" };
     // Leave the focus the menu gave itself. It opens on the checked model row,
     // and ArrowDown from there walks the model list. Focusing the first item
@@ -2082,7 +2120,7 @@ export function focusPowerSliderExpression() {
     // Scoped to the picker, with a document-wide fallback for pickers that
     // predate the testid. Asking the whole document first meant any other
     // slider on the page became the one that got read and driven.
-    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"]');
+    const menu = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
     const slider = (menu && menu.querySelector('[role="slider"]')) || (menu ? null : document.querySelector('[role="slider"]'));
     if (!slider) return { ok: false, reason: "power slider not found" };
     slider.focus();
@@ -2107,7 +2145,7 @@ export function modelButtonRectExpression() {
 }
 export function menuItemRectExpression(label) {
     return `(() => {${CLICK_POINT_SNIPPET}
-    const m = document.querySelector('[data-testid="composer-intelligence-picker-content"]');
+    const m = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
     if (!m) return { ok: false, reason: "reasoning/model menu did not open" };
     const items = [...m.querySelectorAll('[role="menuitemradio"],[role="menuitem"]')];
     const it = items.find(${menuLabelMatchPredicate(label)});
@@ -2135,7 +2173,7 @@ const PRO_RADIO_FINDER_SNIPPET = `
       [...scope.querySelectorAll('[role="menuitemradio"]')].find((r) => /^Pro( |$)/.test(((r.innerText || r.textContent || "").trim().split(String.fromCharCode(10))[0] || "").trim()));`;
 export function proRadioRectExpression() {
     return `(() => {${CLICK_POINT_SNIPPET}${PRO_RADIO_FINDER_SNIPPET}
-    const m = document.querySelector('[data-testid="composer-intelligence-picker-content"]');
+    const m = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
     if (!m) return { ok: false, reason: "reasoning/model menu did not open" };
     const proRadio = findProRadio(m);
     if (!proRadio) return { ok: false, reason: "Pro option not found in the model menu" };
@@ -2187,54 +2225,123 @@ export function matchProjectOptionName(ariaLabels, wanted) {
         return "ambiguous";
     return -1;
 }
+/**
+ * The sidebar's project rows, read the way the current ChatGPT renders them.
+ *
+ * Measured 2026-09-29: ChatGPT replaced the per-row "Open project options for
+ * <name>" button, which every project lookup in prodex keyed on, with
+ * "Project actions for <name>", and made the row itself a disclosure that
+ * expands in place instead of navigating. The row now carries its name and id
+ * as attributes (`data-app-action-sidebar-project-label`, `-id`), which is a
+ * sturdier key than parsing a button label. Every --project send reported
+ * "project not found in sidebar (0 projects visible)" with the sidebar open
+ * and nine projects on screen.
+ *
+ * Falls back to the older option-button labels, so the previous UI still
+ * resolves.
+ */
+const SIDEBAR_PROJECT_ROWS_SNIPPET = `
+    const legacyProjectName = (b) => (b.getAttribute("aria-label") || "").replace(/^open project options for /i, "").replace(/\\s*프로젝트 옵션 열기$/, "").trim();
+    const sidebarProjects = () => {
+      const rows = [...document.querySelectorAll("[data-app-action-sidebar-project-row]")]
+        .map((row) => ({
+          name: (row.getAttribute("data-app-action-sidebar-project-label") || "").trim(),
+          id: (row.getAttribute("data-app-action-sidebar-project-id") || "").trim(),
+          row,
+          current: true
+        }))
+        .filter((entry) => entry.name);
+      if (rows.length > 0) return rows;
+      return [...document.querySelectorAll('[aria-label*="프로젝트 옵션"],[aria-label*="project options" i]')]
+        .map((button) => ({
+          name: legacyProjectName(button),
+          id: "",
+          row: button.closest('a,[role="link"],li') || button.parentElement,
+          current: false
+        }))
+        .filter((entry) => entry.name);
+    };`;
+/**
+ * Where to rest the pointer so a sidebar project row shows its controls.
+ *
+ * The row's "New chat in <name>" button is only revealed while the row is
+ * hovered: measured, the button itself reports opacity 1 while its container
+ * sits at opacity 0, and the point prodex clicked resolved to the section
+ * behind it. A manual test passed only because the pointer was already on the
+ * row; a real send, arriving with the pointer elsewhere, clicked the section
+ * and reported "did not navigate the visible tab".
+ */
+export function sidebarProjectRowPointExpression(name) {
+    return `(() => {${SIDEBAR_PROJECT_ROWS_SNIPPET}
+    const wanted = ${JSON.stringify(name)};
+    const projects = sidebarProjects().filter((p) => p.current);
+    const exact = projects.filter((p) => p.name === wanted);
+    const matches = exact.length > 0 ? exact : projects.filter((p) => p.name.toLowerCase() === wanted.toLowerCase());
+    if (matches.length !== 1) return { ok: false };
+    const r = matches[0].row.getBoundingClientRect();
+    if (r.width < 1 || r.height < 1) return { ok: false };
+    return { ok: true, x: Math.round(r.x + Math.min(r.width / 3, 60)), y: Math.round(r.y + r.height / 2) };
+  })()`;
+}
+/** Hover a project row so its hover-only controls can be clicked. A no-op on the older sidebar. */
+async function revealSidebarProjectControls(cdp, name) {
+    const point = await cdp.evaluate(sidebarProjectRowPointExpression(name));
+    if (!point?.ok || point.x === undefined || point.y === undefined)
+        return;
+    await cdp.send("Input.dispatchMouseEvent", { type: "mouseMoved", x: point.x, y: point.y });
+    await sleep(400);
+}
 export function projectItemRectExpression(name) {
-    return `(() => {${CLICK_POINT_SNIPPET}
-    // Korean: "<name> 프로젝트 옵션 열기"; English: "Open project options for <name>".
+    return `(() => {${CLICK_POINT_SNIPPET}${SIDEBAR_PROJECT_ROWS_SNIPPET}
     const wanted = ${JSON.stringify(name)};
-    // Extract the project name from the aria-label wrapper, then match by
-    // EQUALITY (mirror of matchProjectOptionName). A bare .includes() let
-    // "Codex" select "Codex Review" (substring) and silently sent the prompt
-    // into the wrong project.
-    const projName = (b) => (b.getAttribute("aria-label") || "").replace(/^open project options for /i, "").replace(/\\s*프로젝트 옵션 열기$/, "").trim();
-    const optionButtons = [...document.querySelectorAll('[aria-label*="프로젝트 옵션"],[aria-label*="project options" i]')];
-    let opt = null;
-    const exact = optionButtons.filter((b) => projName(b) === wanted);
-    if (exact.length === 1) opt = exact[0];
+    // Match by EQUALITY, exact first and then case-insensitive, and refuse on
+    // ambiguity: a substring match once let "Codex" select "Codex Review" and
+    // post into a project nobody named.
+    const projects = sidebarProjects();
+    const exact = projects.filter((p) => p.name === wanted);
+    let hit = null;
+    if (exact.length === 1) hit = exact[0];
     else if (exact.length > 1) return { ok: false, reason: "project name matches multiple sidebar projects; rename one to disambiguate" };
     else {
-      // Case-insensitive fallback: sidebar names are user-typed ("Codex") and
-      // an agent asking for "codex" should still resolve when unambiguous.
-      // Ambiguity fails loudly rather than guessing.
-      const ci = optionButtons.filter((b) => projName(b).toLowerCase() === wanted.toLowerCase());
-      if (ci.length === 1) opt = ci[0];
+      const ci = projects.filter((p) => p.name.toLowerCase() === wanted.toLowerCase());
+      if (ci.length === 1) hit = ci[0];
       else if (ci.length > 1) return { ok: false, reason: "project name matches multiple sidebar projects case-insensitively; use the exact name" };
     }
-    let target = opt ? (opt.closest('a,[role="link"],li') || opt.parentElement) : null;
-    if (!target) {
-      // The fallback for a sidebar whose option buttons this cannot read. It
-      // used to take the first row CONTAINING the name, which is the substring
-      // match the exact comparison above exists to prevent: asking for "Codex"
-      // took "Codex Review" and sent the prompt into a project nobody named.
-      // A row's first line is its name; anything else here is a guess, and a
-      // guess about which project to post into is the failure being fixed.
+    let visible = projects.length;
+    if (!hit && projects.length === 0) {
+      // The legacy fallback for a sidebar whose option buttons cannot be read:
+      // a row's first line is its name, compared by equality.
       const icons = [...document.querySelectorAll('[data-testid="project-folder-icon"]')];
       const rowName = (row) => ((row.innerText || row.textContent || "").split("\\n").map((line) => line.trim()).find((line) => line.length > 0) || "");
       const rows = icons.map((ic) => ic.closest('a,li,[role="link"]') || ic.parentElement?.parentElement).filter(Boolean);
+      visible = rows.length;
       const named = rows.filter((row) => rowName(row).toLowerCase() === wanted.toLowerCase());
       if (named.length > 1) return { ok: false, reason: "project name matches multiple sidebar projects; rename one to disambiguate" };
-      if (named.length === 1) target = named[0];
-    }
-    if (!target) {
-      return { ok: false, reason: "project not found in sidebar (" + optionButtons.length + " projects visible; names are matched exactly first, then case-insensitively - check the exact sidebar spelling)" };
+      if (named.length === 1) hit = { name: wanted, id: "", row: named[0], current: false };
     }
-    // 2026-07 ChatGPT update: the project row (li) is no longer a link - the
-    // navigation affordance is a dedicated "Open project home" button inside
-    // the row (verified live: clicking the row does nothing, clicking the home
-    // button navigates to /g/g-p-...). Prefer it; fall back to the row click
-    // for the old UI.
-    const home = target.querySelector('[aria-label*="project home" i],[aria-label*="프로젝트 홈"]');
+    if (!hit) {
+      if (visible === 0) {
+        return { ok: false, reason: "no sidebar projects could be read (0 projects visible) - the sidebar is not rendered or ChatGPT changed how it lists projects" };
+      }
+      return { ok: false, reason: "project not found in sidebar (" + visible + " projects visible; names are matched exactly first, then case-insensitively - check the exact sidebar spelling)" };
+    }
+    if (hit.current) {
+      // Clicking the row now only expands it. Its "New chat in <name>" button
+      // is what opens the project, on a fresh chat inside it - measured: it
+      // lands on /g/<id>/project with the composer labelled for that project.
+      const label = "New chat in " + hit.name;
+      const koLabel = hit.name + "에서 새 채팅";
+      const buttons = [...document.querySelectorAll("button[aria-label]")];
+      const enter =
+        buttons.find((b) => hit.row.contains(b) && (b.getAttribute("aria-label") === label || b.getAttribute("aria-label") === koLabel)) ||
+        buttons.find((b) => b.getAttribute("aria-label") === label || b.getAttribute("aria-label") === koLabel);
+      if (!enter) return { ok: false, reason: "project row found but it has no new-chat control to open the project" };
+      return clickPoint(enter);
+    }
+    // Older UI: a dedicated "Open project home" button inside the row, else the row.
+    const home = hit.row.querySelector('[aria-label*="project home" i],[aria-label*="프로젝트 홈"]');
     if (home) return clickPoint(home);
-    return clickPoint(target, 18);
+    return clickPoint(hit.row, 18);
   })()`;
 }
 // Clicking a menuitemradio commits the choice and closes the picker; a menu
@@ -2854,7 +2961,7 @@ async function selectModelReasoning(cdp, options, selectionWarnings = []) {
 export function newProjectButtonRectExpression() {
     return `(() => {${CLICK_POINT_SNIPPET}
     const el =
-      document.querySelector('button[aria-label="새 프로젝트"],button[aria-label="New project"]') ||
+      document.querySelector('button[aria-label="새 프로젝트"],button[aria-label="New project"],button[aria-label="Add new project"]') ||
       [...document.querySelectorAll('button,[role="button"]')].find((b) =>
         /새 프로젝트|new project/i.test(((b.textContent || "") + (b.getAttribute("aria-label") || "")).trim())
       );
@@ -3031,6 +3138,7 @@ async function navigateToExistingProject(cdp, project) {
         const detail = hit.reason && hit.reason !== "project not found in sidebar" ? ` (${hit.reason})` : "";
         throw new Error(`ChatGPT project not found in sidebar: ${project}${detail} List the visible names with \`prodex pro browser projects\`.`);
     }
+    await revealSidebarProjectControls(cdp, project);
     await verifiedClickWithRetry(cdp, () => cdp.evaluate(projectItemRectExpression(project)), `project ${project}`);
     const navigated = await waitForExpressionTrue(cdp, `location.href !== ${JSON.stringify(hrefBefore)}`, PROJECT_NAVIGATION_TIMEOUT_MS);
     if (!navigated) {
@@ -3147,6 +3255,7 @@ async function selectProject(cdp, options) {
         // project home - and then the same sidebar navigation over again.
         try {
             await openFreshChatGptHome(cdp);
+            await revealSidebarProjectControls(cdp, wanted);
             await verifiedClickWithRetry(cdp, () => cdp.evaluate(projectItemRectExpression(wanted)), `project ${wanted}`);
             // The click's navigation has to land before the placeholder means
             // anything; read on the page we came from, it answers about the wrong
@@ -3703,9 +3812,9 @@ export async function sendChatGptPrompt(options) {
         // inserts a newline) fall back to clicking the send button, re-reading
         // FRESH coordinates each attempt. Safe against double-submit: once the
         // prompt posts the composer clears and no send button is found.
-        const promptPostedExpression = `(() => {
-      const last = [...document.querySelectorAll('[data-message-author-role="user"]')].at(-1);
-      return Boolean(last && (last.innerText || "").includes(${JSON.stringify(`[prodex-request:${requestId}]`)}));
+        const promptPostedExpression = `(() => {${CHATGPT_MESSAGE_NODES_JS}
+      const last = chatMessageNodes().filter((message) => message.role === "user").at(-1);
+      return Boolean(last && (last.textNode.innerText || "").includes(${JSON.stringify(`[prodex-request:${requestId}]`)}));
     })()`;
         // A dispatch can reach Chrome even if its acknowledgement is lost.
         submissionAttempted = true;
@@ -3933,7 +4042,7 @@ export function formatModelMenuOption(option) {
 }
 export function modelMenuOptionsExpression() {
     return `(() => {
-    const m = document.querySelector('[data-testid="composer-intelligence-picker-content"]');
+    const m = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
     if (!m) return [];
     // Radios are models, and so are the submenu rows an earlier picker kept them
     // behind. What is NOT a model is the power slider's own rows - its track,
@@ -3967,11 +4076,8 @@ export function modelMenuOptionsExpression() {
 // Sidebar project names, extracted from the per-row options-button aria-labels
 // (English "Open project options for <name>", Korean "<name> 프로젝트 옵션 열기").
 export function sidebarProjectNamesExpression() {
-    return `(() => {
-    const names = [...document.querySelectorAll('[aria-label*="프로젝트 옵션"],[aria-label*="project options" i]')]
-      .map((b) => (b.getAttribute("aria-label") || "").replace(/^open project options for /i, "").replace(/\\s*프로젝트 옵션 열기$/, "").trim())
-      .filter(Boolean);
-    return [...new Set(names)];
+    return `(() => {${SIDEBAR_PROJECT_ROWS_SNIPPET}
+    return [...new Set(sidebarProjects().map((p) => p.name))];
   })()`;
 }
 // Read-only discovery for --project/setup --project: list the sidebar project
@@ -4782,9 +4888,10 @@ export function statusExpression() {
       .filter((el) => !el.closest(runtimeExcludedTextSelector))
       .map((el) => (el.innerText || el.getAttribute("aria-label") || el.getAttribute("data-testid") || "").trim())
       .filter(Boolean);
-    const messages = [...document.querySelectorAll('[data-message-author-role]')].map((node) => ({
-      role: node.getAttribute('data-message-author-role'),
-      text: node.innerText || ""
+    ${CHATGPT_MESSAGE_NODES_JS}
+    const messages = chatMessageNodes().map((message) => ({
+      role: message.role,
+      text: message.textNode.innerText || ""
     }));
     const assistant = messages.filter((message) => message.role === "assistant").at(-1);
     const answer = assistant?.text || "";
@@ -5662,16 +5769,17 @@ export function answerExpression() {
       return parts.join(String.fromCharCode(10));
     };
     const lines = text.split(String.fromCharCode(10)).map((line) => line.trim()).filter(Boolean);
-    const messages = [...document.querySelectorAll('[data-message-author-role]')].map((node) => {
-      // ChatGPT tags each message with the model that produced it, on the
-      // message node or an ancestor depending on the build. This is the only
-      // ground truth for "did the Pro selection actually take".
+    ${CHATGPT_MESSAGE_NODES_JS}
+    const messages = chatMessageNodes().map(({ role, node, textNode }) => {
+      // ChatGPT tagged each message with the model that produced it, on the
+      // message node or an ancestor depending on the build. The current markup
+      // carries no such tag, so the model is unknown there, not guessed.
       let modelSlug = node.getAttribute('data-message-model-slug') || undefined;
       if (!modelSlug && typeof node.closest === "function") {
         const tagged = node.closest('[data-message-model-slug]');
         if (tagged) modelSlug = tagged.getAttribute('data-message-model-slug') || undefined;
       }
-      return { role: node.getAttribute('data-message-author-role'), text: node.innerText || "", modelSlug };
+      return { role, text: textNode.innerText || "", modelSlug };
     });
     const assistantMessages = messages.filter((message) => message.role === "assistant");
     const userMessages = messages.filter((message) => message.role === "user");

package/dist/cli-pro.js

@@ -392,9 +392,10 @@ export async function runProCommand(rest, io, runCliFn) {
                     port: opened.port,
                     headless,
                     minimized,
+                    // A blocked background handoff must not make a temporary auth window permanent.
                     ...(alreadyRunning && savedLaunchForPort?.resume_headless === true &&
-                        !Object.values(windowModeOptions.flags).some((value) => typeof value === "boolean") &&
-                        !["PRODEX_HEADLESS", "PRODEX_VIRTUAL_DISPLAY", "PRODEX_MINIMIZE_WINDOW"].some((key) => (process.env[key] ?? "").trim() !== "")
+                        (background || (!Object.values(windowModeOptions.flags).some((value) => typeof value === "boolean") &&
+                            !["PRODEX_HEADLESS", "PRODEX_VIRTUAL_DISPLAY", "PRODEX_MINIMIZE_WINDOW"].some((key) => (process.env[key] ?? "").trim() !== "")))
                         ? { resume_headless: true } : {}),
                     ...(virtualDisplay
                         ? { virtual_display: virtualDisplay.displayNumber }
@@ -1544,7 +1545,7 @@ export async function runAskProCommand(rest, io, beforeSend) {
             }
         }
         catch (error) {
-            const blocker = sourceAwareBrowserBlocker(browserSendBlockerFromError(error), sourceCli, browserCommandOptions);
+            const blocker = await withManualStepForWindowMode(sourceAwareBrowserBlocker(browserSendBlockerFromError(error), sourceCli, browserCommandOptions), resolveCdpPort(browserPort), sourceCli, browserCommandOptions);
             const message = blocker.next_step ? `${blocker.message} Next: ${blocker.next_step}` : errorMessage(error);
             // The blocker text can quote the requested/default project name (e.g. a
             // "project not found" error). Local stdout/stderr keep it (useful to the
@@ -2319,6 +2320,7 @@ async function completeBackgroundBrowserLogin(io, options) {
             port: opened.port,
             timeoutMs: options.timeoutMs,
             windowMode: { headless: true, virtualDisplay: false, minimized: false },
+            verifiedHeadedHandoff: true,
             headedLoginCommand: options.headedLoginCommand,
             headlessRecoveryCommand: options.headlessRecoveryCommand
         });
@@ -2387,6 +2389,12 @@ export async function waitForChatGptLoginReady(stderr, options, deps = {}) {
         const blocker = status.blocker;
         const blockerNextStep = blocker?.next_step ? ` Next: ${blocker.next_step}` : "";
         if (!hasInteractiveWindow && blocker && needsVisibleAuthRecovery(blocker.code)) {
+            if (options.verifiedHeadedHandoff) {
+                stderr(`login: blocked - ${blocker.message}`);
+                stderr(`login: NOT READY - ${blocker.code}. Sign-in was verified before the headless handoff, but the same profile is not ready headlessly.`);
+                stderr("login: Another login is not a demonstrated fix. Stop automatic recovery and inspect this headless failure before another login or mode change. No further window will be opened automatically.");
+                return false;
+            }
             const visibleStep = options.windowMode?.headless === true && options.headlessRecoveryCommand
                 ? `run \`${options.headlessRecoveryCommand}\` to handle it visibly.`
                 : `${manualInspection} Handle the reported step visibly.`;
@@ -2716,6 +2724,21 @@ export function browserSendBlockerFromError(error) {
                 "same thing in the prompt."
         };
     }
+    // Zero projects on screen is not a missing name; it is a sidebar prodex could
+    // not read. Measured 2026-09-29: ChatGPT renamed the row controls, every
+    // project send said "0 projects visible" with nine projects on screen, and
+    // calling that "not found, do not retry" sent the caller away from the one
+    // thing worth doing - checking the browser and retrying once it reads again.
+    if (/ChatGPT project not found in sidebar/.test(message) && /no sidebar projects could be read|\(0 projects visible/.test(message)) {
+        return {
+            code: "sidebar_projects_unreadable",
+            message,
+            retryable: true,
+            next_step: "Nothing was sent. prodex could not read any project in the sidebar - it may not have rendered yet, or ChatGPT " +
+                "changed how it lists projects. Run `prodex pro browser projects`: if it lists none while the sidebar shows " +
+                "them, update prodex; otherwise retry."
+        };
+    }
     if (/ChatGPT project not found in sidebar/.test(message)) {
         return {
             code: "project_not_found",
@@ -3040,6 +3063,60 @@ export async function listConsultListEntries(store, options = { readOnly: true }
     }
     return entries;
 }
+/** Blockers whose only remedy is a person acting inside the browser window. */
+const MANUAL_BROWSER_STEP_CODES = new Set(["login_required", "captcha_required", "cloudflare_check"]);
+/**
+ * Rewrite a "do it in the visible browser" next step for a browser that has no
+ * window to do it in.
+ *
+ * Measured with a signed-out profile on a virtual display: `pro browser check`
+ * and every send reported `login_required` with "Log in manually in the
+ * visible browser." - on a browser prodex had itself started with no visible
+ * window. The login command already knew the way out (close that browser, log
+ * in through a headed one), but the blocker a send or a check prints did not.
+ * A session that expires under a no-window setup is exactly this case, and the
+ * advice it got could not be followed.
+ *
+ * Only the manual-step codes are rewritten, and only when the saved launch
+ * belongs to the port in use, so a stale record for another browser cannot
+ * change the advice for this one.
+ */
+export function manualBrowserStepForWindowMode(blocker, launch, port, commands) {
+    if (!MANUAL_BROWSER_STEP_CODES.has(blocker.code))
+        return blocker;
+    if (!launch || launch.port !== port)
+        return blocker;
+    if (launch.headless === true) {
+        return {
+            ...blocker,
+            next_step: `The dedicated browser runs headless, with no window to do this in. Run \`${commands.visibleRecovery}\` ` +
+                "to switch it to a visible window through the guarded path, complete the step there, then retry."
+        };
+    }
+    if (launch.virtual_display !== undefined) {
+        return {
+            ...blocker,
+            next_step: "The dedicated browser runs on a virtual display, with no window to do this in. Close it yourself when no " +
+                `consult is running, then run \`${commands.headedLogin}\` to complete the step in a visible window, and retry.`
+        };
+    }
+    return blocker;
+}
+/** The same rewrite, with the saved launch record and the commands resolved for this call. */
+async function withManualStepForWindowMode(blocker, port, sourceCli, commandOptions) {
+    if (!MANUAL_BROWSER_STEP_CODES.has(blocker.code))
+        return blocker;
+    const launch = await readLastBrowserLoginLaunch().catch(() => undefined);
+    const options = {
+        ...commandOptions,
+        port,
+        ...(launch?.profile_dir ? { profileDir: launch.profile_dir } : {})
+    };
+    return manualBrowserStepForWindowMode(blocker, launch, port, {
+        headedLogin: formatHeadedBrowserLoginCommand(sourceCli, options),
+        visibleRecovery: formatVisibleAuthRecoveryCommand(sourceCli, options)
+    });
+}
 function formatHeadedBrowserLoginCommand(sourceCli, options = {}) {
     return `${formatBrowserLoginCommand(sourceCli, options)} --headed`;
 }
@@ -3100,6 +3177,9 @@ export function printBrowserLoginGuide(stdout, input) {
         return;
     }
     stdout("");
+    stdout("Chrome account connection is separate from ChatGPT sign-in. If Chrome asks, choose whether to connect the browser account yourself.");
+    stdout("'Use Chrome without an account' declines that browser connection, not your ChatGPT login. Keep the ChatGPT tab open after making that choice.");
+    stdout("");
     stdout("Steps:");
     if (windowAvailable) {
         stdout(input.reusedProfile || input.reused === true
@@ -3261,7 +3341,12 @@ export async function printProductCheck(store, io, args, configCwd = io.cwd) {
         else if (browserStatus.blocker) {
             const visibilityText = browserStatus.blocker.code === "tab_not_visible" ? ` visibility=${browserStatus.visibilityState ?? "unknown"}` : "";
             io.stdout(`chatgpt: blocked ${browserStatus.blocker.code}${visibilityText} - ${browserStatus.blocker.message}`);
-            const nextStep = productCheckBrowserNextStep(browserStatus.blocker.next_step, sourceCli, browserCommandOptions);
+            const modeAware = await withManualStepForWindowMode(browserStatus.blocker, checkPort, sourceCli, browserCommandOptions);
+            // A rewritten step already carries fully formed commands; running it back
+            // through the product-check rewrite would only re-derive them.
+            const nextStep = modeAware === browserStatus.blocker
+                ? productCheckBrowserNextStep(browserStatus.blocker.next_step, sourceCli, browserCommandOptions)
+                : modeAware.next_step;
             if (nextStep)
                 io.stdout(`next: ${nextStep}`);
         }

package/dist/cli-shared.js

@@ -88,10 +88,10 @@ export function sourceAwareBrowserNextStep(nextStep, sourceCli, options = {}) {
         return `\`cd ${cwdPrefix} && ${formatBrowserAskCommandBody(sourceCli)}${storedArgs ?? ""}\``;
     })
         .replace(/`prodex pro browser login([^`]*)?`/g, (_match, storedArgs) => {
-        return `\`${formatBrowserLoginCommand(sourceCli, browserOptionsWithStoredPort(options, storedArgs))}\``;
+        return `\`${formatBrowserLoginCommand(sourceCli, browserOptionsWithStoredPort(options, storedArgs))}${flagsBesidesPort(storedArgs)}\``;
     })
         .replace(/`prodex pro browser smoke([^`]*)?`/g, (_match, storedArgs) => {
-        return `\`${formatBrowserSmokeCommand(sourceCli, browserOptionsWithStoredPort(options, storedArgs))}\``;
+        return `\`${formatBrowserSmokeCommand(sourceCli, browserOptionsWithStoredPort(options, storedArgs))}${flagsBesidesPort(storedArgs)}\``;
     })
         .replace(/`prodex pro browser ask([^`]*)?`/g, (_match, storedArgs) => {
         return `\`${formatBrowserAskCommandBody(sourceCli)}${storedArgs ?? ""}\``;
@@ -131,6 +131,19 @@ export function isUntrustedResultError(error) {
 export function formatCommandInCwd(command, cwd) {
     return cwd ? `cd ${shellQuote(cwd)} && ${command}` : command;
 }
+/**
+ * The flags of a quoted command other than --port, which the rewrite rebuilds
+ * itself. They used to be dropped: a next step saying "run `prodex pro browser
+ * login --background`" came out as a plain `login`, and "--headed" vanished from
+ * the step that exists to get a window - so following the advice relaunched the
+ * browser in the very mode it was telling the caller to leave.
+ */
+export function flagsBesidesPort(storedArgs) {
+    if (!storedArgs)
+        return "";
+    const rest = storedArgs.replace(/(?:^|\s)--port\s+\d{1,5}(?=\s|$)/, " ").replace(/\s+/g, " ").trim();
+    return rest ? ` ${rest}` : "";
+}
 export function browserOptionsWithStoredPort(options, storedArgs) {
     if (options.port || !storedArgs)
         return options;

package/dist/tui.js

@@ -82,6 +82,17 @@ export function projectsWithIdsExpression() {
     return `(() => {
   const out = [];
   const seen = new Set();
+  // Current sidebar rows carry the project's name and id as attributes; only
+  // the open project still renders a /project link, so reading links alone
+  // listed one project of nine (measured 2026-09-29).
+  for (const row of document.querySelectorAll("[data-app-action-sidebar-project-row]")) {
+    if (out.length >= 100) break;
+    const rawId = (row.getAttribute("data-app-action-sidebar-project-id") || "").trim().toLowerCase();
+    const name = (row.getAttribute("data-app-action-sidebar-project-label") || "").replace(/\\s+/g, " ").trim().slice(0, 200);
+    if (!/^g-p-[0-9a-f]{1,128}$/.test(rawId) || !name || seen.has(rawId)) continue;
+    seen.add(rawId);
+    out.push({ id: rawId, name });
+  }
   for (const anchor of document.querySelectorAll("a[href]")) {
     if (out.length >= 100) break;
     if (typeof anchor.getClientRects !== "function" || anchor.getClientRects().length === 0) continue;

package/docs/releasing.md

@@ -16,6 +16,38 @@ Release target: `v0.40.13` on `main`. The GitHub Release records the resolved co
 
 The release adds a guarded, opt-in transition and more accurate blocker reporting. It does not claim that headless Pro consultation is verified on either deployment target or that authentication can be retained indefinitely.
 
+## 0.40.19 Release Record
+
+Release commit `8650136` on `main` (cut after PR #8, merge `b5a223f`); tag `v0.40.19`. Published by `publish.yml` run 36510352704: all six native verification jobs passed (Ubuntu Node 20/22/24, macOS 15 arm64 and Intel, Windows Server 2025 / Node 22), then npm publish with SLSA v1 provenance, then the GitHub Release (2026-09-29 02:17 UTC). Before tagging, PR #8 passed the same six jobs and `npm run release:verify` passed locally on the release commit after a build (a fresh checkout without `dist` fails two package-bin cases, because `release:verify` runs tests before building).
+
+Installation on 2026-09-29, global npm, each verified with `prodex --version` = 0.40.19:
+
+- WSL, M3, Mac mini: installed. Running services were not restarted: 3 stdio MCP servers on WSL and 4 on M3 keep the code they started with until their clients reconnect; the Mac mini had none.
+- The browser container `prodex-browser-browser-1`, which this machine's Claude Code MCP entry now goes through, runs its own build and still reports 0.40.18; an npm install does not update it. It had exited on 2026-09-28 after Chromium's GPU process kept failing ("GPU process isn't usable") and was restarted with the documented `docker compose ... up -d --no-build browser` before this release.
+- M4: not reachable (hostname does not resolve); not updated.
+
+## 0.40.2 - 0.40.7 Release Record
+
+Recorded 2026-09-29, after the fact. These versions went around the tag-and-CI path, so none of them has a git tag, a GitHub Release or npm provenance; this section is their durable record. The commit for each published version was matched to the npm publish time and cross-checked by downloading the published package and finding that version's fixes in its `dist`.
+
+**Channel.** Built with `prodex release pack` (normalized tarball) and published by hand with `npm publish <tarball>` from WSL, because a source-tree publish is refused on the WSL mount's file modes. That route bypasses `publish.yml`, so there is no provenance attestation (0.40.1 and 0.40.8 have one; 0.40.2 - 0.40.6 do not), no tag and no Release. Tags were not backfilled: pushing a `v*` tag runs `publish.yml`, which would re-verify old code and then fail at `npm publish` because the version already exists.
+
+| Version | Commit | npm publish (UTC) | Verification before publish | Live check |
+|---|---|---|---|---|
+| 0.40.2 | `003d4d7` | 2026-09-09 17:39 | vitest 1126 pass; `release:verify` ok | Defective: installed from the registry on 2026-09-10 and sent into a real project - refused `project_not_bound`. Every project send fails in this version (see CHANGELOG). |
+| 0.40.3 | `6f36b47` | 2026-09-10 07:27 | vitest 1184 pass; `release:verify` ok | Registry package sent into an existing project, across projects, and with `--project-new`; `destination.verified: true` on the receipt. |
+| 0.40.4 | `2a84bc5` | 2026-09-11 00:21 | vitest 1198 pass; `release:verify` ok | `--continue` with the tab deliberately moved elsewhere, over CLI and over MCP `pro_consult` (`continue_thread`). |
+| 0.40.5 | `a9c629d` | 2026-09-14 00:43 | vitest 1248 pass; `release:verify` ok; tarball `publish --dry-run` ok | create-image and web-search sends; back-to-back sends queued on the lock 3/3. |
+| 0.40.6 | `4550cad` | 2026-09-14 01:52 | vitest 1259 pass; `release:verify` ok; tarball `publish --dry-run` ok | Dedicated browser killed twice; `--auto-login` relaunched it in about 3 s and the receipt carried `browser_recovered`. |
+| 0.40.7 | `678a02e` (tag only) | not published | `publish.yml` run 34816390439 failed at Release verification; logs no longer retrievable | Superseded by 0.40.8. |
+
+**Installation.** Global npm installs, verified with `prodex --version` on each host after install:
+
+- 0.40.3, 0.40.4, 0.40.5, 0.40.6: WSL, M3 and the Mac mini, each upgraded on its publish day (the Mac mini came from 0.37.0 at 0.40.3). M4 was unreachable over SSH every time and was never updated.
+- Running services are separate from the install. After 0.40.3 and 0.40.4 the long-lived stdio MCP servers (13 on WSL, 8 on M3) kept the old code. A freshly spawned server reported `serverInfo.version` 0.40.4 and completed a `continue_thread` consult. On 2026-09-14, before 0.40.5, every prodex MCP server was stopped with SIGTERM (20 on WSL, 7 on M3) with no consult in flight; the servers the clients respawned came up on 0.40.4, the install at that moment, and needed another reconnect after the 0.40.5 and 0.40.6 installs.
+- State on 2026-09-29: WSL 0.40.18, M3 0.40.18, Mac mini still 0.40.6 (not upgraded since), M4 unreachable (its hostname no longer resolves).
+- 2026-09-29: Mac mini upgraded 0.40.6 -> 0.40.18 with `npm i -g @youdie006/prodex@0.40.18`; `prodex --version` reports 0.40.18. No prodex MCP server was running there, so nothing needed a restart; the next one a client starts runs 0.40.18.
+
 ## Publishing
 
 Publishing to npm runs entirely in CI with **no long-lived token** — auth is npm [trusted publishing](https://docs.npmjs.com/trusted-publishers) (OIDC), so nothing needs to store or paste an `NPM_TOKEN`, and every release carries a verifiable `--provenance` attestation.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youdie006/prodex",
-  "version": "0.40.18",
+  "version": "0.40.20",
   "description": "Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.",
   "author": "youdie006",
   "license": "MIT",