@youdie006/prodex 0.40.33 → 0.40.35

package/dist/chatgpt-browser.js

@@ -2477,6 +2477,30 @@ export function menuItemRectExpression(label) {
     return { ...point, role: it.getAttribute("role"), haspopup: it.getAttribute("aria-haspopup") };
   })()`;
 }
+/**
+ * The picker's effort view covers its model rows: measured 2026-10-19, the
+ * menu opens on a "Pro ›" label over the slider with GPT-6 and GPT-5.6 Sol
+ * underneath, so a click on a model row hit the slider and was refused.
+ * Clicking the label swaps in the model list. Reports whether that is needed
+ * and where the label is; a row that can already be clicked needs nothing.
+ */
+export function pickerModelViewToggleExpression(label) {
+    return `(() => {${CLICK_POINT_SNIPPET}
+    const m = document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])');
+    if (!m) return { needed: false };
+    const items = [...m.querySelectorAll('[role="menuitemradio"],[role="menuitem"]')];
+    const row = items.filter((item) => item.getAttribute("role") === "menuitemradio").find(${menuLabelMatchPredicate(label)});
+    if (!row) return { needed: false };
+    const r = row.getBoundingClientRect();
+    const hit = document.elementFromPoint(r.x + r.width / 2, r.y + r.height / 2);
+    if (hit && (hit === row || row.contains(hit))) return { needed: false };
+    const toggle = items.find((item) =>
+      item.getAttribute("role") === "menuitem" && item.getClientRects().length > 0 &&
+      !item.querySelector('[role="slider"]') && (item.innerText || "").trim().length > 0);
+    if (!toggle) return { needed: true, ok: false, reason: "the model rows are covered and no view label was found" };
+    return { needed: true, ...clickPoint(toggle) };
+  })()`;
+}
 export function submenuItemRectExpression(label) {
     return `(() => {${CLICK_POINT_SNIPPET}
     const items = [...document.querySelectorAll('[role="menuitemradio"],[role="menuitem"]')];
@@ -2860,6 +2884,11 @@ async function selectPickerModel(cdp, requested, warnings = []) {
         }
         throw new Error(hit.reason ?? `ChatGPT's model picker has no "${requested}" model.`);
     }
+    const view = await cdp.evaluate(pickerModelViewToggleExpression(requested));
+    if (view.needed && view.ok && view.x !== undefined && view.y !== undefined) {
+        await verifiedClickAt(cdp, view.x, view.y, "the picker's model list");
+        await sleep(400);
+    }
     await verifiedClickWithRetry(cdp, () => cdp.evaluate(menuItemRectExpression(requested)), requested);
 }
 /**
@@ -6093,8 +6122,23 @@ const NORMALIZED_PROMPT_MATCH_CHARS = 120;
 // The composer can autolink a url before the send, storing "[url](url)" in
 // place of the bare url (measured 2026-10-07, under load).
 const AUTOLINKED_URL_PATTERN = /\[(https?:\/\/[^\]\s]+)\]\(\1\)/g;
+/**
+ * ChatGPT displays a sent turn's HTML entities decoded (measured 2026-10-19:
+ * "&amp; &lt;b&gt;" was shown as "& <b>"), so both sides are compared decoded.
+ */
+function decodeHtmlEntities(value) {
+    const named = { amp: "&", lt: "<", gt: ">", quot: '"', apos: "'", nbsp: " " };
+    return value.replace(/&(#x[0-9a-f]+|#\d+|[a-z]+);/gi, (entity, body) => {
+        const lower = body.toLowerCase();
+        if (lower.startsWith("#")) {
+            const code = lower.startsWith("#x") ? Number.parseInt(lower.slice(2), 16) : Number.parseInt(lower.slice(1), 10);
+            return code > 0 && code <= 0x10ffff ? String.fromCodePoint(code) : entity;
+        }
+        return named[lower] ?? entity;
+    });
+}
 function normalizeChatGptPromptText(value) {
-    const unescaped = value.replace(AUTOLINKED_URL_PATTERN, "$1").replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1");
+    const unescaped = decodeHtmlEntities(value).replace(AUTOLINKED_URL_PATTERN, "$1").replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1");
     const renderedFences = unescaped.replace(/(^|\r?\n)```text[ \t]*\r?\n([\s\S]*?)\r?\n```(?=\r?\n|$)/g, "$1text\n$2");
     return renderedFences.replace(/\s+/g, " ").trim();
 }
@@ -6125,7 +6169,7 @@ export function chatGptRequestMatchesUserTurn(userText, sentPrompt, requestId) {
     return withoutFenceLines(userText).includes(withoutFenceLines(sentPrompt));
 }
 function withoutFenceLines(value) {
-    return value
+    return decodeHtmlEntities(value)
         .replace(AUTOLINKED_URL_PATTERN, "$1")
         .replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1")
         .replace(/^[ \t]*```[\w-]*[ \t]*$/gm, "")

package/docs/releasing.md

@@ -16,6 +16,56 @@ Release target: `v0.40.13` on `main`. The GitHub Release records the resolved co
 
 The release adds a guarded, opt-in transition and more accurate blocker reporting. It does not claim that headless Pro consultation is verified on either deployment target or that authentication can be retained indefinitely.
 
+## 0.40.34 Release Record
+
+Release commit `574e5f0` on `main` (cut after PR #28, merge `1d93de4`); tag `v0.40.34`.
+
+**Publishing**
+- `publish.yml` run 39201678797 passed all six platforms on the first attempt, then npm publish with SLSA v1 provenance and the GitHub Release (2026-10-19 04:52 UTC).
+- `npm run release:verify` passed on the release commit after a build.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.34. Running services were not restarted: 10 stdio MCP servers on WSL and 2 on M3 keep older code until their clients reconnect. The Mac mini had none running.
+- The maintainer watchdog checkout was pulled to `574e5f0` and rebuilt.
+
+**Verified live**
+- Host, installed 0.40.34: `--model "GPT-5.6 Sol" --effort Pro` and then `--model GPT-6 --effort Pro` both answered; the picker ended on GPT-6, 5/5 Pro. Installed 0.40.33 had refused the Sol selection ("another element covers its click point").
+- Before the fix, on ChatGPT build `bfc3a09a` the host matrix passed: `--continue-task`, `--temporary`, `--tool web-search`, `--attach`, `--project`, `recover --request-id`, `--effort High`, `--model Pro`.
+
+**Browser container**
+- `container/redesign-patches` `ab1c6e1` ports PR #28. Image `a3746b490dbb`; branch suite 2038 passed, 3 skipped. Swapped under the send lock check; the ChatGPT tab opened on its own. Live: GPT-5.6 Sol then GPT-6 Pro both answered.
+
+## 0.40.33 Release Record
+
+Release commit `0497134` on `main` (cut after PR #27, merge `6083c6a`); tag `v0.40.33`.
+
+**Publishing**
+- `publish.yml` run 39181118204 passed all six platforms on the first attempt, then npm publish with SLSA v1 provenance and the GitHub Release (2026-10-19 00:51 UTC).
+- `npm run release:verify` passed on the release commit after a build.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.33. Running services were not restarted: 10 stdio MCP servers on WSL and 2 on M3 keep older code until their clients reconnect. The Mac mini had none running.
+- The maintainer watchdog checkout was pulled to `0497134` and rebuilt.
+
+**Verified live**
+- With 0.40.33 installed, `login --virtual-display` on the affected machine printed the taken-port message for 9333 and left no Chrome running on the profile.
+
+## Browser Incident 2026-10-18: Windows reserved port 9333
+
+**What happened**
+- The WSL machine restarted at 2026-10-18 18:08 KST. From 19:17 KST the hourly canary logged `skipped - the browser is not available`.
+- The watchdog's first revive (19:17 KST) started Chrome, which loaded ChatGPT logged in but never opened its DevTools port; login reported "did not expose a reachable DevTools endpoint ... check the display, profile lock". Later revives refused the leftover Chrome as wedged (`ui_watchdog_revive=failed ... still running ... stopped answering`).
+- The browser container was unaffected (port 9333 is inside its own network namespace).
+
+**Cause**
+- Windows (Hyper-V/WinNAT) reserved TCP ports 9240-9339 at boot (`netsh interface ipv4 show excludedportrange protocol=tcp`). The machine runs WSL with `networkingMode=mirrored`, so the reservation applies inside WSL, and Chrome logged `bind() failed: Address already in use` and `Cannot start http server for devtools`.
+- The Windows TCP dynamic port range starts at 1024 (13,977 ports) instead of the default 49152, which lets these reservations land on 9333.
+
+**Recovery and fixes**
+- The leftover Chrome was ended with `prodex pro browser reset --confirm`. PR #27 (0.40.33) makes login close a browser whose control port never appears and name a taken port.
+- Not changed: the Windows port settings. Bringing the host browser back needs an administrator on Windows: `net stop winnat` then `net start winnat` for now, and `netsh int ipv4 set dynamicport tcp start=49152 num=16384` (and `udp`) plus a restart to keep it from recurring. As of this record the range was still reserved and the host browser was down.
+- Resolved 2026-10-19 11:51 KST: the maintainer ran the elevated script (`netsh int ipv4 set dynamicport tcp|udp start=49152 num=16384`, then `net stop winnat` / `net start winnat`). The 9240-9339 reservation was gone and 9333 could be bound. `login --virtual-display` was ready in 2 s; the canary reported the new ChatGPT build `bfc3a09a` as changed; the smoke answered `PRODEX_PRO_SMOKE_OK`, and a 500-line `--file` send on 0.40.33 answered correctly with the request verified.
+
 ## 0.40.32 Release Record
 
 Release commit `e0e260e` on `main` (cut after PR #26, merge `f57f413`); tag `v0.40.32`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youdie006/prodex",
-  "version": "0.40.33",
+  "version": "0.40.35",
   "description": "Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.",
   "author": "youdie006",
   "license": "MIT",