@youdie006/prodex 0.40.39 → 0.40.41

package/README.md

@@ -163,7 +163,7 @@ Power slider on this account (the slider was walked and put back):
 * 5/5  6  -  Pro
 ```
 
-- `--effort 즉시|중간|높음|"매우 높음"|Pro` picks a rung; English aliases `instant`, `medium`, `high`, `extrahigh` and `max` are accepted, and `--model Pro` reaches the same top rung. Korean and English (US) ChatGPT labels are both matched; on another display language, pass the exact label `models` shows.
+- `--effort 즉시|중간|높음|"매우 높음"|Pro` picks a rung; English aliases `instant`, `medium`, `high`, `extrahigh` and `max` are accepted, and a step name given as a model (`--model Pro`, `--model Instant`) is applied to the slider with a `model_is_now_an_effort` warning. Korean and English (US) ChatGPT labels are both matched; on another display language, pass the exact label `models` shows.
 - ChatGPT now has two surfaces, Chat and Work, with different pickers; Work's ladder ends in Max and Ultra and offers no Pro. prodex puts the browser back on Chat before a send (and says so on the receipt), so a drifted browser cannot quietly send on the wrong picker. `Max` and `Ultra` are accepted for a browser already on Work.
 - The model rows themselves (Latest, GPT-5.6 Sol, GPT-5.5) cannot be clicked by automation in the current picker; the slider is the lever, and prodex says so rather than pretending a row was chosen.
 - Selection is guarded: a control that is covered or off screen is not clicked, a menu that stays open after a pick counts as a failed pick, and any failure backs out with Escape and reports a blocker instead of sending with the wrong model. What was applied is recorded on the receipt (`metadata.selection`, project name redacted).

package/dist/chatgpt-browser.js

@@ -410,7 +410,43 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
     // A sent user turn renders inline code as <code>, dropping its backticks
     // from innerText (measured 2026-10-07), and the request is matched against
     // what was typed. Each inline code span gets its backticks back, in page order.
+    const inlineCodes = (root) =>
+      [...root.querySelectorAll('code')].filter((code) => {
+        if (code.closest('pre')) return false;
+        const value = code.textContent || "";
+        // A fenced block in a user turn is one <code> outside any <pre>
+        // (measured); inline code is a single line.
+        return value.length > 0 && !value.includes(String.fromCharCode(10));
+      });
+    // Backtick text nodes go in beside each span for one innerText read and come
+    // straight out again, so they land where the span is. Searching the text for
+    // the span's value put them on an earlier plain occurrence of the same words
+    // and refused a request that had posted (measured 2026-10-24). All of it runs
+    // in one synchronous evaluation, so the page never renders in between.
+    const userMessageTextAtCodePositions = (root) => {
+      const doc = root.ownerDocument;
+      if (!doc || typeof doc.createTextNode !== "function") return undefined;
+      const tick = String.fromCharCode(96);
+      const inserted = [];
+      try {
+        for (const code of inlineCodes(root)) {
+          const parent = code.parentNode;
+          if (!parent || typeof parent.insertBefore !== "function") return undefined;
+          const before = doc.createTextNode(tick);
+          const after = doc.createTextNode(tick);
+          parent.insertBefore(before, code);
+          inserted.push(before);
+          parent.insertBefore(after, code.nextSibling);
+          inserted.push(after);
+        }
+        return root.innerText || "";
+      } finally {
+        for (const node of inserted) node.parentNode?.removeChild(node);
+      }
+    };
     const userMessageText = (root) => {
+      const placed = userMessageTextAtCodePositions(root);
+      if (placed !== undefined) return placed;
       let text = root.innerText || "";
       const tick = String.fromCharCode(96);
       let cursor = 0;
@@ -1254,23 +1290,48 @@ export function proModeNotAppliedWarning(proMode, sliderEffort) {
  */
 export function pickerSelectionPlan(input) {
     const plan = {};
-    const modelIsNowAnEffort = input.model !== undefined && /^\s*pro\s*$/i.test(input.model);
+    const modelAsEffort = input.model !== undefined ? chatStepNamedAsModel(input.model) : undefined;
     if (input.effort !== undefined)
         plan.sliderLabel = input.effort;
-    else if (modelIsNowAnEffort)
-        plan.sliderLabel = input.model;
-    if (input.model !== undefined && !modelIsNowAnEffort)
+    else if (modelAsEffort !== undefined)
+        plan.sliderLabel = modelAsEffort;
+    if (input.model !== undefined && modelAsEffort === undefined)
         plan.modelLabel = input.model;
-    if (modelIsNowAnEffort) {
+    if (modelAsEffort !== undefined) {
         plan.warning =
-            `model_is_now_an_effort: ChatGPT's picker lists Pro as an effort step, not a model, so --model ${input.model} was ` +
+            `model_is_now_an_effort: ChatGPT's picker lists ${input.model.trim()} as an effort step, not a model, so --model ${input.model} was ` +
                 (input.effort === undefined
-                    ? "applied to the effort slider instead. Say --effort Pro to be explicit"
+                    ? `applied to the effort slider instead. Say --effort ${input.model.trim()} to be explicit`
                     : `ignored in favour of --effort ${input.effort}`) +
                 ", or clear a saved default with `prodex setup --clear-model`.";
     }
     return plan;
 }
+/**
+ * The Chat slider step a --model value names, if it names one.
+ *
+ * Pro was the first model to become a step, but Instant through Extra High sit
+ * on the same slider: `--model Instant` warned "does not offer" and went out on
+ * whatever step was saved, so a request for a fast answer waited on Pro
+ * reasoning (measured 2026-10-22). Max and Ultra are Work-only rungs that a
+ * model name does not reach, so they stay model names.
+ */
+export function chatStepNamedAsModel(model) {
+    let step;
+    try {
+        step = parseReasoningEffort(model);
+    }
+    catch {
+        return undefined;
+    }
+    if (step === "Max" || step === "Ultra")
+        return undefined;
+    // "max" is an alias of 매우 높음 for --effort, but a model called Max is
+    // asking for the Work rung, not for Extra High.
+    if (/^\s*max\s*$/i.test(model))
+        return undefined;
+    return step;
+}
 export function chatGptBusyBlocker(state) {
     // Waiting for a choice is not generating. Conflating them turned a click
     // away from ready into a full send budget spent on "still generating".
@@ -1460,6 +1521,28 @@ export function normalizeChatGptTargetUrl(value) {
     url.pathname = url.pathname.replace(/\/+$/, "") || "/";
     return url.toString();
 }
+/**
+ * A conversation URL, the only thing recovery can read an answer from.
+ *
+ * Recovery navigates the shared tab to its target. A URL that only passed the
+ * host check (`/c/abc def`, the home page, a project page) took the send lock
+ * and moved the tab somewhere no answer could be (measured 2026-10-26).
+ */
+export function normalizeChatGptThreadUrl(value) {
+    const describe = `It must be a ChatGPT conversation URL such as https://chatgpt.com/c/<id> (or https://chatgpt.com/g/<project>/c/<id>), not ${JSON.stringify(value)}.`;
+    let url;
+    try {
+        url = normalizeChatGptTargetUrl(value);
+    }
+    catch {
+        throw new Error(`Recovery target is not a ChatGPT URL. ${describe}`);
+    }
+    const pathname = new URL(url).pathname;
+    if (!/^(?:\/g\/[A-Za-z0-9_-]+)?\/c\/[A-Za-z0-9][A-Za-z0-9_-]*$/.test(pathname)) {
+        throw new Error(`Recovery target is not a conversation URL. ${describe}`);
+    }
+    return url;
+}
 export function chatGptUrlsReferToSameTarget(currentUrl, expectedUrl) {
     try {
         return normalizeChatGptTargetUrl(currentUrl) === normalizeChatGptTargetUrl(expectedUrl);
@@ -3741,7 +3824,7 @@ export async function recoverChatGptAnswerFromThread(options) {
     }
     const port = resolveCdpPort(options.port);
     const timeoutMs = Math.max(1_000, options.timeoutMs ?? 60_000);
-    const url = normalizeChatGptTargetUrl(options.targetUrl);
+    const url = normalizeChatGptThreadUrl(options.targetUrl);
     const page = await findChatGptPage(port, 3_000);
     if (!page.ok || !page.page) {
         throw new ChatGptBrowserBlockerError(page.blocker ?? {
@@ -6160,7 +6243,9 @@ export function transcriptContainsWholeSentPrompt(userText, sentPrompt) {
 }
 const NORMALIZED_PROMPT_MATCH_CHARS = 120;
 // The composer can autolink a url before the send, storing "[url](url)" in
-// place of the bare url (measured 2026-10-07, under load).
+// place of the bare url (measured 2026-10-07, under load). It escapes the two
+// halves differently ("Function\_(x)" vs "Function_\(x\)", measured
+// 2026-10-21), so the pattern is applied after markdown escapes are undone.
 const AUTOLINKED_URL_PATTERN = /\[(https?:\/\/[^\]\s]+)\]\(\1\)/g;
 /**
  * ChatGPT displays a sent turn's HTML entities decoded (measured 2026-10-19:
@@ -6178,7 +6263,7 @@ function decodeHtmlEntities(value) {
     });
 }
 function normalizeChatGptPromptText(value) {
-    const unescaped = decodeHtmlEntities(value).replace(AUTOLINKED_URL_PATTERN, "$1").replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1");
+    const unescaped = decodeHtmlEntities(value).replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1").replace(AUTOLINKED_URL_PATTERN, "$1");
     const renderedFences = unescaped.replace(/(^|\r?\n)```text[ \t]*\r?\n([\s\S]*?)\r?\n```(?=\r?\n|$)/g, "$1text\n$2");
     return renderedFences.replace(/\s+/g, " ").trim();
 }
@@ -6210,8 +6295,8 @@ export function chatGptRequestMatchesUserTurn(userText, sentPrompt, requestId) {
 }
 function withoutFenceLines(value) {
     return decodeHtmlEntities(value)
-        .replace(AUTOLINKED_URL_PATTERN, "$1")
         .replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1")
+        .replace(AUTOLINKED_URL_PATTERN, "$1")
         .replace(/^[ \t]*```[\w-]*[ \t]*$/gm, "")
         .replace(/\s+/g, "");
 }

package/dist/cli-args.js

@@ -304,9 +304,11 @@ export const ASK_PRO_PREVIEW_VALUE_FLAGS = new Set([
     "--file",
     "--port",
     "--timeout-ms",
-    // Accepted here only so the preview path can reject it with the friendly
+    // Accepted here only so the preview path can reject them with the friendly
     // "only applies when sending" guidance instead of a raw "Unknown option".
     "--busy-wait-ms",
+    "--attach",
+    "--tool",
     "--target-url",
     ...ASK_PRO_SELECTION_VALUE_FLAGS
 ]);

package/dist/cli-help.js

@@ -17,7 +17,7 @@ First-time setup:
 
 Ask / consult commands:
   prodex ask [same flags as pro browser ask] "prompt"  # top-level shortcut for pro browser ask
-  prodex pro ask [--dry-run] [--cwd /absolute/path/to/repo] [--file path] [--attach path] [--tool deep-research|web-search|create-image] "prompt"  # dry-run preview
+  prodex pro ask [--dry-run] [--cwd /absolute/path/to/repo] [--file path] "prompt"  # dry-run preview
   prodex pro debate-prompt [--topic "..."] [--rounds 2] [--source-cli /absolute/path/to/dist/cli.js]  # print an agent prompt for a structured GPT Pro debate
   prodex pro browser login [--cwd /absolute/path/to/repo] [--dry-run] [--source-cli /absolute/path/to/dist/cli.js] [--profile-dir path] [--port 9333] [--url https://chatgpt.com/...] [--launch-timeout-ms 5000] [--wait|--no-wait] [--headed|--headless|--minimized|--virtual-display] [--wait-timeout-ms 300000] [--background] [--recover-visible]  # preview/open browser login
   prodex pro browser help [--source-cli /absolute/path/to/dist/cli.js]
@@ -35,7 +35,7 @@ Ask / consult commands:
 
 Bridge ledger (durable tasks/results/receipts/sessions under .bridge/):
   prodex init [--cwd /absolute/path/to/repo]
-  prodex tasks create [--cwd /absolute/path/to/repo] --title "Title" --prompt "Prompt" [--repo-id id] [--file path] [--attach path] [--tool deep-research|web-search|create-image]
+  prodex tasks create [--cwd /absolute/path/to/repo] --title "Title" --prompt "Prompt" [--repo-id id] [--file path]
   prodex tasks list [--status new|claimed|done|blocked] [--cwd /absolute/path/to/repo] [--json]
   prodex tasks show <task-id|latest> [--cwd /absolute/path/to/repo]
   prodex tasks claim <task-id> [--cwd /absolute/path/to/repo] [--by codex]
@@ -163,7 +163,7 @@ export function printProHelp(stdout) {
     stdout(`prodex pro
 
 Commands:
-  prodex pro ask [--dry-run] [--cwd /absolute/path/to/repo] [--file path] [--attach path] [--tool deep-research|web-search|create-image] "prompt"
+  prodex pro ask [--dry-run] [--cwd /absolute/path/to/repo] [--file path] "prompt"
   prodex pro debate-prompt [--topic "..."] [--rounds 2] [--source-cli /absolute/path/to/dist/cli.js]
   prodex pro browser help [--source-cli /absolute/path/to/dist/cli.js]
   prodex pro browser login [--cwd /absolute/path/to/repo] [--dry-run] [--source-cli /absolute/path/to/dist/cli.js] [--launch-timeout-ms 5000] [--wait|--no-wait] [--headed|--headless|--minimized|--virtual-display] [--wait-timeout-ms 300000] [--background] [--recover-visible]
@@ -209,7 +209,7 @@ export function printTasksHelp(stdout) {
     stdout(`prodex tasks
 
 Commands:
-  prodex tasks create [--cwd /absolute/path/to/repo] --title "Title" --prompt "Prompt" [--repo-id id] [--file path] [--attach path] [--tool deep-research|web-search|create-image]
+  prodex tasks create [--cwd /absolute/path/to/repo] --title "Title" --prompt "Prompt" [--repo-id id] [--file path]
   prodex tasks list [--status new|claimed|done|blocked] [--cwd /absolute/path/to/repo] [--json]
   prodex tasks show <task-id|latest> [--cwd /absolute/path/to/repo]
   prodex tasks claim <task-id> [--cwd /absolute/path/to/repo] [--by codex]

package/dist/cli-pro.js

@@ -4,7 +4,7 @@ import { createServer as createNetServer } from "node:net";
 import path from "node:path";
 import { BrowserProcessInspectionError } from "./browser-process.js";
 import { buildDryRunBundle } from "./bundle.js";
-import { ChatGptBrowserBlockerError, DEFAULT_CDP_PORT, resolveCdpPort, resolveConversationToDelete, resolveProjectToDelete, chatGptVisibilityBlocker, defaultChatGptProfileDir, formatDurationMs, getChatGptBrowserStatus, formatModelMenuOption, listChatGptModelOptions, deleteChatGptConversation, endWedgedBrowser, browserRecoveryPlan, findWedgedBrowser, wedgedBrowserBlocker, deleteChatGptProject, listChatGptProjectsWithIds, listRecentChatGptConversations, listChatGptSidebarProjects, normalizeChatGptTargetUrl, openChatGptBrowser, openChatGptTab, parseProMode, parseReasoningEffort, defaultTimeoutForTools, ensureVirtualDisplay, minimizeChatGptWindow, readLastBrowserLoginLaunch, resolveBrowserWindowMode, recordBrowserLoginLaunch, recoverChatGptAnswerFromThread, sendChatGptPrompt, statusMeansBrowserDead, namesPro, sendWarningsFromError, destinationVerification, chatGptProjectIdFromUrl } from "./chatgpt-browser.js";
+import { ChatGptBrowserBlockerError, DEFAULT_CDP_PORT, resolveCdpPort, resolveConversationToDelete, resolveProjectToDelete, chatGptVisibilityBlocker, defaultChatGptProfileDir, formatDurationMs, getChatGptBrowserStatus, formatModelMenuOption, listChatGptModelOptions, deleteChatGptConversation, endWedgedBrowser, browserRecoveryPlan, findWedgedBrowser, wedgedBrowserBlocker, deleteChatGptProject, listChatGptProjectsWithIds, listRecentChatGptConversations, listChatGptSidebarProjects, normalizeChatGptTargetUrl, openChatGptBrowser, openChatGptTab, parseProMode, parseReasoningEffort, defaultTimeoutForTools, ensureVirtualDisplay, minimizeChatGptWindow, readLastBrowserLoginLaunch, resolveBrowserWindowMode, recordBrowserLoginLaunch, recoverChatGptAnswerFromThread, sendChatGptPrompt, statusMeansBrowserDead, namesPro, sendWarningsFromError, destinationVerification, chatGptProjectIdFromUrl, chatStepNamedAsModel, normalizeChatGptThreadUrl } from "./chatgpt-browser.js";
 import { ASK_PRO_BOOLEAN_FLAGS, ASK_PRO_PREVIEW_VALUE_FLAGS, ASK_PRO_VALUE_FLAGS, assertHelpRequestArgs, assertNoExtraArgs, assertOnlyOptions, findHelpFlagIndexBeforePromptDelimiter, formatCliCommand, hasAskProDryRunMode, hasAskProMode, hasAskProSendMode, isHelpSubcommand, parseAskProArgs, printHelpIfRequested, readFlag, readPortFlag, readPositionalsWithOptions, readNonNegativeIntegerFlag, readPositiveIntegerFlag, readRepeatedFlag, resolveCwdFlag, resolveOptionalFileFlag, unknownSubcommandError } from "./cli-args.js";
 import { printProBrowserHelp, printProHelp } from "./cli-help.js";
 import { listRawResultsForInspection, listTasksForInspection } from "./cli-ledger.js";
@@ -652,6 +652,9 @@ export async function runProCommand(rest, io, runCliFn) {
             if (!targetUrl) {
                 throw new Error("pro browser recover requires --target-url <thread-url> - the ChatGPT conversation URL whose finished answer to recover (e.g. the thread from a send_timeout blocker).");
             }
+            // Checked here, before the send lock and the navigation it guards, and
+            // outside the catch below that dresses errors as browser failures.
+            normalizeChatGptThreadUrl(targetUrl);
             const recoverPort = readPortFlag(browserArgs, "--port");
             const recoverTimeoutMs = readPositiveIntegerFlag(browserArgs, "--timeout-ms");
             const recoverRequestIdRaw = readFlag(browserArgs, "--request-id");
@@ -974,6 +977,7 @@ export async function runProCommand(rest, io, runCliFn) {
         const report = buildIssueReport({
             task_id: record.result.task_id,
             status: record.result.status,
+            blockedAt: record.result.created_at,
             ...(record.result.blocker ? { blocker: record.result.blocker } : {})
         }, { version: CLI_VERSION, platform: process.platform, nodeVersion: process.version });
         io.stdout(`title: ${report.title}`);
@@ -1175,14 +1179,17 @@ export async function runAskProCommand(rest, io, beforeSend) {
     const targetCwd = resolveCwdFlag(io.cwd, parsedAskPro.optionArgs);
     const targetStore = new BridgeStore(targetCwd);
     const files = readRepeatedFlag(parsedAskPro.optionArgs, "--file").map((file) => {
-        if (!path.isAbsolute(file))
-            return file;
-        // Accept an absolute --file that points INSIDE the repo by converting it to
-        // the repo-relative path the reader requires (agents naturally pass absolute
-        // paths); reject one that escapes the repo so a file outside the project
-        // (secrets, ~/.ssh, ...) is not attached to a consult by mistake.
-        const rel = path.relative(targetCwd, path.resolve(file));
-        if (rel === "" || rel.startsWith("..") || path.isAbsolute(rel)) {
+        // Accept a --file that points INSIDE the repo, absolute or relative (even
+        // ../repo/x), by converting it to the repo-relative path the reader
+        // requires; reject one that escapes the repo so a file outside the project
+        // (secrets, ~/.ssh, ...) is not attached to a consult by mistake. A
+        // relative escape used to reach the reader and fail with its internal
+        // "repo-relative root" wording instead of this guidance.
+        const rel = path.relative(targetCwd, path.resolve(targetCwd, file));
+        if (rel === "") {
+            throw new Error(`--file "${file}" is the repo root itself (${targetCwd}). Pass a file inside it.`);
+        }
+        if (rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel)) {
             throw new Error(`--file "${file}" is outside the repo root (${targetCwd}). Pass a path inside the repo (absolute or relative), or point --cwd at that repo.`);
         }
         return rel;
@@ -1193,7 +1200,7 @@ export async function runAskProCommand(rest, io, beforeSend) {
     const attachments = readRepeatedFlag(parsedAskPro.optionArgs, "--attach").map((file) => {
         const absolute = path.resolve(targetCwd, file);
         const rel = path.relative(targetCwd, absolute);
-        if (rel === "" || rel.startsWith("..") || path.isAbsolute(rel)) {
+        if (rel === "" || rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel)) {
             throw new Error(`--attach "${file}" is outside the repo root (${targetCwd}). Pass a path inside the repo, or point --cwd at that repo.`);
         }
         if (!existsSync(absolute) || !statSync(absolute).isFile()) {
@@ -2622,7 +2629,9 @@ export function resolveSelectionAxes(input) {
     const { explicit } = input;
     const defaults = input.defaults;
     const reasoningAxisChosen = explicit.proMode !== undefined || explicit.effort !== undefined;
-    const explicitlyPro = explicit.model !== undefined && namesPro(explicit.model);
+    // Pro, and any other Chat step given as a model, is a position of the same
+    // slider a saved effort sets, so asking for it answers the effort question.
+    const explicitlyPro = explicit.model !== undefined && (namesPro(explicit.model) || chatStepNamedAsModel(explicit.model) !== undefined);
     const model = explicit.model ?? (explicit.effort !== undefined ? undefined : defaults?.model);
     const proMode = explicit.proMode ?? (reasoningAxisChosen ? undefined : defaults?.pro_mode);
     const effort = explicit.effort ?? (reasoningAxisChosen || explicitlyPro ? undefined : defaults?.effort);

package/dist/config.js

@@ -286,6 +286,7 @@ export function assertTokenNotExpired(config, now = new Date()) {
         throw new Error(status.warning.toLowerCase());
     }
 }
+const MAX_TOKEN_EXPIRES_AT_MS = Date.parse("9999-12-31T23:59:59.999Z");
 function computeTokenExpiresAt(tokenTtlHours, nowIso) {
     if (tokenTtlHours === undefined)
         return undefined;
@@ -296,6 +297,11 @@ function computeTokenExpiresAt(tokenTtlHours, nowIso) {
     if (!Number.isFinite(expiresAtMs)) {
         throw new Error("token ttl produced an invalid expiry time");
     }
+    // Past year 9999 the ISO date gains a sign and six-digit year, which the
+    // config schema rejects with a raw validation dump (measured 2026-10-21).
+    if (expiresAtMs > MAX_TOKEN_EXPIRES_AT_MS) {
+        throw new Error("--token-ttl-hours is too large: the token would expire after year 9999. Use a smaller value, such as 8760 for a year.");
+    }
     return new Date(expiresAtMs).toISOString();
 }
 function isTokenExpired(tokenExpiresAt, now) {

package/dist/issue-report.js

@@ -37,6 +37,9 @@ export function buildIssueReport(consult, environment) {
         ? "The browser response did not match the smoke-test token."
         : "Consult blocked; detailed diagnostics are kept in the local receipt.";
     const area = issueAreaLabel(code);
+    // Only a bare timestamp travels: the field comes from a local record, and
+    // anything else in it stays local like the rest of the blocker prose.
+    const blockedAt = consult.blockedAt && /^\d{4}-\d{2}-\d{2}T[\d:.]+Z$/.test(consult.blockedAt) ? consult.blockedAt : "(not recorded)";
     const body = [
         "A consult was blocked. Filed from its receipt, so the prompt and the answer are not included.",
         "",
@@ -45,7 +48,10 @@ export function buildIssueReport(consult, environment) {
         `| blocker | \`${code}\` |`,
         `| message | ${message || "(none)"} |`,
         `| retryable | ${consult.blocker.retryable === true ? "yes" : "no"} |`,
-        `| prodex | ${environment.version} |`,
+        `| blocked at | ${blockedAt} |`,
+        // Records do not store the version that ran the consult, so name this one
+        // for what it is; the time above places the failure among releases.
+        `| prodex filing this report | ${environment.version} |`,
         `| platform | ${environment.platform} |`,
         `| node | ${environment.nodeVersion} |`,
         "",

package/dist/mcp.js

@@ -140,11 +140,11 @@ export function createServer(cwd = process.cwd(), options = {}) {
         }
     }, async (input) => asText(await handlers.repo_read_file(input)));
     server.registerTool("repo_search", {
-        description: "Search the current repo with ripgrep. Read-only.",
+        description: "Search the current repo with ripgrep. The query is a regular expression: escape ( ) [ ] . * + ? with a backslash to match them literally. Read-only.",
         inputSchema: { query: McpBridgeTextSchema.min(1), glob: McpShortTextSchema.optional() }
     }, async (input) => asText(await handlers.repo_search(input)));
     server.registerTool("repo_write_file_dry_run", {
-        description: "Create a receipt-gated write preview for an existing repo-relative text file. Does not modify files.",
+        description: "Create a receipt-gated write preview for an existing repo-relative text file. Does not modify files. The file keeps its CRLF line endings and UTF-8 BOM when the new content leaves them out.",
         inputSchema: {
             path: McpShortTextSchema,
             content: z.string().max(1_000_000),

package/dist/repo-write.js

@@ -11,21 +11,38 @@ let testHooks = {};
 export function setRepoWriteTestHooks(hooks) {
     testHooks = hooks;
 }
+/**
+ * repo_read_file hands an agent "\n" endings for a CRLF file, so writing the
+ * edited text back turned every line into a change (measured 2026-10-21), and
+ * a UTF-8 BOM was dropped the same way. Keep what the file already uses, as an
+ * editor does: CRLF only when the file uses it throughout and the new content
+ * carries no CR of its own, and a BOM only when the new content has none.
+ */
+export function keepFileConventions(current, next) {
+    let content = next;
+    const crlf = current.includes("\r\n") && !/(^|[^\r])\n/.test(current);
+    if (crlf && !content.includes("\r"))
+        content = content.replace(/\n/g, "\r\n");
+    if (current.startsWith("\uFEFF") && !content.startsWith("\uFEFF"))
+        content = `\uFEFF${content}`;
+    return content;
+}
 export async function createRepoWriteDryRun(root, store, input) {
     const head = await assertGitHead(root, input.expected_head);
     if (Buffer.byteLength(input.content, "utf8") > MAX_WRITE_BYTES) {
         throw new Error(`New content is too large to write through repo tools`);
     }
     const current = await readWritableExistingFile(root, input.path);
-    if (current.content === input.content) {
+    const content = keepFileConventions(current.content, input.content);
+    if (current.content === content) {
         throw new Error(`No changes for ${input.path}`);
     }
     const preimage = sha256(current.content);
-    const newSha = sha256(input.content);
-    const diff = buildSimpleDiff(input.path, current.content, input.content);
+    const newSha = sha256(content);
+    const diff = buildSimpleDiff(input.path, current.content, content);
     const candidateArtifactPath = `.bridge/artifacts/repo-writes/${newSha}.txt`;
     const artifactAlreadyExisted = await store.hasArtifactText(candidateArtifactPath);
-    const artifactPath = await store.writeArtifactText(candidateArtifactPath, input.content);
+    const artifactPath = await store.writeArtifactText(candidateArtifactPath, content);
     const metadata = {
         path: input.path,
         expected_head: head,

package/dist/repo.js

@@ -182,9 +182,21 @@ export async function searchRepoWithMetadata(root, query, glob) {
         }
         if (maybe.code === 1)
             return { matches: [], truncated: false, limit: MAX_REPO_SEARCH_MATCHES };
+        // An invalid pattern used to surface as "Command failed: <rg path> ..."
+        // with rg's parse error buried in it (measured 2026-10-21, query "(").
+        const reason = ripgrepRegexError(error.stderr);
+        if (reason) {
+            throw new Error(`repo_search treats the query as a regular expression, and ${JSON.stringify(query)} is not valid (${reason}). Escape characters such as ( ) [ ] { } . * + ? | with a backslash to search for them literally.`);
+        }
         throw error;
     }
 }
+function ripgrepRegexError(stderr) {
+    if (!stderr || !/regex parse error/i.test(stderr))
+        return undefined;
+    const detail = stderr.split("\n").map((line) => line.trim()).find((line) => /^error:/i.test(line));
+    return detail ? detail.replace(/^error:\s*/i, "") : "regex parse error";
+}
 function parseRipgrepJsonMatch(line) {
     let event;
     try {

package/docs/cli-reference.md

@@ -174,7 +174,7 @@ prodex pro browser models
 ```
 
 - `--effort 즉시|중간|높음|"매우 높음"|Max|Ultra|Pro` sets the rung. English aliases `instant`/`light`, `medium`, `high`, `extrahigh`/`max`, `ultra` are accepted, and both the Korean and the English (US) ChatGPT labels are matched. `Max` and `Ultra` belong to the Work surface's ladder and apply only when the browser is already on Work; every other value is sent on Chat, whose top step is Pro.
-- `--model Pro` reaches the same top rung. The model rows in the picker (Latest, GPT-5.6 Sol, GPT-5.5) refuse automation clicks in the current UI - they carry `pointer-events: none` - so `--model` with any other label reports `model_not_applied` rather than pretending. On a display language other than Korean or English, pass the exact label `models` prints.
+- `--model Pro` reaches the same top rung, and so does any other Chat step given as a model (`--model Instant`, `--model High`): it is applied to the slider with a `model_is_now_an_effort` warning. Max and Ultra are not, because they are Work rungs. The model rows in the picker (Latest, GPT-5.6 Sol, GPT-5.5) refuse automation clicks in the current UI - they carry `pointer-events: none` - so `--model` with any other label reports `model_not_applied` rather than pretending. On a display language other than Korean or English, pass the exact label `models` prints.
 - `--pro-mode 기본|확장` selects a Pro sub-mode where the picker still exposes one (the GPT-5.5 generation); with a single Pro rung it fails with guidance. `--pro-mode` and `--effort` are different axes of the same control and cannot be combined. Any Pro selection raises the default `--timeout-ms` to 1200000, because Pro reasoning routinely runs for many minutes; an explicit `--timeout-ms` always wins.
 - ChatGPT keeps two surfaces, Chat and Work, with different pickers; Work's ladder has no Pro. A send puts the browser back on Chat first and notes it on the receipt, so a browser that drifted onto Work does not quietly send on the wrong picker.
 - `--project "name"` enters an existing sidebar project before sending. `--project-new "name"` creates a new project (sidebar 새 프로젝트 popover, committed with Enter) and sends inside it. Neither can be combined with `--target-url` (the project step would navigate away from the confirmed tab), and `--project-new` never comes from saved defaults - creating a project is always an explicit per-ask choice.

package/docs/releasing.md

@@ -35,6 +35,51 @@ The release adds a guarded, opt-in transition and more accurate blocker reportin
 **Open**
 - A long-running headless browser ends up behind Cloudflare's check (also noted on WSL, where the Xvfb display is used instead). On macOS there is no virtual display, and a minimized window counts as hidden, so the remaining no-headless option there is a window kept behind others. Changing the headless preference is a design decision that was not made here.
 
+## 0.40.40 Release Record
+
+Release commit `3d671f5` on `main` (cut after PRs #38-#44, last merge `5609f4c`); tag `v0.40.40`.
+
+**Publishing**
+- `publish.yml` run 39563515199 passed all six platforms, then npm publish with SLSA v1 provenance and the GitHub Release (2026-10-21 07:39 UTC start).
+- `npm run release:verify` passed on the release commit after a build.
+
+**Changelog defect**
+- The released `CHANGELOG.md` (also inside the npm tarball) repeats five entries in the 0.40.40 section and leaves the token TTL fix (#44) under a stray `## Unreleased` heading below it. Cause: the script that resolved CHANGELOG conflicts while rebasing queued PRs copied the branch's whole Unreleased section, which already held the entries merged before it, and #44's branch added a second Unreleased section. `main` was corrected right after the release, and the GitHub Release notes were replaced with the corrected eight entries. The npm tarball cannot be changed. The rebase script now carries only lines missing from `main` and stops on duplicate lines or a second Unreleased section; the release script stops if an Unreleased section survives the rename.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.40. Running services were not restarted: 9 stdio MCP servers on WSL and 1 on M3 keep older code until their clients reconnect. The Mac mini had none running.
+- The maintainer watchdog checkout was pulled to `3d671f5` and rebuilt.
+
+**Verified live**
+- Installed 0.40.40 on WSL: a prompt with `[the docs](https://en.wikipedia.org/wiki/Function_(mathematics))`, refused twice as `request_mismatch` by 0.40.39, returned `done` with `request_verified: yes`.
+- Over MCP on installed 0.40.40: `repo_search "("` explains that the query is a regular expression.
+- `pro report-issue` preview shows `blocked at` and `prodex filing this report`; `pro ask --tool web-search` names the send command.
+
+**Browser container**
+- `container/redesign-patches` `1f4baa6` ports PRs #38-#41 and `5812053` ports PRs #42-#44. Branch suite at `5812053`: 2074 passed, 3 skipped; `release:verify` ok. One full run failed `project-sidebar-current-ui` "retries a covered target three times" (untouched; passed 3/3 alone and on the rerun).
+- WSL: image `75828cfb7ed5` after #38-#41 (the autolink prompt went through live with `request_verified: yes`), then `6042260bebe7` after #42-#44 (smoke `requestVerified: true`). Both swapped under the send lock check.
+- M3 (colima `prodex-check`): image `59fd7b2f0e89`, then `2ab687763354`; smoke `requestVerified: true` after each swap, under the send lock check.
+
+## 0.40.39 Release Record
+
+Release commit `c8a170f` on `main` (cut after PRs #33-#37, last merge `09ad42e`); tag `v0.40.39`. First batched release: five fixes merged on green CI and released together.
+
+**Publishing**
+- `publish.yml` run 39525668044 passed all six platforms, then npm publish with SLSA v1 provenance and the GitHub Release (2026-10-21 01:09 UTC start).
+- `npm run release:verify` passed on the release commit after a build.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.39. Running services were not restarted: 10 stdio MCP servers on WSL and 4 on M3 keep older code until their clients reconnect. The Mac mini had none running.
+- The maintainer watchdog checkout was pulled to `c8a170f` and rebuilt.
+
+**Verified live**
+- Installed 0.40.39 on WSL: `prodex ask "- list these"` refuses with the hint to put `--` before the prompt.
+
+**Browser container**
+- `container/redesign-patches` `d3d7b66` ports PRs #34-#37 (UTF-16 decoding from #33 was already on the branch). The mermaid serializer was applied by hand because the container's transcript helpers differ from `main`. Branch suite: 2061 passed, 3 skipped.
+- WSL: image `67b473c3e850`, swapped under the send lock check. Live: a prompt asking for a mermaid flowchart saved the answer with a ```` ```mermaid ```` fence and its source.
+- M3 (colima `prodex-check`): image `ad0746f93e40`, swapped under the send lock check; `pro browser smoke` in the container returned `requestVerified: true`.
+
 ## 0.40.38 Release Record
 
 Release commit `9541727` on `main` (cut after PR #32, merge `2c049b5`); tag `v0.40.38`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youdie006/prodex",
-  "version": "0.40.39",
+  "version": "0.40.41",
   "description": "Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.",
   "author": "youdie006",
   "license": "MIT",