codex-relay 1.2.2 → 1.2.4

package/README.md

@@ -95,7 +95,6 @@ The relay listens on `0.0.0.0:8787` by default. Configure it with environment va
 | -------------------------------------- | -------------------------------------------------------------------------------------------------- |
 | `PORT`                                 | Server port. Defaults to `8787`.                                                                   |
 | `HOST`                                 | Listen host. Defaults to `0.0.0.0`.                                                                |
-| `CODEX_RELAY_PUBLIC_URL`               | URL printed into the pairing QR, for example a Tailscale or tunnel URL.                            |
 | `CODEX_RELAY_WORKSPACE_PATH`           | Workspace path Codex should use. Defaults to the directory where you run `npx codex-relay@latest`. |
 | `CODEX_RELAY_AUTH_DB_PATH`             | Pairing and session database path. Defaults to `.codex-relay/auth.db`.                             |
 | `CODEX_RELAY_APPROVAL_SECRET`          | Secret used by the local approve command. Usually generated automatically.                         |
@@ -109,10 +108,6 @@ Examples:
 PORT=8788 npx codex-relay@latest
 ```
 
-```sh
-CODEX_RELAY_PUBLIC_URL=http://100.64.0.10:8787 npx codex-relay@latest
-```
-
 ```sh
 CODEX_RELAY_WORKSPACE_PATH=/path/to/project npx codex-relay@latest
 ```
@@ -124,7 +119,6 @@ The phone must be able to reach one of the URLs printed by the relay.
 - On the same Wi-Fi network, the relay usually prints a local network address.
 - On Tailscale, the relay prefers your Tailscale address when it can detect one.
 - If several Wi-Fi, VPN, or virtual network addresses are available, the QR includes all detected candidates and the app tries them automatically.
-- If the printed URL is not reachable from the phone, set `CODEX_RELAY_PUBLIC_URL` to a reachable HTTP URL.
 
 ## Troubleshooting
 
@@ -154,4 +148,3 @@ Connection checklist:
 - If keeping the same network is difficult, are both devices connected through Tailscale or another reachable private network?
 - Can the phone open the exact `Mobile:` URL printed by the relay?
 - Does the computer firewall allow inbound traffic on the relay port, usually `8787`?
-- If the printed URL is not reachable, did you set `CODEX_RELAY_PUBLIC_URL` to a reachable LAN, Tailscale, or tunnel URL?

package/dist/api-schema.js

@@ -1,2 +1,2 @@
-import { $ as SandboxModeSchema, A as PairResponseSchema, At as WorkspaceSelectionRequestSchema, B as QueuedThreadInputSchema, Bt as isPromptSkillMarkdownMention, C as ListQueuedThreadInputsResponseSchema, Ct as WorkspaceDirectoryEntrySchema, D as ListWorkspaceFilesResponseSchema, Dt as WorkspaceMarkdownPreviewTargetSchema, E as ListWorkspaceDirectoriesResponseSchema, Et as WorkspaceGitActionResponseSchema, F as PromptAttachmentSummarySchema, Ft as WorkspaceTerminalSessionResponseSchema, G as ResolveApprovalRequestSchema, Gt as promptSkillMentionMarkdown, H as RateLimitWindowSchema, Ht as promptMarkdownWithSkills, I as PromptContextInputSchema, It as WorkspaceTerminalStartRequestSchema, J as RunThreadResponseSchema, K as ResolveApprovalResponseSchema, Kt as promptSkillMentionTextCandidates, L as PromptContextSchema, Lt as apiPaths, M as PendingInputRequestQuestionSchema, Mt as WorkspaceTerminalOutputChunkSchema, N as PendingInputRequestSchema, Nt as WorkspaceTerminalOutputResponseSchema, O as PairEncryptedPayloadSchema, Ot as WorkspacePreviewNavigationRequestSchema, P as PromptAttachmentSchema, Pt as WorkspaceTerminalResizeRequestSchema, Q as RuntimePreferencesSchema, R as PromptSkillSchema, Rt as chatMessageDetailsFromPromptContext, S as ListModelsResponseSchema, St as WorkspaceChangesResponseSchema, T as ListThreadsResponseSchema, Tt as WorkspaceFileMentionSchema, U as RateLimitsResponseSchema, Ut as promptSkillDisplayName, V as RateLimitBucketSchema, Vt as normalizePromptContext, W as ReasoningEffortSchema, Wt as promptSkillMentionLabel, X as RuntimePreferencesByWorkspacePathSchema, Y as RuntimeModeSchema, Z as RuntimePreferencesResponseSchema, _ as EncryptedPayloadSchema, _t as UpdateWorkspaceFileContentRequestSchema, a as ArchiveThreadResponseSchema, at as ThreadContextWindowResponseSchema, b as InterruptThreadRunResponseSchema, bt as WORKSPACE_PREVIEW_TAB_VALUES, c as ChatMessageRoleSchema, ct as ThreadGoalSchema, d as CheckoutWorkspaceBranchRequestSchema, dt as ThreadMessageDetailResponseSchema, et as StatusResponseSchema, f as CodexModelSchema, ft as ThreadRunOptionsSchema, g as CreateThreadResponseSchema, gt as UpdateThreadGoalRequestSchema, h as CreateThreadRequestSchema, ht as UpdateRuntimePreferencesRequestSchema, i as ApprovalModeSchema, it as ThreadCollaborationModeSchema, j as PendingInputRequestOptionSchema, jt as WorkspaceTerminalInputRequestSchema, k as PairRequestSchema, kt as WorkspacePreviewTabSchema, l as ChatMessageSchema, lt as ThreadGoalStatusSchema, m as ContextWindowUsageSchema, mt as ThreadSummarySchema, n as AgentSkillSourceSchema, nt as StreamThreadRunRequestSchema, o as ChatMessageKindSchema, ot as ThreadDetailResponseSchema, p as CommitPushWorkspaceRequestSchema, pt as ThreadStateSchema, q as RunThreadRequestSchema, qt as stripPromptSkillMentions, r as ApprovalDecisionSchema, rt as SubmitThreadInputResponseSchema, s as ChatMessagePromptDetailsSchema, st as ThreadGoalResponseSchema, t as AgentSkillSchema, tt as StreamThreadRunEventSchema, u as ChatMessageStateSchema, ut as ThreadMessageDetailFieldSchema, v as ErrorResponseSchema, vt as VersionResponseSchema, w as ListSkillsResponseSchema, wt as WorkspaceFileContentResponseSchema, x as IsoDateTimeSchema, xt as WebPreviewTargetSchema, y as ImageAttachmentUploadResponseSchema, yt as WORKSPACE_PREVIEW_OPEN_PROTOCOL, z as QueuedThreadInputActionResponseSchema, zt as createOpenApiDocument } from "./api-schema2.js";
-export { AgentSkillSchema, AgentSkillSourceSchema, ApprovalDecisionSchema, ApprovalModeSchema, ArchiveThreadResponseSchema, ChatMessageKindSchema, ChatMessagePromptDetailsSchema, ChatMessageRoleSchema, ChatMessageSchema, ChatMessageStateSchema, CheckoutWorkspaceBranchRequestSchema, CodexModelSchema, CommitPushWorkspaceRequestSchema, ContextWindowUsageSchema, CreateThreadRequestSchema, CreateThreadResponseSchema, EncryptedPayloadSchema, ErrorResponseSchema, ImageAttachmentUploadResponseSchema, InterruptThreadRunResponseSchema, IsoDateTimeSchema, ListModelsResponseSchema, ListQueuedThreadInputsResponseSchema, ListSkillsResponseSchema, ListThreadsResponseSchema, ListWorkspaceDirectoriesResponseSchema, ListWorkspaceFilesResponseSchema, PairEncryptedPayloadSchema, PairRequestSchema, PairResponseSchema, PendingInputRequestOptionSchema, PendingInputRequestQuestionSchema, PendingInputRequestSchema, PromptAttachmentSchema, PromptAttachmentSummarySchema, PromptContextInputSchema, PromptContextSchema, PromptSkillSchema, QueuedThreadInputActionResponseSchema, QueuedThreadInputSchema, RateLimitBucketSchema, RateLimitWindowSchema, RateLimitsResponseSchema, ReasoningEffortSchema, ResolveApprovalRequestSchema, ResolveApprovalResponseSchema, RunThreadRequestSchema, RunThreadResponseSchema, RuntimeModeSchema, RuntimePreferencesByWorkspacePathSchema, RuntimePreferencesResponseSchema, RuntimePreferencesSchema, SandboxModeSchema, StatusResponseSchema, StreamThreadRunEventSchema, StreamThreadRunRequestSchema, SubmitThreadInputResponseSchema, ThreadCollaborationModeSchema, ThreadContextWindowResponseSchema, ThreadDetailResponseSchema, ThreadGoalResponseSchema, ThreadGoalSchema, ThreadGoalStatusSchema, ThreadMessageDetailFieldSchema, ThreadMessageDetailResponseSchema, ThreadRunOptionsSchema, ThreadStateSchema, ThreadSummarySchema, UpdateRuntimePreferencesRequestSchema, UpdateThreadGoalRequestSchema, UpdateWorkspaceFileContentRequestSchema, VersionResponseSchema, WORKSPACE_PREVIEW_OPEN_PROTOCOL, WORKSPACE_PREVIEW_TAB_VALUES, WebPreviewTargetSchema, WorkspaceChangesResponseSchema, WorkspaceDirectoryEntrySchema, WorkspaceFileContentResponseSchema, WorkspaceFileMentionSchema, WorkspaceGitActionResponseSchema, WorkspaceMarkdownPreviewTargetSchema, WorkspacePreviewNavigationRequestSchema, WorkspacePreviewTabSchema, WorkspaceSelectionRequestSchema, WorkspaceTerminalInputRequestSchema, WorkspaceTerminalOutputChunkSchema, WorkspaceTerminalOutputResponseSchema, WorkspaceTerminalResizeRequestSchema, WorkspaceTerminalSessionResponseSchema, WorkspaceTerminalStartRequestSchema, apiPaths, chatMessageDetailsFromPromptContext, createOpenApiDocument, isPromptSkillMarkdownMention, normalizePromptContext, promptMarkdownWithSkills, promptSkillDisplayName, promptSkillMentionLabel, promptSkillMentionMarkdown, promptSkillMentionTextCandidates, stripPromptSkillMentions };
+import { $ as SandboxModeSchema, A as PairResponseSchema, At as WorkspaceSelectionRequestSchema, B as QueuedThreadInputSchema, Bt as chatMessageDetailsFromPromptContext, C as ListQueuedThreadInputsResponseSchema, Ct as WorkspaceDirectoryEntrySchema, D as ListWorkspaceFilesResponseSchema, Dt as WorkspaceMarkdownPreviewTargetSchema, E as ListWorkspaceDirectoriesResponseSchema, Et as WorkspaceGitActionResponseSchema, F as PromptAttachmentSummarySchema, Ft as WorkspaceTerminalOutputResponseSchema, G as ResolveApprovalRequestSchema, Gt as promptSkillDisplayName, H as RateLimitWindowSchema, Ht as isPromptSkillMarkdownMention, I as PromptContextInputSchema, It as WorkspaceTerminalResizeRequestSchema, J as RunThreadResponseSchema, Jt as promptSkillMentionTextCandidates, K as ResolveApprovalResponseSchema, Kt as promptSkillMentionLabel, L as PromptContextSchema, Lt as WorkspaceTerminalSessionResponseSchema, M as PendingInputRequestQuestionSchema, Mt as WorkspaceTailscaleServeResponseSchema, N as PendingInputRequestSchema, Nt as WorkspaceTerminalInputRequestSchema, O as PairEncryptedPayloadSchema, Ot as WorkspacePreviewNavigationRequestSchema, P as PromptAttachmentSchema, Pt as WorkspaceTerminalOutputChunkSchema, Q as RuntimePreferencesSchema, R as PromptSkillSchema, Rt as WorkspaceTerminalStartRequestSchema, S as ListModelsResponseSchema, St as WorkspaceChangesResponseSchema, T as ListThreadsResponseSchema, Tt as WorkspaceFileMentionSchema, U as RateLimitsResponseSchema, Ut as normalizePromptContext, V as RateLimitBucketSchema, Vt as createOpenApiDocument, W as ReasoningEffortSchema, Wt as promptMarkdownWithSkills, X as RuntimePreferencesByWorkspacePathSchema, Y as RuntimeModeSchema, Yt as stripPromptSkillMentions, Z as RuntimePreferencesResponseSchema, _ as EncryptedPayloadSchema, _t as UpdateWorkspaceFileContentRequestSchema, a as ArchiveThreadResponseSchema, at as ThreadContextWindowResponseSchema, b as InterruptThreadRunResponseSchema, bt as WORKSPACE_PREVIEW_TAB_VALUES, c as ChatMessageRoleSchema, ct as ThreadGoalSchema, d as CheckoutWorkspaceBranchRequestSchema, dt as ThreadMessageDetailResponseSchema, et as StatusResponseSchema, f as CodexModelSchema, ft as ThreadRunOptionsSchema, g as CreateThreadResponseSchema, gt as UpdateThreadGoalRequestSchema, h as CreateThreadRequestSchema, ht as UpdateRuntimePreferencesRequestSchema, i as ApprovalModeSchema, it as ThreadCollaborationModeSchema, j as PendingInputRequestOptionSchema, jt as WorkspaceTailscaleServeRequestSchema, k as PairRequestSchema, kt as WorkspacePreviewTabSchema, l as ChatMessageSchema, lt as ThreadGoalStatusSchema, m as ContextWindowUsageSchema, mt as ThreadSummarySchema, n as AgentSkillSourceSchema, nt as StreamThreadRunRequestSchema, o as ChatMessageKindSchema, ot as ThreadDetailResponseSchema, p as CommitPushWorkspaceRequestSchema, pt as ThreadStateSchema, q as RunThreadRequestSchema, qt as promptSkillMentionMarkdown, r as ApprovalDecisionSchema, rt as SubmitThreadInputResponseSchema, s as ChatMessagePromptDetailsSchema, st as ThreadGoalResponseSchema, t as AgentSkillSchema, tt as StreamThreadRunEventSchema, u as ChatMessageStateSchema, ut as ThreadMessageDetailFieldSchema, v as ErrorResponseSchema, vt as VersionResponseSchema, w as ListSkillsResponseSchema, wt as WorkspaceFileContentResponseSchema, x as IsoDateTimeSchema, xt as WebPreviewTargetSchema, y as ImageAttachmentUploadResponseSchema, yt as WORKSPACE_PREVIEW_OPEN_PROTOCOL, z as QueuedThreadInputActionResponseSchema, zt as apiPaths } from "./api-schema2.js";
+export { AgentSkillSchema, AgentSkillSourceSchema, ApprovalDecisionSchema, ApprovalModeSchema, ArchiveThreadResponseSchema, ChatMessageKindSchema, ChatMessagePromptDetailsSchema, ChatMessageRoleSchema, ChatMessageSchema, ChatMessageStateSchema, CheckoutWorkspaceBranchRequestSchema, CodexModelSchema, CommitPushWorkspaceRequestSchema, ContextWindowUsageSchema, CreateThreadRequestSchema, CreateThreadResponseSchema, EncryptedPayloadSchema, ErrorResponseSchema, ImageAttachmentUploadResponseSchema, InterruptThreadRunResponseSchema, IsoDateTimeSchema, ListModelsResponseSchema, ListQueuedThreadInputsResponseSchema, ListSkillsResponseSchema, ListThreadsResponseSchema, ListWorkspaceDirectoriesResponseSchema, ListWorkspaceFilesResponseSchema, PairEncryptedPayloadSchema, PairRequestSchema, PairResponseSchema, PendingInputRequestOptionSchema, PendingInputRequestQuestionSchema, PendingInputRequestSchema, PromptAttachmentSchema, PromptAttachmentSummarySchema, PromptContextInputSchema, PromptContextSchema, PromptSkillSchema, QueuedThreadInputActionResponseSchema, QueuedThreadInputSchema, RateLimitBucketSchema, RateLimitWindowSchema, RateLimitsResponseSchema, ReasoningEffortSchema, ResolveApprovalRequestSchema, ResolveApprovalResponseSchema, RunThreadRequestSchema, RunThreadResponseSchema, RuntimeModeSchema, RuntimePreferencesByWorkspacePathSchema, RuntimePreferencesResponseSchema, RuntimePreferencesSchema, SandboxModeSchema, StatusResponseSchema, StreamThreadRunEventSchema, StreamThreadRunRequestSchema, SubmitThreadInputResponseSchema, ThreadCollaborationModeSchema, ThreadContextWindowResponseSchema, ThreadDetailResponseSchema, ThreadGoalResponseSchema, ThreadGoalSchema, ThreadGoalStatusSchema, ThreadMessageDetailFieldSchema, ThreadMessageDetailResponseSchema, ThreadRunOptionsSchema, ThreadStateSchema, ThreadSummarySchema, UpdateRuntimePreferencesRequestSchema, UpdateThreadGoalRequestSchema, UpdateWorkspaceFileContentRequestSchema, VersionResponseSchema, WORKSPACE_PREVIEW_OPEN_PROTOCOL, WORKSPACE_PREVIEW_TAB_VALUES, WebPreviewTargetSchema, WorkspaceChangesResponseSchema, WorkspaceDirectoryEntrySchema, WorkspaceFileContentResponseSchema, WorkspaceFileMentionSchema, WorkspaceGitActionResponseSchema, WorkspaceMarkdownPreviewTargetSchema, WorkspacePreviewNavigationRequestSchema, WorkspacePreviewTabSchema, WorkspaceSelectionRequestSchema, WorkspaceTailscaleServeRequestSchema, WorkspaceTailscaleServeResponseSchema, WorkspaceTerminalInputRequestSchema, WorkspaceTerminalOutputChunkSchema, WorkspaceTerminalOutputResponseSchema, WorkspaceTerminalResizeRequestSchema, WorkspaceTerminalSessionResponseSchema, WorkspaceTerminalStartRequestSchema, apiPaths, chatMessageDetailsFromPromptContext, createOpenApiDocument, isPromptSkillMarkdownMention, normalizePromptContext, promptMarkdownWithSkills, promptSkillDisplayName, promptSkillMentionLabel, promptSkillMentionMarkdown, promptSkillMentionTextCandidates, stripPromptSkillMentions };

package/dist/api-schema2.js

@@ -409,6 +409,11 @@ const WorkspaceTerminalResizeRequestSchema = z.object({
 	cols: z.number().int().min(2).max(300),
 	rows: z.number().int().min(2).max(120)
 });
+const WorkspaceTailscaleServeRequestSchema = z.object({ url: z.string().url() });
+const WorkspaceTailscaleServeResponseSchema = z.object({
+	port: z.number().int().positive(),
+	url: z.string().url()
+});
 const PairRequestSchema = z.object({
 	clientSessionId: z.string().trim().min(1).max(120).optional(),
 	clientName: z.string().trim().min(1).max(80).optional(),
@@ -724,6 +729,7 @@ const apiPaths = {
 	workspaceTerminalOutput: (sessionId) => `/v1/workspace/terminal/sessions/${encodeURIComponent(sessionId)}/output`,
 	workspaceTerminalOutputStream: (sessionId) => `/v1/workspace/terminal/sessions/${encodeURIComponent(sessionId)}/output/stream`,
 	workspaceTerminalResize: (sessionId) => `/v1/workspace/terminal/sessions/${encodeURIComponent(sessionId)}/resize`,
+	workspaceTailscaleServe: "/v1/workspace/tailscale/serve",
 	imageAttachments: "/v1/attachments/images",
 	imageAttachment: (attachmentId) => `/v1/attachments/images/${encodeURIComponent(attachmentId)}`,
 	threads: "/v1/threads",
@@ -843,6 +849,15 @@ function createOpenApiDocument() {
 					}
 				}
 			},
+			"/v1/workspace/tailscale/serve": { post: {
+				summary: "Start Tailscale Serve for a workspace preview URL",
+				requestBody: jsonRequest("WorkspaceTailscaleServeRequest"),
+				responses: {
+					"200": jsonResponse("WorkspaceTailscaleServeResponse"),
+					"400": jsonResponse("ErrorResponse"),
+					"502": jsonResponse("ErrorResponse")
+				}
+			} },
 			"/v1/threads/{threadId}/runs": { post: {
 				summary: "Run a prompt on a Codex thread",
 				parameters: [{
@@ -1339,6 +1354,28 @@ function createOpenApiDocument() {
 					workspacePath: { type: "string" }
 				}
 			},
+			WorkspaceTailscaleServeRequest: {
+				type: "object",
+				required: ["url"],
+				properties: { url: {
+					type: "string",
+					format: "uri"
+				} }
+			},
+			WorkspaceTailscaleServeResponse: {
+				type: "object",
+				required: ["url", "port"],
+				properties: {
+					url: {
+						type: "string",
+						format: "uri"
+					},
+					port: {
+						type: "integer",
+						minimum: 1
+					}
+				}
+			},
 			CreateThreadRequest: {
 				type: "object",
 				properties: {
@@ -1689,4 +1726,4 @@ function jsonResponse(schemaName) {
 	};
 }
 //#endregion
-export { SandboxModeSchema as $, PairResponseSchema as A, WorkspaceSelectionRequestSchema as At, QueuedThreadInputSchema as B, isPromptSkillMarkdownMention as Bt, ListQueuedThreadInputsResponseSchema as C, WorkspaceDirectoryEntrySchema as Ct, ListWorkspaceFilesResponseSchema as D, WorkspaceMarkdownPreviewTargetSchema as Dt, ListWorkspaceDirectoriesResponseSchema as E, WorkspaceGitActionResponseSchema as Et, PromptAttachmentSummarySchema as F, WorkspaceTerminalSessionResponseSchema as Ft, ResolveApprovalRequestSchema as G, promptSkillMentionMarkdown as Gt, RateLimitWindowSchema as H, promptMarkdownWithSkills as Ht, PromptContextInputSchema as I, WorkspaceTerminalStartRequestSchema as It, RunThreadResponseSchema as J, ResolveApprovalResponseSchema as K, promptSkillMentionTextCandidates as Kt, PromptContextSchema as L, apiPaths as Lt, PendingInputRequestQuestionSchema as M, WorkspaceTerminalOutputChunkSchema as Mt, PendingInputRequestSchema as N, WorkspaceTerminalOutputResponseSchema as Nt, PairEncryptedPayloadSchema as O, WorkspacePreviewNavigationRequestSchema as Ot, PromptAttachmentSchema as P, WorkspaceTerminalResizeRequestSchema as Pt, RuntimePreferencesSchema as Q, PromptSkillSchema as R, chatMessageDetailsFromPromptContext as Rt, ListModelsResponseSchema as S, WorkspaceChangesResponseSchema as St, ListThreadsResponseSchema as T, WorkspaceFileMentionSchema as Tt, RateLimitsResponseSchema as U, promptSkillDisplayName as Ut, RateLimitBucketSchema as V, normalizePromptContext as Vt, ReasoningEffortSchema as W, promptSkillMentionLabel as Wt, RuntimePreferencesByWorkspacePathSchema as X, RuntimeModeSchema as Y, RuntimePreferencesResponseSchema as Z, EncryptedPayloadSchema as _, UpdateWorkspaceFileContentRequestSchema as _t, ArchiveThreadResponseSchema as a, ThreadContextWindowResponseSchema as at, InterruptThreadRunResponseSchema as b, WORKSPACE_PREVIEW_TAB_VALUES as bt, ChatMessageRoleSchema as c, ThreadGoalSchema as ct, CheckoutWorkspaceBranchRequestSchema as d, ThreadMessageDetailResponseSchema as dt, StatusResponseSchema as et, CodexModelSchema as f, ThreadRunOptionsSchema as ft, CreateThreadResponseSchema as g, UpdateThreadGoalRequestSchema as gt, CreateThreadRequestSchema as h, UpdateRuntimePreferencesRequestSchema as ht, ApprovalModeSchema as i, ThreadCollaborationModeSchema as it, PendingInputRequestOptionSchema as j, WorkspaceTerminalInputRequestSchema as jt, PairRequestSchema as k, WorkspacePreviewTabSchema as kt, ChatMessageSchema as l, ThreadGoalStatusSchema as lt, ContextWindowUsageSchema as m, ThreadSummarySchema as mt, AgentSkillSourceSchema as n, StreamThreadRunRequestSchema as nt, ChatMessageKindSchema as o, ThreadDetailResponseSchema as ot, CommitPushWorkspaceRequestSchema as p, ThreadStateSchema as pt, RunThreadRequestSchema as q, stripPromptSkillMentions as qt, ApprovalDecisionSchema as r, SubmitThreadInputResponseSchema as rt, ChatMessagePromptDetailsSchema as s, ThreadGoalResponseSchema as st, AgentSkillSchema as t, StreamThreadRunEventSchema as tt, ChatMessageStateSchema as u, ThreadMessageDetailFieldSchema as ut, ErrorResponseSchema as v, VersionResponseSchema as vt, ListSkillsResponseSchema as w, WorkspaceFileContentResponseSchema as wt, IsoDateTimeSchema as x, WebPreviewTargetSchema as xt, ImageAttachmentUploadResponseSchema as y, WORKSPACE_PREVIEW_OPEN_PROTOCOL as yt, QueuedThreadInputActionResponseSchema as z, createOpenApiDocument as zt };
+export { SandboxModeSchema as $, PairResponseSchema as A, WorkspaceSelectionRequestSchema as At, QueuedThreadInputSchema as B, chatMessageDetailsFromPromptContext as Bt, ListQueuedThreadInputsResponseSchema as C, WorkspaceDirectoryEntrySchema as Ct, ListWorkspaceFilesResponseSchema as D, WorkspaceMarkdownPreviewTargetSchema as Dt, ListWorkspaceDirectoriesResponseSchema as E, WorkspaceGitActionResponseSchema as Et, PromptAttachmentSummarySchema as F, WorkspaceTerminalOutputResponseSchema as Ft, ResolveApprovalRequestSchema as G, promptSkillDisplayName as Gt, RateLimitWindowSchema as H, isPromptSkillMarkdownMention as Ht, PromptContextInputSchema as I, WorkspaceTerminalResizeRequestSchema as It, RunThreadResponseSchema as J, promptSkillMentionTextCandidates as Jt, ResolveApprovalResponseSchema as K, promptSkillMentionLabel as Kt, PromptContextSchema as L, WorkspaceTerminalSessionResponseSchema as Lt, PendingInputRequestQuestionSchema as M, WorkspaceTailscaleServeResponseSchema as Mt, PendingInputRequestSchema as N, WorkspaceTerminalInputRequestSchema as Nt, PairEncryptedPayloadSchema as O, WorkspacePreviewNavigationRequestSchema as Ot, PromptAttachmentSchema as P, WorkspaceTerminalOutputChunkSchema as Pt, RuntimePreferencesSchema as Q, PromptSkillSchema as R, WorkspaceTerminalStartRequestSchema as Rt, ListModelsResponseSchema as S, WorkspaceChangesResponseSchema as St, ListThreadsResponseSchema as T, WorkspaceFileMentionSchema as Tt, RateLimitsResponseSchema as U, normalizePromptContext as Ut, RateLimitBucketSchema as V, createOpenApiDocument as Vt, ReasoningEffortSchema as W, promptMarkdownWithSkills as Wt, RuntimePreferencesByWorkspacePathSchema as X, RuntimeModeSchema as Y, stripPromptSkillMentions as Yt, RuntimePreferencesResponseSchema as Z, EncryptedPayloadSchema as _, UpdateWorkspaceFileContentRequestSchema as _t, ArchiveThreadResponseSchema as a, ThreadContextWindowResponseSchema as at, InterruptThreadRunResponseSchema as b, WORKSPACE_PREVIEW_TAB_VALUES as bt, ChatMessageRoleSchema as c, ThreadGoalSchema as ct, CheckoutWorkspaceBranchRequestSchema as d, ThreadMessageDetailResponseSchema as dt, StatusResponseSchema as et, CodexModelSchema as f, ThreadRunOptionsSchema as ft, CreateThreadResponseSchema as g, UpdateThreadGoalRequestSchema as gt, CreateThreadRequestSchema as h, UpdateRuntimePreferencesRequestSchema as ht, ApprovalModeSchema as i, ThreadCollaborationModeSchema as it, PendingInputRequestOptionSchema as j, WorkspaceTailscaleServeRequestSchema as jt, PairRequestSchema as k, WorkspacePreviewTabSchema as kt, ChatMessageSchema as l, ThreadGoalStatusSchema as lt, ContextWindowUsageSchema as m, ThreadSummarySchema as mt, AgentSkillSourceSchema as n, StreamThreadRunRequestSchema as nt, ChatMessageKindSchema as o, ThreadDetailResponseSchema as ot, CommitPushWorkspaceRequestSchema as p, ThreadStateSchema as pt, RunThreadRequestSchema as q, promptSkillMentionMarkdown as qt, ApprovalDecisionSchema as r, SubmitThreadInputResponseSchema as rt, ChatMessagePromptDetailsSchema as s, ThreadGoalResponseSchema as st, AgentSkillSchema as t, StreamThreadRunEventSchema as tt, ChatMessageStateSchema as u, ThreadMessageDetailFieldSchema as ut, ErrorResponseSchema as v, VersionResponseSchema as vt, ListSkillsResponseSchema as w, WorkspaceFileContentResponseSchema as wt, IsoDateTimeSchema as x, WebPreviewTargetSchema as xt, ImageAttachmentUploadResponseSchema as y, WORKSPACE_PREVIEW_OPEN_PROTOCOL as yt, QueuedThreadInputActionResponseSchema as z, apiPaths as zt };

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { Lt as apiPaths } from "./api-schema2.js";
+import { zt as apiPaths } from "./api-schema2.js";
 import { n as codexRelayHome, o as getConnectUrlGuidance, r as legacyCodexRelayDataPath, s as createTursoPairingSessionStore, t as codexRelayDataPath } from "./paths.js";
 import { Command } from "@commander-js/extra-typings";
 import qrcode from "qrcode-terminal";

package/dist/paths.js

@@ -252,7 +252,7 @@ function resultRows(result) {
 function getConnectUrlGuidance(url) {
 	const host = parseUrlHost(url);
 	if (!host) return;
-	if (isLocalhost(host) || isUnspecifiedHost(host)) return "This address is only reachable from this computer. Use a same-Wi-Fi address, Tailscale, or CODEX_RELAY_PUBLIC_URL for mobile pairing.";
+	if (isLocalhost(host) || isUnspecifiedHost(host)) return "This address is only reachable from this computer. Use a same-Wi-Fi address or Tailscale for mobile pairing.";
 	if (isTailscaleHost(host)) return "Using Tailscale. Keep Tailscale connected on both this computer and the phone.";
 	if (isPrivateIPv4Host(host) || isLocalIPv6Host(host)) return "Using a local Wi-Fi/LAN address. Keep the phone and computer on the same network; if pairing is flaky, try Tailscale.";
 	return "Using a configured or public address. Make sure the phone can reach it before pairing.";
@@ -269,7 +269,6 @@ function createPairingQrPayload(details) {
 }
 function getConnectUrlCandidates(details) {
 	return dedupeCandidates([
-		...configuredConnectUrlCandidates(),
 		...tailscaleConnectUrlCandidates(details.port),
 		...localNetworkConnectUrlCandidates(details.port),
 		{
@@ -289,13 +288,6 @@ function normalizeUrl(value) {
 		return;
 	}
 }
-function configuredConnectUrlCandidates() {
-	const configuredUrl = normalizeUrl(process.env.CODEX_RELAY_PUBLIC_URL);
-	return configuredUrl ? [{
-		label: "Configured",
-		url: configuredUrl
-	}] : [];
-}
 function tailscaleConnectUrlCandidates(port) {
 	const status = getTailscaleStatus();
 	const candidates = [];

package/dist/src.js

@@ -1,10 +1,10 @@
-import { A as PairResponseSchema, C as ListQueuedThreadInputsResponseSchema, D as ListWorkspaceFilesResponseSchema, E as ListWorkspaceDirectoriesResponseSchema, Et as WorkspaceGitActionResponseSchema, Ft as WorkspaceTerminalSessionResponseSchema, G as ResolveApprovalRequestSchema, Ht as promptMarkdownWithSkills, It as WorkspaceTerminalStartRequestSchema, K as ResolveApprovalResponseSchema, Lt as apiPaths, Nt as WorkspaceTerminalOutputResponseSchema, Pt as WorkspaceTerminalResizeRequestSchema, Q as RuntimePreferencesSchema, Rt as chatMessageDetailsFromPromptContext, S as ListModelsResponseSchema, St as WorkspaceChangesResponseSchema, T as ListThreadsResponseSchema, U as RateLimitsResponseSchema, Vt as normalizePromptContext, X as RuntimePreferencesByWorkspacePathSchema, Z as RuntimePreferencesResponseSchema, _ as EncryptedPayloadSchema, _t as UpdateWorkspaceFileContentRequestSchema, a as ArchiveThreadResponseSchema, at as ThreadContextWindowResponseSchema, b as InterruptThreadRunResponseSchema, ct as ThreadGoalSchema, d as CheckoutWorkspaceBranchRequestSchema, dt as ThreadMessageDetailResponseSchema, et as StatusResponseSchema, gt as UpdateThreadGoalRequestSchema, h as CreateThreadRequestSchema, ht as UpdateRuntimePreferencesRequestSchema, jt as WorkspaceTerminalInputRequestSchema, k as PairRequestSchema, l as ChatMessageSchema, lt as ThreadGoalStatusSchema, m as ContextWindowUsageSchema, mt as ThreadSummarySchema, nt as StreamThreadRunRequestSchema, ot as ThreadDetailResponseSchema, p as CommitPushWorkspaceRequestSchema, q as RunThreadRequestSchema, qt as stripPromptSkillMentions, rt as SubmitThreadInputResponseSchema, st as ThreadGoalResponseSchema, tt as StreamThreadRunEventSchema, ut as ThreadMessageDetailFieldSchema, vt as VersionResponseSchema, w as ListSkillsResponseSchema, wt as WorkspaceFileContentResponseSchema, y as ImageAttachmentUploadResponseSchema, z as QueuedThreadInputActionResponseSchema, zt as createOpenApiDocument } from "./api-schema2.js";
+import { A as PairResponseSchema, Bt as chatMessageDetailsFromPromptContext, C as ListQueuedThreadInputsResponseSchema, D as ListWorkspaceFilesResponseSchema, E as ListWorkspaceDirectoriesResponseSchema, Et as WorkspaceGitActionResponseSchema, Ft as WorkspaceTerminalOutputResponseSchema, G as ResolveApprovalRequestSchema, It as WorkspaceTerminalResizeRequestSchema, K as ResolveApprovalResponseSchema, Lt as WorkspaceTerminalSessionResponseSchema, Mt as WorkspaceTailscaleServeResponseSchema, Nt as WorkspaceTerminalInputRequestSchema, Q as RuntimePreferencesSchema, Rt as WorkspaceTerminalStartRequestSchema, S as ListModelsResponseSchema, St as WorkspaceChangesResponseSchema, T as ListThreadsResponseSchema, U as RateLimitsResponseSchema, Ut as normalizePromptContext, Vt as createOpenApiDocument, Wt as promptMarkdownWithSkills, X as RuntimePreferencesByWorkspacePathSchema, Yt as stripPromptSkillMentions, Z as RuntimePreferencesResponseSchema, _ as EncryptedPayloadSchema, _t as UpdateWorkspaceFileContentRequestSchema, a as ArchiveThreadResponseSchema, at as ThreadContextWindowResponseSchema, b as InterruptThreadRunResponseSchema, ct as ThreadGoalSchema, d as CheckoutWorkspaceBranchRequestSchema, dt as ThreadMessageDetailResponseSchema, et as StatusResponseSchema, gt as UpdateThreadGoalRequestSchema, h as CreateThreadRequestSchema, ht as UpdateRuntimePreferencesRequestSchema, jt as WorkspaceTailscaleServeRequestSchema, k as PairRequestSchema, l as ChatMessageSchema, lt as ThreadGoalStatusSchema, m as ContextWindowUsageSchema, mt as ThreadSummarySchema, nt as StreamThreadRunRequestSchema, ot as ThreadDetailResponseSchema, p as CommitPushWorkspaceRequestSchema, q as RunThreadRequestSchema, rt as SubmitThreadInputResponseSchema, st as ThreadGoalResponseSchema, tt as StreamThreadRunEventSchema, ut as ThreadMessageDetailFieldSchema, vt as VersionResponseSchema, w as ListSkillsResponseSchema, wt as WorkspaceFileContentResponseSchema, y as ImageAttachmentUploadResponseSchema, z as QueuedThreadInputActionResponseSchema, zt as apiPaths } from "./api-schema2.js";
 import { a as getConnectUrlCandidates, i as createPairingQrPayload, o as getConnectUrlGuidance, r as legacyCodexRelayDataPath, s as createTursoPairingSessionStore, t as codexRelayDataPath } from "./paths.js";
 import { createRequire } from "node:module";
 import qrcode from "qrcode-terminal";
 import { execFile, spawn } from "node:child_process";
 import fs, { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
-import { access, appendFile, copyFile, mkdir, open, readFile, readdir, stat, writeFile } from "node:fs/promises";
+import { access, appendFile, copyFile, mkdir, open, readFile, readdir, realpath, stat, writeFile } from "node:fs/promises";
 import path, { basename, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { z } from "zod";
@@ -728,8 +728,17 @@ async function listAvailableSkills(options) {
 }
 async function findSkillFiles(root) {
 	const found = [];
+	const visitedDirectories = /* @__PURE__ */ new Set();
 	async function walk(path, depth) {
 		if (depth < 0) return;
+		let realDirectoryPath;
+		try {
+			realDirectoryPath = await realpath(path);
+		} catch {
+			return;
+		}
+		if (visitedDirectories.has(realDirectoryPath)) return;
+		visitedDirectories.add(realDirectoryPath);
 		let entries;
 		try {
 			entries = await readdir(path, { withFileTypes: true });
@@ -738,20 +747,34 @@ async function findSkillFiles(root) {
 		}
 		for (const entry of entries) {
 			const entryPath = join(path, entry.name);
-			if (entry.isFile() && entry.name === "SKILL.md") {
+			const kind = await directoryEntryKind(entry, entryPath);
+			if (kind === "file" && entry.name === "SKILL.md") {
 				found.push({
 					...root,
 					path: entryPath
 				});
 				continue;
 			}
-			if (!entry.isDirectory() || entry.name === "node_modules") continue;
+			if (kind !== "directory" || entry.name === "node_modules") continue;
 			await walk(entryPath, depth - 1);
 		}
 	}
 	await walk(root.path, root.maxDepth);
 	return found;
 }
+async function directoryEntryKind(entry, entryPath) {
+	if (entry.isFile()) return "file";
+	if (entry.isDirectory()) return "directory";
+	if (!entry.isSymbolicLink()) return null;
+	try {
+		const target = await stat(entryPath);
+		if (target.isFile()) return "file";
+		if (target.isDirectory()) return "directory";
+	} catch {
+		return null;
+	}
+	return null;
+}
 async function readSkill(entry) {
 	let markdown;
 	try {
@@ -777,7 +800,7 @@ async function readSkill(entry) {
 }
 function parseSkillMarkdown(markdown) {
 	const frontmatter = parseFrontmatter(markdown);
-	const heading = markdown.match(/^#\s+(.+)$/m)?.[1]?.trim();
+	const heading = firstMarkdownHeading(markdownBody(markdown));
 	return {
 		description: frontmatter.description,
 		displayName: heading ? cleanHeading(heading) : void 0,
@@ -789,13 +812,59 @@ function parseFrontmatter(markdown) {
 	const end = markdown.indexOf("\n---", 4);
 	if (end < 0) return {};
 	const fields = {};
-	for (const line of markdown.slice(4, end).split("\n")) {
-		const match = line.match(/^([A-Za-z0-9_-]+):\s*(.*)$/);
+	const lines = markdown.slice(4, end).split("\n");
+	for (let index = 0; index < lines.length; index += 1) {
+		const match = lines[index].match(/^([A-Za-z0-9_-]+):\s*(.*)$/);
 		if (!match) continue;
-		fields[match[1]] = unquoteYamlScalar(match[2].trim());
+		const key = match[1];
+		const value = match[2].trim();
+		if (isBlockScalar(value)) {
+			const blockLines = [];
+			while (index + 1 < lines.length && (lines[index + 1].trim() === "" || /^\s/.test(lines[index + 1]))) {
+				index += 1;
+				blockLines.push(lines[index].replace(/^\s+/, ""));
+			}
+			fields[key] = formatBlockScalar(value, blockLines);
+			continue;
+		}
+		fields[key] = unquoteYamlScalar(value);
 	}
 	return fields;
 }
+function isBlockScalar(value) {
+	return [
+		"|",
+		"|-",
+		"|+",
+		">",
+		">-",
+		">+"
+	].includes(value);
+}
+function formatBlockScalar(marker, lines) {
+	const trimmedLines = lines.map((line) => line.trimEnd());
+	if (marker.startsWith("|")) return trimmedLines.join("\n").trim();
+	return trimmedLines.map((line) => line.trim()).filter(Boolean).join(" ");
+}
+function markdownBody(markdown) {
+	if (!markdown.startsWith("---\n")) return markdown;
+	const end = markdown.indexOf("\n---", 4);
+	if (end < 0) return markdown;
+	return markdown.slice(end + 4).replace(/^\r?\n/, "");
+}
+function firstMarkdownHeading(markdown) {
+	let fence;
+	for (const line of markdown.split("\n")) {
+		const fenceMatch = line.match(/^\s*(```|~~~)/);
+		if (fenceMatch) {
+			fence = fence ? void 0 : fenceMatch[1];
+			continue;
+		}
+		if (fence) continue;
+		const heading = line.match(/^#\s+(.+)$/)?.[1]?.trim();
+		if (heading) return heading;
+	}
+}
 function unquoteYamlScalar(value) {
 	if (value.startsWith("\"") && value.endsWith("\"") || value.startsWith("'") && value.endsWith("'")) return value.slice(1, -1);
 	return value;
@@ -828,6 +897,102 @@ function dedupe(items, keyFor) {
 	});
 }
 //#endregion
+//#region src/tailscale-serve.ts
+var TailscaleServeInvalidUrlError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "TailscaleServeInvalidUrlError";
+	}
+};
+var TailscaleServeCommandError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "TailscaleServeCommandError";
+	}
+};
+const execFileAsync$1 = promisify(execFile);
+const tailscaleServeOptions = {
+	maxBuffer: 1024 * 1024,
+	timeout: 15e3
+};
+const tailscaleServeUrlPattern = /https:\/\/[^\s]+\.ts\.net\b[^\s]*/;
+function parseTailscaleServePreviewUrl(url) {
+	let parsedUrl;
+	try {
+		parsedUrl = new URL(url);
+	} catch {
+		throw new TailscaleServeInvalidUrlError("Preview URL must be a valid URL.");
+	}
+	if (parsedUrl.protocol !== "http:") throw new TailscaleServeInvalidUrlError("Preview URL must use HTTP.");
+	if (!parsedUrl.port) throw new TailscaleServeInvalidUrlError("Preview URL must include an explicit port.");
+	const port = Number(parsedUrl.port);
+	if (!Number.isInteger(port) || port < 1 || port > 65535) throw new TailscaleServeInvalidUrlError("Preview URL port must be between 1 and 65535.");
+	if (!isAllowedTailscaleHost(parsedUrl.hostname)) throw new TailscaleServeInvalidUrlError("Preview URL must use a Tailscale 100.64.0.0/10 or .ts.net host.");
+	return {
+		port,
+		sourceUrl: parsedUrl.href
+	};
+}
+async function startTailscaleServeForPreviewUrl(input) {
+	const preview = parseTailscaleServePreviewUrl(input.url);
+	const execFile = input.execFile ?? defaultExecFile;
+	let result;
+	try {
+		result = await execFile("tailscale", [
+			"serve",
+			"--bg",
+			String(preview.port)
+		], tailscaleServeOptions);
+	} catch (error) {
+		throw new TailscaleServeCommandError(errorMessage$1(error));
+	}
+	const serveUrl = `${result.stdout}\n${result.stderr}`.match(tailscaleServeUrlPattern)?.[0];
+	if (!serveUrl) throw new TailscaleServeCommandError("Tailscale Serve did not report a .ts.net HTTPS URL.");
+	return {
+		port: preview.port,
+		url: serveUrl
+	};
+}
+async function defaultExecFile(file, args, options) {
+	const result = await execFileAsync$1(file, [...args], options);
+	return {
+		stderr: result.stderr,
+		stdout: result.stdout
+	};
+}
+function isAllowedTailscaleHost(hostname) {
+	const lowerHostname = hostname.toLowerCase();
+	return lowerHostname.endsWith(".ts.net") || isTailscaleIpv4Host(lowerHostname);
+}
+function isTailscaleIpv4Host(hostname) {
+	const parts = hostname.split(".");
+	if (parts.length !== 4) return false;
+	const octets = parts.map((part) => Number(part));
+	if (!octets.every((octet) => Number.isInteger(octet) && octet >= 0 && octet <= 255)) return false;
+	const first = octets[0];
+	const second = octets[1];
+	return first === 100 && second !== void 0 && second >= 64 && second <= 127;
+}
+function errorMessage$1(error) {
+	return error instanceof Error ? error.message : "Tailscale Serve command failed.";
+}
+//#endregion
+//#region src/workspace-terminal-shell.ts
+function resolveWorkspaceTerminalShell(input) {
+	const env = input?.env ?? process.env;
+	if ((input?.platform ?? process.platform) === "win32") return {
+		args: [],
+		command: shellEnvValue(env.COMSPEC) || "powershell.exe"
+	};
+	return {
+		args: ["-l"],
+		command: shellEnvValue(env.SHELL) || "/bin/sh"
+	};
+}
+function shellEnvValue(value) {
+	return value?.trim() ?? "";
+}
+//#endregion
 //#region src/app.ts
 const defaultWorkspacePath = process.cwd();
 const defaultCodexModel = "gpt-5.5";
@@ -1222,6 +1387,19 @@ function createApp(options = {}) {
 			return secureJson(c, options.pairing, secureSessionsByTokenHash, apiError("workspace_terminal_start_failed", errorMessage(error)), 400);
 		}
 	});
+	app.post(apiPaths.workspaceTailscaleServe, async (c) => {
+		const parsed = await parseRequestJson(c, options.pairing, secureSessionsByTokenHash, WorkspaceTailscaleServeRequestSchema);
+		if (!parsed.success) return secureJson(c, options.pairing, secureSessionsByTokenHash, validationError(parsed.error), 400);
+		try {
+			const serve = await (options.tailscaleServeForPreviewUrl ?? startTailscaleServeForPreviewUrl)({ url: parsed.data.url });
+			const response = WorkspaceTailscaleServeResponseSchema.parse(serve);
+			return secureJson(c, options.pairing, secureSessionsByTokenHash, response);
+		} catch (error) {
+			const status = error instanceof TailscaleServeInvalidUrlError ? 400 : 502;
+			const code = error instanceof TailscaleServeInvalidUrlError ? "invalid_tailscale_preview_url" : "tailscale_serve_failed";
+			return secureJson(c, options.pairing, secureSessionsByTokenHash, apiError(code, errorMessage(error)), status);
+		}
+	});
 	app.get("/v1/workspace/terminal/sessions/:sessionId/output", async (c) => {
 		const session = workspaceTerminalSessions.get(c.req.param("sessionId"));
 		if (!session) return secureJson(c, options.pairing, secureSessionsByTokenHash, apiError("workspace_terminal_not_found", "Terminal session was not found."), 404);
@@ -5532,8 +5710,8 @@ async function git(cwd, args) {
 function createWorkspaceTerminalSession(input) {
 	const sessionId = randomUUID();
 	const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-	const shell = process.env.SHELL || "/bin/sh";
-	const child = pty.spawn(shell, ["-l"], {
+	const shell = resolveWorkspaceTerminalShell();
+	const child = pty.spawn(shell.command, [...shell.args], {
 		cols: input.cols,
 		cwd: input.cwd,
 		env: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-relay",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "Local Codex Relay CLI bridge for the Codex Relay mobile app.",
   "license": "Apache-2.0",
   "repository": {

package/src/api-schema.ts

@@ -464,6 +464,15 @@ export const WorkspaceTerminalResizeRequestSchema = z.object({
   rows: z.number().int().min(2).max(120),
 });
 
+export const WorkspaceTailscaleServeRequestSchema = z.object({
+  url: z.string().url(),
+});
+
+export const WorkspaceTailscaleServeResponseSchema = z.object({
+  port: z.number().int().positive(),
+  url: z.string().url(),
+});
+
 export const PairRequestSchema = z.object({
   clientSessionId: z.string().trim().min(1).max(120).optional(),
   clientName: z.string().trim().min(1).max(80).optional(),
@@ -762,6 +771,8 @@ export type WorkspaceTerminalSessionResponse = z.infer<
 export type WorkspaceTerminalOutputResponse = z.infer<typeof WorkspaceTerminalOutputResponseSchema>;
 export type WorkspaceTerminalInputRequest = z.infer<typeof WorkspaceTerminalInputRequestSchema>;
 export type WorkspaceTerminalResizeRequest = z.infer<typeof WorkspaceTerminalResizeRequestSchema>;
+export type WorkspaceTailscaleServeRequest = z.infer<typeof WorkspaceTailscaleServeRequestSchema>;
+export type WorkspaceTailscaleServeResponse = z.infer<typeof WorkspaceTailscaleServeResponseSchema>;
 export type WebPreviewTarget = z.infer<typeof WebPreviewTargetSchema>;
 export type PairRequest = z.infer<typeof PairRequestSchema>;
 export type PairResponse = z.infer<typeof PairResponseSchema>;
@@ -1024,6 +1035,7 @@ export const apiPaths = {
     `/v1/workspace/terminal/sessions/${encodeURIComponent(sessionId)}/output/stream`,
   workspaceTerminalResize: (sessionId: string) =>
     `/v1/workspace/terminal/sessions/${encodeURIComponent(sessionId)}/resize`,
+  workspaceTailscaleServe: "/v1/workspace/tailscale/serve",
   imageAttachments: "/v1/attachments/images",
   imageAttachment: (attachmentId: string) =>
     `/v1/attachments/images/${encodeURIComponent(attachmentId)}`,
@@ -1170,6 +1182,17 @@ export function createOpenApiDocument() {
           },
         },
       },
+      "/v1/workspace/tailscale/serve": {
+        post: {
+          summary: "Start Tailscale Serve for a workspace preview URL",
+          requestBody: jsonRequest("WorkspaceTailscaleServeRequest"),
+          responses: {
+            "200": jsonResponse("WorkspaceTailscaleServeResponse"),
+            "400": jsonResponse("ErrorResponse"),
+            "502": jsonResponse("ErrorResponse"),
+          },
+        },
+      },
       "/v1/threads/{threadId}/runs": {
         post: {
           summary: "Run a prompt on a Codex thread",
@@ -1528,6 +1551,21 @@ export function createOpenApiDocument() {
             workspacePath: { type: "string" },
           },
         },
+        WorkspaceTailscaleServeRequest: {
+          type: "object",
+          required: ["url"],
+          properties: {
+            url: { type: "string", format: "uri" },
+          },
+        },
+        WorkspaceTailscaleServeResponse: {
+          type: "object",
+          required: ["url", "port"],
+          properties: {
+            url: { type: "string", format: "uri" },
+            port: { type: "integer", minimum: 1 },
+          },
+        },
         CreateThreadRequest: {
           type: "object",
           properties: {