codexuse-cli 5.1.1 → 5.1.5

package/dist/index.js

@@ -4327,9 +4327,19 @@ async function requestGumroadVerify(licenseKey, mode) {
     clearTimeout(timeout);
   }
 }
-function normalizeVerificationResult(response) {
+function isExplicitRevocationMessage(message) {
+  if (!message) {
+    return false;
+  }
+  const normalized = message.toLowerCase();
+  return normalized.includes("revoked") || normalized.includes("refunded") || normalized.includes("chargeback") || normalized.includes("disabled") || normalized.includes("subscription") || normalized.includes("no longer active");
+}
+function normalizeVerificationResult(response, mode) {
   if (!response.success) {
     const message = response.message ?? "License key is invalid.";
+    if (mode === "refresh" && !isExplicitRevocationMessage(message)) {
+      throw new LicenseError(message, "network");
+    }
     throw new LicenseError(message, "invalid");
   }
   if (!response.purchase) {
@@ -4502,7 +4512,7 @@ var LicenseService = class {
       try {
         const result = await requestGumroadVerify(workingStored.licenseKey, "refresh");
         ensureWithinUseLimit(result);
-        const normalized = normalizeVerificationResult(result);
+        const normalized = normalizeVerificationResult(result, "refresh");
         const updated = {
           licenseKey: workingStored.licenseKey,
           purchaseEmail: normalized.email,
@@ -4561,7 +4571,7 @@ var LicenseService = class {
     const digest = import_node_crypto5.default.createHash("sha256").update(trimmed).digest("hex");
     const result = await requestGumroadVerify(trimmed, "activation");
     ensureWithinUseLimit(result);
-    const normalized = normalizeVerificationResult(result);
+    const normalized = normalizeVerificationResult(result, "activation");
     const stored = {
       licenseKey: trimmed,
       purchaseEmail: normalized.email,
@@ -4670,6 +4680,10 @@ function resolveProfileIdentityKey(profile) {
   return profileName ? `profile:${profileName}` : null;
 }
 function resolveProfileIdentityKeyFromProfile(profile) {
+  const rateLimitKey = normalizeValue(profile.rateLimitKey);
+  if (rateLimitKey) {
+    return rateLimitKey;
+  }
   return resolveProfileIdentityKey(profile) ?? `profile:${profile.name}`;
 }
 
@@ -4873,6 +4887,17 @@ function buildCodexCommand(binaryPath, args, env) {
   };
 }
 
+// ../../packages/runtime-codex/src/cli/env.ts
+function buildCodexChildEnv(overrides = {}) {
+  const env = { ...process.env };
+  for (const key of Object.keys(env)) {
+    if (key.startsWith("OPENAI_")) {
+      delete env[key];
+    }
+  }
+  return { ...env, ...overrides };
+}
+
 // ../../packages/shared/src/core/logger.ts
 var isTestEnv = process.env.NODE_ENV === "test" || process.env.VITEST === "true" || process.env.VITEST === "1";
 function isMocked(fn) {
@@ -5715,14 +5740,13 @@ async function fetchRateLimitsViaRpc(envOverride, options = {}) {
     });
     return null;
   }
-  const childEnv = {
-    ...process.env,
+  const childEnv = buildCodexChildEnv({
     ...envOverride ?? {},
     HOME: tempHome,
     CODEX_HOME: tempHome,
     CODEX_TELEMETRY_LABEL: "codex-rpc",
     ELECTRON_RUN_AS_NODE: "1"
-  };
+  });
   const command = buildCodexCommand(
     binaryPath,
     ["-s", "read-only", "-a", "untrusted", "app-server"],
@@ -5825,14 +5849,13 @@ async function activateResetWindowViaRpc(envOverride, options = {}) {
     });
     return { status: "skipped", reason: "auth-missing" };
   }
-  const childEnv = {
-    ...process.env,
+  const childEnv = buildCodexChildEnv({
     ...envOverride ?? {},
     HOME: tempHome,
     CODEX_HOME: tempHome,
     CODEX_TELEMETRY_LABEL: "codex-reset-activation",
     ELECTRON_RUN_AS_NODE: "1"
-  };
+  });
   const command = buildCodexCommand(
     binaryPath,
     ["-s", "read-only", "-a", "untrusted", "app-server"],
@@ -6155,6 +6178,7 @@ var ProfileManager = class {
       displayName: record.displayName ?? null,
       data: record.data,
       metadata: record.metadata,
+      rateLimitKey: record.rateLimitKey ?? null,
       accountId: record.accountId ?? null,
       workspaceId: record.workspaceId ?? null,
       workspaceName: record.workspaceName ?? null,
@@ -6172,11 +6196,14 @@ var ProfileManager = class {
     if (!dataRaw || typeof dataRaw !== "object") {
       return null;
     }
-    return {
+    const data = cloneJson(dataRaw);
+    const metadata = raw.metadata ? cloneJson(raw.metadata) : void 0;
+    const fallbackRecord = {
       name: profileName,
       displayName: typeof raw.displayName === "string" ? raw.displayName : null,
-      data: cloneJson(dataRaw),
-      metadata: raw.metadata ? cloneJson(raw.metadata) : void 0,
+      data,
+      metadata,
+      rateLimitKey: typeof raw.rateLimitKey === "string" ? raw.rateLimitKey : null,
       accountId: typeof raw.accountId === "string" ? raw.accountId : null,
       workspaceId: typeof raw.workspaceId === "string" ? raw.workspaceId : null,
       workspaceName: typeof raw.workspaceName === "string" ? raw.workspaceName : null,
@@ -6185,6 +6212,10 @@ var ProfileManager = class {
       createdAt: typeof raw.createdAt === "string" ? raw.createdAt : null,
       updatedAt: typeof raw.updatedAt === "string" ? raw.updatedAt : null
     };
+    return {
+      ...fallbackRecord,
+      rateLimitKey: fallbackRecord.rateLimitKey ?? this.resolveProfileIdentityFromRecord(fallbackRecord)
+    };
   }
   async readProfilesStateSource() {
     const state = await getAppState();
@@ -6234,10 +6265,11 @@ var ProfileManager = class {
   }
   rateLimitSnapshotKeysForRecord(record) {
     return Array.from(
-      /* @__PURE__ */ new Set([
+      new Set([
         this.resolveProfileIdentityFromRecord(record),
+        record.rateLimitKey,
         resolveFallbackAccountKey(record.name)
-      ])
+      ].filter((key) => Boolean(key)))
     );
   }
   rateLimitSnapshotKeysForStateMap(map) {
@@ -6950,6 +6982,7 @@ var ProfileManager = class {
       displayName,
       data,
       metadata: resolvedMetadata,
+      rateLimitKey: existingRecord?.rateLimitKey ?? this.resolveProfileIdentityFromData(resolvedName, data, resolvedMetadata),
       accountId,
       workspaceId: data.workspace_id ?? workspaceId,
       workspaceName: data.workspace_name ?? workspaceName,
@@ -6968,6 +7001,7 @@ var ProfileManager = class {
       createdAt: row.createdAt ?? void 0,
       authMethod: row.authMethod ?? void 0,
       accountId: row.accountId ?? void 0,
+      rateLimitKey: row.rateLimitKey ?? void 0,
       workspaceId: row.workspaceId ?? void 0,
       workspaceName: row.workspaceName ?? void 0,
       metadata: row.metadata
@@ -7004,6 +7038,7 @@ var ProfileManager = class {
       name,
       displayName: fallback?.displayName ?? name,
       isValid: Boolean(data && Object.keys(data).length > 0),
+      rateLimitKey: fallback?.rateLimitKey,
       accountId,
       workspaceId,
       workspaceName,
@@ -7395,11 +7430,10 @@ var ProfileManager = class {
     const codexFormat = this.convertToCodexFormat(profileData);
     const profileHome = await this.prepareProfileHome(profileName, codexFormat);
     const authPath = import_path.default.join(profileHome, "auth.json");
-    const envOverrides = {
-      ...process.env,
+    const envOverrides = buildCodexChildEnv({
       HOME: profileHome,
       CODEX_HOME: profileHome
-    };
+    });
     try {
       return await action(envOverrides);
     } finally {
@@ -7449,11 +7483,10 @@ var ProfileManager = class {
         const profileHome = await this.prepareProfileHome(profileName, codexFormat);
         return {
           profileHome,
-          env: {
-            ...process.env,
+          env: buildCodexChildEnv({
             HOME: profileHome,
             CODEX_HOME: profileHome
-          }
+          })
         };
       })
     );
@@ -7698,13 +7731,13 @@ var ProfileManager = class {
           profileName,
           async (env) => {
             try {
-              const oauthSnapshot = await fetchRateLimitsViaOAuth(env);
-              if (oauthSnapshot) {
-                return oauthSnapshot;
+              const rpcSnapshot = await fetchRateLimitsViaRpc(env, { codexPath: options.codexPath });
+              if (rpcSnapshot) {
+                return rpcSnapshot;
               }
             } catch {
             }
-            return fetchRateLimitsViaRpc(env, { codexPath: options.codexPath });
+            return fetchRateLimitsViaOAuth(env);
           },
           { syncFromActiveAuthBeforeAction: false }
         )
@@ -8049,6 +8082,7 @@ var ProfileManager = class {
           displayName: typeof candidate.displayName === "string" ? candidate.displayName : null,
           data,
           metadata,
+          rateLimitKey: this.resolveProfileIdentityFromData(name, data, metadata),
           accountId: typeof candidate.accountId === "string" ? candidate.accountId : null,
           workspaceId: typeof candidate.workspaceId === "string" ? candidate.workspaceId : null,
           workspaceName: typeof candidate.workspaceName === "string" ? candidate.workspaceName : null,
@@ -9611,6 +9645,7 @@ var import_node_path10 = __toESM(require("path"), 1);
 var import_node_fs6 = require("fs");
 var import_node_path9 = __toESM(require("path"), 1);
 var ROLLOUT_DIRS = ["sessions", "archived_sessions"];
+var SQLITE_EXTENSIONS = /* @__PURE__ */ new Set([".db", ".sqlite", ".sqlite3"]);
 function isRecord5(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
@@ -9729,8 +9764,91 @@ function resolveRolloutPath(profileHome, rolloutPath) {
   }
   return import_node_path9.default.isAbsolute(rolloutPath) ? rolloutPath : import_node_path9.default.join(profileHome, rolloutPath);
 }
-async function readThreadRecordFromStateDb(profileHome, threadId) {
-  const dbPath = import_node_path9.default.join(profileHome, "state_5.sqlite");
+async function collectSessionDatabasePaths(profileHome) {
+  const paths = [];
+  const sqliteDir = import_node_path9.default.join(profileHome, "sqlite");
+  try {
+    const entries = await import_node_fs6.promises.readdir(sqliteDir, {
+      withFileTypes: true,
+      encoding: "utf8"
+    });
+    for (const entry of entries) {
+      if (!entry.isFile()) {
+        continue;
+      }
+      const entryName = String(entry.name);
+      if (SQLITE_EXTENSIONS.has(import_node_path9.default.extname(entryName))) {
+        paths.push(import_node_path9.default.join(sqliteDir, entryName));
+      }
+    }
+  } catch {
+  }
+  paths.sort((left, right) => {
+    const leftName = import_node_path9.default.basename(left);
+    const rightName = import_node_path9.default.basename(right);
+    if (leftName === "codex-dev.db" && rightName !== "codex-dev.db") return -1;
+    if (rightName === "codex-dev.db" && leftName !== "codex-dev.db") return 1;
+    return leftName.localeCompare(rightName);
+  });
+  const legacy = import_node_path9.default.join(profileHome, "state_5.sqlite");
+  if (!paths.includes(legacy)) {
+    paths.push(legacy);
+  }
+  return paths;
+}
+function tableColumns(db, table) {
+  try {
+    return new Set(
+      db.prepare(`PRAGMA table_info(${table})`).all().map((row) => isRecord5(row) ? recordString(row.name) : null).filter((name) => Boolean(name))
+    );
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
+function firstColumn(columns, names) {
+  return names.find((name) => columns.has(name)) ?? null;
+}
+function sqlColumnOrNull(column, alias) {
+  return column ? `${column} AS ${alias}` : `NULL AS ${alias}`;
+}
+function queryThreadRecordFromTable(db, profileHome, threadId, config) {
+  const columns = tableColumns(db, config.table);
+  const idColumn = firstColumn(columns, config.id);
+  if (!idColumn) {
+    return null;
+  }
+  const variants = threadIdVariants(threadId);
+  const placeholders = variants.map(() => "?").join(", ");
+  const orderByColumn = firstColumn(columns, [
+    "updated_at_ms",
+    "updated_at",
+    "created_at_ms",
+    "created_at"
+  ]);
+  const select = [
+    sqlColumnOrNull(firstColumn(columns, config.rolloutPath), "rollout_path"),
+    sqlColumnOrNull(firstColumn(columns, config.title), "title"),
+    sqlColumnOrNull(firstColumn(columns, config.cwd), "cwd"),
+    sqlColumnOrNull(firstColumn(columns, ["updated_at"]), "updated_at"),
+    sqlColumnOrNull(firstColumn(columns, ["updated_at_ms"]), "updated_at_ms"),
+    sqlColumnOrNull(firstColumn(columns, ["created_at_ms", "created_at"]), "created_at_ms")
+  ].join(", ");
+  const orderBy = orderByColumn ? ` ORDER BY ${orderByColumn} DESC, ${idColumn} DESC` : ` ORDER BY ${idColumn} DESC`;
+  const row = db.prepare(
+    `SELECT ${select} FROM ${config.table} WHERE ${idColumn} IN (${placeholders})${orderBy} LIMIT 1`
+  ).all(...variants).find(isRecord5);
+  if (!row) {
+    return null;
+  }
+  return {
+    rolloutPath: resolveRolloutPath(profileHome, recordString(row.rollout_path)),
+    title: recordString(row.title),
+    cwd: recordString(row.cwd),
+    updatedAt: recordString(row.updated_at),
+    updatedAtMs: normalizeTimestampMs(row.updated_at_ms) ?? normalizeTimestampMs(row.updated_at) ?? normalizeTimestampMs(row.created_at_ms)
+  };
+}
+async function readThreadRecordFromDb(profileHome, dbPath, threadId) {
   try {
     await import_node_fs6.promises.access(dbPath);
   } catch {
@@ -9739,42 +9857,28 @@ async function readThreadRecordFromStateDb(profileHome, threadId) {
   let db = null;
   try {
     db = await openReadonlyDatabase(dbPath);
-    const columns = new Set(
-      db.prepare("PRAGMA table_info(threads)").all().map((row2) => isRecord5(row2) ? recordString(row2.name) : null).filter((name) => Boolean(name))
-    );
-    const idColumn = columns.has("id") ? "id" : columns.has("thread_id") ? "thread_id" : null;
-    if (!idColumn) {
-      return null;
-    }
-    const variants = threadIdVariants(threadId);
-    const placeholders = variants.map(() => "?").join(", ");
-    const select = [
-      columns.has("rollout_path") ? "rollout_path AS rollout_path" : "NULL AS rollout_path",
-      columns.has("title") ? "title AS title" : "NULL AS title",
-      columns.has("cwd") ? "cwd AS cwd" : "NULL AS cwd",
-      columns.has("updated_at") ? "updated_at AS updated_at" : "NULL AS updated_at",
-      columns.has("updated_at_ms") ? "updated_at_ms AS updated_at_ms" : "NULL AS updated_at_ms",
-      columns.has("created_at_ms") ? "created_at_ms AS created_at_ms" : "NULL AS created_at_ms"
-    ].join(", ");
-    const orderByColumn = columns.has("updated_at_ms") ? "updated_at_ms" : columns.has("updated_at") ? "updated_at" : columns.has("created_at_ms") ? "created_at_ms" : null;
-    const orderBy = orderByColumn ? ` ORDER BY ${orderByColumn} DESC, ${idColumn} DESC` : ` ORDER BY ${idColumn} DESC`;
-    const rows = db.prepare(
-      `SELECT ${select} FROM threads WHERE ${idColumn} IN (${placeholders})${orderBy} LIMIT 1`
-    ).all(...variants);
-    const row = rows.find(isRecord5);
-    if (!row) {
-      return null;
+    for (const config of [
+      {
+        table: "threads",
+        id: ["id", "thread_id"],
+        title: ["title", "thread_title"],
+        cwd: ["cwd", "source_cwd"],
+        rolloutPath: ["rollout_path"]
+      },
+      {
+        table: "automation_runs",
+        id: ["thread_id", "id"],
+        title: ["thread_title", "title", "inbox_title"],
+        cwd: ["source_cwd", "cwd"],
+        rolloutPath: []
+      }
+    ]) {
+      const record = queryThreadRecordFromTable(db, profileHome, threadId, config);
+      if (record) {
+        return record;
+      }
     }
-    return {
-      rolloutPath: resolveRolloutPath(
-        profileHome,
-        recordString(row.rollout_path)
-      ),
-      title: recordString(row.title),
-      cwd: recordString(row.cwd),
-      updatedAt: recordString(row.updated_at),
-      updatedAtMs: normalizeTimestampMs(row.updated_at_ms) ?? normalizeTimestampMs(row.updated_at) ?? normalizeTimestampMs(row.created_at_ms)
-    };
+    return null;
   } catch {
     return null;
   } finally {
@@ -9782,9 +9886,16 @@ async function readThreadRecordFromStateDb(profileHome, threadId) {
   }
 }
 async function findOfficialCodexThreadRecord(profileHome, threadId) {
-  const stateRecord = await readThreadRecordFromStateDb(profileHome, threadId);
-  if (stateRecord) {
-    return stateRecord;
+  const records = [];
+  for (const dbPath of await collectSessionDatabasePaths(profileHome)) {
+    const stateRecord = await readThreadRecordFromDb(profileHome, dbPath, threadId);
+    if (stateRecord) {
+      records.push(stateRecord);
+    }
+  }
+  if (records.length > 0) {
+    records.sort((left, right) => (right.updatedAtMs ?? 0) - (left.updatedAtMs ?? 0));
+    return records[0] ?? null;
   }
   const rolloutMatch = await findRolloutFileByScan(profileHome, threadId);
   if (!rolloutMatch) {
@@ -10150,13 +10261,14 @@ async function readCdpTargets(port) {
   }
   throw lastError instanceof Error ? lastError : new Error("cdp-list-failed");
 }
-function pickCodexCdpTarget(targets) {
+function pickCodexCdpTarget(targets, options = {}) {
   const pages = targets.filter(
     (target) => target.webSocketDebuggerUrl && (target.type === "page" || target.type === "webview" || !target.type)
   );
-  return pages.find(
+  const codexPage = pages.find(
     (target) => `${target.title ?? ""} ${target.url ?? ""}`.toLowerCase().includes("codex")
-  ) ?? pages[0] ?? null;
+  ) ?? null;
+  return codexPage ?? (options.allowAnyPage === true ? pages[0] ?? null : null);
 }
 function buildCdpDevToolsUrl(port, target) {
   const frontendUrl = target.devtoolsFrontendUrl?.trim();
@@ -10500,6 +10612,8 @@ function buildInCodexStatusOverlayCssRules() {
     `${chip} .codexuse-handoff-hide{display:inline-flex;width:20px;height:20px;align-items:center;justify-content:center;margin-right:3px;border-radius:50%;color:var(--cu-muted);cursor:pointer;font-size:12px;line-height:1;}`,
     `${chip} .codexuse-handoff-hide:hover{background:var(--cu-border);color:var(--cu-fg,#ececf1);}`,
     `body>[data-radix-popper-content-wrapper],body>[data-floating-ui-portal]{z-index:2147483004!important;}`,
+    // Official Codex marks its titlebar draggable; injected controls must opt out.
+    `${id},${id} *,${chip},${chip} *,${picker},${picker} *{-webkit-app-region:no-drag;}`,
     // Hand-off account picker is a standalone body child (not inside the pill),
     // so the pill-scoped popover rules don't reach it — give it its own palette
     // + popover styling, mirroring the chip.
@@ -10881,6 +10995,7 @@ function createBridgeApplyQolExpression(settings) {
     const overlayPosKey = "codexuse:overlay:pos";
     const handoffHiddenKey = "codexuse:handoff:hidden";
     const handoffPosKey = "codexuse:handoff:pos:v2";
+    const defaultPosKey = "codexuse:overlay:top-default:v1";
     const readOverlayStore = (key) => {
       try {
         return window.localStorage.getItem(key);
@@ -10975,8 +11090,8 @@ function createBridgeApplyQolExpression(settings) {
     };
     const placeInitialOverlayPosition = (pill) => {
       const rect = pill.getBoundingClientRect();
-      const x = Math.round((window.innerWidth - rect.width) / 2);
-      const y = Math.max(72, Math.min(140, Math.round(window.innerHeight * 0.16)));
+      const x = Math.max(8, window.innerWidth - rect.width - 32);
+      const y = Math.max(96, Math.min(132, Math.round(window.innerHeight * 0.12)));
       placeOverlay(pill, x, y);
     };
     const rectsOverlap = (a, b, gap = 0) =>
@@ -10990,30 +11105,17 @@ function createBridgeApplyQolExpression(settings) {
       right: pos.x + rect.width,
       bottom: pos.y + rect.height
     });
-    const placeInitialHandoffPosition = (chip, anchorRect = null) => {
+    const placeInitialHandoffPosition = (chip) => {
       const rect = chip.getBoundingClientRect();
-      if (anchorRect && rect.width > 0 && rect.height > 0) {
-        const gap = 8;
-        const middleY = Math.round(anchorRect.top + (anchorRect.height - rect.height) / 2);
-        const candidates = [
-          { x: anchorRect.right + gap, y: middleY },
-          { x: anchorRect.left - rect.width - gap, y: middleY },
-          { x: anchorRect.right - rect.width, y: anchorRect.top - rect.height - gap },
-          { x: anchorRect.left, y: anchorRect.top - rect.height - gap },
-          { x: anchorRect.right - rect.width, y: anchorRect.bottom + gap }
-        ];
-        for (const candidate of candidates) {
-          const next = clampOverlayXY(chip, candidate.x, candidate.y);
-          if (!rectsOverlap(positionedRect(rect, next), anchorRect, 6)) {
-            placeOverlay(chip, next.x, next.y);
-            return;
-          }
-        }
-      }
-      const x = Math.max(8, window.innerWidth - rect.width - 16);
-      const y = Math.max(64, Math.min(128, Math.round(window.innerHeight * 0.14)));
+      const x = Math.round((window.innerWidth - rect.width) / 2);
+      const y = 14;
       placeOverlay(chip, x, y);
     };
+    if (readOverlayStore(defaultPosKey) !== "1") {
+      writeOverlayStore(overlayPosKey, null);
+      writeOverlayStore(handoffPosKey, null);
+      writeOverlayStore(defaultPosKey, "1");
+    }
     const setOverlayMessage = (value) => {
       const node = document.querySelector("#" + statusId + " [data-codexuse-action-status]");
       if (node) node.textContent = value || "";
@@ -11143,7 +11245,8 @@ function createBridgeApplyQolExpression(settings) {
           renderHandoff();
         }, true);
         document.body.appendChild(pill);
-        applyStoredOverlayPosition(pill);
+        if (hasStoredPosition) applyStoredOverlayPosition(pill);
+        else placeInitialOverlayPosition(pill);
         return true;
       }
       pill.dataset.open = currentAutoRollDecision || wasOpen || shouldShowIntro ? "true" : "false";
@@ -11448,6 +11551,8 @@ function createBridgeApplyQolExpression(settings) {
       if (shouldShowIntro) {
         placeInitialOverlayPosition(pill);
         writeOverlayStore(overlayIntroKey, "1");
+      } else if (!hasStoredPosition) {
+        placeInitialOverlayPosition(pill);
       } else {
         applyStoredOverlayPosition(pill);
       }
@@ -11692,18 +11797,18 @@ function createBridgeApplyQolExpression(settings) {
             const next = clampOverlayXY(chip, pos.x, pos.y);
             const chipRect = chip.getBoundingClientRect();
             if (rectsOverlap(positionedRect(chipRect, next), rect, 6)) {
-              placeInitialHandoffPosition(chip, rect);
+              placeInitialHandoffPosition(chip);
             } else {
               placeOverlay(chip, next.x, next.y);
             }
           } else {
-            placeInitialHandoffPosition(chip, rect);
+            placeInitialHandoffPosition(chip);
           }
         } catch {
-          placeInitialHandoffPosition(chip, rect);
+          placeInitialHandoffPosition(chip);
         }
       } else {
-        placeInitialHandoffPosition(chip, rect);
+        placeInitialHandoffPosition(chip);
       }
       if (wasOpen) openPicker();
       reportHandoff("rendered");
@@ -12055,11 +12160,23 @@ function createBridgeApplyPowerExpression(settings, settingsExpression) {
             || typeof item.name === "string"
           )
         );
-      const patchModelArray = (items, allowEmpty = false) => {
+      const modelLabelLooksKnown = (value) =>
+        typeof value === "string" && /(?:gpt|codex|chatgpt|claude|gemini|llama|mistral|qwen|deepseek|grok|davinci|\\bo[1-9]\\b)/i.test(value);
+      const objectArrayLooksModelLike = (items) =>
+        objectArrayLooksPatchable(items)
+        && items.some((item) =>
+          modelLabelLooksKnown(item.model)
+          || modelLabelLooksKnown(item.id)
+          || modelLabelLooksKnown(item.slug)
+          || modelLabelLooksKnown(item.name)
+          || modelLabelLooksKnown(item.displayName)
+          || modelLabelLooksKnown(item.title)
+        );
+      const patchModelArray = (items, allowEmpty = false, requireModelLike = false) => {
         if (!Array.isArray(items)) return false;
         let localChanged = false;
-        unhideArray(items);
         if (stringArrayLooksPatchable(items)) {
+          if (requireModelLike && !items.some(modelLabelLooksKnown)) return false;
           for (const model of modelWhitelistModels) {
             if (!items.includes(model)) {
               items.push(model);
@@ -12068,7 +12185,8 @@ function createBridgeApplyPowerExpression(settings, settingsExpression) {
           }
           return localChanged;
         }
-        if (objectArrayLooksPatchable(items, allowEmpty)) {
+        if (objectArrayLooksPatchable(items, allowEmpty) && (!requireModelLike || allowEmpty || objectArrayLooksModelLike(items))) {
+          unhideArray(items);
           const existing = new Set();
           for (const item of items) {
             existing.add(String(item.model || item.id || item.slug || item.name || ""));
@@ -12083,8 +12201,8 @@ function createBridgeApplyPowerExpression(settings, settingsExpression) {
         return localChanged;
       };
       if (patchModelArray(value.models, "defaultModel" in value || "availableModels" in value)) changed = true;
-      if (patchModelArray(value.data)) changed = true;
-      if (patchModelArray(value.result)) changed = true;
+      if (patchModelArray(value.data, false, true)) changed = true;
+      if (patchModelArray(value.result, false, true)) changed = true;
       if (patchModelArray(value.availableModels, true)) changed = true;
       if (patchModelArray(value.available_models, true)) changed = true;
       if (value.available_models instanceof Set) {
@@ -12201,11 +12319,23 @@ function createBridgeApplyPowerExpression(settings, settingsExpression) {
       return changed;
     };
     const reactFiberKeys = (element) => Object.keys(element || {}).filter((key) => key.startsWith("__reactFiber") || key.startsWith("__reactInternalInstance") || key.startsWith("__reactProps"));
+    const reactModelStatePatchSelector = "[role='menu'],[role='dialog'],[role='listbox'],[data-radix-popper-content-wrapper],[data-floating-ui-portal]";
+    const isWorkspaceChromeNode = (node) => {
+      if (!node || node.nodeType !== 1) return false;
+      if (node.closest?.("[data-app-action-sidebar-section-heading='Chats'],[data-app-action-sidebar-section-heading='Projects'],[data-app-action-sidebar-thread-id],[data-app-action-sidebar-project-row],[data-app-action-sidebar-project-id]")) {
+        return true;
+      }
+      return Boolean(node.closest?.("main aside"));
+    };
+    const reactModelStatePatchNodes = () => {
+      return Array.from(document.querySelectorAll(reactModelStatePatchSelector))
+        .filter((node) => node && !isWorkspaceChromeNode(node));
+    };
     const patchReactModelState = () => {
       if (!enabled.modelWhitelistUnlock) return false;
       try {
         const visited = new WeakSet();
-        const nodes = [document.body, ...Array.from(document.querySelectorAll("button,[role='menu'],[role='dialog'],[data-radix-popper-content-wrapper]"))].filter(Boolean);
+        const nodes = reactModelStatePatchNodes();
         let changed = false;
         for (const node of nodes.slice(0, 220)) {
           for (const key of reactFiberKeys(node)) {
@@ -12220,6 +12350,39 @@ function createBridgeApplyPowerExpression(settings, settingsExpression) {
         return false;
       }
     };
+    const installModelReactStateObserver = () => {
+      if (typeof state.cleanupModelReactStateObserver === "function") {
+        state.cleanupModelReactStateObserver();
+        state.cleanupModelReactStateObserver = null;
+      }
+      if (!enabled.modelWhitelistUnlock) return false;
+      let frame = 0;
+      const schedulePatch = () => {
+        if (frame) return;
+        frame = requestAnimationFrame(() => {
+          frame = 0;
+          patchReactModelState();
+        });
+      };
+      const isPatchableMutationNode = (node) => {
+        const element = node?.nodeType === 1 ? node : node?.parentElement;
+        return Boolean(
+          element?.matches?.(reactModelStatePatchSelector)
+          || element?.querySelector?.(reactModelStatePatchSelector)
+        );
+      };
+      const observer = new MutationObserver((mutations) => {
+        if (mutations.some((mutation) => Array.from(mutation.addedNodes).some(isPatchableMutationNode))) {
+          schedulePatch();
+        }
+      });
+      observer.observe(document.body, { childList: true, subtree: true });
+      state.cleanupModelReactStateObserver = () => {
+        observer.disconnect();
+        if (frame) cancelAnimationFrame(frame);
+      };
+      return true;
+    };
     const patchPluginContainer = (value, visited = new WeakSet(), depth = 0, inheritedMarketplaceName = null) => {
       if (!enabled.pluginMarketplaceUnlock || !value || typeof value !== "object" || visited.has(value) || depth > 4) return false;
       visited.add(value);
@@ -12763,6 +12926,7 @@ function createBridgeApplyPowerExpression(settings, settingsExpression) {
     const modelStatsigPatchApplied = enabled.modelWhitelistUnlock
       ? patchStatsigModelWhitelist()
       : false;
+    installModelReactStateObserver();
     const modelReactStatePatched = enabled.modelWhitelistUnlock
       ? patchReactModelState()
       : false;
@@ -13939,14 +14103,16 @@ async function reloadOfficialCodexBridgePage(debuggerUrl) {
     return false;
   }
 }
-async function probeOfficialCodexBridge(instance, forceInstall = false) {
+async function probeOfficialCodexBridge(instance, forceInstall = false, allowAnyPageTarget = false) {
   const checkedAt = Date.now();
   if (!instance.cdpPort) {
     return bridgeStateUnavailable();
   }
   try {
     const targets = await readCdpTargets(instance.cdpPort);
-    const target = pickCodexCdpTarget(targets);
+    const target = pickCodexCdpTarget(targets, {
+      allowAnyPage: allowAnyPageTarget
+    });
     if (!target?.webSocketDebuggerUrl) {
       return bridgeStateUnhealthy(
         instance.cdpPort,
@@ -14016,14 +14182,16 @@ async function probeOfficialCodexBridge(instance, forceInstall = false) {
     );
   }
 }
-async function reapplyDesiredBridgeSettings(instance, bridge) {
+async function reapplyDesiredBridgeSettings(instance, bridge, allowAnyPageTarget = false) {
   const shouldClearPowerRuntime = !instance.desiredPowerSettings && hasEnabledBridgePowerRuntime(bridge.bridgePower);
   if (bridge.bridgeStatus !== "healthy" || !instance.cdpPort || !instance.desiredQolSettings && !instance.desiredPowerSettings && !shouldClearPowerRuntime) {
     return bridge;
   }
   try {
     const targets = await readCdpTargets(instance.cdpPort);
-    const target = pickCodexCdpTarget(targets);
+    const target = pickCodexCdpTarget(targets, {
+      allowAnyPage: allowAnyPageTarget
+    });
     if (!target?.webSocketDebuggerUrl) {
       return bridge;
     }
@@ -14109,7 +14277,7 @@ async function reapplyDesiredBridgeSettings(instance, bridge) {
     };
   }
 }
-async function refreshBridgeStateIfNeeded(instance, running, force = false, reapplyDesired = false) {
+async function refreshBridgeStateIfNeeded(instance, running, force = false, reapplyDesired = false, allowAnyPageTarget = false) {
   if (!running || !instance.cdpPort) {
     return bridgeStateUnavailable();
   }
@@ -14117,12 +14285,16 @@ async function refreshBridgeStateIfNeeded(instance, running, force = false, reap
   if (!force && checkedAt && Date.now() - checkedAt < CODEX_BRIDGE_PROBE_TTL_MS) {
     return bridgeStateForStoredInstance(instance, true);
   }
-  const bridge = await probeOfficialCodexBridge(instance, force);
-  return reapplyDesired ? await reapplyDesiredBridgeSettings(instance, bridge) : bridge;
+  const bridge = await probeOfficialCodexBridge(
+    instance,
+    force,
+    allowAnyPageTarget
+  );
+  return reapplyDesired ? await reapplyDesiredBridgeSettings(instance, bridge, allowAnyPageTarget) : bridge;
 }
 async function waitForBridgeStateAfterLaunch(instance) {
   const deadline = Date.now() + CODEX_BRIDGE_LAUNCH_WAIT_MS;
-  let latest = await refreshBridgeStateIfNeeded(instance, true, true, true);
+  let latest = await refreshBridgeStateIfNeeded(instance, true, true, true, true);
   while (latest.bridgeStatus !== "healthy" && Date.now() < deadline) {
     await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
     latest = await refreshBridgeStateIfNeeded(
@@ -14132,6 +14304,7 @@ async function waitForBridgeStateAfterLaunch(instance) {
       },
       true,
       true,
+      true,
       true
     );
   }
@@ -14140,7 +14313,7 @@ async function waitForBridgeStateAfterLaunch(instance) {
 async function waitForBridgeStateAfterReload(instance) {
   const deadline = Date.now() + CODEX_BRIDGE_LAUNCH_WAIT_MS;
   await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
-  let latest = await refreshBridgeStateIfNeeded(instance, true, true, true);
+  let latest = await refreshBridgeStateIfNeeded(instance, true, true, true, true);
   while (latest.bridgeStatus !== "healthy" && Date.now() < deadline) {
     await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
     latest = await refreshBridgeStateIfNeeded(
@@ -14150,6 +14323,7 @@ async function waitForBridgeStateAfterReload(instance) {
       },
       true,
       true,
+      true,
       true
     );
   }
@@ -14519,7 +14693,7 @@ async function openCodexWithProfileHome(candidate, profileHome, profileName, cdp
       ],
       {
         detached: true,
-        env: process.env,
+        env: buildCodexChildEnv(),
         stdio: "ignore"
       }
     );
@@ -16577,7 +16751,7 @@ async function runCommand3(command, args, timeoutMs = 3e3) {
   return new Promise((resolve, reject) => {
     const child = (0, import_node_child_process8.spawn)(command, args, {
       stdio: ["ignore", "pipe", "pipe"],
-      env: process.env
+      env: buildCodexChildEnv()
     });
     let stdout = "";
     let stderr = "";
@@ -18138,7 +18312,7 @@ async function ensureCliStorageReady() {
 }
 
 // src/app/main.ts
-var VERSION = true ? "5.1.1" : "0.0.0";
+var VERSION = true ? "5.1.5" : "0.0.0";
 async function runCli() {
   const args = process.argv.slice(2);
   if (args.length === 0) {