codex-telegram 0.5.9__tar.gz → 0.6.1__tar.gz

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codex-telegram
-Version: 0.5.9
+Version: 0.6.1
 Summary: Bridge for controlling the Codex App Server from Telegram and Web UI
 Author: heungtae
 License:                                  Apache License
@@ -382,6 +382,17 @@ cp conf.toml.example ~/.config/codex-telegram/conf.toml
 ./run_build_and_main.sh
 ```
 
+## Publishing a Release
+
+1. Update `codex_telegram/__init__.py` (`__version__`), validate the changes, and push the commits.
+2. In GitHub Releases, create a draft with a matching tag (for example, `v0.6.0` for version `0.6.0`) targeting the intended commit. The commit must contain `.github/workflows/pypi-publish.yml` with the release trigger.
+3. Write the release notes and publish the Release. Drafts and tag pushes alone do not deploy.
+4. Wait for **Publish release to PyPI** to succeed: it builds the Web UI, builds/checks the wheel and sdist (including UI assets), publishes to PyPI, then attaches the same distributions and `SHA256SUMS` to the Release.
+
+Configure `PYPI_API_TOKEN` as a repository secret or a secret on the `pypi` environment before publishing. Existing environment protection rules still apply; remove required reviewers from that environment if fully automatic publishing is desired. Published prereleases also trigger this workflow, so use a matching Python prerelease version such as `0.6.1rc1` / `v0.6.1rc1`.
+
+A published GitHub Release alone does not mean PyPI deployment succeeded; check the workflow result. If attachment fails after PyPI publishing succeeds, rerun only failed jobs to attach the retained files without republishing. For code changes after a successful PyPI upload, use a new version and Release.
+
 ## Documentation
 
 | File | Description |

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/README.md

@@ -157,6 +157,17 @@ cp conf.toml.example ~/.config/codex-telegram/conf.toml
 ./run_build_and_main.sh
 ```
 
+## Publishing a Release
+
+1. Update `codex_telegram/__init__.py` (`__version__`), validate the changes, and push the commits.
+2. In GitHub Releases, create a draft with a matching tag (for example, `v0.6.0` for version `0.6.0`) targeting the intended commit. The commit must contain `.github/workflows/pypi-publish.yml` with the release trigger.
+3. Write the release notes and publish the Release. Drafts and tag pushes alone do not deploy.
+4. Wait for **Publish release to PyPI** to succeed: it builds the Web UI, builds/checks the wheel and sdist (including UI assets), publishes to PyPI, then attaches the same distributions and `SHA256SUMS` to the Release.
+
+Configure `PYPI_API_TOKEN` as a repository secret or a secret on the `pypi` environment before publishing. Existing environment protection rules still apply; remove required reviewers from that environment if fully automatic publishing is desired. Published prereleases also trigger this workflow, so use a matching Python prerelease version such as `0.6.1rc1` / `v0.6.1rc1`.
+
+A published GitHub Release alone does not mean PyPI deployment succeeded; check the workflow result. If attachment fails after PyPI publishing succeeds, rerun only failed jobs to attach the retained files without republishing. For code changes after a successful PyPI upload, use a new version and Release.
+
 ## Documentation
 
 | File | Description |

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/TELEGRAM.md

@@ -24,14 +24,17 @@ Execute Codex commands using slash commands in any chat with the bot:
 | `/compact <id>` | thread/compact/start | Compact conversation history |
 | `/rollback <n>` | thread/rollback | Roll back last N turns |
 | `/interrupt` | turn/interrupt | Interrupt running turn |
-| `/review` | review/start | Start code review |
+| `/review [uncommittedChanges\|baseBranch\|commit\|custom]` | review/start | Start code review |
 | `/exec <cmd>` | command/exec | Run command |
 | `/models` | model/list | List available models |
 | `/features` | experimentalFeature/list + command/exec | Show beta features |
 | `/guardian` | local config | Show guardian summary |
 | `/modes` | collaborationMode/list | List collaboration modes |
 | `/collab` | collaborationMode/list | List collaboration modes |
-| `/skills` | skills/list | List skills |
+| `/mode [toggle\|plan\|build]` | - | Show or set collaboration mode |
+| `/plan` | - | Switch collaboration mode to plan |
+| `/build` | - | Switch collaboration mode to build (default) |
+| `/skills [cwd]` | skills/list | List skills |
 | `/apps` | app/list | List apps |
 | `/mcp` | mcpServerStatus/list | List MCP servers |
 | `/config` | config/read | Read configuration |
@@ -58,6 +61,7 @@ Configure which events to receive via `telegram.forwarding.app_server_event_allo
 - Archive old threads to keep your list clean
 - Compact conversation history to save context
 - Rollback turns to undo mistakes
+- Start code reviews with `/review [uncommittedChanges|baseBranch|commit|custom]`
 
 ### Project Switching
 
@@ -68,6 +72,19 @@ Manage multiple projects:
 3. Use `/project <name>` to switch
 4. Each project maintains separate thread history
 
+### Collaboration Mode
+
+Control how Codex approaches tasks:
+
+| Command | Description |
+|---------|-------------|
+| `/mode` | Show current mode or set to `toggle`, `plan`, or `build` |
+| `/plan` | Switch to plan mode (analyze, don't execute) |
+| `/build` | Switch to build mode (execute changes, default) |
+| `/modes` / `/collab` | List available collaboration modes |
+
+Modes are session-local and persist per user. The current mode is shown in the welcome message and when switching projects.
+
 ## Configuration
 
 ### Basic Setup

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/WEB.md

@@ -20,6 +20,7 @@ A ChatGPT-style web interface for interacting with Codex App Server. Provides re
 - **Thread tabs**: Multiple conversations per project, each with independent chat state
 - **Thread states**: Visual indicators for idle, running, completed, failed, or cancelled
 - **Unread notifications**: Badge indicators for new completions
+- **Project management**: Use the project menu → Modify Project to edit its name/path. The key remains fixed to preserve chat associations. Add/Modify Project includes a Default project checkbox. The default project is marked D and its Remove menu is disabled; choose another default before removing it. Changing the default updates the shared configuration without switching existing open chats.
 - **Persistent state**: Thread and project tabs preserved across sessions
 
 ### Workspace Browser
@@ -47,6 +48,7 @@ The Web UI receives live updates via SSE for:
 | `approval_required` | Guardian/approval needed |
 | `file_change` | File modifications with diffs |
 | `app_event` | Tool execution events |
+| `user_message` | User message sent |
 
 ### Authentication
 
@@ -96,29 +98,39 @@ Guardian provides automated safety checks before approval decisions:
 
 | Shortcut | Action |
 |----------|--------|
-| `Ctrl/Cmd + Enter` | Send message |
+| `Ctrl/Cmd + Enter` | Send message (or Shift+Enter for newline) |
 | `Tab` | Toggle Build/Plan mode |
+| `Escape` | Close modals / cancel project picker |
 
-#### Alt Key Shortcuts
+#### Alt Key Shortcuts (when not in input)
 
 | Shortcut | Action |
 |----------|--------|
-| `Alt + N` | New chat |
-| `Alt + T` | New thread tab |
-| `Alt + W` | Close current thread |
-| `Alt + P` | Open project picker |
-| `Alt + [` | Previous thread |
-| `Alt + ]` | Next thread |
-| `Alt + 1-9` | Switch to thread 1-9 |
-| `Alt + V` | Toggle workspace panel |
+| `Alt + N` | New chat (focus composer, start thread) |
+| `Alt + T` | New thread tab (start thread) |
+| `Alt + W` | Close current thread tab |
+| `Alt + P` | Open project picker modal |
+| `Alt + [` | Previous thread in project |
+| `Alt + ]` | Next thread in project |
+| `Alt + 1-9` | Switch to thread 1-9 in current project |
+| `Alt + V` | Toggle workspace panel (compact layout) |
 
-#### Mode
+#### Ctrl/Cmd Key Shortcuts (when not in input)
 
 | Shortcut | Action |
 |----------|--------|
 | `Ctrl/Cmd + B` | Switch to Build mode |
 | `Ctrl/Cmd + Shift + P` | Switch to Plan mode |
 
+#### Project Picker Modal
+
+| Shortcut | Action |
+|----------|--------|
+| `Up/Down` | Navigate projects |
+| `Enter` | Select project |
+| `Esc` / `Backspace` | Close modal |
+| `Type` | Filter projects by name/key |
+
 ## API Endpoints
 
 ### Authentication
@@ -151,9 +163,12 @@ Guardian provides automated safety checks before approval decisions:
 | Method | Endpoint | Description |
 |--------|----------|-------------|
 | GET | `/api/projects` | List projects |
-| POST | `/api/projects` | Add project |
+| POST | `/api/projects` | Add project (`default: true` optionally sets the default) |
+| PUT | `/api/projects/{key}` | Modify name/path and optionally set default |
+| DELETE | `/api/projects/{key}` | Remove a non-default project |
 | POST | `/api/projects/select` | Switch project |
 | POST | `/api/projects/open-thread` | Open thread in project |
+| POST | `/api/projects/open-explorer` | Open project folder in OS file explorer |
 
 ### Workspace
 
@@ -172,7 +187,8 @@ Guardian provides automated safety checks before approval decisions:
 | GET | `/api/features` | List features |
 | POST | `/api/features/{key}` | Toggle feature |
 | GET | `/api/models` | List models |
-| GET | `/api/modes` | List modes |
+| GET | `/api/modes` | List collaboration modes |
+| GET | `/api/collab` | List collaboration modes (alias) |
 | GET | `/api/skills` | List skills |
 | GET | `/api/apps` | List apps |
 | GET | `/api/mcp` | List MCP servers |
@@ -181,6 +197,25 @@ Guardian provides automated safety checks before approval decisions:
 | GET | `/api/config` | Get config |
 | POST | `/api/approvals/{id}` | Submit approval |
 
+### Approvals
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/approvals` | List pending approval requests |
+| POST | `/api/approvals/{request_id}` | Submit approval decision (approve|session|deny) |
+
+### Session
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/session/summary` | Get current session state (active thread, workspace, project, mode, agents) |
+
+### Commands
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| POST | `/api/command` | Execute any slash command |
+
 ### Events
 
 | Method | Endpoint | Description |

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/codex_telegram/__init__.py

@@ -1,3 +1,3 @@
 """codex-telegram package."""
 
-__version__ = "0.5.9"
+__version__ = "0.6.1"

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/codex_telegram.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codex-telegram
-Version: 0.5.9
+Version: 0.6.1
 Summary: Bridge for controlling the Codex App Server from Telegram and Web UI
 Author: heungtae
 License:                                  Apache License
@@ -382,6 +382,17 @@ cp conf.toml.example ~/.config/codex-telegram/conf.toml
 ./run_build_and_main.sh
 ```
 
+## Publishing a Release
+
+1. Update `codex_telegram/__init__.py` (`__version__`), validate the changes, and push the commits.
+2. In GitHub Releases, create a draft with a matching tag (for example, `v0.6.0` for version `0.6.0`) targeting the intended commit. The commit must contain `.github/workflows/pypi-publish.yml` with the release trigger.
+3. Write the release notes and publish the Release. Drafts and tag pushes alone do not deploy.
+4. Wait for **Publish release to PyPI** to succeed: it builds the Web UI, builds/checks the wheel and sdist (including UI assets), publishes to PyPI, then attaches the same distributions and `SHA256SUMS` to the Release.
+
+Configure `PYPI_API_TOKEN` as a repository secret or a secret on the `pypi` environment before publishing. Existing environment protection rules still apply; remove required reviewers from that environment if fully automatic publishing is desired. Published prereleases also trigger this workflow, so use a matching Python prerelease version such as `0.6.1rc1` / `v0.6.1rc1`.
+
+A published GitHub Release alone does not mean PyPI deployment succeeded; check the workflow result. If attachment fails after PyPI publishing succeeds, rerun only failed jobs to attach the retained files without republishing. For code changes after a successful PyPI upload, use a new version and Release.
+
 ## Documentation
 
 | File | Description |

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/codex_telegram.egg-info/SOURCES.txt

@@ -63,6 +63,8 @@ tests/test_handlers_results.py
 tests/test_keyboard.py
 tests/test_main_approval_flow.py
 tests/test_normalize.py
+tests/test_project_config.py
+tests/test_project_routes.py
 tests/test_pypi_check.py
 tests/test_single_instance.py
 tests/test_telegram_bot_config.py
@@ -92,5 +94,5 @@ web/static/dist/index.html
 web/static/dist/assets/codex-telegram-icon-black.svg
 web/static/dist/assets/codex-telegram-icon-ivory.svg
 web/static/dist/assets/codex-telegram-login-image.png
-web/static/dist/assets/index-DIOICBNe.js
-web/static/dist/assets/index-DW1AcoLg.css
+web/static/dist/assets/index-0u8Hjl9v.js
+web/static/dist/assets/index-Bh3KHDwf.css

codex_telegram-0.6.1/tests/test_project_config.py

@@ -0,0 +1,42 @@
+import tomllib
+from unittest.mock import patch
+
+import pytest
+
+from utils.config import remove_project_profile, save_project_profile, update_project_profile
+
+
+@pytest.fixture
+def project_config(tmp_path):
+    path = tmp_path / "conf.toml"
+    path.write_text('project = "alpha"\n\n[projects.alpha]\nname = "Alpha"\npath = "/alpha"\nextra = true\n\n[web]\nenabled = true\n')
+    with patch("utils.config._get_config_path", return_value=path):
+        yield path
+
+
+def test_modify_and_change_default_preserves_other_settings(project_config):
+    save_project_profile("beta", "Beta", "/beta")
+    update_project_profile("beta", 'New "Beta"', r"/new\beta", make_default=True)
+    parsed = tomllib.loads(project_config.read_text())
+    assert parsed["project"] == "beta"
+    assert parsed["projects"]["beta"] == {"name": 'New "Beta"', "path": r"/new\beta"}
+    assert parsed["projects"]["alpha"]["extra"] is True
+    assert parsed["web"]["enabled"] is True
+    with pytest.raises(ValueError, match="default project"):
+        remove_project_profile("beta")
+    remove_project_profile("alpha")
+    assert "alpha" not in tomllib.loads(project_config.read_text())["projects"]
+
+
+def test_add_default_and_modify_without_unsetting_default(project_config):
+    save_project_profile("beta", "Beta", "/beta", make_default=True)
+    update_project_profile("beta", "Changed", "/changed")
+    assert tomllib.loads(project_config.read_text())["project"] == "beta"
+
+
+@pytest.mark.parametrize("key,name,path", [("missing", "Name", "/path"), ("alpha", " ", "/path"), ("alpha", "Name", " ")])
+def test_invalid_modify_does_not_write(project_config, key, name, path):
+    original = project_config.read_text()
+    with pytest.raises(ValueError):
+        update_project_profile(key, name, path, make_default=True)
+    assert project_config.read_text() == original

codex_telegram-0.6.1/tests/test_project_routes.py

@@ -0,0 +1,59 @@
+import asyncio
+import unittest
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, patch
+
+from fastapi import FastAPI, HTTPException
+
+from web.routes import register_project_routes
+
+
+class ProjectRouteTests(unittest.TestCase):
+    def setUp(self):
+        app = FastAPI()
+        register_project_routes(app)
+        self.modify = next(route.endpoint for route in app.routes if "PUT" in getattr(route, "methods", set()))
+        self.add = next(route.endpoint for route in app.routes if getattr(route, "path", "") == "/api/projects" and "POST" in route.methods)
+
+    def test_modify_saves_default_and_reloads(self):
+        with (
+            patch("web.routes.session_from_request", new=AsyncMock(return_value=SimpleNamespace(user_id=1))),
+            patch("web.routes.update_project_profile") as save,
+            patch("web.routes.reload") as reload_config,
+            patch("web.routes.route_command", new=AsyncMock(return_value={"ok": True})),
+        ):
+            result = asyncio.run(self.modify("alpha", {"name": "Alpha", "path": "/alpha", "default": True}, object()))
+        save.assert_called_once_with("alpha", "Alpha", "/alpha", make_default=True)
+        reload_config.assert_called_once()
+        self.assertTrue(result["ok"])
+
+    def test_add_can_set_default(self):
+        with (
+            patch("web.routes.session_from_request", new=AsyncMock(return_value=SimpleNamespace(user_id=1))),
+            patch("web.routes.save_project_profile") as save,
+            patch("web.routes.reload"),
+            patch("web.routes.route_command", new=AsyncMock(return_value={})),
+        ):
+            asyncio.run(self.add({"key": "alpha", "name": "Alpha", "path": "/alpha", "default": True}, object()))
+        save.assert_called_once_with("alpha", "Alpha", "/alpha", make_default=True)
+
+    def test_modify_reports_invalid_project(self):
+        with (
+            patch("web.routes.session_from_request", new=AsyncMock(return_value=SimpleNamespace(user_id=1))),
+            patch("web.routes.update_project_profile", side_effect=ValueError("not found")),
+            patch("web.routes.reload") as reload_config,
+        ):
+            with self.assertRaises(HTTPException) as raised:
+                asyncio.run(self.modify("missing", {"name": "Name", "path": "/path"}, object()))
+        self.assertEqual(400, raised.exception.status_code)
+        reload_config.assert_not_called()
+
+    def test_modify_requires_authentication_before_writing(self):
+        with (
+            patch("web.routes.session_from_request", new=AsyncMock(side_effect=HTTPException(401))),
+            patch("web.routes.update_project_profile") as save,
+        ):
+            with self.assertRaises(HTTPException) as raised:
+                asyncio.run(self.modify("alpha", {"name": "Name", "path": "/path"}, object()))
+        self.assertEqual(401, raised.exception.status_code)
+        save.assert_not_called()

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/tests/test_web_server_local_command.py

@@ -1274,6 +1274,50 @@ path_glob_any = ["helm/**"]
             body["items"],
         )
 
+    def test_thread_summaries_paginates_before_project_limit_and_offset(self):
+        app = create_web_app()
+        endpoint = next(route.endpoint for route in app.routes
+                        if getattr(route, "path", None) == "/api/threads/summaries")
+        request = SimpleNamespace(cookies={COOKIE_NAME: self.session.token})
+        user_manager.get(self.session.user_id).selected_project_key = "default"
+        for tid in ("t-1", "t-2", "t-3"):
+            user_manager.bind_thread_project(tid, "default")
+        user_manager.bind_thread_project("other", "other")
+        for offset, expected in ((0, ["t-1", "t-2"]), (1, ["t-2", "t-3"])):
+            with self.subTest(offset=offset):
+                state.codex_client.call = AsyncMock(side_effect=[
+                    {"data": [{"id": "other"}], "nextCursor": "page-2"},
+                    {"data": [{"id": "t-1"}], "nextCursor": "page-3"},
+                    {"data": [{"id": "t-1"}, {"id": "t-2"}, {"id": "t-3"}],
+                     "nextCursor": "unused"},
+                    {"thread": {}}, {"thread": {}},
+                ])
+                body = asyncio.run(endpoint(request, limit=2, offset=offset))
+                self.assertEqual(expected, [item["id"] for item in body["items"]])
+                list_calls = [c for c in state.codex_client.call.await_args_list
+                              if c.args[0] == "thread/list"]
+                self.assertEqual(3, len(list_calls))
+                self.assertNotIn("cursor", list_calls[0].args[1])
+                self.assertEqual("page-2", list_calls[1].args[1]["cursor"])
+                self.assertEqual("page-3", list_calls[2].args[1]["cursor"])
+
+    def test_thread_summaries_stops_on_exhaustion_or_repeated_cursor(self):
+        app = create_web_app()
+        endpoint = next(route.endpoint for route in app.routes
+                        if getattr(route, "path", None) == "/api/threads/summaries")
+        request = SimpleNamespace(cookies={COOKIE_NAME: self.session.token})
+        user_manager.get(self.session.user_id).selected_project_key = "default"
+        user_manager.bind_thread_project("other", "other")
+        for page in ({"data": [{"id": "other"}]},
+                     {"data": None, "nextCursor": "repeat"}):
+            with self.subTest(page=page):
+                state.codex_client.call = AsyncMock(return_value=page)
+                body = asyncio.run(endpoint(request, limit=2, archived=True))
+                self.assertEqual([], body["items"])
+                self.assertEqual(2 if page.get("nextCursor") else 1,
+                                 state.codex_client.call.await_count)
+                self.assertTrue(state.codex_client.call.await_args.args[1]["archived"])
+
     def test_thread_summaries_use_user_request_excerpt_as_title(self):
         app = create_web_app()
         endpoint = next(

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/utils/config.py

@@ -682,7 +682,9 @@ def save_guardian_settings(
     return get_guardian_settings()
 
 
-def save_project_profile(key: str, name: str, path: str) -> None:
+def save_project_profile(
+    key: str, name: str, path: str, *, make_default: bool = False
+) -> None:
     if not re.fullmatch(r"[A-Za-z0-9_-]+", key):
         raise ValueError("Invalid project key. Use letters, numbers, '_' or '-'.")
     if not name.strip():
@@ -711,4 +713,102 @@ def save_project_profile(key: str, name: str, path: str) -> None:
         f'path = "{_escape_toml_string(path)}"\n'
     )
 
+    if make_default:
+        updated = _with_default_project(updated, key)
+    tomllib.loads(updated)
+    config_path.write_text(updated, encoding="utf-8")
+
+
+def _with_default_project(raw: str, key: str) -> str:
+    lines = raw.splitlines(keepends=True)
+    for index, line in enumerate(lines):
+        if line.lstrip().startswith("["):
+            break
+        if re.match(r"^\s*project\s*=", line):
+            lines[index] = f'project = "{_escape_toml_string(key)}"\n'
+            return "".join(lines)
+    return f'project = "{_escape_toml_string(key)}"\n' + raw
+
+
+def update_project_profile(
+    key: str, name: str, path: str, *, make_default: bool = False
+) -> None:
+    if not name.strip() or not path.strip():
+        raise ValueError("Project name and path must not be empty.")
+    _ensure_config_exists()
+    config_path = _get_config_path()
+    raw = config_path.read_text(encoding="utf-8")
+    parsed = tomllib.loads(raw)
+    if key not in parsed.get("projects", {}):
+        raise ValueError(f"Project key '{key}' not found.")
+    lines = raw.splitlines(keepends=True)
+    start = None
+    end = len(lines)
+    for index, line in enumerate(lines):
+        if not line.lstrip().startswith("["):
+            continue
+        if start is not None:
+            end = index
+            break
+        try:
+            header = tomllib.loads(line.strip())
+        except tomllib.TOMLDecodeError:
+            continue
+        if header.get("projects", {}).get(key) == {}:
+            start = index
+    if start is None:
+        raise ValueError("Project table could not be updated.")
+    body = "".join(lines[start + 1:end])
+    for field, value in (("name", name), ("path", path)):
+        pattern = rf"(?m)^\s*{field}\s*=.*$"
+        replacement = f'{field} = "{_escape_toml_string(value)}"'
+        if re.search(pattern, body):
+            body = re.sub(pattern, lambda match: replacement, body)
+        else:
+            body = body.rstrip() + "\n" + replacement + "\n"
+    updated = "".join(lines[:start + 1]) + body + "".join(lines[end:])
+    tomllib.loads(updated)
+    if make_default:
+        updated = _with_default_project(updated, key)
+    tomllib.loads(updated)
+    config_path.write_text(updated, encoding="utf-8")
+
+
+def remove_project_profile(key: str) -> None:
+    _ensure_config_exists()
+    config_path = _get_config_path()
+    raw = config_path.read_text(encoding="utf-8")
+    parsed = tomllib.loads(raw) if raw.strip() else {}
+
+    projects = parsed.get("projects")
+    if not isinstance(projects, dict) or key not in projects:
+        raise ValueError(f"Project key '{key}' not found.")
+
+    if parsed.get("project") == key:
+        raise ValueError(
+            f"Cannot remove the default project '{key}'. "
+            "Set another default project first."
+        )
+
+    lines = raw.splitlines(keepends=True)
+    result: list[str] = []
+    i = 0
+    while i < len(lines):
+        line = lines[i]
+        stripped = line.strip()
+        if stripped == f"[projects.{key}]":
+            i += 1
+            while i < len(lines):
+                next_line = lines[i]
+                next_stripped = next_line.strip()
+                if next_stripped.startswith("[") and not next_stripped.startswith("[projects."):
+                    break
+                if next_stripped.startswith("[projects.") and next_stripped != f"[projects.{key}]":
+                    break
+                i += 1
+            continue
+        result.append(line)
+        i += 1
+
+    updated = "".join(result).rstrip() + "\n"
     config_path.write_text(updated, encoding="utf-8")

{codex_telegram-0.5.9 → codex_telegram-0.6.1}/web/routes.py

@@ -16,7 +16,14 @@ from codex_telegram import __version__
 from codex.collaboration_mode import codex_mode_name
 from models import state
 from models.user import user_manager
-from utils.config import get, get_web_password, reload, save_project_profile
+from utils.config import (
+    get,
+    get_web_password,
+    reload,
+    remove_project_profile,
+    save_project_profile,
+    update_project_profile,
+)
 from utils.local_command import resolve_command_cwd
 from utils.normalize import clamp_int, parse_bool
 from web.dependencies import (
@@ -322,10 +329,6 @@ def register_thread_routes(app: FastAPI) -> None:
         params: dict[str, Any] = {"limit": min(100, safe_limit + safe_offset)}
         if archived:
             params["archived"] = True
-        result = await state.codex_client.call("thread/list", params)
-        rows = result.get("data", [])
-        if not isinstance(rows, list):
-            rows = []
         state_user = user_manager.get(session.user_id)
         current_profile_key = project_key.strip()
         if not current_profile_key:
@@ -334,12 +337,30 @@ def register_thread_routes(app: FastAPI) -> None:
             default_key = get("project")
             if isinstance(default_key, str) and default_key.strip():
                 current_profile_key = default_key.strip()
-        if current_profile_key:
-            rows = [
-                thread
-                for thread in rows
-                if isinstance(thread, dict) and thread_profile_key(thread, current_profile_key) == current_profile_key
-            ]
+        # Apply the limit to matching threads, rather than the global first page.
+        rows: list[dict[str, Any]] = []
+        seen_ids: set[str] = set()
+        seen_cursors: set[str] = set()
+        while len(rows) < safe_offset + safe_limit:
+            result = await state.codex_client.call("thread/list", dict(params))
+            page = result.get("data", [])
+            if not isinstance(page, list):
+                page = []
+            for thread in page:
+                if not isinstance(thread, dict):
+                    continue
+                tid = thread.get("id")
+                if not isinstance(tid, str) or not tid or tid in seen_ids:
+                    continue
+                seen_ids.add(tid)
+                if current_profile_key and thread_profile_key(thread, current_profile_key) != current_profile_key:
+                    continue
+                rows.append(thread)
+            cursor = result.get("nextCursor")
+            if not isinstance(cursor, str) or not cursor or cursor in seen_cursors:
+                break
+            seen_cursors.add(cursor)
+            params["cursor"] = cursor
         if safe_offset:
             rows = rows[safe_offset:]
         rows = rows[:safe_limit]
@@ -692,7 +713,33 @@ def register_project_routes(app: FastAPI) -> None:
         name = _required_str(payload, "name")
         path = _required_str(payload, "path")
         try:
-            save_project_profile(key, name, path)
+            save_project_profile(key, name, path, make_default=payload.get("default") is True)
+            reload()
+        except ValueError as exc:
+            raise HTTPException(status_code=400, detail=str(exc)) from exc
+        return await route_command("/projects", ["--list"], session.user_id)
+
+    @app.put("/api/projects/{project_key}")
+    async def modify_project(
+        project_key: str, payload: dict[str, Any], request: Request
+    ) -> dict[str, Any]:
+        session = await session_from_request(request)
+        name = _required_str(payload, "name")
+        path = _required_str(payload, "path")
+        try:
+            update_project_profile(
+                project_key, name, path, make_default=payload.get("default") is True
+            )
+            reload()
+        except ValueError as exc:
+            raise HTTPException(status_code=400, detail=str(exc)) from exc
+        return await route_command("/projects", ["--list"], session.user_id)
+
+    @app.delete("/api/projects/{project_key}")
+    async def remove_project(project_key: str, request: Request) -> dict[str, Any]:
+        session = await session_from_request(request)
+        try:
+            remove_project_profile(project_key)
             reload()
         except ValueError as exc:
             raise HTTPException(status_code=400, detail=str(exc)) from exc