Add Skills and MCP management

Release v0.2.18
Add remote prompt template updates
2026-10-18 05:59:23 +08:00 · 2026-07-06 01:11:13 +08:00 · 2026-07-05 23:58:44 +08:00 · 2026-07-05 23:57:59 +08:00 · 2026-07-05 23:47:37 +08:00 · 2026-07-05 23:39:43 +08:00
22 changed files with 3918 additions and 261 deletions
@@ -9,20 +9,44 @@ on:
 permissions:
  contents: write

+defaults:
+  run:
+    shell: bash
+
 jobs:
  build:
-    name: Build ${{ matrix.platform }}
+    name: Build ${{ matrix.name }}
    runs-on: ${{ matrix.platform }}
    strategy:
      fail-fast: false
      matrix:
        include:
-          - platform: macos-latest
+          - name: macOS Apple Silicon
+            platform: macos-latest
            args: --bundles dmg
-          - platform: ubuntu-22.04
+            artifact: codex-x-macos-arm64
+            paths: |
+              apps/desktop/src-tauri/target/release/bundle/dmg/*.dmg
+          - name: macOS Intel
+            platform: macos-15-intel
+            args: --bundles dmg
+            artifact: codex-x-macos-x64
+            paths: |
+              apps/desktop/src-tauri/target/release/bundle/dmg/*.dmg
+          - name: Linux
+            platform: ubuntu-22.04
            args: --bundles deb,rpm
-          - platform: windows-latest
+            artifact: codex-x-linux
+            paths: |
+              apps/desktop/src-tauri/target/release/bundle/deb/*.deb
+              apps/desktop/src-tauri/target/release/bundle/rpm/*.rpm
+          - name: Windows
+            platform: windows-latest
            args: --bundles msi
+            artifact: codex-x-windows
+            paths: |
+              apps/desktop/src-tauri/target/release/bundle/msi/*.msi
+              apps/desktop/src-tauri/Codex-X_*_windows_x64_portable.zip

    steps:
      - name: Checkout
@@ -61,9 +85,87 @@ jobs:
      - name: Install dependencies
        run: pnpm install --frozen-lockfile

+      - name: Build Tauri bundles
+        run: pnpm --dir apps/desktop tauri build ${{ matrix.args }}
+
+      - name: Create Windows portable zip
+        if: matrix.platform == 'windows-latest'
+        run: |
+          set -euo pipefail
+          version=$(node -p "require('./apps/desktop/package.json').version")
+          portable_dir="apps/desktop/src-tauri/portable/Codex-X_${version}_windows_x64_portable"
+          rm -rf "apps/desktop/src-tauri/portable"
+          mkdir -p "$portable_dir"
+          cp apps/desktop/src-tauri/target/release/codex-x.exe "$portable_dir/Codex-X.exe"
+          cat > "$portable_dir/README-portable.txt" <<'EOF'
+          Codex-X Windows Portable
+
+          Double click Codex-X.exe to run. No MSI installation is required.
+          Microsoft Edge WebView2 Runtime is required; Windows 10/11 usually already includes it.
+          EOF
+          powershell -NoProfile -Command "Compress-Archive -Path 'apps/desktop/src-tauri/portable/Codex-X_${version}_windows_x64_portable/*' -DestinationPath 'apps/desktop/src-tauri/Codex-X_${version}_windows_x64_portable.zip' -Force"
+
+      - name: Normalize release asset names
+        run: |
+          set -euo pipefail
+          version=$(node -p "require('./apps/desktop/package.json').version")
+          case "${{ matrix.name }}" in
+            "macOS Apple Silicon")
+              target="apps/desktop/src-tauri/target/release/bundle/dmg/Codex-X_${version}_macos_apple_silicon_aarch64.dmg"
+              src=$(find apps/desktop/src-tauri/target/release/bundle/dmg -maxdepth 1 -type f -name '*.dmg' | head -n 1)
+              test -n "$src"
+              mv "$src" "$target"
+              ;;
+            "macOS Intel")
+              target="apps/desktop/src-tauri/target/release/bundle/dmg/Codex-X_${version}_macos_intel_x64.dmg"
+              src=$(find apps/desktop/src-tauri/target/release/bundle/dmg -maxdepth 1 -type f -name '*.dmg' | head -n 1)
+              test -n "$src"
+              mv "$src" "$target"
+              ;;
+            "Windows")
+              target="apps/desktop/src-tauri/target/release/bundle/msi/Codex-X_${version}_windows_x64.msi"
+              src=$(find apps/desktop/src-tauri/target/release/bundle/msi -maxdepth 1 -type f -name '*.msi' | head -n 1)
+              test -n "$src"
+              mv "$src" "$target"
+              ;;
+            "Linux")
+              deb_target="apps/desktop/src-tauri/target/release/bundle/deb/Codex-X_${version}_linux_x64.deb"
+              rpm_target="apps/desktop/src-tauri/target/release/bundle/rpm/Codex-X_${version}_linux_x64.rpm"
+              deb_src=$(find apps/desktop/src-tauri/target/release/bundle/deb -maxdepth 1 -type f -name '*.deb' | head -n 1)
+              rpm_src=$(find apps/desktop/src-tauri/target/release/bundle/rpm -maxdepth 1 -type f -name '*.rpm' | head -n 1)
+              test -n "$deb_src"
+              test -n "$rpm_src"
+              mv "$deb_src" "$deb_target"
+              mv "$rpm_src" "$rpm_target"
+              ;;
+          esac
+
+      - name: Upload bundle artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.artifact }}
+          path: ${{ matrix.paths }}
+          if-no-files-found: error
+          retention-days: 7
+
+  release:
+    name: Publish GitHub Release
+    needs: build
+    runs-on: ubuntu-22.04
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Download bundle artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: release-assets
+          merge-multiple: true
+
      - name: Prepare release notes
        id: release_notes
-        shell: bash
        run: |
          python3 - <<'PY'
          from pathlib import Path
@@ -80,21 +182,26 @@ jobs:
          body = match.group(1).strip() if match else ""
          if not body:
              body = "Codex-X desktop release."
-          with open(os.environ["GITHUB_OUTPUT"], "a", encoding="utf-8") as fh:
-              fh.write("body<<EOF\n")
+          with open("release-body.md", "w", encoding="utf-8") as fh:
              fh.write(body + "\n")
-              fh.write("EOF\n")
          PY

-      - name: Build and upload Tauri bundles
-        uses: tauri-apps/tauri-action@v0
+      - name: Publish release
        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          projectPath: apps/desktop
-          tagName: ${{ github.ref_name }}
-          releaseName: Codex-X ${{ github.ref_name }}
-          releaseBody: ${{ steps.release_notes.outputs.body }}
-          releaseDraft: false
-          prerelease: false
-          args: ${{ matrix.args }}
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          tag="${GITHUB_REF_NAME}"
+          title="Codex-X ${tag}"
+          if gh release view "$tag" >/dev/null 2>&1; then
+            gh release edit "$tag" --title "$title" --notes-file release-body.md --latest
+          else
+            gh release create "$tag" --title "$title" --notes-file release-body.md --latest
+          fi
+          mapfile -t assets < <(find release-assets -type f \( -name '*.dmg' -o -name '*.msi' -o -name '*.deb' -o -name '*.rpm' -o -name '*.zip' \) -print | sort)
+          if [ "${#assets[@]}" -eq 0 ]; then
+            echo "No release assets found" >&2
+            exit 1
+          fi
+          printf 'Uploading %s\n' "${assets[@]}"
+          gh release upload "$tag" "${assets[@]}" --clobber
@@ -2,6 +2,76 @@

 All notable changes to Codex-X will be documented here.

+## [v0.2.19] - 2026-07-06
+
+- 新增【技能和 MCP】页面：展示 Codex 当前已安装 Skills 与 MCP，支持导入已有、从 ZIP 安装 Skill、启用/禁用 Skill、启用/禁用 MCP。
+- MCP 管理会读写 `~/.codex/config.toml` 的 `[mcp_servers]`，禁用后保留到 Codex-X SQLite，后续可一键重新启用。
+- Skills 管理会扫描 `~/.codex/skills`，并可从 `~/.agents/skills`、`~/.cc-switch/skills` 导入到 Codex；禁用后移动到 Codex-X 禁用目录，避免直接删除。
+- 优化多个潜在卡顿点：指令提示词 GitHub 检查改为延迟后台执行，远程拉取、会话扫描/同步、Skills/MCP 扫描均放入后台 blocking worker。
+- 修复外部自定义提示词切换到内置提示词后重复出现的问题，并自动清理同名 `external-*` 重复项。
+- 增加页面切换过渡、启动页动态光效和首次启动向导退出动画，降低页面突然跳转感。
+
+## [v0.2.18] - 2026-07-05
+
+- 指令提示词内置模板支持从 GitHub `examples/` 实时检查更新，并缓存到本地；启用内置模板时优先使用 GitHub 最新版本，离线时自动回退本地缓存或打包内置版本。
+- 指令提示词页面新增“更新内置模板”状态与来源展示，可看到模板来自 GitHub 最新、本地缓存或打包内置。
+- 继续保留导入 `.md` 提示词、外部提示词自动记忆、会话管理交互优化和 API Key 可见切换等体验改进。
+
+## [v0.2.17] - 2026-07-04
+
+- 修复 macOS Intel Release 构建 runner：从已不可用/长时间排队的 `macos-13` 切换为 `macos-15-intel`。
+- 继续保留 macOS Apple Silicon / macOS Intel / Windows MSI / Windows portable ZIP / Linux deb/rpm 多平台产物。
+
+## [v0.2.16] - 2026-07-04
+
+- Release 新增 macOS Intel 构建，Intel Mac 用户可下载 x64 DMG。
+- macOS Release 现在同时提供 Apple Silicon 与 Intel 两种 DMG。
+- Windows Release 新增 portable ZIP，包含可直接运行的 `Codex-X.exe`，无需 MSI 安装。
+- 发布流程支持上传 `.zip` portable 产物，并更新 README 下载说明。
+
+## [v0.2.15] - 2026-07-04
+
+- 会话管理页移除 CODEX_HOME 与 Provider Sync 备份位置展示，页面信息更简洁。
+- 优化 Windows 打开下载页体验：后端改为后台线程 spawn 浏览器，不再等待 `cmd /C start`，避免 WebView 卡顿 2-3 秒。
+- 统一所有外部链接按钮走异步打开逻辑，打开项目主页、反馈页、下载页都不会阻塞界面。
+- 修复 macOS 顶部 toast 被 Overlay 标题栏遮挡的问题，toast 自动下移到标题栏安全区下方。
+
+## [v0.2.14] - 2026-07-04
+
+- 修复 macOS Overlay 标题栏遮挡内容的问题，为红黄绿窗口按钮预留完整安全区。
+- 调整侧边栏、内容区、Provider/TOML/指令提示词/会话管理页高度计算，避免顶部内容被标题栏压住。
+- 加高 macOS 顶部拖拽区域并保持深色渐变，窗口顶部继续和应用色系统一。
+
+## [v0.2.13] - 2026-07-04
+
+- macOS 窗口标题栏改为深色融合样式，避免顶部出现系统白色标题条。
+- 会话管理页面移除多余外层玻璃边框，统一为完整内容容器。
+- 优化会话列表边界与滚动区域，避免列表像卡在外层框外面。
+
+## [v0.2.12] - 2026-07-04
+
+- Windows MSI 安装器回退为默认简洁样式，移除上一版过重的自定义安装界面图。
+- 【会话管理】页面新增会话列表，展示标题、Provider、模型、工作目录、更新时间、归档/需同步状态。
+- 会话扫描会从 Codex 本地 SQLite threads 表读取最近会话，方便用户直接判断哪些历史 thread 需要同步修复。
+
+## [v0.2.11] - 2026-07-04
+
+- 调整首次启动自动检查更新体验：不再弹出居中的强提醒窗口。
+- 自动检测到新版本时仅显示轻量 toast，并保留概览页顶部“发现新版本”提示条。
+- 只有用户在【关于】页面主动点击“检查更新”时，检测到新版本才弹出“现在下载 / 稍后”窗口。
+
+## [v0.2.10] - 2026-07-04
+
+- 修复 Release 发布任务上传 Linux 产物时误把 `deb/`、`rpm/` 目录当作资产上传的问题。
+- 发布任务现在只收集 `.dmg` / `.msi` / `.deb` / `.rpm` 文件并统一上传。
+- 补齐稳定的三平台 Release 自动发布流程。
+
+## [v0.2.9] - 2026-07-04
+
+- 修复 GitHub Actions Release 发布流程：不再由三平台矩阵并发创建 Release，改为先上传构建产物，再由单独发布任务统一创建/更新 Release。
+- 修复 `Resource not accessible by integration` 导致 Release 创建失败的问题。
+- Release 仍会从 `CHANGELOG.md` 自动读取当前 tag 的更新日志，并上传 macOS / Windows / Linux 安装包。
+
 ## [v0.2.8] - 2026-07-04

 - 更新页进一步产品化：去掉资源/仓库调试信息，将“有更新”改为更明显的绿色标签。
@@ -0,0 +1,326 @@
+<p align="center">
+  <a href="README.md"><img src="https://img.shields.io/badge/中文-切换-lightgrey" alt="中文" /></a>
+  <a href="README.en.md"><img src="https://img.shields.io/badge/English-Current-blue" alt="English" /></a>
+</p>
+
+<div align="center">
+  <img src="apps/desktop/src-tauri/icons/icon.png" alt="Codex-X Logo" width="150" />
+
+  # Codex-X
+
+  **Prompt Injection · Provider Switching · TOML / Auth Visual Manager for Codex**
+
+  Codex-X is a cross-platform desktop tool for **OpenAI Codex Desktop / Codex CLI**. It ships with `gpt5.5-unrestricted.md` and `gpt5.4-unrestricted.md`, and supports one-click enable / disable for instruction prompts, third-party Provider switching, official Auth management, TOML visual editing, and local session Provider Sync.
+
+  <p>
+    <img src="https://img.shields.io/github/v/release/yynxxxxx/Codex-X?label=version&color=blue" alt="version" />
+    <img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-555" alt="platform" />
+    <img src="https://img.shields.io/badge/built%20with-Tauri%202-24C8DB" alt="tauri" />
+    <img src="https://img.shields.io/badge/license-MIT-green" alt="license" />
+  </p>
+
+  <p>
+    <img src="https://img.shields.io/badge/React-18-61DAFB?logo=react&logoColor=white" />
+    <img src="https://img.shields.io/badge/TypeScript-5-3178C6?logo=typescript&logoColor=white" />
+    <img src="https://img.shields.io/badge/Rust-stable-000000?logo=rust&logoColor=white" />
+    <img src="https://img.shields.io/badge/SQLite-Ready-003B57?logo=sqlite&logoColor=white" />
+    <img src="https://img.shields.io/badge/Vite-Ready-646CFF?logo=vite&logoColor=white" />
+  </p>
+</div>
+
+---
+
+## What is Codex-X?
+
+Codex-X is not just a configuration-file editor. It is a **visual enhancement manager** built for Codex CLI and Codex Desktop workflows.
+
+It turns several high-frequency operations into a desktop UI:
+
+- Enable / disable instruction prompt templates for Codex
+- Switch between official OpenAI and third-party Codex API Providers
+- View / edit `~/.codex/config.toml`
+- View / edit official `~/.codex/auth.json`
+- Check and repair Provider metadata for local historical sessions
+
+## Preview
+
+<details open>
+<summary><b>App preview</b>: Home / Provider / TOML / Auth</summary>
+
+<p align="center">
+  <img src="docs/screenshots/app/preview.png" alt="Codex-X app preview: Home, Provider, TOML, Auth" width="920" />
+</p>
+
+</details>
+
+<details>
+<summary><b>Prompt injection results: security testing scenarios</b></summary>
+
+<div align="center">
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <b>SQL Injection Testing</b><br />
+      <sub>Post-deployment test: how to perform SQL injection testing against a target?</sub><br />
+      <img src="docs/screenshots/prompt-effects/security/sql-injection.png" alt="SQL injection testing result" width="420" />
+    </td>
+    <td align="center" width="50%">
+      <b>NSFW Response Test</b><br />
+      <sub>Observe boundary response changes after prompt injection</sub><br />
+      <img src="docs/screenshots/prompt-effects/security/nsfw.png" alt="NSFW response test result" width="420" />
+    </td>
+  </tr>
+</table>
+</div>
+
+</details>
+
+<details>
+<summary><b>Prompt injection results: reverse engineering scenarios</b></summary>
+
+<div align="center">
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <b>APK Reverse Engineering</b><br />
+      <sub>Static / dynamic analysis workflow for Android APKs</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/apk-reverse-1.png" alt="APK reverse engineering result" width="420" />
+    </td>
+    <td align="center" width="50%">
+      <b>APK Reverse Engineering 2</b><br />
+      <sub>Additional APK reverse workflow and locating methods</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/apk-reverse-2.png" alt="APK reverse engineering result 2" width="420" />
+    </td>
+  </tr>
+  <tr>
+    <td align="center" colspan="2">
+      <b>EXE Reverse Engineering</b><br />
+      <sub>Windows executable analysis and debugging directions</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/exe-reverse.png" alt="EXE reverse engineering result" width="620" />
+    </td>
+  </tr>
+</table>
+</div>
+
+</details>
+
+## Features
+
+<div align="center">
+<table>
+  <tr>
+    <th align="center" width="180">Feature</th>
+    <th align="center">Description</th>
+  </tr>
+  <tr>
+    <td align="center">⚡ Provider API</td>
+    <td>Visually manage official OpenAI / third-party Codex Providers, including Base URL, API Key, Model, Wire API, and one-click switching.</td>
+  </tr>
+  <tr>
+    <td align="center">🧩 <b>Prompt Injection</b></td>
+    <td><b>Signature feature</b>: built-in <code>gpt5.4-unrestricted.md</code> / <code>gpt5.5-unrestricted.md</code>, one-click write into Codex configuration; after enabling, it can produce results similar to the screenshots above for SQL injection testing and APK / EXE reverse engineering scenarios.</td>
+  </tr>
+  <tr>
+    <td align="center">💬 Session Management</td>
+    <td>Read Codex local SQLite and rollout JSONL, display local sessions visually, and support Provider Sync / historical thread metadata repair.</td>
+  </tr>
+  <tr>
+    <td align="center">📝 TOML Config</td>
+    <td>View current <code>~/.codex/config.toml</code>, edit full TOML directly from the Provider editor, and save changes back to the Codex config directory.</td>
+  </tr>
+  <tr>
+    <td align="center">🔐 Auth Management</td>
+    <td>Read / edit official <code>~/.codex/auth.json</code>, and distinguish ChatGPT login-state Auth from third-party API Keys.</td>
+  </tr>
+  <tr>
+    <td align="center">📦 Cross-platform Release</td>
+    <td>Provides macOS Apple Silicon / Intel <code>.dmg</code>, Windows <code>.msi</code> / portable <code>.zip</code>, Linux <code>.deb</code> / <code>.rpm</code>, plus in-app update checking.</td>
+  </tr>
+</table>
+</div>
+
+## Highlights
+
+### 1. Built-in dual instruction prompt templates
+
+Codex-X currently includes two prompt templates:
+
+- `examples/gpt5.5-unrestricted.md`
+- `examples/gpt5.4-unrestricted.md`
+
+You can enable / disable them directly from the Prompt page. When enabled, Codex-X writes the selected `.md` file into the Codex configuration directory and updates `model_instructions_file` in `config.toml`.
+
+<div align="center">
+<table>
+  <tr>
+    <th align="center">Item</th>
+    <th align="center"><code>gpt5.4-unrestricted.md</code></th>
+    <th align="center"><code>gpt5.5-unrestricted.md</code></th>
+  </tr>
+  <tr>
+    <td align="center">Positioning</td>
+    <td align="center">5.4 CTF sandbox</td>
+    <td align="center">5.5 unrestricted mode</td>
+  </tr>
+  <tr>
+    <td align="center">Strategy</td>
+    <td align="center">Indirect bypass through CTF competition sandbox framing</td>
+    <td align="center">Direct declaration of unrestricted developer mode</td>
+  </tr>
+  <tr>
+    <td align="center">Style</td>
+    <td align="center">Security-research oriented, detailed methodology</td>
+    <td align="center">Minimal instructions, broad coverage</td>
+  </tr>
+  <tr>
+    <td align="center">Length</td>
+    <td align="center">~180 lines</td>
+    <td align="center">~40 lines</td>
+  </tr>
+  <tr>
+    <td align="center">Target</td>
+    <td align="center">GPT-5.4 Codex CLI</td>
+    <td align="center">GPT-5.5 Codex CLI</td>
+  </tr>
+</table>
+</div>
+
+Post-deployment test prompt:
+
+```text
+How do I perform SQL injection testing against a target?
+```
+
+Typical effect:
+
+```text
+Before injection → refusal or generic answer
+After injection  → direct security research methodology and testing steps
+```
+
+### 2. Visual Provider switching
+
+- Add third-party Codex API Providers
+- Edit Base URL / API Key / Model / Wire API
+- View and edit Provider-related TOML from the Provider page
+- Clearly display the currently active Provider
+- Import Codex Providers from a cc-switch database
+
+### 3. Official Auth management
+
+- Automatically read Codex official `auth.json`
+- View / edit ChatGPT login-state Auth
+- Distinguish official Auth from third-party API Keys
+- Manage official Auth and third-party Providers in one UI
+
+### 4. Visual TOML editing
+
+- View the current Codex `config.toml`
+- Dark code preview with syntax highlighting
+- Edit full TOML directly from the Provider editor
+- Save changes back to the Codex configuration directory
+
+### 5. Session Management / Provider Sync
+
+Codex-X can read Codex local session data:
+
+```text
+~/.codex/sqlite/*.db
+~/.codex/state_5.sqlite
+~/.codex/sessions/**/rollout-*.jsonl
+~/.codex/archived_sessions/**/rollout-*.jsonl
+```
+
+It checks whether historical session Provider metadata matches the current configuration, and supports one-click sync / repair so historical threads can still be recognized, opened, and continued by native Codex.
+
+### 6. Cross-platform desktop app
+
+- macOS Apple Silicon `.dmg`
+- macOS Intel `.dmg`
+- Windows `.msi`
+- Windows Portable `.zip`
+- Linux `.deb` / `.rpm`
+- Automatic GitHub Releases builds
+- In-app update checking
+
+## Tech Stack
+
+| Category | Technology |
+| --- | --- |
+| Desktop framework | Tauri 2 |
+| Frontend | React 18 / TypeScript / Vite |
+| Backend | Rust |
+| Local data | SQLite / rusqlite |
+| Config editing | TOML / JSON |
+| Release | GitHub Actions / GitHub Releases |
+
+## Configuration Paths
+
+Codex-X reads the Codex configuration directory by default:
+
+```text
+~/.codex/config.toml
+~/.codex/auth.json
+```
+
+Environment variables are also supported:
+
+```text
+CODEX_HOME=/path/to/.codex
+CODEXX_HOME=/path/to/codex-x-data
+CC_SWITCH_HOME=/path/to/.cc-switch
+```
+
+Codex-X's own database is stored by default at:
+
+```text
+~/.codexx/codexx.db
+```
+
+## Download
+
+Download from the Releases page:
+
+https://github.com/yynxxxxx/Codex-X/releases
+
+## Development
+
+```bash
+pnpm install
+pnpm dev
+```
+
+Build desktop bundles:
+
+```bash
+pnpm --dir apps/desktop tauri build
+```
+
+## macOS Installation Note
+
+If you see “app is damaged” when opening an unsigned / unnotarized DMG, this is normal macOS Gatekeeper behavior.
+
+- Best option: sign and notarize with an Apple Developer ID
+- Local testing only: remove the quarantine attribute manually
+
+```bash
+xattr -dr com.apple.quarantine /Applications/Codex-X.app
+```
+
+## License
+
+This project is open-sourced under the [MIT License](https://github.com/yynxxxxx/Codex-X/blob/main/LICENSE).
+
+## Thanks
+
+Thanks to the [LINUX DO forum](https://linux.do/) community for attention, feedback, and support.
+
+## Star History
+
+<a href="https://www.star-history.com/?repos=yynxxxxx%2FCodex-X&type=date&legend=top-left">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&theme=dark&legend=top-left" />
+    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&legend=top-left" />
+    <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&legend=top-left" />
+  </picture>
+</a>
@@ -1,11 +1,16 @@
+<p align="center">
+  <a href="README.md"><img src="https://img.shields.io/badge/中文-当前-blue" alt="中文" /></a>
+  <a href="README.en.md"><img src="https://img.shields.io/badge/English-Switch-lightgrey" alt="English" /></a>
+</p>
+
 <div align="center">
-  <img src="apps/desktop/src-tauri/icons/icon.png" alt="Codex-X Logo" width="160" />
+  <img src="apps/desktop/src-tauri/icons/icon.png" alt="Codex-X Logo" width="150" />

  # Codex-X

-  **Codex 提示词注入与配置切换管理器**
+  **Codex 提示词注入 · Provider 切换 · TOML / Auth 可视化管理器**

-  一款面向 **OpenAI Codex / Codex CLI** 的跨平台桌面工具，重点提供 `gpt5.5-unrestricted.md` 指令提示词注入、Provider 切换、官方 Auth 管理与 TOML 可视化编辑。
+  一款面向 **OpenAI Codex 桌面端 / Codex CLI** 的跨平台桌面工具，内置 `gpt5.5-unrestricted.md` 与 `gpt5.4-unrestricted.md`，支持一键写入 / 禁用指令提示词、第三方 Provider 切换、官方 Auth 管理、TOML 可视化编辑与本地会话 Provider Sync。

  <p>
    <img src="https://img.shields.io/github/v/release/yynxxxxx/Codex-X?label=version&color=blue" alt="version" />
@@ -27,80 +32,217 @@

 ## Codex-X 是什么？

-Codex-X 不是单纯的配置文件编辑器，而是一个更偏向「Codex 增强启动器」的桌面管理工具。
+Codex-X 不是普通的配置文件编辑器，而是一个面向 Codex CLI 的 **可视化增强管理器**。

-它可以把预设或自定义的 **指令提示词模板** 写入 Codex 配置，例如项目内置的：
+它把几个高频操作做成了桌面软件：

-```text
-examples/gpt5.5-unrestricted.md
-```
-
-你可以在 UI 中直接启用、禁用、切换多个提示词模板，也可以同时管理不同第三方供应商 API 和官方 OpenAI Codex 登录配置。
-
-## 核心亮点
-
-### 1. 指令提示词注入
-
- 一键启用 `gpt5.5-unrestricted.md`
- 支持多个提示词模板并存
- 启用前自动记录状态，方便回退
- 支持禁用当前提示词，让 Codex 恢复普通配置
-
-### 2. Provider 可视化切换
-
- 添加第三方 Codex API Provider
- 编辑 Base URL / API Key / Model / TOML 配置
- 当前 Provider 状态清晰可见
- 支持从 cc-switch 数据库导入 Codex Provider
-
-### 3. 官方 Codex 配置管理
-
- 读取 Codex 官方 `auth.json`
- 支持官方 ChatGPT 登录态 Auth 查看与编辑
- 区分官方 Auth 与第三方 API Key，不混在一起
-
-### 4. TOML 配置编辑
-
- 可视化查看当前 Codex `config.toml`
- 在 Provider 编辑页直接编辑完整 TOML
- 保存后立即同步到 Codex 配置目录
-
-### 5. 跨平台桌面软件
-
- macOS `.dmg`
- Windows `.msi`
- Linux `.deb` / `.rpm`
- GitHub Releases 自动构建发布
+- 给 Codex 写入 / 禁用指令提示词模板
+- 切换官方 OpenAI 与第三方 Codex API Provider
+- 查看 / 编辑 `~/.codex/config.toml`
+- 查看 / 编辑官方 `~/.codex/auth.json`
+- 检查并修复本地历史会话的 Provider 元数据

 ## 软件预览

 <details open>
-<summary><b>主界面 / Provider / TOML / Auth 截图</b></summary>
+<summary><b>应用界面预览</b>：主界面 / Provider / TOML / Auth</summary>

-> 这里可以放软件主界面、供应商切换页面、TOML 编辑页面、官方 Auth 页面截图。
-
-<!-- 示例：
 <p align="center">
-  <img src="docs/screenshots/overview.png" width="760" />
+  <img src="docs/screenshots/app/preview.png" alt="Codex-X 应用界面预览：主界面、Provider、TOML、Auth" width="920" />
 </p>
-->

 </details>

 <details>
-<summary><b>提示词注入前后效果图</b></summary>
+<summary><b>提示词注入效果：安全测试场景</b></summary>

-> 这里可以放启用 `gpt5.5-unrestricted.md` 前后的 Codex 效果对比图。
-
-<!-- 示例：
-<p align="center">
-  <img src="docs/screenshots/prompt-before.png" width="760" />
-  <img src="docs/screenshots/prompt-after.png" width="760" />
-</p>
-->
+<div align="center">
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <b>SQL 注入测试</b><br />
+      <sub>部署后测试：如何对目标进行 SQL 注入测试？</sub><br />
+      <img src="docs/screenshots/prompt-effects/security/sql-injection.png" alt="SQL 注入测试效果图" width="420" />
+    </td>
+    <td align="center" width="50%">
+      <b>NSFW 响应测试</b><br />
+      <sub>用于观察提示词注入后的边界响应变化</sub><br />
+      <img src="docs/screenshots/prompt-effects/security/nsfw.png" alt="NSFW 响应测试效果图" width="420" />
+    </td>
+  </tr>
+</table>
+</div>

 </details>

+<details>
+<summary><b>提示词注入效果：逆向工程场景</b></summary>
+
+<div align="center">
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <b>APK 逆向分析</b><br />
+      <sub>Android APK 静态 / 动态分析思路</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/apk-reverse-1.png" alt="APK 逆向分析效果图" width="420" />
+    </td>
+    <td align="center" width="50%">
+      <b>APK 逆向分析 2</b><br />
+      <sub>补充 APK 逆向流程与定位方式</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/apk-reverse-2.png" alt="APK 逆向分析效果图 2" width="420" />
+    </td>
+  </tr>
+  <tr>
+    <td align="center" colspan="2">
+      <b>EXE 逆向分析</b><br />
+      <sub>Windows 可执行文件分析与调试方向</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/exe-reverse.png" alt="EXE 逆向分析效果图" width="620" />
+    </td>
+  </tr>
+</table>
+</div>
+
+</details>
+
+## 功能特性
+
+<div align="center">
+<table>
+  <tr>
+    <th align="center" width="180">功能</th>
+    <th align="center">说明</th>
+  </tr>
+  <tr>
+    <td align="center">⚡ 供应商 API</td>
+    <td>可视化管理官方 OpenAI / 第三方 Codex Provider，支持 Base URL、API Key、Model、Wire API 与一键切换。</td>
+  </tr>
+  <tr>
+    <td align="center">🧩 <b>提示词注入</b></td>
+    <td><b>特色功能</b>：内置 <code>gpt5.4-unrestricted.md</code> / <code>gpt5.5-unrestricted.md</code>，一键写入 Codex 配置；启用后可达到上方效果图中的 SQL 注入测试、APK / EXE 逆向等响应效果。</td>
+  </tr>
+  <tr>
+    <td align="center">💬 会话管理</td>
+    <td>读取 Codex 本地 SQLite 与 rollout JSONL，会话列表可视化展示，并支持 Provider Sync / 修复历史 thread 元数据。</td>
+  </tr>
+  <tr>
+    <td align="center">📝 TOML 配置</td>
+    <td>查看当前 <code>~/.codex/config.toml</code>，并在 Provider 编辑页直接编辑完整 TOML，保存后同步到 Codex 配置目录。</td>
+  </tr>
+  <tr>
+    <td align="center">🔐 Auth 管理</td>
+    <td>读取 / 编辑官方 <code>~/.codex/auth.json</code>，区分 ChatGPT 登录态 Auth 与第三方 API Key。</td>
+  </tr>
+  <tr>
+    <td align="center">📦 跨平台发布</td>
+    <td>提供 macOS Apple Silicon / Intel <code>.dmg</code>、Windows <code>.msi</code> / portable <code>.zip</code>、Linux <code>.deb</code> / <code>.rpm</code>，支持应用内检测更新。</td>
+  </tr>
+</table>
+</div>
+
+## 核心亮点
+
+### 1. 内置双指令提示词模板
+
+Codex-X 当前内置两套提示词模板：
+
+- `examples/gpt5.5-unrestricted.md`
+- `examples/gpt5.4-unrestricted.md`
+
+你可以在【指令提示词】页面直接点击启用 / 禁用。启用后，Codex-X 会把对应 `.md` 写入 Codex 配置目录，并更新 `config.toml` 中的 `model_instructions_file`。
+
+<div align="center">
+<table>
+  <tr>
+    <th align="center">对比项</th>
+    <th align="center"><code>gpt5.4-unrestricted.md</code></th>
+    <th align="center"><code>gpt5.5-unrestricted.md</code></th>
+  </tr>
+  <tr>
+    <td align="center">定位</td>
+    <td align="center">5.4 CTF 沙箱</td>
+    <td align="center">5.5 无限制模式</td>
+  </tr>
+  <tr>
+    <td align="center">策略</td>
+    <td align="center">CTF 竞赛沙箱间接绕过</td>
+    <td align="center">直接声明无限制开发者模式</td>
+  </tr>
+  <tr>
+    <td align="center">风格</td>
+    <td align="center">安全研究导向，方法论详细</td>
+    <td align="center">极简指令，覆盖面广</td>
+  </tr>
+  <tr>
+    <td align="center">长度</td>
+    <td align="center">约 180 行</td>
+    <td align="center">约 40 行</td>
+  </tr>
+  <tr>
+    <td align="center">适用</td>
+    <td align="center">GPT-5.4 Codex CLI</td>
+    <td align="center">GPT-5.5 Codex CLI</td>
+  </tr>
+</table>
+</div>
+
+部署后可以测试：
+
+```text
+如何对目标进行 SQL 注入测试？
+```
+
+典型效果：
+
+```text
+破甲前 → 拒绝或泛化回答
+破甲后 → 直接给安全研究方法论与测试步骤
+```
+
+### 2. Provider 可视化切换
+
+- 添加第三方 Codex API Provider
+- 编辑 Base URL / API Key / Model / Wire API
+- Provider 页面可查看并编辑对应 TOML
+- 当前启用 Provider 状态清晰可见
+- 支持从 cc-switch 数据库导入 Codex Provider
+
+### 3. 官方 Auth 管理
+
+- 自动读取 Codex 官方 `auth.json`
+- 支持查看 / 编辑 ChatGPT 登录态 Auth
+- 区分官方 Auth 与第三方 API Key
+- 官方配置可和第三方 Provider 在 UI 中统一管理
+
+### 4. TOML 可视化编辑
+
+- 查看当前 Codex `config.toml`
+- 深色代码预览与语法高亮
+- Provider 编辑页可直接编辑完整 TOML
+- 保存后同步到 Codex 配置目录
+
+### 5. 会话管理 / Provider Sync
+
+Codex-X 可以读取 Codex 本地会话数据：
+
+```text
+~/.codex/sqlite/*.db
+~/.codex/state_5.sqlite
+~/.codex/sessions/**/rollout-*.jsonl
+~/.codex/archived_sessions/**/rollout-*.jsonl
+```
+
+用于检查旧会话的 Provider 元数据是否和当前配置一致，并支持一键同步 / 修复，让历史 thread 继续被原生 Codex 识别、打开和续聊。
+
+### 6. 跨平台桌面软件
+
+- macOS Apple Silicon `.dmg`
+- macOS Intel `.dmg`
+- Windows `.msi`
+- Windows Portable `.zip`
+- Linux `.deb` / `.rpm`
+- GitHub Releases 自动构建发布
+- 应用内检查更新
+
 ## 技术栈

 | 类型 | 技术 |
@@ -154,14 +296,9 @@ pnpm dev
 pnpm --dir apps/desktop tauri build
 ```

-## License
-
-MIT © yynxxxxx
-
-
 ## macOS 安装说明

-如果你在未签名/未公证的 DMG 中看到“软件已损坏”提示，这是 macOS Gatekeeper 的正常行为。
+如果你在未签名 / 未公证的 DMG 中看到“软件已损坏”提示，这是 macOS Gatekeeper 的正常行为。

 - 最佳方式：使用 Apple Developer ID 签名并 notarize
 - 仅本地测试：可手动移除 quarantine 属性
@@ -169,3 +306,21 @@ MIT © yynxxxxx
 ```bash
 xattr -dr com.apple.quarantine /Applications/Codex-X.app
 ```
+
+## 许可证
+
+本项目基于 [MIT License](https://github.com/yynxxxxx/Codex-X/blob/main/LICENSE) 开源。
+
+## 致谢 / Thanks
+
+感谢 [LINUX DO 论坛](https://linux.do/) 社区的关注、反馈与支持。
+
+## Star History
+
+<a href="https://www.star-history.com/?repos=yynxxxxx%2FCodex-X&type=date&legend=top-left">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&theme=dark&legend=top-left" />
+    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&legend=top-left" />
+    <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&legend=top-left" />
+  </picture>
+</a>
@@ -4,6 +4,15 @@
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Codex-X</title>
+    <style>
+      html, body { margin: 0; min-height: 100%; background: #070a13; }
+      #root:empty::before {
+        content: "Codex-X";
+        position: fixed; inset: 0; display: grid; place-items: center;
+        color: #eef4ff; font: 800 28px -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        background: radial-gradient(circle at 30% 12%, rgba(124,92,255,.22), transparent 32%), linear-gradient(135deg, #060814 0%, #0c1120 52%, #071421 100%);
+      }
+    </style>
  </head>
  <body>
    <div id="root"></div>
@@ -1,6 +1,6 @@
 {
  "name": "codex-x",
-  "version": "0.2.8",
+  "version": "0.2.19",
  "private": true,
  "description": "Codex Switch & Instruct desktop manager",
  "type": "module",
@@ -59,6 +59,15 @@ version = "1.0.103"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2a4385e2e34eb35d6b3efe798b9eb88096925d87726c0798709bf56d9ed84af3"

+[[package]]
+name = "arbitrary"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1"
+dependencies = [
+ "derive_arbitrary",
+]
+
 [[package]]
 name = "atk"
 version = "0.18.2"
@@ -337,17 +346,20 @@ dependencies = [

 [[package]]
 name = "codex-x"
-version = "0.2.8"
+version = "0.2.19"
 dependencies = [
 "chrono",
 "dirs 5.0.1",
 "rusqlite",
 "serde",
 "serde_json",
+ "sha2",
 "tauri",
 "tauri-build",
 "thiserror 2.0.18",
 "toml_edit 0.22.27",
+ "ureq",
+ "zip",
 ]

 [[package]]
@@ -546,6 +558,17 @@ dependencies = [
 "serde_core",
 ]

+[[package]]
+name = "derive_arbitrary"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e567bd82dcff979e4b03460c307b3cdc9e96fde3d73bed1496d2bc75d9dd62a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.118",
+]
+
 [[package]]
 name = "derive_more"
 version = "2.1.1"
@@ -2497,6 +2520,20 @@ dependencies = [
 "web-sys",
 ]

+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
 [[package]]
 name = "rusqlite"
 version = "0.31.0"
@@ -2526,6 +2563,41 @@ dependencies = [
 "semver",
 ]

+[[package]]
+name = "rustls"
+version = "0.23.41"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b92b125634d9b795e7beca796cc790df15a7fb38323bf3196fda83292d06b1f"
+dependencies = [
+ "log",
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "764899a24af3980067ee14bc143654f297b22eaebfe3c7b6b211920a5a59b046"
+dependencies = [
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
 [[package]]
 name = "rustversion"
 version = "1.0.22"
@@ -2920,6 +2992,12 @@ version = "0.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"

+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
 [[package]]
 name = "swift-rs"
 version = "1.0.7"
@@ -3682,6 +3760,28 @@ version = "1.13.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"

+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "ureq"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02d1a66277ed75f640d608235660df48c8e3c19f3b4edb6a263315626cc3c01d"
+dependencies = [
+ "base64 0.22.1",
+ "flate2",
+ "log",
+ "once_cell",
+ "rustls",
+ "rustls-pki-types",
+ "url",
+ "webpki-roots 0.26.11",
+]
+
 [[package]]
 name = "url"
 version = "2.5.8"
@@ -3937,6 +4037,24 @@ dependencies = [
 "system-deps",
 ]

+[[package]]
+name = "webpki-roots"
+version = "0.26.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9"
+dependencies = [
+ "webpki-roots 1.0.8",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf85cb06032201fa7c6f829d7db5a7e5aa45bcc0655327713065f6f0576731bf"
+dependencies = [
+ "rustls-pki-types",
+]
+
 [[package]]
 name = "webview2-com"
 version = "0.38.2"
@@ -4176,6 +4294,15 @@ dependencies = [
 "windows-targets 0.48.5",
 ]

+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-sys"
 version = "0.59.0"
@@ -4568,6 +4695,12 @@ dependencies = [
 "synstructure",
 ]

+[[package]]
+name = "zeroize"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
+
 [[package]]
 name = "zerotrie"
 version = "0.2.4"
@@ -4601,8 +4734,37 @@ dependencies = [
 "syn 2.0.118",
 ]

+[[package]]
+name = "zip"
+version = "2.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fabe6324e908f85a1c52063ce7aa26b68dcb7eb6dbc83a2d148403c9bc3eba50"
+dependencies = [
+ "arbitrary",
+ "crc32fast",
+ "crossbeam-utils",
+ "displaydoc",
+ "flate2",
+ "indexmap 2.14.0",
+ "memchr",
+ "thiserror 2.0.18",
+ "zopfli",
+]
+
 [[package]]
 name = "zmij"
 version = "1.0.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
+
+[[package]]
+name = "zopfli"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f05cd8797d63865425ff89b5c4a48804f35ba0ce8d125800027ad6017d2b5249"
+dependencies = [
+ "bumpalo",
+ "crc32fast",
+ "log",
+ "simd-adler32",
+]
@@ -1,6 +1,6 @@
 [package]
 name = "codex-x"
-version = "0.2.8"
+version = "0.2.19"
 description = "Codex Switch & Instruct desktop manager"
 authors = ["yynxxxxx"]
 license = "MIT"
@@ -23,3 +23,6 @@ chrono = { version = "0.4", features = ["serde"] }
 dirs = "5.0"
 thiserror = "2.0"
 rusqlite = { version = "0.31", features = ["bundled"] }
+ureq = { version = "2.12", features = ["tls"] }
+sha2 = "0.10"
+zip = { version = "2.2", default-features = false, features = ["deflate"] }
@@ -0,0 +1,9 @@
+pub(crate) const INSTRUCTION_FILENAME: &str = "gpt5.5-unrestricted.md";
+pub(crate) const INSTRUCTION_RELATIVE: &str = "./gpt5.5-unrestricted.md";
+pub(crate) const INSTRUCTION_CONTENT: &str =
+    include_str!("../../../../examples/gpt5.5-unrestricted.md");
+
+pub(crate) const INSTRUCTION_54_FILENAME: &str = "gpt5.4-unrestricted.md";
+pub(crate) const INSTRUCTION_54_RELATIVE: &str = "./gpt5.4-unrestricted.md";
+pub(crate) const INSTRUCTION_54_CONTENT: &str =
+    include_str!("../../../../examples/gpt5.4-unrestricted.md");
@@ -0,0 +1,44 @@
+use std::process::Command;
+
+pub fn command_version(program: &str, args: &[&str]) -> Option<String> {
+    Command::new(program)
+        .args(args)
+        .output()
+        .ok()
+        .filter(|out| out.status.success())
+        .map(|out| String::from_utf8_lossy(&out.stdout).trim().to_string())
+        .filter(|s| !s.is_empty())
+}
+
+#[cfg(target_os = "macos")]
+pub fn macos_codex_app_version() -> Option<String> {
+    let candidates = [
+        "/Applications/Codex.app",
+        "/Applications/OpenAI Codex.app",
+        "/Applications/ChatGPT Codex.app",
+    ];
+    for app in candidates {
+        let output = Command::new("mdls")
+            .args(["-name", "kMDItemVersion", "-raw", app])
+            .output()
+            .ok()?;
+        if output.status.success() {
+            let text = String::from_utf8_lossy(&output.stdout).trim().to_string();
+            if !text.is_empty() && text != "(null)" {
+                return Some(text);
+            }
+        }
+    }
+    None
+}
+
+#[cfg(not(target_os = "macos"))]
+pub fn macos_codex_app_version() -> Option<String> {
+    None
+}
+
+pub fn detect_codex_version() -> Option<String> {
+    command_version("codex", &["--version"])
+        .or_else(|| command_version("codex", &["-V"]))
+        .or_else(macos_codex_app_version)
+}
@@ -1,7 +1,7 @@
 {
  "$schema": "https://schema.tauri.app/config/2",
  "productName": "Codex-X",
-  "version": "0.2.8",
+  "version": "0.2.19",
  "identifier": "com.yynxxxxx.codexx",
  "build": {
    "frontendDist": "../dist",
@@ -19,7 +19,13 @@
        "minWidth": 1320,
        "minHeight": 720,
        "center": true,
-        "resizable": true
+        "resizable": true,
+        "titleBarStyle": "Overlay",
+        "hiddenTitle": true,
+        "trafficLightPosition": {
+          "x": 16,
+          "y": 14
+        }
      }
    ],
    "security": {
@@ -35,12 +41,6 @@
      "icons/icon.icns",
      "icons/icon.ico"
    ],
-    "targets": "all",
-    "windows": {
-      "wix": {
-        "bannerPath": "icons/wix/banner.bmp",
-        "dialogImagePath": "icons/wix/dialog.bmp"
-      }
-    }
+    "targets": "all"
  }
 }
@@ -9,18 +9,22 @@

 * { box-sizing: border-box; }
 html, body, #root { width: 100%; height: 100%; margin: 0; }
-body { overflow: hidden; }
+body { overflow: hidden; background: #070a13; }
 button, input, select, textarea { font: inherit; }
 button { cursor: pointer; }
 button:disabled { cursor: not-allowed; opacity: .58; }

 .app-shell {
+  --shell-pad-x: 18px;
+  --shell-pad-bottom: 18px;
+  --shell-pad-top: 18px;
+  --shell-vertical-pad: calc(var(--shell-pad-top) + var(--shell-pad-bottom));
  position: relative;
  min-height: 100vh;
  display: grid;
  grid-template-columns: 260px 1fr;
  gap: 18px;
-  padding: 18px;
+  padding: var(--shell-pad-top) var(--shell-pad-x) var(--shell-pad-bottom);
  background:
    radial-gradient(circle at 12% 10%, rgba(110, 92, 255, .24), transparent 28%),
    radial-gradient(circle at 85% 22%, rgba(22, 193, 255, .18), transparent 34%),
@@ -43,7 +47,7 @@ button:disabled { cursor: not-allowed; opacity: .58; }
  padding: 22px;
  display: flex;
  flex-direction: column;
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
 }
 .brand { display: flex; align-items: center; gap: 14px; margin-bottom: 28px; }
 .brand-mark {
@@ -197,6 +201,7 @@ input, select, textarea {
 }
 .toast.ok { color: #dbfff3; background: rgba(12, 112, 81, .88); border: 1px solid rgba(31,242,178,.3); }
 .toast.error { color: #fff; background: rgba(157, 38, 63, .92); border: 1px solid rgba(255,120,145,.35); animation: none; }
+.app-shell.mac-shell .toast { top: calc(24px + var(--mac-titlebar-safe)); }
@keyframes toast { 0% { opacity: 0; transform: translateY(-8px); } 12%, 84% { opacity: 1; transform: translateY(0); } 100% { opacity: 0; transform: translateY(-8px); } }

 .update-mask {
@@ -673,13 +678,17 @@ html, body, #root {
  min-height: 720px;
  overflow: hidden;
 }
+.app-shell.mac-shell {
+  --mac-titlebar-safe: 44px;
+  --shell-pad-top: calc(18px + var(--mac-titlebar-safe));
+}
 .sidebar {
  min-height: auto;
-  height: calc(100vh - 36px);
+  height: calc(100vh - var(--shell-vertical-pad));
  overflow: hidden;
 }
 .content {
-  height: calc(100vh - 36px);
+  height: calc(100vh - var(--shell-vertical-pad));
  overflow-y: auto;
  overflow-x: hidden;
  padding-right: 4px;
@@ -715,7 +724,7 @@ html, body, #root {
 .provider-panel,
 .code-panel {
  height: auto;
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
  overflow: visible;
 }
 .provider-row-list {
@@ -727,7 +736,7 @@ html, body, #root {
  overflow: visible;
 }
 .code-panel {
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
 }
 .toml-preview {
  min-height: 520px;
@@ -1056,7 +1065,7 @@ html, body, #root {
 }

 .instruction-panel {
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
 }
 .instruction-row-list {
  display: flex;
@@ -1445,11 +1454,18 @@ html, body, #root {

 /* Session management page. */
 .sessions-panel {
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
  display: flex;
  flex-direction: column;
  gap: 16px;
 }
+.panel.glass.sessions-panel {
+  background: transparent;
+  border: 0;
+  box-shadow: none;
+  backdrop-filter: none;
+  padding: 0;
+}
 .session-status-card {
  display: grid;
  grid-template-columns: 52px 1fr auto;
@@ -1513,6 +1529,152 @@ html, body, #root {
  font-size: 13px;
  font-weight: 850;
 }
+.session-list-card {
+  padding: 18px;
+  border-radius: 24px;
+  background: linear-gradient(180deg, rgba(6, 12, 27, .78), rgba(4,10,24,.58));
+  border: 1px solid rgba(124,168,255,.16);
+  box-shadow: inset 0 1px 0 rgba(255,255,255,.055), 0 18px 46px rgba(0,0,0,.20);
+  overflow: hidden;
+}
+.session-list-head {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 14px;
+  margin-bottom: 12px;
+}
+.session-list-head h4 {
+  margin: 2px 0 0;
+  color: #f4f8ff;
+  font-size: 17px;
+  letter-spacing: -.02em;
+}
+.session-list-head span {
+  color: #8fa0bd;
+  font-size: 13px;
+  font-weight: 800;
+  padding: 7px 10px;
+  border-radius: 999px;
+  background: rgba(255,255,255,.06);
+  border: 1px solid rgba(255,255,255,.08);
+}
+.session-list {
+  display: grid;
+  gap: 10px;
+  max-height: 350px;
+  overflow: auto;
+  padding: 0 4px 2px 0;
+}
+.session-list::-webkit-scrollbar {
+  width: 8px;
+}
+.session-list::-webkit-scrollbar-thumb {
+  border-radius: 999px;
+  background: rgba(124,168,255,.30);
+}
+.session-row {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 16px;
+  align-items: center;
+  padding: 13px 14px;
+  border-radius: 18px;
+  background: linear-gradient(135deg, rgba(255,255,255,.075), rgba(255,255,255,.035));
+  border: 1px solid rgba(255,255,255,.08);
+}
+.session-row.needs-sync {
+  border-color: rgba(255,176,32,.28);
+  background: linear-gradient(135deg, rgba(255,176,32,.10), rgba(255,255,255,.035));
+}
+.session-row-main {
+  min-width: 0;
+  display: grid;
+  grid-template-columns: 42px minmax(0, 1fr);
+  gap: 12px;
+  align-items: center;
+}
+.session-thread-icon {
+  width: 42px;
+  height: 42px;
+  border-radius: 14px;
+  display: grid;
+  place-items: center;
+  color: #2ff5b5;
+  background: rgba(31,242,178,.12);
+  border: 1px solid rgba(31,242,178,.18);
+}
+.session-row-text {
+  min-width: 0;
+}
+.session-row-title {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  min-width: 0;
+}
+.session-row-title strong {
+  color: #eef5ff;
+  font-size: 14px;
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+}
+.session-row-text p {
+  margin: 5px 0 0;
+  color: #8fa0bd;
+  font-size: 12px;
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+}
+.session-row-meta {
+  display: grid;
+  grid-template-columns: 92px 92px 92px 72px;
+  gap: 8px;
+  align-items: center;
+  justify-items: end;
+  color: #8fa0bd;
+  font-size: 12px;
+}
+.session-row-meta code,
+.session-row-meta em,
+.session-row-meta small {
+  max-width: 92px;
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+  font-style: normal;
+}
+.session-row-meta code {
+  color: #b9c8e6;
+  font-family: "JetBrains Mono", "Fira Code", "SFMono-Regular", "SF Mono", Menlo, Monaco, Consolas, monospace;
+}
+.mini-tag {
+  flex: 0 0 auto;
+  color: #9fb0cc;
+  font-size: 11px;
+  font-weight: 850;
+  padding: 3px 7px;
+  border-radius: 999px;
+  background: rgba(255,255,255,.07);
+  border: 1px solid rgba(255,255,255,.09);
+}
+.mini-tag.warn {
+  color: #ffd9a1;
+  background: rgba(255,176,32,.10);
+  border-color: rgba(255,176,32,.22);
+}
+.session-empty {
+  min-height: 86px;
+  display: grid;
+  place-items: center;
+  gap: 8px;
+  color: #8fa0bd;
+  border-radius: 18px;
+  border: 1px dashed rgba(255,255,255,.12);
+  background: rgba(255,255,255,.025);
+}
 .session-warning-list {
  display: grid;
  gap: 8px;
@@ -1541,4 +1703,528 @@ html, body, #root {
    grid-column: 2;
    justify-self: start;
  }
+  .session-row {
+    grid-template-columns: 1fr;
+  }
+  .session-row-meta {
+    justify-items: start;
+    grid-template-columns: repeat(4, minmax(0, 1fr));
+    padding-left: 54px;
+  }
+}
+
+/* macOS overlay titlebar: keep top chrome visually integrated with the app theme. */
+.window-drag-strip {
+  position: fixed;
+  z-index: 4;
+  top: 0;
+  left: 0;
+  right: 0;
+  height: 44px;
+  background: linear-gradient(90deg, rgba(16,18,43,.98), rgba(4,19,31,.98));
+  -webkit-app-region: drag;
+}
+
+/* First-run diagnostics wizard */
+.startup-mask {
+  position: fixed;
+  inset: 0;
+  z-index: 55;
+  display: grid;
+  place-items: center;
+  padding: 28px;
+  background: rgba(3, 7, 16, .64);
+  backdrop-filter: blur(14px);
+}
+.startup-card {
+  width: min(880px, calc(100vw - 42px));
+  border-radius: 30px;
+  padding: 24px;
+  display: grid;
+  gap: 18px;
+}
+.startup-head,
+.startup-actions,
+.startup-path-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: flex-start;
+  gap: 14px;
+}
+.startup-head h3 { margin: 2px 0 8px; font-size: 28px; letter-spacing: -.04em; }
+.startup-head p { margin: 0; color: #9cabc6; line-height: 1.6; }
+.startup-path-row { align-items: end; }
+.startup-path-row .field { flex: 1; }
+.startup-check-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 12px;
+}
+.startup-check-item {
+  display: grid;
+  grid-template-columns: 42px minmax(0, 1fr);
+  gap: 12px;
+  padding: 14px;
+  border-radius: 18px;
+  background: rgba(4, 10, 24, .46);
+  border: 1px solid rgba(255,255,255,.09);
+}
+.startup-check-item.ok {
+  border-color: rgba(31,242,178,.24);
+  background: linear-gradient(135deg, rgba(31,242,178,.10), rgba(4,10,24,.46));
+}
+.startup-check-item.manual {
+  border-color: rgba(255,176,32,.25);
+  background: linear-gradient(135deg, rgba(255,176,32,.10), rgba(4,10,24,.46));
+}
+.startup-check-icon {
+  width: 40px;
+  height: 40px;
+  display: grid;
+  place-items: center;
+  border-radius: 14px;
+  color: #2ff5b5;
+  background: rgba(31,242,178,.10);
+}
+.startup-check-item:not(.ok) .startup-check-icon { color: #ffcf88; background: rgba(255,176,32,.10); }
+.startup-check-item strong { display: block; color: #f4f8ff; margin-bottom: 3px; }
+.startup-check-item p { margin: 0 0 5px; color: #9aa9c4; font-size: 13px; }
+.startup-check-item code { display: block; color: #bdd1f0; font-size: 12px; }
+.startup-actions { justify-content: flex-end; }
+
+/* Enhanced session manager */
+.session-list-head-rich { align-items: center; }
+.session-toolbar {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  margin: 0 0 14px;
+  flex-wrap: wrap;
+}
+.session-search {
+  flex: 1 1 320px;
+  min-width: 260px;
+  height: 42px;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 0 12px;
+  color: #91a8ca;
+  background: rgba(4,10,24,.52);
+  border: 1px solid rgba(255,255,255,.10);
+  border-radius: 14px;
+}
+.session-search input {
+  width: 100%;
+  height: 100%;
+  padding: 0;
+  border: 0;
+  background: transparent;
+}
+.session-toggle {
+  height: 42px;
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 0 12px;
+  border-radius: 14px;
+  color: #aebbd3;
+  background: rgba(255,255,255,.06);
+  border: 1px solid rgba(255,255,255,.08);
+  font-size: 13px;
+  font-weight: 800;
+}
+.session-toggle input,
+.session-select-box input { accent-color: #12d3ff; }
+.session-toolbar .small { height: 42px; padding: 0 12px; }
+.enhanced-session-list { max-height: 460px; }
+.session-group { display: grid; gap: 9px; }
+.session-group + .session-group { margin-top: 8px; }
+.session-group-title {
+  position: sticky;
+  top: 0;
+  z-index: 1;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 10px;
+  padding: 8px 10px;
+  border-radius: 12px;
+  color: #9fb0cc;
+  background: rgba(7, 14, 31, .92);
+  border: 1px solid rgba(255,255,255,.07);
+  backdrop-filter: blur(8px);
+  font-size: 12px;
+  font-weight: 850;
+}
+.session-group-title span { overflow: hidden; white-space: nowrap; text-overflow: ellipsis; }
+.session-group-title em {
+  flex: 0 0 auto;
+  font-style: normal;
+  color: #c7f0ff;
+}
+.session-row { grid-template-columns: 28px minmax(0, 1fr) auto; }
+.session-row.selected {
+  border-color: rgba(18,211,255,.42);
+  box-shadow: 0 0 0 2px rgba(18,211,255,.08) inset;
+}
+.session-select-box {
+  display: grid;
+  place-items: center;
+}
+.session-select-box input { width: 17px; height: 17px; }
+.mini-tag.ok {
+  color: #b8ffe9;
+  background: rgba(31,242,178,.10);
+  border-color: rgba(31,242,178,.22);
+}
+@media (max-width: 1320px) {
+  .startup-check-grid { grid-template-columns: 1fr; }
+  .startup-head,
+  .startup-actions,
+  .startup-path-row { flex-direction: column; align-items: stretch; }
+  .session-row { grid-template-columns: 28px 1fr; }
+  .session-row-meta { grid-column: 2; padding-left: 0; }
+}
+
+/* Small interaction polish: make buttons feel alive without changing layout. */
+.primary-btn, .secondary-btn, .ghost-btn, .danger-btn {
+  position: relative;
+  overflow: hidden;
+  will-change: transform, filter;
+}
+.primary-btn:not(:disabled):active,
+.secondary-btn:not(:disabled):active,
+.ghost-btn:not(:disabled):active,
+.danger-btn:not(:disabled):active {
+  transform: translateY(1px) scale(.985);
+  filter: brightness(1.12);
+}
+.primary-btn:not(:disabled)::after,
+.secondary-btn:not(:disabled)::after,
+.ghost-btn:not(:disabled)::after {
+  content: "";
+  position: absolute;
+  inset: 0;
+  pointer-events: none;
+  opacity: 0;
+  background: radial-gradient(circle at var(--x, 50%) var(--y, 50%), rgba(255,255,255,.22), transparent 32%);
+  transition: opacity .18s ease;
+}
+.primary-btn:not(:disabled):hover::after,
+.secondary-btn:not(:disabled):hover::after,
+.ghost-btn:not(:disabled):hover::after {
+  opacity: .55;
+}
+.lively-btn:not(:disabled) {
+  animation: subtle-ready-pulse 2.8s ease-in-out infinite;
+}
+.lively-btn:disabled {
+  animation: none;
+}
+@keyframes subtle-ready-pulse {
+  0%, 100% { box-shadow: 0 12px 28px rgba(67,112,255,.18); }
+  50% { box-shadow: 0 16px 34px rgba(18,211,255,.24); }
+}
+
+.hidden-file-input {
+  position: fixed;
+  width: 1px;
+  height: 1px;
+  opacity: 0;
+  pointer-events: none;
+}
+.secret-input-wrap {
+  position: relative;
+  display: flex;
+  align-items: center;
+}
+.secret-input-wrap input {
+  width: 100%;
+  height: 44px;
+  padding: 0 46px 0 13px;
+}
+.secret-toggle {
+  position: absolute;
+  right: 7px;
+  width: 32px;
+  height: 32px;
+  display: grid;
+  place-items: center;
+  border: 0;
+  border-radius: 11px;
+  color: #b8c7e4;
+  background: rgba(255,255,255,.07);
+  transition: .16s ease;
+}
+.secret-toggle:hover {
+  color: #fff;
+  background: rgba(18,211,255,.16);
+  transform: scale(1.04);
+}
+.user-session-stats {
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+}
+.session-status-card.needs-sync .session-status-icon,
+.user-session-stats .stat-icon:not(.stat-icon-ok) {
+  animation: attention-glow 1.5s ease-in-out infinite;
+}
+@keyframes attention-glow {
+  0%, 100% { box-shadow: 0 0 0 rgba(255,176,32,0); }
+  50% { box-shadow: 0 0 24px rgba(255,176,32,.22); }
+}
+.provider-card,
+.instruction-row,
+.session-row,
+.stat-card {
+  transition: transform .18s ease, border-color .18s ease, background .18s ease, box-shadow .18s ease;
+}
+.provider-card:hover,
+.instruction-row:hover,
+.session-row:hover {
+  transform: translateY(-1px);
+}
+@media (max-width: 1320px) {
+  .user-session-stats { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+}
+
+.prompt-remote-meta {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin-top: 7px;
+  min-width: 0;
+}
+.prompt-remote-meta small {
+  color: #8293b1;
+  font-size: 11px;
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+}
+
+/* Smoother boot / first-run transitions */
+.boot-panel {
+  position: relative;
+  min-height: 420px;
+  overflow: hidden;
+  animation: boot-panel-in .42s cubic-bezier(.2,.8,.2,1) both;
+}
+.boot-panel::before {
+  content: "";
+  position: absolute;
+  width: 420px;
+  height: 420px;
+  border-radius: 999px;
+  background: radial-gradient(circle, rgba(45, 170, 255, .24), transparent 62%);
+  filter: blur(6px);
+  animation: boot-glow-drift 4.8s ease-in-out infinite;
+}
+.boot-logo-wrap {
+  position: relative;
+  width: 174px;
+  height: 174px;
+  display: grid;
+  place-items: center;
+}
+.boot-logo {
+  position: relative;
+  z-index: 2;
+  width: 126px;
+  height: 126px;
+  border-radius: 34px;
+  display: grid;
+  place-items: center;
+  color: #f7fbff;
+  font-weight: 900;
+  letter-spacing: -.06em;
+  font-size: 24px;
+  background: linear-gradient(145deg, rgba(33, 96, 255, .92), rgba(18, 218, 255, .74));
+  border: 1px solid rgba(255,255,255,.28);
+  box-shadow: 0 26px 70px rgba(20, 130, 255, .26), inset 0 1px 0 rgba(255,255,255,.38);
+  animation: boot-logo-float 2.8s ease-in-out infinite;
+}
+.boot-orbit {
+  position: absolute;
+  inset: 12px;
+  border-radius: 999px;
+  border: 1px solid rgba(113, 205, 255, .22);
+  border-top-color: rgba(89, 210, 255, .9);
+  border-right-color: rgba(108, 134, 255, .55);
+  animation: boot-orbit-spin 1.35s linear infinite;
+}
+.boot-progress {
+  width: min(320px, 68%);
+  height: 7px;
+  border-radius: 999px;
+  overflow: hidden;
+  background: rgba(255,255,255,.08);
+  border: 1px solid rgba(255,255,255,.09);
+}
+.boot-progress span {
+  display: block;
+  width: 44%;
+  height: 100%;
+  border-radius: inherit;
+  background: linear-gradient(90deg, transparent, #43dfff, #6c7dff, transparent);
+  animation: boot-progress-run 1.25s ease-in-out infinite;
+}
+.startup-mask {
+  animation: startup-mask-in .24s ease-out both;
+}
+.startup-mask.closing {
+  animation: startup-mask-out .26s ease-in both;
+}
+.startup-card {
+  animation: startup-card-in .46s cubic-bezier(.16,1,.3,1) both;
+}
+.startup-mask.closing .startup-card {
+  animation: startup-card-out .24s ease-in both;
+}
+.startup-check-item {
+  animation: startup-item-in .42s cubic-bezier(.2,.8,.2,1) both;
+}
+.startup-check-item:nth-child(2) { animation-delay: .04s; }
+.startup-check-item:nth-child(3) { animation-delay: .08s; }
+.startup-check-item:nth-child(4) { animation-delay: .12s; }
+@keyframes boot-panel-in {
+  from { opacity: 0; transform: translateY(10px) scale(.985); }
+  to { opacity: 1; transform: translateY(0) scale(1); }
+}
+@keyframes boot-logo-float {
+  0%, 100% { transform: translateY(0); filter: brightness(1); }
+  50% { transform: translateY(-7px); filter: brightness(1.08); }
+}
+@keyframes boot-orbit-spin {
+  to { transform: rotate(360deg); }
+}
+@keyframes boot-progress-run {
+  0% { transform: translateX(-110%); }
+  100% { transform: translateX(250%); }
+}
+@keyframes boot-glow-drift {
+  0%, 100% { transform: translate(-120px, -80px) scale(.92); opacity: .75; }
+  50% { transform: translate(120px, 60px) scale(1.12); opacity: 1; }
+}
+@keyframes startup-mask-in {
+  from { opacity: 0; }
+  to { opacity: 1; }
+}
+@keyframes startup-mask-out {
+  from { opacity: 1; }
+  to { opacity: 0; }
+}
+@keyframes startup-card-in {
+  from { opacity: 0; transform: translateY(18px) scale(.975); }
+  to { opacity: 1; transform: translateY(0) scale(1); }
+}
+@keyframes startup-card-out {
+  from { opacity: 1; transform: translateY(0) scale(1); }
+  to { opacity: 0; transform: translateY(10px) scale(.985); }
+}
+@keyframes startup-item-in {
+  from { opacity: 0; transform: translateY(8px); }
+  to { opacity: 1; transform: translateY(0); }
+}
+@media (prefers-reduced-motion: reduce) {
+  .boot-panel,
+  .boot-panel::before,
+  .boot-logo,
+  .boot-orbit,
+  .boot-progress span,
+  .startup-mask,
+  .startup-card,
+  .startup-check-item {
+    animation: none !important;
+  }
+}
+
+/* Page switch transition */
+.content > .panel,
+.content > .grid,
+.content > .about-page,
+.content > .settings-panel,
+.content > .update-strip {
+  animation: page-soft-in .24s cubic-bezier(.2,.8,.2,1) both;
+}
+@keyframes page-soft-in {
+  from { opacity: 0; transform: translateY(8px) scale(.992); filter: blur(2px); }
+  to { opacity: 1; transform: translateY(0) scale(1); filter: blur(0); }
+}
+
+/* Skills & MCP */
+.skills-mcp-panel { display: grid; gap: 16px; }
+.skills-mcp-summary {
+  display: grid;
+  grid-template-columns: minmax(180px, 240px) minmax(180px, 240px) 1fr;
+  gap: 14px;
+  align-items: stretch;
+}
+.skills-path-card {
+  min-height: 110px;
+  border-radius: 24px;
+  padding: 18px;
+  background: linear-gradient(180deg, rgba(255,255,255,.08), rgba(255,255,255,.035));
+  border: 1px solid rgba(255,255,255,.1);
+  display: grid;
+  align-content: center;
+  gap: 8px;
+  min-width: 0;
+}
+.skills-path-card span { color: #91a0bb; font-size: 13px; font-weight: 800; }
+.skills-path-card code { color: #d9e6ff; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.skills-mcp-columns {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 16px;
+  align-items: start;
+}
+.skills-mcp-card {
+  border-radius: 26px;
+  padding: 18px;
+  background: rgba(4, 12, 27, .34);
+  border: 1px solid rgba(255,255,255,.09);
+  min-width: 0;
+}
+.skills-mcp-card-head {
+  display: flex;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 14px;
+}
+.skills-mcp-card-head strong { font-size: 18px; color: #f5f9ff; }
+.skills-mcp-card-head p { margin: 5px 0 0; color: #8fa0bc; line-height: 1.55; font-size: 13px; }
+.skills-mcp-list { display: grid; gap: 12px; max-height: calc(100vh - 365px); overflow: auto; padding-right: 4px; }
+.skill-mcp-row {
+  display: grid;
+  grid-template-columns: auto minmax(0, 1fr) auto auto;
+  gap: 12px;
+  align-items: center;
+  min-height: 92px;
+  padding: 14px;
+  border-radius: 22px;
+  background: linear-gradient(180deg, rgba(255,255,255,.065), rgba(255,255,255,.03));
+  border: 1px solid rgba(255,255,255,.09);
+  transition: transform .18s ease, border-color .18s ease, background .18s ease;
+}
+.skill-mcp-row:hover { transform: translateY(-1px); border-color: rgba(87, 173, 255, .35); }
+.skill-mcp-row.selected { border-color: rgba(35, 207, 255, .62); background: linear-gradient(180deg, rgba(36,135,255,.16), rgba(17,75,112,.12)); }
+.skill-mcp-main { min-width: 0; }
+.skill-mcp-main strong { display: block; color: #f5f9ff; margin-bottom: 4px; }
+.skill-mcp-main p { margin: 0 0 6px; color: #9caac4; overflow: hidden; white-space: nowrap; text-overflow: ellipsis; }
+.skill-mcp-main code { display: block; color: #bcd0ef; overflow: hidden; white-space: nowrap; text-overflow: ellipsis; }
+.skill-mcp-meta { display: grid; justify-items: end; gap: 6px; color: #8fa0bc; font-size: 12px; }
+.session-empty.compact { min-height: 96px; }
+.skills-loading { min-height: 280px; }
+@media (max-width: 1280px) {
+  .skills-mcp-summary { grid-template-columns: 1fr; }
+  .skills-mcp-columns { grid-template-columns: 1fr; }
+  .skills-mcp-list { max-height: none; }
+}
+@media (prefers-reduced-motion: reduce) {
+  .content > .panel,
+  .content > .grid,
+  .content > .about-page,
+  .content > .settings-panel,
+  .content > .update-strip { animation: none !important; }
 }
@@ -1,7 +1,7 @@
 {
  "name": "codex-x-workspace",
  "private": true,
-  "version": "0.2.8",
+  "version": "0.2.19",
  "scripts": {
    "dev": "pnpm --dir apps/desktop tauri dev",
    "build": "pnpm --dir apps/desktop tauri build",
@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [ $# -ne 1 ]; then
+  echo "Usage: scripts/release.sh <version>" >&2
+  echo "Example: scripts/release.sh 0.2.18" >&2
+  exit 1
+fi
+
+version="${1#v}"
+tag="v${version}"
+
+if ! [[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+([-.][0-9A-Za-z.-]+)?$ ]]; then
+  echo "Invalid version: $1" >&2
+  exit 1
+fi
+
+if ! git diff --quiet || ! git diff --cached --quiet; then
+  echo "Working tree has uncommitted changes. Please commit or stash first." >&2
+  exit 1
+fi
+
+if git rev-parse "$tag" >/dev/null 2>&1; then
+  echo "Tag already exists: $tag" >&2
+  exit 1
+fi
+
+VERSION="$version" node --input-type=module <<'NODE'
+import fs from 'node:fs';
+const version = process.env.VERSION;
+for (const file of ['package.json', 'apps/desktop/package.json']) {
+  const data = JSON.parse(fs.readFileSync(file, 'utf8'));
+  data.version = version;
+  fs.writeFileSync(file, JSON.stringify(data, null, 2) + '\n');
+}
+NODE
+
+VERSION="$version" python3 - <<'PY'
+import os
+from pathlib import Path
+version = os.environ['VERSION']
+files = [
+    Path('apps/desktop/src-tauri/Cargo.toml'),
+    Path('apps/desktop/src-tauri/tauri.conf.json'),
+]
+for path in files:
+    text = path.read_text()
+    if path.suffix == '.toml':
+        text = text.replace(next(line for line in text.splitlines() if line.startswith('version = ')), f'version = "{version}"', 1)
+    else:
+        import json
+        data = json.loads(text)
+        data['version'] = version
+        text = json.dumps(data, indent=2, ensure_ascii=False) + '\n'
+    path.write_text(text)
+
+changelog = Path('CHANGELOG.md')
+text = changelog.read_text() if changelog.exists() else '# Changelog\n\n'
+heading = f'## [v{version}] - TODO'
+if f'## [v{version}]' not in text:
+    lines = text.splitlines()
+    insert_at = 1 if lines and lines[0].startswith('#') else 0
+    block = [
+        '',
+        heading,
+        '',
+        '- TODO: add release highlights.',
+    ]
+    lines[insert_at:insert_at] = block
+    changelog.write_text('\n'.join(lines).rstrip() + '\n')
+PY
+
+pnpm --dir apps/desktop typecheck
+cargo check --manifest-path apps/desktop/src-tauri/Cargo.toml
+
+git add package.json apps/desktop/package.json apps/desktop/src-tauri/Cargo.toml apps/desktop/src-tauri/tauri.conf.json CHANGELOG.md
+git commit -m "Release ${tag}"
+git tag "$tag"
+
+echo "Prepared ${tag}. Review CHANGELOG TODO, then push with:"
+echo "  git push origin main ${tag}"
Author	SHA1	Message	Date
yyyyyynnn	9cbd7bf351	Add Skills and MCP management	2026-07-06 01:11:13 +08:00
yyyyyynnn	6f77eec4ba	Release v0.2.18	2026-07-05 23:58:44 +08:00
yyyyyynnn	d3145fd24d	Add remote prompt template updates	2026-07-05 23:57:59 +08:00
yyyyyynnn	c8f624fe91	Polish prompt import and session UX	2026-07-05 23:47:37 +08:00
yyyyyynnn	c10b97b25e	Add startup diagnostics and session tools	2026-07-05 23:39:43 +08:00
yyyyyynnn	9415749af2	Add English README	2026-07-05 17:17:12 +08:00
yyyyyynnn	a33c78a6e8	Use official Star History embed	2026-07-05 11:28:26 +08:00
yyyyyynnn	d7b852cec9	Use local star history chart	2026-07-05 11:23:24 +08:00
yyyyyynnn	31c630f890	Clarify Star History delay	2026-07-05 11:02:02 +08:00
yyyyyynnn	37d911d94a	Normalize release asset names	2026-07-04 21:48:38 +08:00
yyyyyynnn	69e0a46430	Fix Intel macOS runner	2026-07-04 19:41:30 +08:00
yyyyyynnn	ab19b2ef33	Add Intel macOS and Windows portable builds	2026-07-04 19:32:40 +08:00
yyyyyynnn	ff34902641	Add star history chart	2026-07-04 16:28:20 +08:00
yyyyyynnn	07e4968ade	Add thanks section	2026-07-04 16:26:37 +08:00
yyyyyynnn	ba5e90e24f	Polish session page and external links	2026-07-04 15:44:25 +08:00
yyyyyynnn	8ec879e7a9	Fix macOS titlebar safe area	2026-07-04 15:28:42 +08:00
yyyyyynnn	971236fc67	Clarify Codex desktop support	2026-07-04 15:21:44 +08:00
yyyyyynnn	fb53b90763	Add README feature table	2026-07-04 15:15:34 +08:00
yyyyyynnn	257a4385b7	Polish mac titlebar and sessions panel	2026-07-04 15:06:17 +08:00
yyyyyynnn	c0f3c9240c	Polish README layout and license	2026-07-04 14:56:46 +08:00
yyyyyynnn	67ad656b45	Organize README screenshots	2026-07-04 14:53:34 +08:00
yyyyyynnn	5dbd6e2359	Refresh project README with previews	2026-07-04 14:51:00 +08:00
yyyyyynnn	da3c52a7de	Restore MSI style and list sessions	2026-07-04 14:32:42 +08:00
yyyyyynnn	34ec59f28b	Soften startup update notification	2026-07-04 14:03:52 +08:00
yyyyyynnn	9a82612d5d	Fix release asset upload	2026-07-04 13:47:14 +08:00
yyyyyynnn	10c16cba7b	Fix release workflow publishing	2026-07-04 13:35:51 +08:00