Add remote folder picker

Author: MehediHossain95

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.6.0
+
+- Added an Apps-compatible visual folder picker resource for saved SSH hosts.
+- Added `remote_render_folder_picker`, `remote_browse_dir`, and `remote_select_workspace`.
+- Added `remote_connection_auth_check` to detect whether key/config authentication works or password setup is needed.
+- Workspace selection now saves `workspaceRoot` and adds the selected directory to `allowedPaths`.
+
 ## 0.5.0
 
 - Added `remote_connection_wizard`, a simple user-facing Add SSH Connection tool with only Name, SSH Host, SSH Port, and Identity File fields.

README.md

@@ -98,6 +98,7 @@ The package publishing workflow lives at:
 ## Key Features
 
 - Local MCP server with no runtime npm dependencies
+- Apps-compatible remote folder picker for selecting and saving a workspace directory
 - SSH host aliases instead of arbitrary target selection
 - Path allowlists for file tools
 - Remote writes disabled by default

plugins/remote-ssh/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "remote-ssh",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Enterprise-grade Remote SSH tools for Codex with host policies, audit logging, and safe file operations.",
   "author": {
     "name": "Zain Technologies LTD",
@@ -22,7 +22,7 @@
   "interface": {
     "displayName": "Remote SSH",
     "shortDescription": "Enterprise Remote SSH operations for Codex",
-    "longDescription": "Remote SSH by Zain Technologies LTD connects Codex to trusted servers, devboxes, and private infrastructure through a local MCP bridge. It supports a simple Add SSH Connection wizard, conversational connection setup, saved host aliases, remote workspace bootstrap checks, tree/search/git tools, path allowlists, write opt-in controls, blocked command policies, timeouts, output limits, and JSONL audit logs for professional remote development and operations workflows.",
+    "longDescription": "Remote SSH by Zain Technologies LTD connects Codex to trusted servers, devboxes, and private infrastructure through a local MCP bridge. It supports a simple Add SSH Connection wizard, an Apps-compatible remote folder picker, conversational connection setup, saved host aliases, remote workspace bootstrap checks, tree/search/git tools, path allowlists, write opt-in controls, blocked command policies, timeouts, output limits, and JSONL audit logs for professional remote development and operations workflows.",
     "developerName": "Zain Technologies LTD",
     "category": "Development",
     "capabilities": [

plugins/remote-ssh/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.6.0
+
+- Added an Apps-compatible visual folder picker resource for saved SSH hosts.
+- Added `remote_render_folder_picker`, `remote_browse_dir`, and `remote_select_workspace`.
+- Added `remote_connection_auth_check` to detect whether key/config authentication works or password setup is needed.
+- Workspace selection now saves `workspaceRoot` and adds the selected directory to `allowedPaths`.
+
 ## 0.5.0
 
 - Added `remote_connection_wizard`, a simple user-facing Add SSH Connection tool with only Name, SSH Host, SSH Port, and Identity File fields.

plugins/remote-ssh/README.md

@@ -21,6 +21,8 @@ Modern teams often keep source code, logs, services, and deployment tools on rem
 This plugin exposes clear tools for common remote work:
 
 - add and save SSH connections conversationally
+- browse remote directories visually when the host supports Apps-compatible plugin UI
+- select a remote folder once and save it as the default workspace
 - inspect whether a remote host is ready for development
 - browse bounded remote workspace trees
 - search text inside remote workspaces
@@ -110,6 +112,28 @@ The plugin saves profiles to:
 
 Advanced users can still configure hosts through `REMOTE_SSH_HOSTS` or `REMOTE_SSH_CONFIG_FILE`.
 
+## Visual Folder Picker
+
+Remote SSH includes an Apps-compatible folder picker surface. The intended flow is:
+
+```text
+Choose saved host -> browse remote folders -> select workspace -> work from saved alias
+```
+
+The picker is backed by MCP tools, so the same flow can be used conversationally if the current Codex surface does not render native plugin UI yet:
+
+```text
+Use Remote SSH to open the folder picker for my ubuntu host.
+```
+
+```text
+Browse /home/mehedi/projects on ubuntu and select /home/mehedi/projects/ZAINGUARD as the workspace.
+```
+
+Selecting a workspace saves the directory as `workspaceRoot` and adds it to `allowedPaths` for future file, tree, search, and Git tools.
+
+Authentication remains key-first. If key or SSH config authentication fails, the plugin reports that password setup is needed, but it does not store plaintext passwords in the Remote SSH config.
+
 PowerShell example:
 
 ```powershell
@@ -152,11 +176,15 @@ Use Remote SSH to tail the last 100 lines of /var/log/nginx/error.log on hms.
 
 | Tool | Purpose |
 | --- | --- |
+| `remote_render_folder_picker` | Renders the Apps-compatible visual folder picker for saved hosts. |
 | `remote_connection_wizard` | Adds a connection with the simple Name, SSH Host, SSH Port, Identity File form. |
 | `remote_add_host` | Saves or updates an SSH connection profile. |
 | `remote_remove_host` | Removes a saved SSH connection profile. |
+| `remote_connection_auth_check` | Checks whether key/config auth works or password setup is needed. |
 | `remote_test_connection` | Validates a saved SSH connection. |
 | `remote_hosts` | Lists configured host aliases and non-secret policy metadata. |
+| `remote_browse_dir` | Lists child directories for a visual or conversational folder picker. |
+| `remote_select_workspace` | Saves a selected remote directory as `workspaceRoot` and an allowed path. |
 | `remote_run` | Runs a non-interactive command on a configured host. |
 | `remote_workspace_bootstrap` | Checks remote OS, user, shell, workspace path, and dev tools. |
 | `remote_tree` | Shows a bounded remote workspace tree. |

plugins/remote-ssh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zaintechnologiesltd/codex-remote-ssh",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Enterprise-grade Remote SSH MCP tools for OpenAI Codex.",
   "license": "MIT",
   "author": {