197 Commits

• feat: parse info from auth.json and show in /status (#1923)

  - `/status` renders
      ```
      signed in with chatgpt
        login: example@example.com
        plan: plus
      ```
  - Setup for using this info in a few more places.
  
  ---------
  
  Co-authored-by: Michael Bolin <mbolin@openai.com>

  ae · 2025-08-07 01:27:45 -07:00
  0334476894
• [fix] fix absolute and % token counts (#1931)

  - For absolute, use non-cached input + output.
  - For estimating what % of the model's context window is used, we need
  to account for reasoning output tokens from prior turns being dropped
  from the context window. We approximate this here by subtracting
  reasoning output tokens from the total. This will be off for the current
  turn and pending function calls. We can improve it later.

  ae · 2025-08-07 08:13:36 +00:00
  28395df957
• Tint chat composer background (#1921)

  ## Summary
  - give the chat composer a subtle custom background and apply it across
  the full area drawn
  
  <img width="1008" height="718" alt="composer-bg"
  src="https://github.com/user-attachments/assets/4b0f7f69-722a-438a-b4e9-0165ae8865a6"
  />
  
  - update turn interrupted to be more human readable
  <img width="648" height="170" alt="CleanShot 2025-08-06 at 22 44 47@2x"
  src="https://github.com/user-attachments/assets/8d35e53a-bbfa-48e7-8612-c280a54e01dd"
  />
  
  ## Testing
  - `cargo test --all-features` *(fails: `let` expressions in
  `core/src/client.rs` require newer rustc)*
  - `just fix` *(fails: `let` expressions in `core/src/client.rs` require
  newer rustc)*
  
  ------
  https://chatgpt.com/codex/tasks/task_i_68941f32c1008322bbcc39ee1d29a526

  Ed Bayes · 2025-08-07 00:46:45 -07:00
  eb80614a7c
• feat: add /tmp by default (#1919)

  Replaces the `include_default_writable_roots` option on
  `sandbox_workspace_write` (that defaulted to `true`, which was slightly
  weird/annoying) with `exclude_tmpdir_env_var`, which defaults to
  `false`.
  
  Though perhaps more importantly `/tmp` is now enabled by default as part
  of `sandbox_mode = "workspace-write"`, though `exclude_slash_tmp =
  false` can be used to disable this.

  Michael Bolin · 2025-08-07 00:17:00 -07:00
  cd5f9074af
• Ensure exec command end always emitted (#1908)

  ## Summary
  - defer ExecCommandEnd emission until after sandbox resolution
  - make sandbox error handler return final exec output and response
  - align sandbox error stderr with response content and rename to
  `final_output`
  - replace unstable `let` chains in client command header logic
  
  ## Testing
  - `just fmt`
  - `just fix`
  - `cargo test --all-features` *(fails: NotPresent in
  core/tests/client.rs)*
  
  ------
  https://chatgpt.com/codex/tasks/task_i_6893e63b0c408321a8e1ff2a052c4c51

  aibrahim-oai · 2025-08-07 06:25:56 +00:00
  f15e0fe1df
• Migrate GitWarning to OnboardingScreen (#1915)

  This paves the way to do per-directory approval settings
  (https://github.com/openai/codex/pull/1912).
  
  This also lets us pass in a Config/ChatWidgetArgs into onboarding which
  can then mutate it and emit the ChatWidgetArgs it wants at the end which
  may be modified by the said approval settings.
  
  <img width="1180" height="428" alt="CleanShot 2025-08-06 at 19 30 55"
  src="https://github.com/user-attachments/assets/4dcfda42-0f5e-4b6d-a16d-2597109cc31c"
  />

  Gabriel Peal · 2025-08-06 22:39:07 -04:00
  8a990b5401
• Add 2025-08-06 model family (#1899)
  pakrym-oai · 2025-08-06 23:14:02 +00:00
  57c973b571
• First pass at a TUI onboarding (#1876)

  This sets up the scaffolding and basic flow for a TUI onboarding
  experience. It covers sign in with ChatGPT, env auth, as well as some
  safety guidance.
  
  Next up:
  1. Replace the git warning screen
  2. Use this to configure default approval/sandbox modes
  
  
  Note the shimmer flashes are from me slicing the video, not jank.
  
  https://github.com/user-attachments/assets/0fbe3479-fdde-41f3-87fb-a7a83ab895b8

  Gabriel Peal · 2025-08-06 18:22:14 -04:00
  2d5de795aa
• Prefer env var auth over default codex auth (#1861)

  ## Summary
  - Prioritize provider-specific API keys over default Codex auth when
  building requests
  - Add test to ensure provider env var auth overrides default auth
  
  ## Testing
  - `just fmt`
  - `just fix` *(fails: `let` expressions in this position are unstable)*
  - `cargo test --all-features` *(fails: `let` expressions in this
  position are unstable)*
  
  ------
  https://chatgpt.com/codex/tasks/task_i_68926a104f7483208f2c8fd36763e0e3

  pakrym-oai · 2025-08-06 13:02:00 -07:00
  8262ba58b2
• fix: support $CODEX_HOME/AGENTS.md instead of $CODEX_HOME/instructions.md (#1891)

  The docs and code do not match. It turns out the docs are "right" in
  they are what we have been meaning to support, so this PR updates the
  code:
  
  
  https://github.com/openai/codex/blob/ae88b69b09f876a3017196a9cd66f83dac79d9d7/README.md#L298-L302
  
  Support for `instructions.md` is a holdover from the TypeScript CLI, so
  we are just going to drop support for it altogether rather than maintain
  it in perpetuity.

  Michael Bolin · 2025-08-06 11:48:03 -07:00
  64f2f2eca2
• [env] Remove git config for now (#1884)

  ## Summary
  Forgot to remove this in #1869 last night! Too much of a performance hit
  on the main thread. We can bring it back via an async thread on startup.

  Dylan · 2025-08-06 08:05:17 -07:00
  dc468d563f
• [prompts] Add <environment_context> (#1869)

  ## Summary
  Includes a new user message in the api payload which provides useful
  environment context for the model, so it knows about things like the
  current working directory and the sandbox.
  
  ## Testing
  Updated unit tests

  Dylan · 2025-08-06 01:13:31 -07:00
  3e8bcf0247
• Add OSS model info (#1860)

  Add somewhat arbitrarily chosen context window/output limit.

  easong-openai · 2025-08-05 22:35:00 -07:00
  f8d70d67b6
• [approval_policy] Add OnRequest approval_policy (#1865)

  ## Summary
  A split-up PR of #1763 , stacked on top of a tools refactor #1858 to
  make the change clearer. From the previous summary:
  
  > Let's try something new: tell the model about the sandbox, and let it
  decide when it will need to break the sandbox. Some local testing
  suggests that it works pretty well with zero iteration on the prompt!
  
  ## Testing
  - [x] Added unit tests
  - [x] Tested locally and it appears to work smoothly!

  Dylan · 2025-08-05 20:44:20 -07:00
  725dd6be6a
• [core] Separate tools config from openai client (#1858)

  ## Summary
  In an effort to make tools easier to work with and more configurable,
  I'm introducing `ToolConfig` and updating `Prompt` to take in a general
  list of Tools. I think this is simpler and better for a few reasons:
  - We can easily assemble tools from various sources (our own harness,
  mcp servers, etc.) and we can consolidate the logic for constructing the
  logic in one place that is separate from serialization.
  - client.rs no longer needs arbitrary config values, it just takes in a
  list of tools to serialize
  
  A hefty portion of the PR is now updating our conversion of
  `mcp_types::Tool` to `OpenAITool`, but considering that @bolinfest
  accurately called this out as a TODO long ago, I think it's time we
  tackled it.
  
  ## Testing
  - [x] Experimented locally, no changes, as expected
  - [x] Added additional unit tests
  - [x] Responded to rust-review

  Dylan · 2025-08-05 19:27:52 -07:00
  aff97ed7dd
• [core] Stop escalating timeouts (#1853)

  ## Summary
  Escalating out of sandbox is (almost always) not going to fix
  long-running commands timing out - therefore we should just pass the
  failure back to the model instead of asking the user to re-run a command
  that took a long time anyway.
  
  ## Testing
  - [x] Ran locally with a timeout and confirmed this worked as expected

  Dylan · 2025-08-05 17:52:25 -07:00
  ea7d3f27bd
• chore: remove unnecessary default_ prefix (#1854)

  This prefix is not inline with the other fields on the `ConfigOverrides`
  struct.

  Michael Bolin · 2025-08-05 14:42:49 -07:00
  42bd73e150
• fix: when using --oss, ensure correct configuration is threaded through correctly (#1859)

  This PR started as an investigation with the goal of eliminating the use
  of `unsafe { std::env::set_var() }` in `ollama/src/client.rs`, as
  setting environment variables in a multithreaded context is indeed
  unsafe and these tests were observed to be flaky, as a result.
  
  Though as I dug deeper into the issue, I discovered that the logic for
  instantiating `OllamaClient` under test scenarios was not quite right.
  In this PR, I aimed to:
  
  - share more code between the two creation codepaths,
  `try_from_oss_provider()` and `try_from_provider_with_base_url()`
  - use the values from `Config` when setting up Ollama, as we have
  various mechanisms for overriding config values, so we should be sure
  that we are always using the ultimate `Config` for things such as the
  `ModelProviderInfo` associated with the `oss` id
  
  Once this was in place,
  `OllamaClient::try_from_provider_with_base_url()` could be used in unit
  tests for `OllamaClient` so it was possible to create a properly
  configured client without having to set environment variables.

  Michael Bolin · 2025-08-05 13:55:32 -07:00
  d365cae077
• Introduce --oss flag to use gpt-oss models (#1848)

  This adds support for easily running Codex backed by a local Ollama
  instance running our new open source models. See
  https://github.com/openai/gpt-oss for details.
  
  If you pass in `--oss` you'll be prompted to install/launch ollama, and
  it will automatically download the 20b model and attempt to use it.
  
  We'll likely want to expand this with some options later to make the
  experience smoother for users who can't run the 20b or want to run the
  120b.
  
  Co-authored-by: Michael Bolin <mbolin@openai.com>

  easong-openai · 2025-08-05 11:31:11 -07:00
  9285350842
• Rescue chat completion changes (#1846)

  https://github.com/openai/codex/pull/1835 has some messed up history.
  
  This adds support for streaming chat completions, which is useful for ollama. We should probably take a very skeptical eye to the code introduced in this PR.
  
  ---------
  
  Co-authored-by: Ahmed Ibrahim <aibrahim@openai.com>

  easong-openai · 2025-08-05 08:56:13 +00:00
  e0303dbac0
• [prompt] Update prompt.md (#1839)

  ## Summary
  Additional clarifications to our prompt. Still very concise, but we'll
  continue to add more here.

  Dylan · 2025-08-05 00:43:23 -07:00
  d31e149cb1
• chore: introduce ModelFamily abstraction (#1838)

  To date, we have a number of hardcoded OpenAI model slug checks spread
  throughout the codebase, which makes it hard to audit the various
  special cases for each model. To mitigate this issue, this PR introduces
  the idea of a `ModelFamily` that has fields to represent the existing
  special cases, such as `supports_reasoning_summaries` and
  `uses_local_shell_tool`.
  
  There is a `find_family_for_model()` function that maps the raw model
  slug to a `ModelFamily`. This function hardcodes all the knowledge about
  the special attributes for each model. This PR then replaces the
  hardcoded model name checks with checks against a `ModelFamily`.
  
  Note `ModelFamily` is now available as `Config::model_family`. We should
  ultimately remove `Config::model` in favor of
  `Config::model_family::slug`.

  Michael Bolin · 2025-08-04 23:50:03 -07:00
  136b3ee5bf
• Stream model responses (#1810)

  Stream models thoughts and responses instead of waiting for the whole
  thing to come through. Very rough right now, but I'm making the risk call to push through.

  easong-openai · 2025-08-05 04:23:22 +00:00
  906d449760
• [prompts] Better user_instructions handling (#1836)

  ## Summary
  Our recent change in #1737 can sometimes lead to the model confusing
  AGENTS.md context as part of the message. But a little prompting and
  formatting can help fix this!
  
  ## Testing
  - Ran locally with a few different prompts to verify the model
  behaves well.
  - Updated unit tests

  Dylan · 2025-08-04 18:55:57 -07:00
  063083af15
• Restore API key and query param overrides (#1826)

  Addresses https://github.com/openai/codex/issues/1796

  pakrym-oai · 2025-08-04 18:07:49 -07:00
  84bcadb8d9
• Revert to 3f13ebce10 without rewriting history. Wrong merge
  Ahmed Ibrahim · 2025-08-04 17:03:24 -07:00
  e38ce39c51
• unify flag
  Ahmed Ibrahim · 2025-08-04 16:56:52 -07:00
  1a33de34b0
• add raw reasoning
  Ahmed Ibrahim · 2025-08-04 16:49:42 -07:00
  bd171e5206
• chore(deps): bump toml from 0.9.2 to 0.9.4 in /codex-rs (#1815)

  Bumps [toml](https://github.com/toml-rs/toml) from 0.9.2 to 0.9.4.
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/toml-rs/toml/commit/2126e6af51aa2dc276b5756c06f5c2a20b8991d3"><code>2126e6a</code></a>
  chore: Release</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/fa2100a888480f03413b64fed1f814c3a26d62aa"><code>fa2100a</code></a>
  docs: Update changelog</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/0c75bbd6f750db2330c84b94b0ff1ac47167cce1"><code>0c75bbd</code></a>
  feat(toml): Expose DeInteger/DeFloat as_str/radix (<a
  href="https://redirect.github.com/toml-rs/toml/issues/1021">#1021</a>)</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/e3d64dff479a791a0b35ab64a1ce10a87113fa65"><code>e3d64df</code></a>
  feat(toml): Expose DeFloat::as_str</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/ffdd2110334e0149e9820e23f41325c67d5f44a0"><code>ffdd211</code></a>
  feat(toml): Expose DeInteger::as_str/radix</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/9e7adcc7fa7311e20452e40d636a56ec9a998a70"><code>9e7adcc</code></a>
  docs(readme): Fix links to crates (<a
  href="https://redirect.github.com/toml-rs/toml/issues/1020">#1020</a>)</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/73d04e20b5532edb9e7bf15c2c622285b389dc45"><code>73d04e2</code></a>
  docs(readme): Fix links to crates</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/da667e8a7dd2aca6ead9e40260f8defc756ce4c0"><code>da667e8</code></a>
  chore: Release</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/b1327fbe7cf284058e06cbce8714cc5dc09eadc4"><code>b1327fb</code></a>
  docs: Update changelog</li>
  <li><a
  href="https://github.com/toml-rs/toml/commit/fb5346827ee473a7e9df474b81e3dbf047d6ecc9"><code>fb53468</code></a>
  fix(toml): Don't enable std in toml_writer (<a
  href="https://redirect.github.com/toml-rs/toml/issues/1019">#1019</a>)</li>
  <li>Additional commits viewable in <a
  href="https://github.com/toml-rs/toml/compare/toml-v0.9.2...toml-v0.9.4">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=toml&package-manager=cargo&previous-version=0.9.2&new-version=0.9.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-08-04 14:24:19 -07:00
  2899817c94
• Update prompt.md (#1819)

  The existing prompt is really bad. As a low-hanging fruit, let's correct
  the apply_patch instructions - this helps smaller models successfully
  apply patches.

  easong-openai · 2025-08-04 10:42:39 -07:00
  a6139aa003
• feat: accept custom instructions in profiles (#1803)

  Allows users to set their experimental_instructions_file in configs.
  
  For example the below enables experimental instructions when running
  `codex -p foo`.
  ```
  [profiles.foo]
  experimental_instructions_file = "/Users/foo/.codex/prompt.md"
  ```
  
  # Testing
  - ✅ Running against a profile with experimental_instructions_file works.
  - ✅ Running against a profile without experimental_instructions_file
  works.
  - ✅ Running against no profile with experimental_instructions_file
  works.
  - ✅ Running against no profile without experimental_instructions_file
  works.

  ae · 2025-08-04 09:34:46 -07:00
  dc15a5cf0b
• Add a TurnDiffTracker to create a unified diff for an entire turn (#1770)

  This lets us show an accumulating diff across all patches in a turn.
  Refer to the docs for TurnDiffTracker for implementation details.
  
  There are multiple ways this could have been done and this felt like the
  right tradeoff between reliability and completeness:
  *Pros*
  * It will pick up all changes to files that the model touched including
  if they prettier or another command that updates them.
  * It will not pick up changes made by the user or other agents to files
  it didn't modify.
  
  *Cons*
  * It will pick up changes that the user made to a file that the model
  also touched
  * It will not pick up changes to codegen or files that were not modified
  with apply_patch

  Gabriel Peal · 2025-08-04 11:57:04 -04:00
  1f3318c1c5
• [sandbox] Filter out certain non-sandbox errors (#1804)

  ## Summary
  Users frequently complain about re-approving commands that have failed
  for non-sandbox reasons. We can't diagnose with complete accuracy which
  errors happened because of a sandbox failure, but we can start to
  eliminate some common simple cases.
  
  This PR captures the most common case I've seen, which is a `command not
  found` error.
  
  ## Testing
  - [x] Added unit tests
  - [x] Ran a few cases locally

  Dylan · 2025-08-03 13:05:48 -07:00
  e3565a3f43
• fix command duration display (#1806)

  we were always displaying "0ms" before.
  
  <img width="731" height="101" alt="Screenshot 2025-08-02 at 10 51 22 PM"
  src="https://github.com/user-attachments/assets/f56814ed-b9a4-4164-9e78-181c60ce19b7"
  />

  Jeremy Rose · 2025-08-03 11:33:44 -07:00
  78a1d49fac
• Fix MacOS multiprocessing by relaxing sandbox (#1808)

  The following test script fails in the codex sandbox:
  ```
  import multiprocessing
  from multiprocessing import Lock, Process
  
  def f(lock):
      with lock:
          print("Lock acquired in child process")
  
  if __name__ == '__main__':
      lock = Lock()
      p = Process(target=f, args=(lock,))
      p.start()
      p.join()
  ```
  
  with 
  ```
  Traceback (most recent call last):
    File "/Users/david.hao/code/codex/codex-rs/cli/test.py", line 9, in <module>
      lock = Lock()
             ^^^^^^
    File "/Users/david.hao/.local/share/uv/python/cpython-3.12.9-macos-aarch64-none/lib/python3.12/multiprocessing/context.py", line 68, in Lock
      return Lock(ctx=self.get_context())
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    File "/Users/david.hao/.local/share/uv/python/cpython-3.12.9-macos-aarch64-none/lib/python3.12/multiprocessing/synchronize.py", line 169, in __init__
      SemLock.__init__(self, SEMAPHORE, 1, 1, ctx=ctx)
    File "/Users/david.hao/.local/share/uv/python/cpython-3.12.9-macos-aarch64-none/lib/python3.12/multiprocessing/synchronize.py", line 57, in __init__
      sl = self._semlock = _multiprocessing.SemLock(
                           ^^^^^^^^^^^^^^^^^^^^^^^^^
  PermissionError: [Errno 1] Operation not permitted
  ```
  
  After reading, adding this line to the sandbox configs fixes things -
  MacOS multiprocessing appears to use sem_lock(), which opens an IPC
  which is considered a disk write even though no file is created. I
  interrogated ChatGPT about whether it's okay to loosen, and my
  impression after reading is that it is, although would appreciate a
  close look
  
  
  Breadcrumb: You can run `cargo run -- debug seatbelt --full-auto <cmd>`
  to test the sandbox

  David Z Hao · 2025-08-03 06:59:26 -07:00
  75eecb656e
• Fix compact (#1798)

  We are not recording the summary in the history.

  aibrahim-oai · 2025-08-02 12:05:06 -07:00
  81bb1c9e26
• feat: make .git read-only within a writable root when using Seatbelt (#1765)

  To make `--full-auto` safer, this PR updates the Seatbelt policy so that
  a `SandboxPolicy` with a `writable_root` that contains a `.git/`
  _directory_ will make `.git/` _read-only_ (though as a follow-up, we
  should also consider the case where `.git` is a _file_ with a `gitdir:
  /path/to/actual/repo/.git` entry that should also be protected).
  
  The two major changes in this PR:
  
  - Updating `SandboxPolicy::get_writable_roots_with_cwd()` to return a
  `Vec<WritableRoot>` instead of a `Vec<PathBuf>` where a `WritableRoot`
  can specify a list of read-only subpaths.
  - Updating `create_seatbelt_command_args()` to honor the read-only
  subpaths in `WritableRoot`.
  
  The logic to update the policy is a fairly straightforward update to
  `create_seatbelt_command_args()`, but perhaps the more interesting part
  of this PR is the introduction of an integration test in
  `tests/sandbox.rs`. Leveraging the new API in #1785, we test
  `SandboxPolicy` under various conditions, including ones where `$TMPDIR`
  is not readable, which is critical for verifying the new behavior.
  
  To ensure that Codex can run its own tests, e.g.:
  
  ```
  just codex debug seatbelt --full-auto -- cargo test if_git_repo_is_writable_root_then_dot_git_folder_is_read_only
  ```
  
  I had to introduce the use of `CODEX_SANDBOX=sandbox`, which is
  comparable to how `CODEX_SANDBOX_NETWORK_DISABLED=1` was already being
  used.
  
  Adding a comparable change for Landlock will be done in a subsequent PR.

  Michael Bolin · 2025-08-01 16:11:24 -07:00
  80555d4ff2
• chore: introduce SandboxPolicy::WorkspaceWrite::include_default_writable_roots (#1785)

  Without this change, it is challenging to create integration tests to
  verify that the folders not included in `writable_roots` in
  `SandboxPolicy::WorkspaceWrite` are read-only because, by default,
  `get_writable_roots_with_cwd()` includes `TMPDIR`, which is where most
  integrationt
  tests do their work.
  
  This introduces a `use_exact_writable_roots` option to disable the
  default
  includes returned by `get_writable_roots_with_cwd()`.
  
  
  
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/1785).
  * #1765
  * __->__ #1785

  Michael Bolin · 2025-08-01 14:15:55 -07:00
  92f3566d78
• collabse stdout and stderr delta events into one (#1787)
  aibrahim-oai · 2025-08-01 14:00:19 -07:00
  f20de21cb6
• feat: stream exec stdout events (#1786)

  ## Summary
  - stream command stdout as `ExecCommandStdout` events
  - forward streamed stdout to clients and ignore in human output
  processor
  - adjust call sites for new streaming API

  aibrahim-oai · 2025-08-01 13:04:34 -07:00
  bc7beddaa2
• Add a custom originator setting (#1781)
  pakrym-oai · 2025-08-01 09:55:23 -07:00
  88ea215c80
• ci fix (#1782)
  aibrahim-oai · 2025-08-01 09:17:13 -07:00
  b67c485d84
• Add /compact (#1527)

  - Add operation to summarize the context so far.
  - The operation runs a compact task that summarizes the context.
  - The operation clear the previous context to free the context window
  - The operation didn't use `run_task` to avoid corrupting the session
  - Add /compact in the tui
  
  
  
  https://github.com/user-attachments/assets/e06c24e5-dcfb-4806-934a-564d425a919c

  aibrahim-oai · 2025-07-31 21:34:32 -07:00
  e2c994e32a
• Send account id when available (#1767)

  For users with multiple accounts we need to specify the account to use.

  pakrym-oai · 2025-07-31 15:40:19 -07:00
  0935e6a875
• Initial planning tool (#1753)

  We need to optimize the prompt, but this causes the model to use the new
  planning_tool.
  
  <img width="765" height="110" alt="image"
  src="https://github.com/user-attachments/assets/45633f7f-3c85-4e60-8b80-902f1b3b508d"
  />

  easong-openai · 2025-07-31 20:45:52 +00:00
  6ce0a5875b
• chore: refactor exec.rs: create separate seatbelt.rs and spawn.rs files (#1762)

  At 550 lines, `exec.rs` was a bit large. In particular, I found it hard
  to locate the Seatbelt-related code quickly without a file with
  `seatbelt` in the name, so this refactors things so:
  
  - `spawn_command_under_seatbelt()` and dependent code moves to a new
  `seatbelt.rs` file
  - `spawn_child_async()` and dependent code moves to a new `spawn.rs`
  file

  Michael Bolin · 2025-07-31 13:11:47 -07:00
  5a0ad5ab8f
• fix: ensure PatchApplyBeginEvent and PatchApplyEndEvent are dispatched reliably (#1760)

  This is a follow-up to https://github.com/openai/codex/pull/1705, as
  that PR inadvertently lost the logic where `PatchApplyBeginEvent` and
  `PatchApplyEndEvent` events were sent when patches were auto-approved.
  
  Though as part of this fix, I believe this also makes an important
  safety fix to `assess_patch_safety()`, as there was a case that returned
  `SandboxType::None`, which arguably is the thing we were trying to avoid
  in #1705.
  
  On a high level, we want there to be only one codepath where
  `apply_patch` happens, which should be unified with the patch to run
  `exec`, in general, so that sandboxing is applied consistently for both
  cases.
  
  Prior to this change, `apply_patch()` in `core` would either:
  
  * exit early, delegating to `exec()` to shell out to `apply_patch` using
  the appropriate sandbox
  * proceed to run the logic for `apply_patch` in memory
  
  
  https://github.com/openai/codex/blob/549846b29ad52f6cb4f8560365a731966054a9b3/codex-rs/core/src/apply_patch.rs#L61-L63
  
  In this implementation, only the latter would dispatch
  `PatchApplyBeginEvent` and `PatchApplyEndEvent`, though the former would
  dispatch `ExecCommandBeginEvent` and `ExecCommandEndEvent` for the
  `apply_patch` call (or, more specifically, the `codex
  --codex-run-as-apply-patch PATCH` call).
  
  To unify things in this PR, we:
  
  * Eliminate the back half of the `apply_patch()` function, and instead
  have it also return with `DelegateToExec`, though we add an extra field
  to the return value, `user_explicitly_approved_this_action`.
  * In `codex.rs` where we process `DelegateToExec`, we use
  `SandboxType::None` when `user_explicitly_approved_this_action` is
  `true`. This means **we no longer run the apply_patch logic in memory**,
  as we always `exec()`. (Note this is what allowed us to delete so much
  code in `apply_patch.rs`.)
  * In `codex.rs`, we further update `notify_exec_command_begin()` and
  `notify_exec_command_end()` to take additional fields to determine what
  type of notification to send: `ExecCommand` or `PatchApply`.
  
  Admittedly, this PR also drops some of the functionality about giving
  the user the opportunity to expand the set of writable roots as part of
  approving the `apply_patch` command. I'm not sure how much that was
  used, and we should probably rethink how that works as we are currently
  tidying up the protocol to the TUI, in general.

  Michael Bolin · 2025-07-31 11:13:57 -07:00
  06c786b2da
• Add codex login --api-key (#1759)

  Allow setting the API key via `codex login --api-key`

  pakrym-oai · 2025-07-31 17:48:49 +00:00
  549846b29a
• fix git tests (#1747)

  the git tests were failing on my local machine due to gpg signing config
  in my ~/.gitconfig. tests should not be affected by ~/.gitconfig, so
  configure them to ignore it.

  Jeremy Rose · 2025-07-31 09:17:59 -07:00
  be0cd34300
• Auto format toml (#1745)

  Add recommended extension and configure it to auto format prompt.

  pakrym-oai · 2025-07-30 18:37:00 -07:00
  51b6bdefbe