58 Commits

• chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054)

  ## Why
  
  `argument-comment-lint` was green in CI even though the repo still had
  many uncommented literal arguments. The main gap was target coverage:
  the repo wrapper did not force Cargo to inspect test-only call sites, so
  examples like the `latest_session_lookup_params(true, ...)` tests in
  `codex-rs/tui_app_server/src/lib.rs` never entered the blocking CI path.
  
  This change cleans up the existing backlog, makes the default repo lint
  path cover all Cargo targets, and starts rolling that stricter CI
  enforcement out on the platform where it is currently validated.
  
  ## What changed
  
  - mechanically fixed existing `argument-comment-lint` violations across
  the `codex-rs` workspace, including tests, examples, and benches
  - updated `tools/argument-comment-lint/run-prebuilt-linter.sh` and
  `tools/argument-comment-lint/run.sh` so non-`--fix` runs default to
  `--all-targets` unless the caller explicitly narrows the target set
  - fixed both wrappers so forwarded cargo arguments after `--` are
  preserved with a single separator
  - documented the new default behavior in
  `tools/argument-comment-lint/README.md`
  - updated `rust-ci` so the macOS lint lane keeps the plain wrapper
  invocation and therefore enforces `--all-targets`, while Linux and
  Windows temporarily pass `-- --lib --bins`
  
  That temporary CI split keeps the stricter all-targets check where it is
  already cleaned up, while leaving room to finish the remaining Linux-
  and Windows-specific target-gated cleanup before enabling
  `--all-targets` on those runners. The Linux and Windows failures on the
  intermediate revision were caused by the wrapper forwarding bug, not by
  additional lint findings in those lanes.
  
  ## Validation
  
  - `bash -n tools/argument-comment-lint/run.sh`
  - `bash -n tools/argument-comment-lint/run-prebuilt-linter.sh`
  - shell-level wrapper forwarding check for `-- --lib --bins`
  - shell-level wrapper forwarding check for `-- --tests`
  - `just argument-comment-lint`
  - `cargo test` in `tools/argument-comment-lint`
  - `cargo test -p codex-terminal-detection`
  
  ## Follow-up
  
  - Clean up remaining Linux-only target-gated callsites, then switch the
  Linux lint lane back to the plain wrapper invocation.
  - Clean up remaining Windows-only target-gated callsites, then switch
  the Windows lint lane back to the plain wrapper invocation.

  Michael Bolin · 2026-03-27 19:00:44 -07:00
  61dfe0b86c
• Apply argument comment lint across codex-rs (#14652)

  ## Why
  
  Once the repo-local lint exists, `codex-rs` needs to follow the
  checked-in convention and CI needs to keep it from drifting. This commit
  applies the fallback `/*param*/` style consistently across existing
  positional literal call sites without changing those APIs.
  
  The longer-term preference is still to avoid APIs that require comments
  by choosing clearer parameter types and call shapes. This PR is
  intentionally the mechanical follow-through for the places where the
  existing signatures stay in place.
  
  After rebasing onto newer `main`, the rollout also had to cover newly
  introduced `tui_app_server` call sites. That made it clear the first cut
  of the CI job was too expensive for the common path: it was spending
  almost as much time installing `cargo-dylint` and re-testing the lint
  crate as a representative test job spends running product tests. The CI
  update keeps the full workspace enforcement but trims that extra
  overhead from ordinary `codex-rs` PRs.
  
  ## What changed
  
  - keep a dedicated `argument_comment_lint` job in `rust-ci`
  - mechanically annotate remaining opaque positional literals across
  `codex-rs` with exact `/*param*/` comments, including the rebased
  `tui_app_server` call sites that now fall under the lint
  - keep the checked-in style aligned with the lint policy by using
  `/*param*/` and leaving string and char literals uncommented
  - cache `cargo-dylint`, `dylint-link`, and the relevant Cargo
  registry/git metadata in the lint job
  - split changed-path detection so the lint crate's own `cargo test` step
  runs only when `tools/argument-comment-lint/*` or `rust-ci.yml` changes
  - continue to run the repo wrapper over the `codex-rs` workspace, so
  product-code enforcement is unchanged
  
  Most of the code changes in this commit are intentionally mechanical
  comment rewrites or insertions driven by the lint itself.
  
  ## Verification
  
  - `./tools/argument-comment-lint/run.sh --workspace`
  - `cargo test -p codex-tui-app-server -p codex-tui`
  - parsed `.github/workflows/rust-ci.yml` locally with PyYAML
  
  ---
  
  * -> #14652
  * #14651

  Michael Bolin · 2026-03-16 16:48:15 -07:00
  b77fe8fefe
• fix: codex-arg0 no longer depends on codex-core (#12434)

  ## Why
  
  `codex-rs/arg0` only needed two things from `codex-core`:
  
  - the `find_codex_home()` wrapper
  - the special argv flag used for the internal `apply_patch`
  self-invocation path
  
  That made `codex-arg0` depend on `codex-core` for a very small surface
  area. This change removes that dependency edge and moves the shared
  `apply_patch` invocation flag to a more natural boundary
  (`codex-apply-patch`) while keeping the contract explicitly documented.
  
  ## What Changed
  
  - Moved the internal `apply_patch` argv[1] flag constant out of
  `codex-core` and into `codex-apply-patch`.
  - Renamed the constant to `CODEX_CORE_APPLY_PATCH_ARG1` and documented
  that it is part of the Codex core process-invocation contract (even
  though it now lives in `codex-apply-patch`).
  - Updated `arg0`, the core apply-patch runtime, and the `codex-exec`
  apply-patch test to import the constant from `codex-apply-patch`.
  - Updated `codex-rs/arg0` to call
  `codex_utils_home_dir::find_codex_home()` directly instead of
  `codex_core::config::find_codex_home()`.
  - Removed the `codex-core` dependency from `codex-rs/arg0` and added the
  needed direct dependency on `codex-utils-home-dir`.
  - Added `codex-apply-patch` as a dev-dependency for `codex-rs/exec`
  tests (the apply-patch test now imports the moved constant directly).
  
  ## Verification
  
  - `cargo test -p codex-apply-patch`
  - `cargo test -p codex-arg0`
  - `cargo test -p codex-core --lib apply_patch`
  - `cargo test -p codex-exec
  test_standalone_exec_cli_can_use_apply_patch`
  - `cargo shear`

  Michael Bolin · 2026-02-21 00:20:42 -08:00
  2fe4be1aa9
• [bazel] Upgrade some rulesets in preparation for enabling windows (#11109)
  zbarsky-openai · 2026-02-08 13:40:32 -08:00
  44a1355133
• Fix minor typos in comments and documentation (#10287)

  ## Summary
  
  I have read the contribution guidelines.  
  All changes in this PR are limited to text corrections and do not modify
  any business logic, runtime behavior, or user-facing functionality.
  
  ## Details
  
  This PR fixes several minor typos, including:
  
  - `create` -> `crate`
  - `analagous` -> `analogous`
  - `apply-patch` -> `apply_patch`
  - `codecs` -> `codex`
  - ` '/" ` -> ` '/' `
  - `Respesent` -> `Represent`

  Ruyut · 2026-01-30 22:11:02 -08:00
  9327e99b28
• feat: add support for building with Bazel (#8875)

  This PR configures Codex CLI so it can be built with
  [Bazel](https://bazel.build) in addition to Cargo. The `.bazelrc`
  includes configuration so that remote builds can be done using
  [BuildBuddy](https://www.buildbuddy.io).
  
  If you are familiar with Bazel, things should work as you expect, e.g.,
  run `bazel test //... --keep-going` to run all the tests in the repo,
  but we have also added some new aliases in the `justfile` for
  convenience:
  
  - `just bazel-test` to run tests locally
  - `just bazel-remote-test` to run tests remotely (currently, the remote
  build is for x86_64 Linux regardless of your host platform). Note we are
  currently seeing the following test failures in the remote build, so we
  still need to figure out what is happening here:
  
  ```
  failures:
      suite::compact::manual_compact_twice_preserves_latest_user_messages
      suite::compact_resume_fork::compact_resume_after_second_compaction_preserves_history
      suite::compact_resume_fork::compact_resume_and_fork_preserve_model_history_view
  ```
  
  - `just build-for-release` to build release binaries for all
  platforms/architectures remotely
  
  To setup remote execution:
  - [Create a buildbuddy account](https://app.buildbuddy.io/) (OpenAI
  employees should also request org access at
  https://openai.buildbuddy.io/join/ with their `@openai.com` email
  address.)
  - [Copy your API key](https://app.buildbuddy.io/docs/setup/) to
  `~/.bazelrc` (add the line `build
  --remote_header=x-buildbuddy-api-key=YOUR_KEY`)
  - Use `--config=remote` in your `bazel` invocations (or add `common
  --config=remote` to your `~/.bazelrc`, or use the `just` commands)
  
  ## CI
  
  In terms of CI, this PR introduces `.github/workflows/bazel.yml`, which
  uses Bazel to run the tests _locally_ on Mac and Linux GitHub runners
  (we are working on supporting Windows, but that is not ready yet). Note
  that the failures we are seeing in `just bazel-remote-test` do not occur
  on these GitHub CI jobs, so everything in `.github/workflows/bazel.yml`
  is green right now.
  
  The `bazel.yml` uses extra config in `.github/workflows/ci.bazelrc` so
  that macOS CI jobs build _remotely_ on Linux hosts (using the
  `docker://docker.io/mbolin491/codex-bazel` Docker image declared in the
  root `BUILD.bazel`) using cross-compilation to build the macOS
  artifacts. Then these artifacts are downloaded locally to GitHub's macOS
  runner so the tests can be executed natively. This is the relevant
  config that enables this:
  
  ```
  common:macos --config=remote
  common:macos --strategy=remote
  common:macos --strategy=TestRunner=darwin-sandbox,local
  ```
  
  Because of the remote caching benefits we get from BuildBuddy, these new
  CI jobs can be extremely fast! For example, consider these two jobs that
  ran all the tests on Linux x86_64:
  
  - Bazel 1m37s
  https://github.com/openai/codex/actions/runs/20861063212/job/59940545209?pr=8875
  - Cargo 9m20s
  https://github.com/openai/codex/actions/runs/20861063192/job/59940559592?pr=8875
  
  For now, we will continue to run both the Bazel and Cargo jobs for PRs,
  but once we add support for Windows and running Clippy, we should be
  able to cutover to using Bazel exclusively for PRs, which should still
  speed things up considerably. We will probably continue to run the Cargo
  jobs post-merge for commits that land on `main` as a sanity check.
  
  Release builds will also continue to be done by Cargo for now.
  
  Earlier attempt at this PR: https://github.com/openai/codex/pull/8832
  Earlier attempt to add support for Buck2, now abandoned:
  https://github.com/openai/codex/pull/8504
  
  ---------
  
  Co-authored-by: David Zbarsky <dzbarsky@gmail.com>
  Co-authored-by: Michael Bolin <mbolin@openai.com>

  zbarsky-openai · 2026-01-09 11:09:43 -08:00
  2a06d64bc9
• feat: introduce find_resource! macro that works with Cargo or Bazel (#8879)

  To support Bazelification in https://github.com/openai/codex/pull/8875,
  this PR introduces a new `find_resource!` macro that we use in place of
  our existing logic in tests that looks for resources relative to the
  compile-time `CARGO_MANIFEST_DIR` env var.
  
  To make this work, we plan to add the following to all `rust_library()`
  and `rust_test()` Bazel rules in the project:
  
  ```
  rustc_env = {
      "BAZEL_PACKAGE": native.package_name(),
  },
  ```
  
  Our new `find_resource!` macro reads this value via
  `option_env!("BAZEL_PACKAGE")` so that the Bazel package _of the code
  using `find_resource!`_ is injected into the code expanded from the
  macro. (If `find_resource()` were a function, then
  `option_env!("BAZEL_PACKAGE")` would always be
  `codex-rs/utils/cargo-bin`, which is not what we want.)
  
  Note we only consider the `BAZEL_PACKAGE` value when the `RUNFILES_DIR`
  environment variable is set at runtime, indicating that the test is
  being run by Bazel. In this case, we have to concatenate the runtime
  `RUNFILES_DIR` with the compile-time `BAZEL_PACKAGE` value to build the
  path to the resource.
  
  In testing this change, I discovered one funky edge case in
  `codex-rs/exec-server/tests/common/lib.rs` where we have to _normalize_
  (but not canonicalize!) the result from `find_resource!` because the
  path contains a `common/..` component that does not exist on disk when
  the test is run under Bazel, so it must be semantically normalized using
  the [`path-absolutize`](https://crates.io/crates/path-absolutize) crate
  before it is passed to `dotslash fetch`.
  
  Because this new behavior may be non-obvious, this PR also updates
  `AGENTS.md` to make humans/Codex aware that this API is preferred.

  Michael Bolin · 2026-01-07 18:06:08 -08:00
  f6b563ec64
• fix: accept whitespace-padded patch markers (#8746)

  Trim whitespace when validating '*** Begin Patch'/'*** End Patch'
  markers in codex-apply-patch so padded marker lines parse as intended,
  and add regression coverage (unit + fixture scenario); this avoids
  apply_patch failures when models include extra spacing. Tested with
  cargo test -p codex-apply-patch.

  Thibault Sottiaux · 2026-01-05 17:41:23 -08:00
  771f1ca6ab
• chore(apply-patch) additional scenarios (#8230)

  ## Summary
  More apply-patch scenarios
  
  ## Testing
  - [x] This pr only adds tests

  Dylan Hurd · 2026-01-05 15:56:38 -08:00
  b1c93e135b
• fix: declare test path relative to $CARGO_MANIFEST_DIR (#8498)

  This is another fix to prepare for Buck2. See #8496 for related changes.
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/8498).
  * __->__ #8498
  * #8496

  Michael Bolin · 2025-12-23 19:29:48 -08:00
  38de0a1de4
• feat: introduce codex-utils-cargo-bin as an alternative to assert_cmd::Command (#8496)

  This PR introduces a `codex-utils-cargo-bin` utility crate that
  wraps/replaces our use of `assert_cmd::Command` and
  `escargot::CargoBuild`.
  
  As you can infer from the introduction of `buck_project_root()` in this
  PR, I am attempting to make it possible to build Codex under
  [Buck2](https://buck2.build) as well as `cargo`. With Buck2, I hope to
  achieve faster incremental local builds (largely due to Buck2's
  [dice](https://buck2.build/docs/insights_and_knowledge/modern_dice/)
  build strategy, as well as benefits from its local build daemon) as well
  as faster CI builds if we invest in remote execution and caching.
  
  See
  https://buck2.build/docs/getting_started/what_is_buck2/#why-use-buck2-key-advantages
  for more details about the performance advantages of Buck2.
  
  Buck2 enforces stronger requirements in terms of build and test
  isolation. It discourages assumptions about absolute paths (which is key
  to enabling remote execution). Because the `CARGO_BIN_EXE_*` environment
  variables that Cargo provides are absolute paths (which
  `assert_cmd::Command` reads), this is a problem for Buck2, which is why
  we need this `codex-utils-cargo-bin` utility.
  
  My WIP-Buck2 setup sets the `CARGO_BIN_EXE_*` environment variables
  passed to a `rust_test()` build rule as relative paths.
  `codex-utils-cargo-bin` will resolve these values to absolute paths,
  when necessary.
  
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/8496).
  * #8498
  * __->__ #8496

  Michael Bolin · 2025-12-23 19:29:32 -08:00
  e61bae12e3
• chore(apply-patch) unicode scenario (#8141)

  ## Summary
  Adds a unicode scenario, and fills in files on failing scenarios to
  ensure directory state is unchanged, for completeness
  
  ## Testing
  - [x] only changes tests

  Dylan Hurd · 2025-12-16 22:40:22 -08:00
  ae3793eb5d
• chore(apply-patch) move invocation tests (#8111)

  ## Summary:
  This PR is a pure copy and paste of tests from lib.rs into
  invocation.rs, to colocate logic and tests.
  
  ## Testing
  - [x] Purely a test refactor

  Dylan Hurd · 2025-12-16 12:49:06 -08:00
  a3b137d093
• chore(apply-patch) move invocation parsing (#8110)

  lib.rs has grown quite large, and mixes two responsibilities:
  1. executing patch operations
  2. parsing apply_patch invocations via a shell command
  
  This PR splits out (2) into its own file, so we can work with it more
  easily. We are explicitly NOT moving tests in this PR, to ensure
  behavior stays the same and we can avoid losing coverage via merge
  conflicts. Tests are moved in a subsequent PR.
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/8110).
  * #8111
  * __->__ #8110

  Dylan Hurd · 2025-12-16 10:30:59 -08:00
  e290d48264
• Revert "fix(apply-patch): preserve CRLF line endings on Windows" (#7903)

  Reverts openai/codex#7515

  Dylan Hurd · 2025-12-11 17:58:35 -08:00
  9e91e49edb
• feat: shell snapshotting (#7641)
  jif-oai · 2025-12-09 18:36:58 +00:00
  7836aeddae
• fix(apply-patch): preserve CRLF line endings on Windows (#7515)

  ## Summary
  This PR is heavily based on #4017, which contains the core logic for the
  fix. To reduce the risk, we are first introducing it only on windows. We
  can then expand to wsl / other environments as needed, and then tackle
  net new files.
  
  ## Testing
  - [x] added unit tests in apply-patch
  - [x] add integration tests to apply_patch_cli.rs
  
  ---------
  
  Co-authored-by: Chase Naples <Cnaples79@gmail.com>

  Dylan Hurd · 2025-12-05 16:43:27 -08:00
  6c9c563faf
• chore(apply-patch) scenarios for e2e testing (#7567)

  ## Summary
  This PR introduces an End to End test suite for apply-patch, so we can
  easily validate behavior against other implementations as well.
  
  ## Testing
  - [x] These are tests

  Dylan Hurd · 2025-12-05 00:20:54 +00:00
  073a8533b8
• chore: add cargo-deny configuration (#7119)

  - add GitHub workflow running cargo-deny on push/PR
  - document cargo-deny allowlist with workspace-dep notes and advisory
  ignores
  - align workspace crates to inherit version/edition/license for
  consistent checks

  Josh McKinney · 2025-11-24 12:22:18 -08:00
  ec49b56874
• fix(windows) support apply_patch parsing in powershell (#7221)

  ## Summary
  Support powershell parsing of apply_patch
  
  ## Testing
  - [x] Enable apply_patch unit tests
  
  ---------
  
  Co-authored-by: jif-oai <jif@openai.com>

  Dylan Hurd · 2025-11-24 19:32:47 +00:00
  1e832b1438
• Migrate coverage to shell_command (#7042)
  pakrym-oai · 2025-11-21 03:44:00 +00:00
  767b66f407
• Fix apply_patch rename move path resolution (#5486)

  Fixes https://github.com/openai/codex/issues/5485.
  
  Fixed rename hunks so `apply_patch` resolves the destination path using
  the verifier’s effective cwd, ensuring patches that run under `cd
  <worktree> && apply_patch` stay inside the worktree.
  
  Added a regression test
  (`test_apply_patch_resolves_move_path_with_effective_cwd`) that
  reproduced the old behavior (dest path resolved in the main repo) and
  now passes.
  
  Related to https://github.com/openai/codex/issues/5483.
  
  Co-authored-by: Eric Traut <etraut@openai.com>

  Shane Vitarana · 2025-11-06 17:02:09 -08:00
  316352be94
• chore: testing on apply_path (#5557)
  jif-oai · 2025-10-23 17:00:48 +01:00
  6745b12427
• Use assert_matches (#4756)

  assert_matches is soon to be in std but is experimental for now.

  pakrym-oai · 2025-10-05 21:12:31 +00:00
  5c42419b02
• chore: remove once_cell dependency from multiple crates (#4154)

  This commit removes the `once_cell` dependency from `Cargo.toml` files
  in the `codex-rs` and `apply-patch` directories, replacing its usage
  with `std::sync::LazyLock` and `std::sync::OnceLock` where applicable.
  This change simplifies the dependency tree and utilizes standard library
  features for lazy initialization.
  
  # External (non-OpenAI) Pull Request Requirements
  
  Before opening this Pull Request, please read the dedicated
  "Contributing" markdown file or your PR may be closed:
  https://github.com/openai/codex/blob/main/docs/contributing.md
  
  If your PR conforms to our contribution guidelines, replace this text
  with a detailed and high quality description of your changes.

  Tien Nguyen · 2025-09-24 09:15:57 -07:00
  00c7f7a16c
• chore: clippy on redundant closure (#4058)

  Add redundant closure clippy rules and let Codex fix it by minimising
  FQP

  jif-oai · 2025-09-22 19:30:16 +00:00
  be366a31ab
• chore: unify cargo versions (#4044)

  Unify cargo versions at root

  jif-oai · 2025-09-22 16:47:01 +00:00
  e5fe50d3ce
• if a command parses as a patch, do not attempt to run it (#3382)

  sometimes the model forgets to actually invoke `apply_patch` and puts a
  patch as the script body. trying to execute this as bash sometimes
  creates files named `,` or `{` or does other unknown things, so catch
  this situation and return an error to the model.

  Jeremy Rose · 2025-09-12 13:47:41 -07:00
  5f6e95b592
• chore: enable clippy::redundant_clone (#3489)

  Created this PR by:
  
  - adding `redundant_clone` to `[workspace.lints.clippy]` in
  `cargo-rs/Cargol.toml`
  - running `cargo clippy --tests --fix`
  - running `just fmt`
  
  Though I had to clean up one instance of the following that resulted:
  
  ```rust
  let codex = codex;
  ```

  Michael Bolin · 2025-09-11 11:59:37 -07:00
  bec51f6c05
• apply-patch: sort replacements and add regression tests (#3425)

  - Ensure replacements are applied in index order for determinism.
  - Add tests for addition chunk followed by removal and worktree-aware
  helper.
  
  This fixes a panic I observed.
  
  Co-authored-by: Codex <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>

  Jeremy Rose · 2025-09-11 09:07:03 -07:00
  377af75730
• tweak "failed to find expected lines" message in apply_patch (#3374)

  It was hard for me to read the expected lines as a `["one", "two",
  "three"]` array, maybe not so hard for the model but probably not having
  to un-escape in its head would help it out :)
  
  Co-authored-by: Codex <199175422+chatgpt-codex-connector[bot]@users.noreply.github.com>

  Jeremy Rose · 2025-09-09 12:27:50 -07:00
  ee5ecae7c0
• chore(deps): bump tree-sitter from 0.25.8 to 0.25.9 in /codex-rs (#3295)

  Bumps [tree-sitter](https://github.com/tree-sitter/tree-sitter) from
  0.25.8 to 0.25.9.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/tree-sitter/tree-sitter/releases">tree-sitter's
  releases</a>.</em></p>
  <blockquote>
  <h2>v0.25.9</h2>
  <h2>What's Changed</h2>
  <ul>
  <li>Fix: add wasm32 support to portable/endian.h by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4613">tree-sitter/tree-sitter#4613</a></li>
  <li>Replace deprecated function on build.zig by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4621">tree-sitter/tree-sitter#4621</a></li>
  <li>perf(generate): reserve more <code>Vec</code> capacities by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4629">tree-sitter/tree-sitter#4629</a></li>
  <li>fix(rust): prevent overflow in error message calculation by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4634">tree-sitter/tree-sitter#4634</a></li>
  <li>fix(bindings): use parser title in lib.rs description by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4638">tree-sitter/tree-sitter#4638</a></li>
  <li>fix(bindings): only include top level LICENSE file by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4639">tree-sitter/tree-sitter#4639</a></li>
  <li>fix(bindings): improve python platform detection by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4640">tree-sitter/tree-sitter#4640</a></li>
  <li>test(python): improve bindings test to detect ABI incompatibilities
  by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4641">tree-sitter/tree-sitter#4641</a></li>
  <li>fix(query): prevent cycles when analyzing hidden children by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4659">tree-sitter/tree-sitter#4659</a></li>
  <li>Reserved word dsl declarations by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4661">tree-sitter/tree-sitter#4661</a></li>
  <li>fix(cli): improve error message in cases where a langauge can't be
  found for one of many paths by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4662">tree-sitter/tree-sitter#4662</a></li>
  <li>fix(bindings): correct indices for <code>Node::utf16_text</code> by
  <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4663">tree-sitter/tree-sitter#4663</a></li>
  <li>fix(rust): ignore new mismatched-lifetime-syntaxes lint by <a
  href="https://github.com/ObserverOfTime"><code>@​ObserverOfTime</code></a>
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4680">tree-sitter/tree-sitter#4680</a></li>
  <li>fix(bindings): use custom class name by <a
  href="https://github.com/ObserverOfTime"><code>@​ObserverOfTime</code></a>
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4679">tree-sitter/tree-sitter#4679</a></li>
  <li>fix(bindings): update zig template files (<a
  href="https://redirect.github.com/tree-sitter/tree-sitter/issues/4637">#4637</a>)
  by <a
  href="https://github.com/ObserverOfTime"><code>@​ObserverOfTime</code></a>
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4684">tree-sitter/tree-sitter#4684</a></li>
  <li>Update build.zig.zon by <a
  href="https://github.com/Omar-xt"><code>@​Omar-xt</code></a> in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4709">tree-sitter/tree-sitter#4709</a></li>
  <li>Backport build.zig.zon fixes by <a
  href="https://github.com/ObserverOfTime"><code>@​ObserverOfTime</code></a>
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4717">tree-sitter/tree-sitter#4717</a></li>
  <li>portable/endian: Add Haiku support by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4724">tree-sitter/tree-sitter#4724</a></li>
  <li>fix(wasm): delete <code>var_i32_type</code> after initializing
  global stack pointer value by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4732">tree-sitter/tree-sitter#4732</a></li>
  <li>fix(rust): EqCapture accepted cases where number of captured nodes
  differed by one by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4737">tree-sitter/tree-sitter#4737</a></li>
  <li>fix(bindings): improve zig dependency fetching logic by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4741">tree-sitter/tree-sitter#4741</a></li>
  <li>fix(bindings): add tree-sitter as npm dev dependency by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4738">tree-sitter/tree-sitter#4738</a></li>
  <li>[backport] build.zig improvements by <a
  href="https://github.com/ObserverOfTime"><code>@​ObserverOfTime</code></a>
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4743">tree-sitter/tree-sitter#4743</a></li>
  <li>fix(lib): check if an <code>ERROR</code> node is named before
  assuming it's the builtin error node by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4746">tree-sitter/tree-sitter#4746</a></li>
  <li>fix(lib): allow error nodes to match when they are child nodes by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4748">tree-sitter/tree-sitter#4748</a></li>
  <li>build(zig): support wasmtime for ARM64 Windows (MSVC) by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4749">tree-sitter/tree-sitter#4749</a></li>
  <li>fix(bindings): properly detect MSVC compiler by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4751">tree-sitter/tree-sitter#4751</a></li>
  <li>fix(generate): warn users when extra rule can lead to parser hang by
  <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4763">tree-sitter/tree-sitter#4763</a></li>
  <li>fix(cli): fix DSL type declarations by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4770">tree-sitter/tree-sitter#4770</a></li>
  <li>fix(npm): add directory to repository fields by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4773">tree-sitter/tree-sitter#4773</a></li>
  <li>fix(web): correct type errors, improve build by <a
  href="https://github.com/ObserverOfTime"><code>@​ObserverOfTime</code></a>
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4774">tree-sitter/tree-sitter#4774</a></li>
  <li>fix(generate): return error when single state transitions have
  indirectly recursive cycles by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4790">tree-sitter/tree-sitter#4790</a></li>
  <li>fix(generate): use correct state id when adding terminal states to
  non terminal extras by <a
  href="https://github.com/tree-sitter-ci-bot"><code>@​tree-sitter-ci-bot</code></a>[bot]
  in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4794">tree-sitter/tree-sitter#4794</a></li>
  <li>release v0.25.9 by <a
  href="https://github.com/clason"><code>@​clason</code></a> in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4798">tree-sitter/tree-sitter#4798</a></li>
  <li>fix(rust): correct crate versions in root Cargo.toml file by <a
  href="https://github.com/WillLillis"><code>@​WillLillis</code></a> in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4800">tree-sitter/tree-sitter#4800</a></li>
  </ul>
  <h2>New Contributors</h2>
  <ul>
  <li><a href="https://github.com/Omar-xt"><code>@​Omar-xt</code></a> made
  their first contribution in <a
  href="https://redirect.github.com/tree-sitter/tree-sitter/pull/4709">tree-sitter/tree-sitter#4709</a></li>
  </ul>
  <p><strong>Full Changelog</strong>: <a
  href="https://github.com/tree-sitter/tree-sitter/compare/v0.25.8...v0.25.9">https://github.com/tree-sitter/tree-sitter/compare/v0.25.8...v0.25.9</a></p>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/a467ea8502d95562171f97953a6dc5b2a8622609"><code>a467ea8</code></a>
  fix(rust): correct crate versions in root Cargo.toml file</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/6cd25aadd5a1741643c1cc137a8e2c24bcda8e3b"><code>6cd25aa</code></a>
  0.25.9</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/027136c98a5f3bb506284bdbfe356ceda0770c1b"><code>027136c</code></a>
  fix(generate): use correct state id when adding terminal states to</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/14c4d2f8ca970ad21d4cea82a712bb7f9d4e4e5a"><code>14c4d2f</code></a>
  fix(generate): return error when single state transitions have</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/8e2b5ad2a49e93de4b21036659f06846fd60e345"><code>8e2b5ad</code></a>
  fix(test): improve readability of corpus error message mismatch</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/bb82b94ded65c8dfcfe5806a1f6971596e3b1bdd"><code>bb82b94</code></a>
  fix(web): correct type errors, improve build</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/59f3cb91c2d8f5bd8851d2cefd204473f2fe6cec"><code>59f3cb9</code></a>
  fix(npm): add directory to repository fields</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/a80cd86d4776762b5a4cf140434262dff7f83a73"><code>a80cd86</code></a>
  fix(cli): fix DSL type declarations</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/253003ccf8fdb6f35ce1a3acdeb13568cf75d492"><code>253003c</code></a>
  fix(generate): warn users when extra rule can lead to parser hang</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/e61407cc3631ae07471def33fca22f0136727f20"><code>e61407c</code></a>
  fix(bindings): properly detect MSVC compiler</li>
  <li>Additional commits viewable in <a
  href="https://github.com/tree-sitter/tree-sitter/compare/v0.25.8...v0.25.9">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tree-sitter&package-manager=cargo&previous-version=0.25.8&new-version=0.25.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-09-08 08:22:59 -07:00
  6b878bea01
• chore(deps): bump thiserror from 2.0.12 to 2.0.16 in /codex-rs (#2667)

  Bumps [thiserror](https://github.com/dtolnay/thiserror) from 2.0.12 to
  2.0.16.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/dtolnay/thiserror/releases">thiserror's
  releases</a>.</em></p>
  <blockquote>
  <h2>2.0.16</h2>
  <ul>
  <li>Add to &quot;no-std&quot; crates.io category (<a
  href="https://redirect.github.com/dtolnay/thiserror/issues/429">#429</a>)</li>
  </ul>
  <h2>2.0.15</h2>
  <ul>
  <li>Prevent <code>Error::provide</code> API becoming unavailable from a
  future new compiler lint (<a
  href="https://redirect.github.com/dtolnay/thiserror/issues/427">#427</a>)</li>
  </ul>
  <h2>2.0.14</h2>
  <ul>
  <li>Allow build-script cleanup failure with NFSv3 output directory to be
  non-fatal (<a
  href="https://redirect.github.com/dtolnay/thiserror/issues/426">#426</a>)</li>
  </ul>
  <h2>2.0.13</h2>
  <ul>
  <li>Documentation improvements</li>
  </ul>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/40b58536cc4570d7e94575d1c90ebb07edf9aba0"><code>40b5853</code></a>
  Release 2.0.16</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/83dfb5f99ba0ac9dc0ad800cc7adc64c28a2a918"><code>83dfb5f</code></a>
  Merge pull request <a
  href="https://redirect.github.com/dtolnay/thiserror/issues/429">#429</a>
  from dtolnay/nostd</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/9b4a99fb90bdb8feb2d3d4212a6aa3427418ea2b"><code>9b4a99f</code></a>
  Add to &quot;no-std&quot; crates.io category</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/f6145ebe84b51697e4d3253b373866f1c8ac09ad"><code>f6145eb</code></a>
  Release 2.0.15</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/2717177976a162d75103acfb62aa229df02bc54f"><code>2717177</code></a>
  Merge pull request <a
  href="https://redirect.github.com/dtolnay/thiserror/issues/427">#427</a>
  from dtolnay/caplints</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/2cd13e67673cee27cf25fe55c5ceb277b687272b"><code>2cd13e6</code></a>
  Make error_generic_member_access compatible with -Dwarnings</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/eea6799e2d00bb542a98dada84f5cafe2839f38d"><code>eea6799</code></a>
  Release 2.0.14</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/a2aa6d7a5759c3c3669110d5dd2319b28e1ce995"><code>a2aa6d7</code></a>
  Merge pull request <a
  href="https://redirect.github.com/dtolnay/thiserror/issues/426">#426</a>
  from dtolnay/enotempty</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/f00ebc57bea45ffaa138c15448c3abc3181fbcfe"><code>f00ebc5</code></a>
  Allow build-script cleanup failure with NFSv3 output directory to be
  non-fatal</li>
  <li><a
  href="https://github.com/dtolnay/thiserror/commit/61f28da3dfea22cd417c86e038dac839cfb7eeea"><code>61f28da</code></a>
  Release 2.0.13</li>
  <li>Additional commits viewable in <a
  href="https://github.com/dtolnay/thiserror/compare/2.0.12...2.0.16">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=thiserror&package-manager=cargo&previous-version=2.0.12&new-version=2.0.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-09-02 23:50:53 -07:00
  9ad2e726fc
• parse cd foo && ... for exec and apply_patch (#3083)

  sometimes the model likes to run "cd foo && ..." instead of using the
  workdir parameter of exec. handle them roughly the same.

  Jeremy Rose · 2025-09-03 05:26:06 +00:00
  53413c728e
• rework message styling (#2877)

  https://github.com/user-attachments/assets/cf07f62b-1895-44bb-b9c3-7a12032eb371

  Jeremy Rose · 2025-09-02 17:29:58 +00:00
  e442ecedab
• feat: use the arg0 trick with apply_patch (#2646)

  Historically, Codex CLI has treated `apply_patch` (and its sometimes
  misspelling, `applypatch`) as a "virtual CLI," intercepting it when it
  appears as the first arg to `command` for the `"container.exec",
  `"shell"`, or `"local_shell"` tools.
  
  This approach has a known limitation where if, say, the model created a
  Python script that runs `apply_patch` and then tried to run the Python
  script, we have no insight as to what the model is trying to do and the
  Python Script would fail because `apply_patch` was never really on the
  `PATH`.
  
  One way to solve this problem is to require users to install an
  `apply_patch` executable alongside the `codex` executable (or at least
  put it someplace where Codex can discover it). Though to keep Codex CLI
  as a standalone executable, we exploit "the arg0 trick" where we create
  a temporary directory with an entry named `apply_patch` and prepend that
  directory to the `PATH` for the duration of the invocation of Codex.
  
  - On UNIX, `apply_patch` is a symlink to `codex`, which now changes its
  behavior to behave like `apply_patch` if arg0 is `apply_patch` (or
  `applypatch`)
  - On Windows, `apply_patch.bat` is a batch script that runs `codex
  --codex-run-as-apply-patch %*`, as Codex also changes its behavior if
  the first argument is `--codex-run-as-apply-patch`.

  Michael Bolin · 2025-08-24 14:35:51 -07:00
  517ffd00c6
• [apply-patch] Clean up apply-patch tool definitions (#2539)

  ## Summary
  We've experienced a bit of drift in system prompting for `apply_patch`:
  - As pointed out in #2030 , our prettier formatting started altering
  prompt.md in a few ways
  - We introduced a separate markdown file for apply_patch instructions in
  #993, but currently duplicate them in the prompt.md file
  - We added a first-class apply_patch tool in #2303, which has yet
  another definition
  
  This PR starts to consolidate our logic in a few ways:
  - We now only use
  `apply_patch_tool_instructions.md](https://github.com/openai/codex/compare/dh--apply-patch-tool-definition?expand=1#diff-d4fffee5f85cb1975d3f66143a379e6c329de40c83ed5bf03ffd3829df985bea)
  for system instructions
  - We no longer include apply_patch system instructions if the tool is
  specified
  
  I'm leaving the definition in openai_tools.rs as duplicated text for now
  because we're going to be iterated on the first-class tool soon.
  
  ## Testing
  - [x] Added integration tests to verify prompt stability
  - [x] Tested locally with several different models (gpt-5, gpt-oss,
  o4-mini)

  Dylan · 2025-08-21 20:07:41 -07:00
  e4c275d615
• [apply-patch] Fix applypatch for heredocs (#2477)

  ## Summary
  Follow up to #2186 for #2072 - we added handling for `applypatch` in
  default commands, but forgot to add detection to the heredocs logic.
  
  ## Testing
  - [x] Added unit tests

  Dylan · 2025-08-20 12:16:01 -07:00
  1a1516a80b
• chore: upgrade to Rust 1.89 (#2465)

  Codex created this PR from the following prompt:
  
  > upgrade this entire repo to Rust 1.89. Note that this requires
  updating codex-rs/rust-toolchain.toml as well as the workflows in
  .github/. Make sure that things are "clippy clean" as this change will
  likely uncover new Clippy errors. `just fmt` and `cargo clippy --tests`
  are sufficient to check for correctness
  
  Note this modifies a lot of lines because it folds nested `if`
  statements using `&&`.
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/2465).
  * #2467
  * __->__ #2465

  Michael Bolin · 2025-08-19 13:22:02 -07:00
  50c48e88f5
• Added allow-expect-in-tests / allow-unwrap-in-tests (#2328)

  This PR:
  * Added the clippy.toml to configure allowable expect / unwrap usage in
  tests
  * Removed as many expect/allow lines as possible from tests
  * moved a bunch of allows to expects where possible
  
  Note: in integration tests, non `#[test]` helper functions are not
  covered by this so we had to leave a few lingering `expect(expect_used`
  checks around

  Parker Thompson · 2025-08-14 17:59:01 -07:00
  a075424437
• [apply-patch] Support applypatch command string (#2186)

  ## Summary
  GPT-OSS and `gpt-5-mini` have training artifacts that cause the models
  to occasionally use `applypatch` instead of `apply_patch`. I think
  long-term we'll want to provide `apply_patch` as a first class tool, but
  for now let's silently handle this case to avoid hurting model
  performance
  
  ## Testing
  - [x] Added unit test

  Dylan · 2025-08-11 13:11:04 -07:00
  5f8984aa7d
• Propagate apply_patch filesystem errors (#1892)

  ## Summary
  We have been returning `exit code 0` from the apply patch command when
  writes fail, which causes our `exec` harness to pass back confusing
  messages to the model. Instead, we should loudly fail so that the
  harness and the model can handle these errors appropriately.
  
  Also adds a test to confirm this behavior.
  
  ## Testing
  - `cargo test -p codex-apply-patch`

  Dylan · 2025-08-06 14:58:53 -07:00
  f25b2e8e2c
• Auto format toml (#1745)

  Add recommended extension and configure it to auto format prompt.

  pakrym-oai · 2025-07-30 18:37:00 -07:00
  51b6bdefbe
• fix: run apply_patch calls through the sandbox (#1705)

  Building on the work of https://github.com/openai/codex/pull/1702, this
  changes how a shell call to `apply_patch` is handled.
  
  Previously, a shell call to `apply_patch` was always handled in-process,
  never leveraging a sandbox. To determine whether the `apply_patch`
  operation could be auto-approved, the
  `is_write_patch_constrained_to_writable_paths()` function would check if
  all the paths listed in the paths were writable. If so, the agent would
  apply the changes listed in the patch.
  
  Unfortunately, this approach afforded a loophole: symlinks!
  
  * For a soft link, we could fix this issue by tracing the link and
  checking whether the target is in the set of writable paths, however...
  * ...For a hard link, things are not as simple. We can run `stat FILE`
  to see if the number of links is greater than 1, but then we would have
  to do something potentially expensive like `find . -inum <inode_number>`
  to find the other paths for `FILE`. Further, even if this worked, this
  approach runs the risk of a
  [TOCTOU](https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use)
  race condition, so it is not robust.
  
  The solution, implemented in this PR, is to take the virtual execution
  of the `apply_patch` CLI into an _actual_ execution using `codex
  --codex-run-as-apply-patch PATCH`, which we can run under the sandbox
  the user specified, just like any other `shell` call.
  
  This, of course, assumes that the sandbox prevents writing through
  symlinks as a mechanism to write to folders that are not in the writable
  set configured by the sandbox. I verified this by testing the following
  on both Mac and Linux:
  
  ```shell
  #!/usr/bin/env bash
  set -euo pipefail
  
  # Can running a command in SANDBOX_DIR write a file in EXPLOIT_DIR?
  
  # Codex is run in SANDBOX_DIR, so writes should be constrianed to this directory.
  SANDBOX_DIR=$(mktemp -d -p "$HOME" sandboxtesttemp.XXXXXX)
  # EXPLOIT_DIR is outside of SANDBOX_DIR, so let's see if we can write to it.
  EXPLOIT_DIR=$(mktemp -d -p "$HOME" sandboxtesttemp.XXXXXX)
  
  echo "SANDBOX_DIR: $SANDBOX_DIR"
  echo "EXPLOIT_DIR: $EXPLOIT_DIR"
  
  cleanup() {
    # Only remove if it looks sane and still exists
    [[ -n "${SANDBOX_DIR:-}" && -d "$SANDBOX_DIR" ]] && rm -rf -- "$SANDBOX_DIR"
    [[ -n "${EXPLOIT_DIR:-}" && -d "$EXPLOIT_DIR" ]] && rm -rf -- "$EXPLOIT_DIR"
  }
  
  trap cleanup EXIT
  
  echo "I am the original content" > "${EXPLOIT_DIR}/original.txt"
  
  # Drop the -s to test hard links.
  ln -s "${EXPLOIT_DIR}/original.txt" "${SANDBOX_DIR}/link-to-original.txt"
  
  cat "${SANDBOX_DIR}/link-to-original.txt"
  
  if [[ "$(uname)" == "Linux" ]]; then
      SANDBOX_SUBCOMMAND=landlock
  else
      SANDBOX_SUBCOMMAND=seatbelt
  fi
  
  # Attempt the exploit
  cd "${SANDBOX_DIR}"
  
  codex debug "${SANDBOX_SUBCOMMAND}" bash -lc "echo pwned > ./link-to-original.txt" || true
  
  cat "${EXPLOIT_DIR}/original.txt"
  ```
  
  Admittedly, this change merits a proper integration test, but I think I
  will have to do that in a follow-up PR.

  Michael Bolin · 2025-07-30 16:45:08 -07:00
  221ebfcccc
• chore(deps): bump tree-sitter from 0.25.6 to 0.25.8 in /codex-rs (#1561)

  Bumps [tree-sitter](https://github.com/tree-sitter/tree-sitter) from
  0.25.6 to 0.25.8.
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/f2f197b6b27ce75c280c20f131d4f71e906b86f7"><code>f2f197b</code></a>
  0.25.8</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/8bb33f7d8cb6504c892eecd253dfce72fd68ea3c"><code>8bb33f7</code></a>
  perf: reorder conditional operands</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/6f944de32f54c4a8df1d2ec060119c28e39114dd"><code>6f944de</code></a>
  fix(generate): propagate node types error</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/c15938532d06b5abc4ad8bcbde43597eb95b5c20"><code>c159385</code></a>
  0.25.7</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/94b55bfcdc62162d3c39467465bad472de50f842"><code>94b55bf</code></a>
  perf: reorder expensive conditional operand</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/bcb30f7951b6ffe325996db3b6f7fd949514528b"><code>bcb30f7</code></a>
  fix(generate): use topological sort for subtype map</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/3bd8f7df8eea914a7fcca21c1fa20fda276bc82b"><code>3bd8f7d</code></a>
  perf: More efficient computation of used symbols</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/d7529c32650b5f5c2d3c238e3eb17c8a3d750785"><code>d7529c3</code></a>
  perf: reserve <code>Vec</code> capacities where appropriate</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/bf4217f0ffca4a965afae9f4198d24d721cc731f"><code>bf4217f</code></a>
  fix(web): wasm export paths</li>
  <li><a
  href="https://github.com/tree-sitter/tree-sitter/commit/bb7b339ae24fb66ea382ff1ca2356ae655db3ab9"><code>bb7b339</code></a>
  Fix 'extra' field generation for node-types.json</li>
  <li>Additional commits viewable in <a
  href="https://github.com/tree-sitter/tree-sitter/compare/v0.25.6...v0.25.8">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tree-sitter&package-manager=cargo&previous-version=0.25.6&new-version=0.25.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-07-23 16:59:05 -07:00
  173386eeac
• chore(rs): update dependencies (#1494)

  ### Chores
  - Update cargo dependencies
  - Remove unused cargo dependencies
  - Fix clippy warnings
  - Update Dockerfile (package.json requires node 22)
  - Let Dependabot update bun, cargo, devcontainers, docker,
  github-actions, npm (nix still not supported)
  
  ### TODO
  - Upgrade dependencies with breaking changes
  
  ```shell
  $ cargo update --verbose
     Unchanged crossterm v0.28.1 (available: v0.29.0)
     Unchanged schemars v0.8.22 (available: v1.0.4)
  ```

  Rene Leonhardt · 2025-07-10 11:08:16 -07:00
  82b0cebe8b
• fix: provide tolerance for apply_patch tool (#993)

  As explained in detail in the doc comment for `ParseMode::Lenient`, we
  have observed that GPT-4.1 does not always generate a valid invocation
  of `apply_patch`. Fortunately, the error is predictable, so we introduce
  some new logic to the `codex-apply-patch` crate to recover from this
  error.
  
  Because we would like to avoid this becoming a de facto standard (as it
  would be incompatible if `apply_patch` were provided as an actual
  executable, unless we also introduced the lenient behavior in the
  executable, as well), we require passing `ParseMode::Lenient` to
  `parse_patch_text()` to make it clear that the caller is opting into
  supporting this special case.
  
  Note the analogous change to the TypeScript CLI was
  https://github.com/openai/codex/pull/930. In addition to changing the
  accepted input to `apply_patch`, it also introduced additional
  instructions for the model, which we include in this PR.
  
  Note that `apply-patch` does not depend on either `regex` or
  `regex-lite`, so some of the checks are slightly more verbose to avoid
  introducing this dependency.
  
  That said, this PR does not leverage the existing
  `extract_heredoc_body_from_apply_patch_command()`, which depends on
  `tree-sitter` and `tree-sitter-bash`:
  
  
  https://github.com/openai/codex/blob/5a5aa899143f9b9ef606692c401b010368b15bdb/codex-rs/apply-patch/src/lib.rs#L191-L246
  
  though perhaps it should.

  Michael Bolin · 2025-06-03 09:06:38 -07:00
  6fcc528a43
• chore: replace regex with regex-lite, where appropriate (#1200)

  As explained on https://crates.io/crates/regex-lite, `regex-lite` is a
  lighter alternative to `regex` and seems to be sufficient for our
  purposes.

  Michael Bolin · 2025-06-02 17:11:45 -07:00
  5a5aa89914
• fix: introduce ExtractHeredocError that implements PartialEq (#958)
  Michael Bolin · 2025-05-16 09:42:27 -07:00
  3d9f4fcd8a
• fix: apply patch issue when using different cwd (#942)

  If you run a codex instance outside of the current working directory
  from where you launched the codex binary it won't be able to apply
  patches correctly, even if the sandbox policy allows it. This manifests
  weird behaviours, such as
  
  * Reading the same filename in the binary working directory, and
  overwriting it in the session working directory. e.g. if you have a
  `readme` in both folders it will overwrite the readme in the session
  working directory with the readme in the binary working directory
  *applied with the suggested patch*.
  * The LLM ends up in weird loops trying to verify and debug why the
  apply_patch won't work, and it can result in it applying patches by
  manually writing python or javascript if it figures out that either is
  supported by the system instead.
  
  I added a test-case to ensure that the patch contents are based on the
  cwd.
  
  ## Issue: mixing relative & absolute paths in apply_patch
  
  1. The apply_patch tool use relative paths based on the session working
  directory.
  2. `unified_diff_from_chunks` eventually ends up [reading the source
  file](https://github.com/reflectionai/codex/blob/main/codex-rs/apply-patch/src/lib.rs#L410)
  to figure out what the diff is, by using the relative path.
  3. The changes are targeted using an absolute path derived from the
  current working directory.
  
  The end-result in case session working directory differs from the binary
  working directory: we get the diff for a file relative to the binary
  working directory, and apply it on a file in the session working
  directory.

  Sebastian Lund · 2025-05-16 09:12:16 -07:00
  84e01f4b62