93 Commits

• feat(tui): prevent macOS idle sleep while turns run (#11711)

  ## Summary
  - add a shared `codex-core` sleep inhibitor that uses native macOS IOKit
  assertions (`IOPMAssertionCreateWithName` / `IOPMAssertionRelease`)
  instead of spawning `caffeinate`
  - wire sleep inhibition to turn lifecycle in `tui` (`TurnStarted`
  enables; `TurnComplete` and abort/error finalization disable)
  - gate this behavior behind a `/experimental` feature toggle
  (`[features].prevent_idle_sleep`) instead of a dedicated `[tui]` config
  flag
  - expose the toggle in `/experimental` on macOS; keep it under
  development on other platforms
  - keep behavior no-op on non-macOS targets
  
  <img width="1326" height="577" alt="image"
  src="https://github.com/user-attachments/assets/73fac06b-97ae-46a2-800a-30f9516cf8a3"
  />
  
  ## Testing
  - `cargo check -p codex-core -p codex-tui`
  - `cargo test -p codex-core sleep_inhibitor::tests -- --nocapture`
  - `cargo test -p codex-core
  tui_config_missing_notifications_field_defaults_to_enabled --
  --nocapture`
  - `cargo test -p codex-core prevent_idle_sleep_is_ -- --nocapture`
  
  ## Semantics and API references
  - This PR targets `caffeinate -i` semantics: prevent *idle system sleep*
  while allowing display idle sleep.
  - `caffeinate -i` mapping in Apple open source (`assertionMap`):
    - `kIdleAssertionFlag -> kIOPMAssertionTypePreventUserIdleSystemSleep`
  - Source:
  https://github.com/apple-oss-distributions/PowerManagement/blob/PowerManagement-1846.60.12/caffeinate/caffeinate.c#L52-L54
  - Apple IOKit docs for assertion types and API:
  -
  https://developer.apple.com/documentation/iokit/iopmlib_h/iopmassertiontypes
  -
  https://developer.apple.com/documentation/iokit/1557092-iopmassertioncreatewithname
    - https://developer.apple.com/library/archive/qa/qa1340/_index.html
  
  ## Codex Electron vs this PR (full stack path)
  - Codex Electron app requests sleep blocking with
  `powerSaveBlocker.start("prevent-app-suspension")`:
  -
  https://github.com/openai/codex/blob/main/codex/codex-vscode/electron/src/electron-message-handler.ts
  - Electron maps that string to Chromium wake lock type
  `kPreventAppSuspension`:
  -
  https://github.com/electron/electron/blob/main/shell/browser/api/electron_api_power_save_blocker.cc
  - Chromium macOS backend maps wake lock types to IOKit assertion
  constants and calls IOKit:
    - `kPreventAppSuspension -> kIOPMAssertionTypeNoIdleSleep`
  - `kPreventDisplaySleep / kPreventDisplaySleepAllowDimming ->
  kIOPMAssertionTypeNoDisplaySleep`
  -
  https://github.com/chromium/chromium/blob/main/services/device/wake_lock/power_save_blocker/power_save_blocker_mac.cc
  
  ## Why this PR uses a different macOS constant name
  - This PR uses `"PreventUserIdleSystemSleep"` directly, via
  `IOPMAssertionCreateWithName`, in
  `codex-rs/core/src/sleep_inhibitor.rs`.
  - Apple’s IOKit header documents `kIOPMAssertionTypeNoIdleSleep` as
  deprecated and recommends `kIOPMAssertPreventUserIdleSystemSleep` /
  `kIOPMAssertionTypePreventUserIdleSystemSleep`:
  -
  https://github.com/apple-oss-distributions/IOKitUser/blob/IOKitUser-100222.60.2/pwr_mgt.subproj/IOPMLib.h#L1000-L1030
  - So Chromium and this PR are using different constant names, but
  semantically equivalent idle-system-sleep prevention behavior.
  
  ## Future platform support
  The architecture is intentionally set up for multi-platform extensions:
  - UI code (`tui`) only calls `SleepInhibitor::set_turn_running(...)` on
  turn lifecycle boundaries.
  - Platform-specific behavior is isolated in
  `codex-rs/core/src/sleep_inhibitor.rs` behind `cfg(...)` blocks.
  - Feature exposure is centralized in `core/src/features.rs` and surfaced
  via `/experimental`.
  - Adding new OS backends should not require additional TUI wiring; only
  the backend internals and feature stage metadata need to change.
  
  Potential follow-up implementations:
  - Windows:
  - Add a backend using Win32 power APIs
  (`SetThreadExecutionState(ES_CONTINUOUS | ES_SYSTEM_REQUIRED)` as
  baseline).
  - Optionally move to `PowerCreateRequest` / `PowerSetRequest` /
  `PowerClearRequest` for richer assertion semantics.
  - Linux:
  - Add a backend using logind inhibitors over D-Bus
  (`org.freedesktop.login1.Manager.Inhibit` with `what="sleep"`).
    - Keep a no-op fallback where logind/D-Bus is unavailable.
  
  This PR keeps the cross-platform API surface minimal so future PRs can
  add Windows/Linux support incrementally with low churn.
  
  ---------
  
  Co-authored-by: jif-oai <jif@openai.com>

  Yaroslav Volovich · 2026-02-13 10:31:39 -08:00
  32da5eb358
• feat: split codex-common into smaller utils crates (#11422)

  We are removing feature-gated shared crates from the `codex-rs`
  workspace. `codex-common` grouped several unrelated utilities behind
  `[features]`, which made dependency boundaries harder to reason about
  and worked against the ongoing effort to eliminate feature flags from
  workspace crates.
  
  Splitting these utilities into dedicated crates under `utils/` aligns
  this area with existing workspace structure and keeps each dependency
  explicit at the crate boundary.
  
  ## What changed
  
  - Removed `codex-rs/common` (`codex-common`) from workspace members and
  workspace dependencies.
  - Added six new utility crates under `codex-rs/utils/`:
    - `codex-utils-cli`
    - `codex-utils-elapsed`
    - `codex-utils-sandbox-summary`
    - `codex-utils-approval-presets`
    - `codex-utils-oss`
    - `codex-utils-fuzzy-match`
  - Migrated the corresponding modules out of `codex-common` into these
  crates (with tests), and added matching `BUILD.bazel` targets.
  - Updated direct consumers to use the new crates instead of
  `codex-common`:
    - `codex-rs/cli`
    - `codex-rs/tui`
    - `codex-rs/exec`
    - `codex-rs/app-server`
    - `codex-rs/mcp-server`
    - `codex-rs/chatgpt`
    - `codex-rs/cloud-tasks`
  - Updated workspace lockfile entries to reflect the new dependency graph
  and removal of `codex-common`.

  Michael Bolin · 2026-02-11 12:59:24 +00:00
  8b7f8af343
• Remove test-support feature from codex-core and replace it with explicit test toggles (#11405)

  ## Why
  
  `codex-core` was being built in multiple feature-resolved permutations
  because test-only behavior was modeled as crate features. For a large
  crate, those permutations increase compile cost and reduce cache reuse.
  
  ## Net Change
  
  - Removed the `test-support` crate feature and related feature wiring so
  `codex-core` no longer needs separate feature shapes for test consumers.
  - Standardized cross-crate test-only access behind
  `codex_core::test_support`.
  - External test code now imports helpers from
  `codex_core::test_support`.
  - Underlying implementation hooks are kept internal (`pub(crate)`)
  instead of broadly public.
  
  ## Outcome
  
  - Fewer `codex-core` build permutations.
  - Better incremental cache reuse across test targets.
  - No intended production behavior change.

  Michael Bolin · 2026-02-10 22:44:02 -08:00
  476c1a7160
• [apps] Improve app installation flow. (#11249)

  - [x] Add buttons to start the installation flow and verify installation
  completes.
  - [x] Hard refresh apps list when the /apps view opens.

  Matthew Zeng · 2026-02-10 17:59:43 +00:00
  48e415bdef
• adding image support for gif and webp (#11237)

  Adds image support for gif and webp images. Tested using webp and gif
  (both single and multi image gif files)

  natea-oai · 2026-02-09 14:47:22 -08:00
  ed977dbeda
• feat: replace custom mcp-types crate with equivalents from rmcp (#10349)

  We started working with MCP in Codex before
  https://crates.io/crates/rmcp was mature, so we had our own crate for
  MCP types that was generated from the MCP schema:
  
  
  https://github.com/openai/codex/blob/8b95d3e082376f4cb23e92641705a22afb28a9da/codex-rs/mcp-types/README.md
  
  Now that `rmcp` is more mature, it makes more sense to use their MCP
  types in Rust, as they handle details (like the `_meta` field) that our
  custom version ignored. Though one advantage that our custom types had
  is that our generated types implemented `JsonSchema` and `ts_rs::TS`,
  whereas the types in `rmcp` do not. As such, part of the work of this PR
  is leveraging the adapters between `rmcp` types and the serializable
  types that are API for us (app server and MCP) introduced in #10356.
  
  Note this PR results in a number of changes to
  `codex-rs/app-server-protocol/schema`, which merit special attention
  during review. We must ensure that these changes are still
  backwards-compatible, which is possible because we have:
  
  ```diff
  - export type CallToolResult = { content: Array<ContentBlock>, isError?: boolean, structuredContent?: JsonValue, };
  + export type CallToolResult = { content: Array<JsonValue>, structuredContent?: JsonValue, isError?: boolean, _meta?: JsonValue, };
  ```
  
  so `ContentBlock` has been replaced with the more general `JsonValue`.
  Note that `ContentBlock` was defined as:
  
  ```typescript
  export type ContentBlock = TextContent | ImageContent | AudioContent | ResourceLink | EmbeddedResource;
  ```
  
  so the deletion of those individual variants should not be a cause of
  great concern.
  
  Similarly, we have the following change in
  `codex-rs/app-server-protocol/schema/typescript/Tool.ts`:
  
  ```
  - export type Tool = { annotations?: ToolAnnotations, description?: string, inputSchema: ToolInputSchema, name: string, outputSchema?: ToolOutputSchema, title?: string, };
  + export type Tool = { name: string, title?: string, description?: string, inputSchema: JsonValue, outputSchema?: JsonValue, annotations?: JsonValue, icons?: Array<JsonValue>, _meta?: JsonValue, };
  ```
  
  so:
  
  - `annotations?: ToolAnnotations` ➡️ `JsonValue`
  - `inputSchema: ToolInputSchema` ➡️ `JsonValue`
  - `outputSchema?: ToolOutputSchema` ➡️ `JsonValue`
  
  and two new fields: `icons?: Array<JsonValue>, _meta?: JsonValue`
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/10349).
  * #10357
  * __->__ #10349
  * #10356

  Michael Bolin · 2026-02-02 17:41:55 -08:00
  66447d5d2c
• Fetch Requirements from cloud (#10167)

  Load requirements from Codex Backend. It only does this for enterprise
  customers signed in with ChatGPT.
  
  Todo in follow-up PRs:
  * Add to app-server and exec too
  * Switch from fail-open to fail-closed on failure

  gt-oai · 2026-01-30 12:03:29 +00:00
  e85d019daa
• Conversation naming (#8991)

  Session renaming:
  - `/rename my_session`
  - `/rename` without arg and passing an argument in `customViewPrompt`
  - AppExitInfo shows resume hint using the session name if set instead of
  uuid, defaults to uuid if not set
  - Names are stored in `CODEX_HOME/sessions.jsonl`
  
  Session resuming:
  - codex resume <name> lookup for `CODEX_HOME/sessions.jsonl` first entry
  matching the name and resumes the session
  
  ---------
  
  Co-authored-by: jif-oai <jif@openai.com>

  pap-openai · 2026-01-30 10:40:09 +00:00
  1ef5455eb6
• feat: add log db (#10086)

  Add a log DB. The goal is just to store our logs in a `.sqlite` DB to
  make it easier to crawl them and drop the oldest ones.

  jif-oai · 2026-01-29 10:23:03 +01:00
  780482da84
• [connectors] Support connectors part 2 - slash command and tui (#9728)

  - [x] Support `/apps` slash command to browse the apps in tui.
  - [x] Support inserting apps to prompt using `$`.
  - [x] Lots of simplification/renaming from connectors to apps.

  Matthew Zeng · 2026-01-28 19:51:58 -08:00
  b9cd089d1f
• define/emit some metrics for windows sandbox setup (#9573)

  This should give us visibility into how users are using the elevated
  sandbox nux flow, and the timing of the elevated setup.

  iceweasel-oai · 2026-01-21 11:07:26 -08:00
  f81dd128a2
• fix: integration test for #9011 (#9166)

  Adds an integration test for the new behavior introduced in
  https://github.com/openai/codex/pull/9011. The work to create the test
  setup was substantial enough that I thought it merited a separate PR.
  
  This integration test spawns `codex` in TUI mode, which requires
  spawning a PTY to run successfully, so I had to introduce quite a bit of
  scaffolding in `run_codex_cli()`. I was surprised to discover that we
  have not done this in our codebase before, so perhaps this should get
  moved to a common location so it can be reused.
  
  The test itself verifies that a malformed `rules` in `$CODEX_HOME`
  prints a human-readable error message and exits nonzero.

  Michael Bolin · 2026-01-13 23:39:34 +00:00
  4c673086bc
• feat: open prompt in configured external editor (#7606)

  Add `ctrl+g` shortcut to enable opening current prompt in configured
  editor (`$VISUAL` or `$EDITOR`).
  
  
  - Prompt is updated with editor's content upon editor close.
  - Paste placeholders are automatically expanded when opening the
  external editor, and are not "recompressed" on close
  - They could be preserved in the editor, but it would be hard to prevent
  the user from modifying the placeholder text directly, which would drop
  the mapping to the `pending_paste` value
  - Image placeholders stay as-is
  - `ctrl+g` explanation added to shortcuts menu, snapshot tests updated
  
  
  
  https://github.com/user-attachments/assets/4ee05c81-fa49-4e99-8b07-fc9eef0bbfce

  sayan-oai · 2025-12-22 15:12:23 -08:00
  4673090f73
• refactor TUI event loop to enable dropping + recreating crossterm event stream (#7961)

  Introduces an `EventBroker` between the crossterm `EventStream` source
  and the consumers in the TUI. This enables dropping + recreating the
  `crossterm_events` without invalidating the consumer.
  
  Dropping and recreating the crossterm event stream enables us to fully
  relinquish `stdin` while the app keeps running. If the stream is not
  dropped, it will continue to read from `stdin` even when it is not
  actively being polled, potentially stealing input from other processes.
  See
  [here](https://www.reddit.com/r/rust/comments/1f3o33u/myterious_crossterm_input_after_running_vim/?utm_source=chatgpt.com)
  and [here](https://ratatui.rs/recipes/apps/spawn-vim/) for details.
  
  ### Tests
  Added tests for new `EventBroker` setup, existing tests pass, tested
  locally.

  sayan-oai · 2025-12-16 01:14:03 -08:00
  cf44511e77
• [codex] add otel tracing (#7844)
  Anton Panasenko · 2025-12-12 17:07:17 -08:00
  ad7b9d63c3
• fix: introduce AbsolutePathBuf as part of sandbox config (#7856)

  Changes the `writable_roots` field of the `WorkspaceWrite` variant of
  the `SandboxPolicy` enum from `Vec<PathBuf>` to `Vec<AbsolutePathBuf>`.
  This is helpful because now callers can be sure the value is an absolute
  path rather than a relative one. (Though when using an absolute path in
  a Seatbelt config policy, we still have to _canonicalize_ it first.)
  
  Because `writable_roots` can be read from a config file, it is important
  that we are able to resolve relative paths properly using the parent
  folder of the config file as the base path.

  Michael Bolin · 2025-12-12 15:25:22 -08:00
  642b7566df
• Wire with_remote_overrides to construct model families (#7621)

  - This PR wires `with_remote_overrides` and make the
  `construct_model_families` an async function
  - Moves getting model family a level above to keep the function `sync`
  - Updates the tests to local, offline, and `sync` helper for model
  families

  Ahmed Ibrahim · 2025-12-05 10:40:15 -08:00
  d08efb1743
• Migrate tui to use models manager (#7555)

  - This PR treats the `ModelsManager` like `AuthManager` and propagate it
  into the tui, replacing the `builtin_model_presets`
  - We are also decreasing the visibility of `builtin_model_presets`
  
  based on https://github.com/openai/codex/pull/7552

  Ahmed Ibrahim · 2025-12-03 18:00:47 -08:00
  8da91d1c89
• add slash resume (#7302)

  `codex resume` isn't that discoverable. Adding it to the slash commands
  can help

  Ahmed Ibrahim · 2025-12-03 11:25:44 -08:00
  2ad980abf4
• refactor: tui.rs extract several pieces (#7461)

  Pull FrameRequester out of tui.rs into its own module and make a
  FrameScheduler struct. This is effectively an Actor/Handler approach
  (see https://ryhl.io/blog/actors-with-tokio/). Adds tests and docs.
  
  Small refactor of pending_viewport_area logic.

  Josh McKinney · 2025-12-02 15:19:27 -08:00
  58e1e570fa
• chore: add cargo-deny configuration (#7119)

  - add GitHub workflow running cargo-deny on push/PR
  - document cargo-deny allowlist with workspace-dep notes and advisory
  ignores
  - align workspace crates to inherit version/edition/license for
  consistent checks

  Josh McKinney · 2025-11-24 12:22:18 -08:00
  ec49b56874
• background rate limits fetch (#6789)

  fetching rate limits every minute asynchronously

  zhao-oai · 2025-11-17 16:06:26 -08:00
  4000e26303
• LM Studio OSS Support (#2312)

  ## Overview
  
  Adds LM Studio OSS support. Closes #1883
  
  
  ### Changes
  This PR enhances the behavior of `--oss` flag to support LM Studio as a
  provider. Additionally, it introduces a new flag`--local-provider` which
  can take in `lmstudio` or `ollama` as values if the user wants to
  explicitly choose which one to use.
  
  If no provider is specified `codex --oss` will auto-select the provider
  based on whichever is running.
  
  #### Additional enhancements 
  The default can be set using `oss-provider` in config like:
  
  ```
  oss_provider = "lmstudio"
  ```
  
  For non-interactive users, they will need to either provide the provider
  as an arg or have it in their `config.toml`
  
  ### Notes
  For best performance, [set the default context
  length](https://lmstudio.ai/docs/app/advanced/per-model) for gpt-oss to
  the maximum your machine can support
  
  ---------
  
  Co-authored-by: Matt Clayton <matt@lmstudio.ai>
  Co-authored-by: Eric Traut <etraut@openai.com>

  rugvedS07 · 2025-11-17 11:49:09 -08:00
  837bc98a1d
• refactor(terminal): cleanup deprecated flush logic (#6373)

  Removes flush logic that was leftover to test against ratatui's flush
  Cleaned up the flush logic so it's a bit more intent revealing.
  DrawCommand now owns the Cells that it draws as this works around a
  borrow checker problem.

  Josh McKinney · 2025-11-07 15:54:07 -08:00
  9fba811764
• Windows Sandbox: Show Everyone-writable directory warning (#6283)

  Show a warning when Auto Sandbox mode becomes enabled, if we detect
  Everyone-writable directories, since they cannot be protected by the
  current implementation of the Sandbox.
  
  This PR also includes changes to how we detect Everyone-writable to be
  *much* faster

  iceweasel-oai · 2025-11-06 10:44:42 -08:00
  871d442b8e
• Do not skip trust prompt on Windows if sandbox is enabled. (#6167)

  If the experimental windows sandbox is enabled, the trust prompt should
  show on Windows.

  iceweasel-oai · 2025-11-03 11:27:45 -08:00
  2eda75a8ee
• tui: patch crossterm for better color queries (#5935)

  See
  https://github.com/crossterm-rs/crossterm/compare/master...nornagon:crossterm:nornagon/color-query
  
  This patches crossterm to add support for querying fg/bg color as part
  of the crossterm event loop, which fixes some issues where this query
  would fight with other input.
  
  - dragging screenshots into the cli would sometimes paste half of the
  pathname instead of being recognized as an image
  (https://github.com/openai/codex/issues/5603)
  - Fixes https://github.com/openai/codex/issues/4945

  Jeremy Rose · 2025-10-31 16:36:41 -07:00
  07b8bdfbf1
• feat: TUI undo op (#5629)
  jif-oai · 2025-10-27 10:55:29 +00:00
  afc4eaab8b
• fix terminal corruption that could happen when onboarding and update banner (#5269)

  Instead of printing characters before booting the app, make the upgrade
  banner a history cell so it's well-behaved.
  
  <img width="771" height="586" alt="Screenshot 2025-10-16 at 4 20 51 PM"
  src="https://github.com/user-attachments/assets/90629d47-2c3d-4970-a826-283795ab34e5"
  />
  
  ---------
  
  Co-authored-by: Josh McKinney <joshka@openai.com>

  Jeremy Rose · 2025-10-20 21:40:14 +00:00
  58159383c4
• tui: drop citation rendering (#4855)

  We don't instruct the model to use citations, so it never emits them.
  Further, ratatui [doesn't currently support rendering links into the
  terminal with OSC 8](https://github.com/ratatui/ratatui/issues/1028), so
  even if we did parse citations, we can't correctly render them.
  
  So, remove all the code related to rendering them.

  Jeremy Rose · 2025-10-20 21:08:19 +00:00
  39a2446716
• Add log upload support (#5257)
  pakrym-oai · 2025-10-16 21:03:23 -07:00
  da5492694b
• fix: tui default trusted settings should respect workspace write config (#3341)

  ## Summary
  When using the trusted state during tui startup, we created a new
  WorkspaceWrite policy without checking the config.toml for a
  `sandbox_workspace_write` field. This would result in us setting the
  sandbox_mode as workspace-write, but ignoring the field if the user had
  set `sandbox_workspace_write` without also setting `sandbox_mode` in the
  config.toml. This PR adds support for respecting
  `sandbox_workspace_write` setting in config.toml in the trusted
  directory flow, and adds tests to cover this case.
  
  ## Testing
  - [x] Added unit tests

  Dylan · 2025-10-16 11:23:38 -07:00
  4b01f0f50a
• feat(tui): switch to tree-sitter-highlight bash highlighting (#4666)

  use tree-sitter-highlight instead of custom logic over the tree-sitter
  tree to highlight bash.

  Jeremy Rose · 2025-10-07 16:20:12 -07:00
  b8b04514bc
• Use assert_matches (#4756)

  assert_matches is soon to be in std but is experimental for now.

  pakrym-oai · 2025-10-05 21:12:31 +00:00
  5c42419b02
• canonicalize display of Agents.md paths on Windows. (#4577)

  Canonicalize path on Windows to 
  - remove unattractive path prefixes such as `\\?\`
  - simplify it (`../AGENTS.md` vs
  `C:\Users\iceweasel\code\coded\Agents.md`)
  before: <img width="1110" height="45" alt="Screenshot 2025-10-01 123520"
  src="https://github.com/user-attachments/assets/48920ae6-d89c-41b8-b4ea-df5c18fb5fad"
  />
  
  after: 
  <img width="585" height="46" alt="Screenshot 2025-10-01 123612"
  src="https://github.com/user-attachments/assets/70a1761a-9d97-4836-b14c-670b6f13e608"
  />

  iceweasel-oai · 2025-10-01 14:33:19 -07:00
  6f97ec4990
• fix: remove mcp-types from app server protocol (#4537)

  We continue the separation between `codex app-server` and `codex
  mcp-server`.
  
  In particular, we introduce a new crate, `codex-app-server-protocol`,
  and migrate `codex-rs/protocol/src/mcp_protocol.rs` into it, renaming it
  `codex-rs/app-server-protocol/src/protocol.rs`.
  
  Because `ConversationId` was defined in `mcp_protocol.rs`, we move it
  into its own file, `codex-rs/protocol/src/conversation_id.rs`, and
  because it is referenced in a ton of places, we have to touch a lot of
  files as part of this PR.
  
  We also decide to get away from proper JSON-RPC 2.0 semantics, so we
  also introduce `codex-rs/app-server-protocol/src/jsonrpc_lite.rs`, which
  is basically the same `JSONRPCMessage` type defined in `mcp-types`
  except with all of the `"jsonrpc": "2.0"` removed.
  
  Getting rid of `"jsonrpc": "2.0"` makes our serialization logic
  considerably simpler, as we can lean heavier on serde to serialize
  directly into the wire format that we use now.

  Michael Bolin · 2025-10-01 02:16:26 +00:00
  5881c0d6d4
• OpenTelemetry events (#2103)

  ### Title
  
  ## otel
  
  Codex can emit [OpenTelemetry](https://opentelemetry.io/) **log events**
  that
  describe each run: outbound API requests, streamed responses, user
  input,
  tool-approval decisions, and the result of every tool invocation. Export
  is
  **disabled by default** so local runs remain self-contained. Opt in by
  adding an
  `[otel]` table and choosing an exporter.
  
  ```toml
  [otel]
  environment = "staging"   # defaults to "dev"
  exporter = "none"          # defaults to "none"; set to otlp-http or otlp-grpc to send events
  log_user_prompt = false    # defaults to false; redact prompt text unless explicitly enabled
  ```
  
  Codex tags every exported event with `service.name = "codex-cli"`, the
  CLI
  version, and an `env` attribute so downstream collectors can distinguish
  dev/staging/prod traffic. Only telemetry produced inside the
  `codex_otel`
  crate—the events listed below—is forwarded to the exporter.
  
  ### Event catalog
  
  Every event shares a common set of metadata fields: `event.timestamp`,
  `conversation.id`, `app.version`, `auth_mode` (when available),
  `user.account_id` (when available), `terminal.type`, `model`, and
  `slug`.
  
  With OTEL enabled Codex emits the following event types (in addition to
  the
  metadata above):
  
  - `codex.api_request`
    - `cf_ray` (optional)
    - `attempt`
    - `duration_ms`
    - `http.response.status_code` (optional)
    - `error.message` (failures)
  - `codex.sse_event`
    - `event.kind`
    - `duration_ms`
    - `error.message` (failures)
    - `input_token_count` (completion only)
    - `output_token_count` (completion only)
    - `cached_token_count` (completion only, optional)
    - `reasoning_token_count` (completion only, optional)
    - `tool_token_count` (completion only)
  - `codex.user_prompt`
    - `prompt_length`
    - `prompt` (redacted unless `log_user_prompt = true`)
  - `codex.tool_decision`
    - `tool_name`
    - `call_id`
  - `decision` (`approved`, `approved_for_session`, `denied`, or `abort`)
    - `source` (`config` or `user`)
  - `codex.tool_result`
    - `tool_name`
    - `call_id`
    - `arguments`
    - `duration_ms` (execution time for the tool)
    - `success` (`"true"` or `"false"`)
    - `output`
  
  ### Choosing an exporter
  
  Set `otel.exporter` to control where events go:
  
  - `none` – leaves instrumentation active but skips exporting. This is
  the
    default.
  - `otlp-http` – posts OTLP log records to an OTLP/HTTP collector.
  Specify the
    endpoint, protocol, and headers your collector expects:
  
    ```toml
    [otel]
    exporter = { otlp-http = {
      endpoint = "https://otel.example.com/v1/logs",
      protocol = "binary",
      headers = { "x-otlp-api-key" = "${OTLP_TOKEN}" }
    }}
    ```
  
  - `otlp-grpc` – streams OTLP log records over gRPC. Provide the endpoint
  and any
    metadata headers:
  
    ```toml
    [otel]
    exporter = { otlp-grpc = {
      endpoint = "https://otel.example.com:4317",
      headers = { "x-otlp-meta" = "abc123" }
    }}
    ```
  
  If the exporter is `none` nothing is written anywhere; otherwise you
  must run or point to your
  own collector. All exporters run on a background batch worker that is
  flushed on
  shutdown.
  
  If you build Codex from source the OTEL crate is still behind an `otel`
  feature
  flag; the official prebuilt binaries ship with the feature enabled. When
  the
  feature is disabled the telemetry hooks become no-ops so the CLI
  continues to
  function without the extra dependencies.
  
  ---------
  
  Co-authored-by: Anton Panasenko <apanasenko@openai.com>

  vishnu-oai · 2025-09-29 11:30:55 -07:00
  04c1782e52
• update composer + user message styling (#4240)

  Changes:
  
  - the composer and user messages now have a colored background that
  stretches the entire width of the terminal.
  - the prompt character was changed from a cyan `▌` to a bold `›`.
  - the "working" shimmer now follows the "dark gray" color of the
  terminal, better matching the terminal's color scheme
  
  | Terminal + Background        | Screenshot |
  |------------------------------|------------|
  | iTerm with dark bg | <img width="810" height="641" alt="Screenshot
  2025-09-25 at 11 44 52 AM"
  src="https://github.com/user-attachments/assets/1317e579-64a9-4785-93e6-98b0258f5d92"
  /> |
  | iTerm with light bg | <img width="845" height="540" alt="Screenshot
  2025-09-25 at 11 46 29 AM"
  src="https://github.com/user-attachments/assets/e671d490-c747-4460-af0b-3f8d7f7a6b8e"
  /> |
  | iTerm with color bg | <img width="825" height="564" alt="Screenshot
  2025-09-25 at 11 47 12 AM"
  src="https://github.com/user-attachments/assets/141cda1b-1164-41d5-87da-3be11e6a3063"
  /> |
  | Terminal.app with dark bg | <img width="577" height="367"
  alt="Screenshot 2025-09-25 at 11 45 22 AM"
  src="https://github.com/user-attachments/assets/93fc4781-99f7-4ee7-9c8e-3db3cd854fe5"
  /> |
  | Terminal.app with light bg | <img width="577" height="367"
  alt="Screenshot 2025-09-25 at 11 46 04 AM"
  src="https://github.com/user-attachments/assets/19bf6a3c-91e0-447b-9667-b8033f512219"
  /> |
  | Terminal.app with color bg | <img width="577" height="367"
  alt="Screenshot 2025-09-25 at 11 45 50 AM"
  src="https://github.com/user-attachments/assets/dd7c4b5b-342e-4028-8140-f4e65752bd0b"
  /> |

  Jeremy Rose · 2025-09-26 16:35:56 -07:00
  43b63ccae8
• chore: remove once_cell dependency from multiple crates (#4154)

  This commit removes the `once_cell` dependency from `Cargo.toml` files
  in the `codex-rs` and `apply-patch` directories, replacing its usage
  with `std::sync::LazyLock` and `std::sync::OnceLock` where applicable.
  This change simplifies the dependency tree and utilizes standard library
  features for lazy initialization.
  
  # External (non-OpenAI) Pull Request Requirements
  
  Before opening this Pull Request, please read the dedicated
  "Contributing" markdown file or your PR may be closed:
  https://github.com/openai/codex/blob/main/docs/contributing.md
  
  If your PR conforms to our contribution guidelines, replace this text
  with a detailed and high quality description of your changes.

  Tien Nguyen · 2025-09-24 09:15:57 -07:00
  00c7f7a16c
• feat: git tooling for undo (#3914)

  ## Summary
  Introduces a “ghost commit” workflow that snapshots the tree without
  touching refs.
  1. git commit-tree writes an unreferenced commit object from the current
  index, optionally pointing to the current HEAD as its parent.
  2. We then stash that commit id and use git restore --source <ghost> to
  roll the worktree (and index) back to the recorded snapshot later on.
  
  ## Details
  - Ghost commits live only as loose objects—we never update branches or
  tags—so the repo history stays untouched while still giving us a full
  tree snapshot.
  - Force-included paths let us stage otherwise ignored files before
  capturing the tree.
  - Restoration rehydrates both tracked and force-included files while
  leaving untracked/ignored files alone.

  jif-oai · 2025-09-23 16:59:52 +01:00
  e0fbc112c7
• fix codex resume message at end of session (#3957)

  This was only being printed when running the codex-tui executable
  directly, not via the codex-cli wrapper.

  Jeremy Rose · 2025-09-22 22:24:31 +00:00
  4e0550b995
• chore: unify cargo versions (#4044)

  Unify cargo versions at root

  jif-oai · 2025-09-22 16:47:01 +00:00
  e5fe50d3ce
• hint for codex resume on tui exit (#3757)

  <img width="931" height="438" alt="Screenshot 2025-09-16 at 4 25 19 PM"
  src="https://github.com/user-attachments/assets/ccfb8df1-feaf-45b4-8f7f-56100de916d5"
  />

  Jeremy Rose · 2025-09-18 09:28:32 -07:00
  84a0ba9bf5
• feat: update splash (#3631)

  - Update splash styling.
  - Add center truncation for long paths.
    (Uses new `center_truncate_path` utility.)
  - Update the suggested commands.
  
  
  ## New splash
  <img width="560" height="326" alt="image"
  src="https://github.com/user-attachments/assets/b80d7075-f376-4019-a464-b96a78b0676d"
  />
  
  ## Example with truncation:
  <img width="524" height="317" alt="image"
  src="https://github.com/user-attachments/assets/b023c5cc-0bf0-4d21-9b98-bfea85546eda"
  />

  ae · 2025-09-15 06:44:40 -07:00
  9baa5c33da
• chore(deps): bump tracing-subscriber from 0.3.19 to 0.3.20 in /codex-rs (#3620)

  Bumps [tracing-subscriber](https://github.com/tokio-rs/tracing) from
  0.3.19 to 0.3.20.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/tokio-rs/tracing/releases">tracing-subscriber's
  releases</a>.</em></p>
  <blockquote>
  <h2>tracing-subscriber 0.3.20</h2>
  <p><strong>Security Fix</strong>: ANSI Escape Sequence Injection
  (CVE-TBD)</p>
  <h2>Impact</h2>
  <p>Previous versions of tracing-subscriber were vulnerable to ANSI
  escape sequence injection attacks. Untrusted user input containing ANSI
  escape sequences could be injected into terminal output when logged,
  potentially allowing attackers to:</p>
  <ul>
  <li>Manipulate terminal title bars</li>
  <li>Clear screens or modify terminal display</li>
  <li>Potentially mislead users through terminal manipulation</li>
  </ul>
  <p>In isolation, impact is minimal, however security issues have been
  found in terminal emulators that enabled an attacker to use ANSI escape
  sequences via logs to exploit vulnerabilities in the terminal
  emulator.</p>
  <h2>Solution</h2>
  <p>Version 0.3.20 fixes this vulnerability by escaping ANSI control
  characters in when writing events to destinations that may be printed to
  the terminal.</p>
  <h2>Affected Versions</h2>
  <p>All versions of tracing-subscriber prior to 0.3.20 are affected by
  this vulnerability.</p>
  <h2>Recommendations</h2>
  <p>Immediate Action Required: We recommend upgrading to
  tracing-subscriber 0.3.20 immediately, especially if your
  application:</p>
  <ul>
  <li>Logs user-provided input (form data, HTTP headers, query parameters,
  etc.)</li>
  <li>Runs in environments where terminal output is displayed to
  users</li>
  </ul>
  <h2>Migration</h2>
  <p>This is a patch release with no breaking API changes. Simply update
  your Cargo.toml:</p>
  <pre lang="toml"><code>[dependencies]
  tracing-subscriber = &quot;0.3.20&quot;
  </code></pre>
  <h2>Acknowledgments</h2>
  <p>We would like to thank <a href="http://github.com/zefr0x">zefr0x</a>
  who responsibly reported the issue at
  <code>security@tokio.rs</code>.</p>
  <p>If you believe you have found a security vulnerability in any
  tokio-rs project, please email us at <code>security@tokio.rs</code>.</p>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/4c52ca5266a3920fc5dfeebda2accf15ee7fb278"><code>4c52ca5</code></a>
  fmt: fix ANSI escape sequence injection vulnerability (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3368">#3368</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/f71cebe41e4c12735b1d19ca804428d4ff7d905d"><code>f71cebe</code></a>
  subscriber: impl Clone for EnvFilter (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3360">#3360</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/3a1f571102b38bcdca13d59f3c454989d179055d"><code>3a1f571</code></a>
  Fix CI (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3361">#3361</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/e63ef57f3d686abe3727ddd586eb9af73d6715b7"><code>e63ef57</code></a>
  chore: prepare tracing-attributes 0.1.30 (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3316">#3316</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/6e59a13b1a7bcdd78b8b5a7cbcf70a0b2cdd76f0"><code>6e59a13</code></a>
  attributes: fix tracing::instrument regression around shadowing (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3311">#3311</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/e4df76127538aa8370d7dee32a6f84bbec6bbf10"><code>e4df761</code></a>
  tracing: update core to 0.1.34 and attributes to 0.1.29 (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3305">#3305</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/643f392ebb73c4fb856f56a78c066c82582dd22c"><code>643f392</code></a>
  chore: prepare tracing-attributes 0.1.29 (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3304">#3304</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/d08e7a6eea1833810ea527e18ea03b08cd402c9d"><code>d08e7a6</code></a>
  chore: prepare tracing-core 0.1.34 (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3302">#3302</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/6e70c571d319a033d5f37c885ccf99aa675a9eac"><code>6e70c57</code></a>
  tracing-subscriber: count numbers of enters in <code>Timings</code> (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/2944">#2944</a>)</li>
  <li><a
  href="https://github.com/tokio-rs/tracing/commit/c01d4fd9def2fb061669a310598095c789ca0a32"><code>c01d4fd</code></a>
  fix docs and enable CI on <code>main</code> branch (<a
  href="https://redirect.github.com/tokio-rs/tracing/issues/3295">#3295</a>)</li>
  <li>Additional commits viewable in <a
  href="https://github.com/tokio-rs/tracing/compare/tracing-subscriber-0.3.19...tracing-subscriber-0.3.20">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tracing-subscriber&package-manager=cargo&previous-version=0.3.19&new-version=0.3.20)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-09-15 00:51:33 -07:00
  fdf4a68646
• replace tui_markdown with a custom markdown renderer (#3396)

  Also, simplify the streaming behavior.
  
  This fixes a number of display issues with streaming markdown, and paves
  the way for better markdown features (e.g. customizable styles, syntax
  highlighting, markdown-aware wrapping).
  
  Not currently supported:
  - footnotes
  - tables
  - reference-style links

  Jeremy Rose · 2025-09-10 12:13:53 -07:00
  8068cc75f8
• feat: Run cargo shear during CI (#3338)

  Run cargo shear as part of the CI to ensure no unused dependencies

  jif-oai · 2025-09-09 01:05:08 +00:00
  a9c68ea270
• chore(deps): bump image from 0.25.6 to 0.25.8 in /codex-rs (#3297)

  Bumps [image](https://github.com/image-rs/image) from 0.25.6 to 0.25.8.
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a
  href="https://github.com/image-rs/image/blob/v0.25.8/CHANGES.md">image's
  changelog</a>.</em></p>
  <blockquote>
  <h3>Version 0.25.8</h3>
  <p>Re-release of <code>0.25.7</code></p>
  <p>Fixes:</p>
  <ul>
  <li>Reverted a signature change to <code>load_from_memory</code> that
  lead to large scale
  type inference breakage despite being technically compatible.</li>
  <li>Color conversion Luma to Rgb used incorrect coefficients instead of
  broadcasting.</li>
  </ul>
  <h3>Version 0.25.7 (yanked)</h3>
  <p>Features:</p>
  <ul>
  <li>Added an API for external image format implementations to register
  themselves as decoders for a specific format in <code>image</code> (<a
  href="https://redirect.github.com/image-rs/image/issues/2372">#2372</a>)</li>
  <li>Added <a
  href="https://www.color.org/iccmax/download/CICP_tag_and_type_amendment.pdf">CICP</a>
  awarenes via <a href="https://crates.io/crates/moxcms">moxcms</a> to
  support color spaces (<a
  href="https://redirect.github.com/image-rs/image/issues/2531">#2531</a>).
  The support for transforming is limited for now and will be gradually
  expanded.</li>
  <li>You can now embed Exif metadata when writing JPEG, PNG and WebP
  images (<a
  href="https://redirect.github.com/image-rs/image/issues/2537">#2537</a>,
  <a
  href="https://redirect.github.com/image-rs/image/issues/2539">#2539</a>)</li>
  <li>Added functions to extract orientation from Exif metadata and
  optionally clear it in the Exif chunk (<a
  href="https://redirect.github.com/image-rs/image/issues/2484">#2484</a>)</li>
  <li>Serde support for more types (<a
  href="https://redirect.github.com/image-rs/image/issues/2445">#2445</a>)</li>
  <li>PNM encoder now supports writing 16-bit images (<a
  href="https://redirect.github.com/image-rs/image/issues/2431">#2431</a>)</li>
  </ul>
  <p>API improvements:</p>
  <ul>
  <li><code>save</code>, <code>save_with_format</code>,
  <code>write_to</code> and <code>write_with_encoder</code> methods on
  <code>DynamicImage</code> now automatically convert the pixel format
  when necessary instead of returning an error (<a
  href="https://redirect.github.com/image-rs/image/issues/2501">#2501</a>)</li>
  <li>Added <code>DynamicImage::has_alpha()</code> convenience method</li>
  <li>Implemented <code>TryFrom&lt;ExtendedColorType&gt;</code> for
  <code>ColorType</code> (<a
  href="https://redirect.github.com/image-rs/image/issues/2444">#2444</a>)</li>
  <li>Added <code>const HAS_ALPHA</code> to trait <code>Pixel</code></li>
  <li>Unified the error for unsupported encoder colors (<a
  href="https://redirect.github.com/image-rs/image/issues/2543">#2543</a>)</li>
  <li>Added a <code>hooks</code> module to customize builtin behavior,
  <code>register_format_detection_hook</code> and
  <code>register_decoding_hook</code> for the determining format of a file
  and selecting an <code>ImageDecoder</code> implementation respectively.
  (<a
  href="https://redirect.github.com/image-rs/image/issues/2372">#2372</a>)</li>
  </ul>
  <p>Performance improvements:</p>
  <ul>
  <li>Gaussian blur (<a
  href="https://redirect.github.com/image-rs/image/issues/2496">#2496</a>)
  and box blur (<a
  href="https://redirect.github.com/image-rs/image/issues/2515">#2515</a>)
  are now faster</li>
  <li>Improve compilation times by avoiding unnecessary instantiation of
  generic functions (<a
  href="https://redirect.github.com/image-rs/image/issues/2468">#2468</a>,
  <a
  href="https://redirect.github.com/image-rs/image/issues/2470">#2470</a>)</li>
  </ul>
  <p>Bug fixes:</p>
  <ul>
  <li>Many improvements to image format decoding: TIFF, WebP, AVIF, PNG,
  GIF, BMP, TGA</li>
  <li>Fixed <code>GifEncoder::encode()</code> ignoring the speed parameter
  and always using the slowest speed (<a
  href="https://redirect.github.com/image-rs/image/issues/2504">#2504</a>)</li>
  <li><code>.pnm</code> is now recognized as a file extension for the PNM
  format (<a
  href="https://redirect.github.com/image-rs/image/issues/2559">#2559</a>)</li>
  </ul>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/image-rs/image/commit/98b001da0ddcd91936a716696fba877df910b61d"><code>98b001d</code></a>
  Merge pull request <a
  href="https://redirect.github.com/image-rs/image/issues/2592">#2592</a>
  from image-rs/release-0.25.8</li>
  <li><a
  href="https://github.com/image-rs/image/commit/f86232081c576d30e965ad236b07f90b93d7eb36"><code>f862320</code></a>
  Metadata and changelog for a 0.25.8</li>
  <li><a
  href="https://github.com/image-rs/image/commit/3b1c1db11d756b67c57b278ffe94033aaaf98a50"><code>3b1c1db</code></a>
  Merge pull request <a
  href="https://redirect.github.com/image-rs/image/issues/2593">#2593</a>
  from image-rs/luma-to-rgb-transform-is-broadcast</li>
  <li><a
  href="https://github.com/image-rs/image/commit/1f574d3d1e1a1ad6a49ef3fa4cc7562b0a048979"><code>1f574d3</code></a>
  Replace manual rounding code with f32::round</li>
  <li><a
  href="https://github.com/image-rs/image/commit/545cb3788bf6780d5e8765148a827f41dd17bd9d"><code>545cb37</code></a>
  Color tests in the middle of dynamic range</li>
  <li><a
  href="https://github.com/image-rs/image/commit/9882fa9fe023ff2d5a987603a9024788e06f187a"><code>9882fa9</code></a>
  Remove coefficients from luma_expand</li>
  <li><a
  href="https://github.com/image-rs/image/commit/70b9aa3ef100d8cf7bf2740ed2d3e0597784bd8a"><code>70b9aa3</code></a>
  Revert &quot;Make load_from_memory generic&quot;</li>
  <li><a
  href="https://github.com/image-rs/image/commit/b94c33379fee11e7fe93fd92e66d4d4dd29562bb"><code>b94c333</code></a>
  Enable CI for backport branch</li>
  <li><a
  href="https://github.com/image-rs/image/commit/a24556bc87457086b10d02d685a2ccbe66f261ac"><code>a24556b</code></a>
  Merge pull request <a
  href="https://redirect.github.com/image-rs/image/issues/2581">#2581</a>
  from image-rs/release-0.25.7</li>
  <li><a
  href="https://github.com/image-rs/image/commit/9175dbc70e01159e8d0cef5d96728854d377f35d"><code>9175dbc</code></a>
  Fix readme typo (<a
  href="https://redirect.github.com/image-rs/image/issues/2580">#2580</a>)</li>
  <li>Additional commits viewable in <a
  href="https://github.com/image-rs/image/compare/v0.25.6...v0.25.8">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=image&package-manager=cargo&previous-version=0.25.6&new-version=0.25.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-09-08 08:25:23 -07:00
  e2b3053b2b
• chore(deps): bump insta from 1.43.1 to 1.43.2 in /codex-rs (#3294)

  Bumps [insta](https://github.com/mitsuhiko/insta) from 1.43.1 to 1.43.2.
  <details>
  <summary>Release notes</summary>
  <p><em>Sourced from <a
  href="https://github.com/mitsuhiko/insta/releases">insta's
  releases</a>.</em></p>
  <blockquote>
  <h2>1.43.2</h2>
  <h2>Release Notes</h2>
  <ul>
  <li>Fix panics when <code>cargo metadata</code> fails to execute or
  parse (e.g., when cargo is not in PATH or returns invalid output). Now
  falls back to using the manifest directory as the workspace root. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/798">#798</a>
  (<a href="https://github.com/adriangb"><code>@​adriangb</code></a>)</li>
  <li>Fix clippy <code>uninlined_format_args</code> lint warnings. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/801">#801</a></li>
  <li>Changed diff line numbers to 1-based indexing. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/799">#799</a></li>
  <li>Preserve snapshot names with <code>INSTA_GLOB_FILTER</code>. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/786">#786</a></li>
  <li>Bumped <code>libc</code> crate to <code>0.2.174</code>, fixing
  building on musl targets, and increasing the MSRV of
  <code>insta</code> to <code>1.64.0</code> (released Sept 2022). <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/784">#784</a></li>
  <li>Fix clippy 1.88 errors. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/783">#783</a></li>
  <li>Fix source path in snapshots for non-child workspaces. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/778">#778</a></li>
  <li>Add lifetime to Selector in redaction iterator. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/779">#779</a></li>
  </ul>
  <h2>Install cargo-insta 1.43.2</h2>
  <h3>Install prebuilt binaries via shell script</h3>
  <pre lang="sh"><code>curl --proto '=https' --tlsv1.2 -LsSf
  https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-installer.sh
  | sh
  </code></pre>
  <h3>Install prebuilt binaries via powershell script</h3>
  <pre lang="sh"><code>powershell -ExecutionPolicy ByPass -c &quot;irm
  https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-installer.ps1
  | iex&quot;
  </code></pre>
  <h2>Download cargo-insta 1.43.2</h2>
  <table>
  <thead>
  <tr>
  <th>File</th>
  <th>Platform</th>
  <th>Checksum</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-aarch64-apple-darwin.tar.xz">cargo-insta-aarch64-apple-darwin.tar.xz</a></td>
  <td>Apple Silicon macOS</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-aarch64-apple-darwin.tar.xz.sha256">checksum</a></td>
  </tr>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-x86_64-apple-darwin.tar.xz">cargo-insta-x86_64-apple-darwin.tar.xz</a></td>
  <td>Intel macOS</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-x86_64-apple-darwin.tar.xz.sha256">checksum</a></td>
  </tr>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-x86_64-pc-windows-msvc.zip">cargo-insta-x86_64-pc-windows-msvc.zip</a></td>
  <td>x64 Windows</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-x86_64-pc-windows-msvc.zip.sha256">checksum</a></td>
  </tr>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-x86_64-unknown-linux-gnu.tar.xz">cargo-insta-x86_64-unknown-linux-gnu.tar.xz</a></td>
  <td>x64 Linux</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-x86_64-unknown-linux-gnu.tar.xz.sha256">checksum</a></td>
  </tr>
  <tr>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-x86_64-unknown-linux-musl.tar.xz">cargo-insta-x86_64-unknown-linux-musl.tar.xz</a></td>
  <td>x64 MUSL Linux</td>
  <td><a
  href="https://github.com/mitsuhiko/insta/releases/download/1.43.2/cargo-insta-x86_64-unknown-linux-musl.tar.xz.sha256">checksum</a></td>
  </tr>
  </tbody>
  </table>
  </blockquote>
  </details>
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a
  href="https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md">insta's
  changelog</a>.</em></p>
  <blockquote>
  <h2>1.43.2</h2>
  <ul>
  <li>Fix panics when <code>cargo metadata</code> fails to execute or
  parse (e.g., when cargo is not in PATH or returns invalid output). Now
  falls back to using the manifest directory as the workspace root. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/798">#798</a>
  (<a href="https://github.com/adriangb"><code>@​adriangb</code></a>)</li>
  <li>Fix clippy <code>uninlined_format_args</code> lint warnings. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/801">#801</a></li>
  <li>Changed diff line numbers to 1-based indexing. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/799">#799</a></li>
  <li>Preserve snapshot names with <code>INSTA_GLOB_FILTER</code>. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/786">#786</a></li>
  <li>Bumped <code>libc</code> crate to <code>0.2.174</code>, fixing
  building on musl targets, and increasing the MSRV of
  <code>insta</code> to <code>1.64.0</code> (released Sept 2022). <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/784">#784</a></li>
  <li>Fix clippy 1.88 errors. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/783">#783</a></li>
  <li>Fix source path in snapshots for non-child workspaces. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/778">#778</a></li>
  <li>Add lifetime to Selector in redaction iterator. <a
  href="https://redirect.github.com/mitsuhiko/insta/issues/779">#779</a></li>
  </ul>
  </blockquote>
  </details>
  <details>
  <summary>Commits</summary>
  <ul>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/01fc57f115b8b5a2c22f5c0be4f5427f3e5ac5ac"><code>01fc57f</code></a>
  Fix Windows runner configuration for releases</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/88c9a2f020b1a9abb3258063e0d55401ca2d95bb"><code>88c9a2f</code></a>
  Prepare CHANGELOG for 1.43.2 release (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/802">#802</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/d03c2a67b599c0e39f610298441013162a450eaa"><code>d03c2a6</code></a>
  Improve error handling for cargo workspace detection (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/800">#800</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/55987acdb68251b54a590be94db8bc97a694df39"><code>55987ac</code></a>
  Fix clippy uninlined_format_args lint warnings (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/801">#801</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/ae26e810a32bd46f955d63b1dd4e30efae389121"><code>ae26e81</code></a>
  Change diff line numbers to 1-based indexing (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/799">#799</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/26efb60d08206e17e7d476e9b42f152b2e16cf58"><code>26efb60</code></a>
  Release insta 1.43.2 (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/791">#791</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/77937824766ae4a1299eadc634ee434d01033302"><code>7793782</code></a>
  Preserve snapshot names with INSTA_GLOB_FILTER (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/786">#786</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/1d6e0c715602e681a01fc538f3649ac16f769dc1"><code>1d6e0c7</code></a>
  chore: bump libc crate (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/784">#784</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/1a17ea955210036c5173fc9eb425f4434c535e83"><code>1a17ea9</code></a>
  chore: fix clippy 1.88 errors (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/783">#783</a>)</li>
  <li><a
  href="https://github.com/mitsuhiko/insta/commit/7d0de48695551aab4c5a352c07b7a956aee33b6b"><code>7d0de48</code></a>
  Fix source path in snapshots for non-child workspaces (<a
  href="https://redirect.github.com/mitsuhiko/insta/issues/778">#778</a>)</li>
  <li>Additional commits viewable in <a
  href="https://github.com/mitsuhiko/insta/compare/1.43.1...1.43.2">compare
  view</a></li>
  </ul>
  </details>
  <br />
  
  
  [![Dependabot compatibility
  score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=insta&package-manager=cargo&previous-version=1.43.1&new-version=1.43.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't
  alter it yourself. You can also trigger a rebase manually by commenting
  `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits
  that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after
  your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge
  and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating
  it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all
  of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop
  Dependabot creating any more for this major version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop
  Dependabot creating any more for this minor version (unless you reopen
  the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop
  Dependabot creating any more for this dependency (unless you reopen the
  PR or upgrade to it yourself)
  
  
  </details>
  
  Signed-off-by: dependabot[bot] <support@github.com>
  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  dependabot[bot] · 2025-09-08 08:21:17 -07:00
  ca46510fd3
• feat: add Android/Termux support by gating arboard dependency (#2895)

  ## Summary
  
  This PR enables Codex to build and run on Android/Termux environments by
  conditionally gating the arboard clipboard dependency for Android
  targets.
  
  ## Key Changes
  
  - **Android Compatibility**: Gate arboard dependency for Android targets
  where clipboard access may be restricted
  - **Build Fixes**: Add missing tempfile::Builder import for image
  clipboard operations
  - **Code Cleanup**: Remove unnecessary parentheses to resolve formatting
  warnings
  
  ## Technical Details
  
  ### Clipboard Dependency Gating
  - Uses conditional compilation to exclude arboard on Android targets
  - Maintains full clipboard functionality on other platforms
  - Prevents build failures on Android/Termux where system clipboard
  access is limited
  
  ### Import Fixes
  - Adds missing tempfile::Builder import that was causing compilation
  errors
  - Ensures image clipboard operations work correctly when clipboard is
  available
  
  ## Platform Support
  
  - ✅ **Linux/macOS/Windows**: Full clipboard functionality maintained
  - ✅ **Android/Termux**: Builds successfully without clipboard dependency
  - ✅ **Other Unix platforms**: Unchanged behavior
  
  ## Testing
  
  - ✅ Builds successfully on Android/Termux
  - ✅ Maintains clipboard functionality on supported platforms  
  - ✅ No regression in existing functionality
  
  This addresses the Android/Termux compatibility issues while keeping
  clipboard functionality intact for platforms that support it.

  pchuri · 2025-09-02 23:36:40 -07:00
  44dce748b6