shockbot/agents/codex.ts

import { mkdirSync, writeFileSync } from "node:fs";
import { join } from "node:path";
import type { McpHttpServerConfig } from "@anthropic-ai/claude-agent-sdk";
import {
  Codex,
  type CodexOptions,
  type ModelReasoningEffort,
  type ThreadEvent,
  type ThreadOptions,
} from "@openai/codex-sdk";
import type { Effort } from "../external.ts";
import { log } from "../utils/cli.ts";
import { addInstructions } from "./instructions.ts";
import { agent, installFromNpmTarball, setupProcessAgentEnv } from "./shared.ts";

// model configuration based on effort level
const codexModel: Record<Effort, string> = {
  mini: "gpt-5.1-codex-mini",
  // https://developers.openai.com/codex/models/
  // gpt-5.2-codex is not yet available via api key (even through codex cli)
  auto: "gpt-5.1-codex",
  max: "gpt-5.1-codex-max",
} as const;

// reasoning effort configuration based on effort level
// uses modelReasoningEffort parameter from ThreadOptions
const codexReasoningEffort: Record<Effort, ModelReasoningEffort | undefined> = {
  mini: "low",
  auto: undefined, // use default
  max: "high",
};

interface WriteCodexConfigParams {
  tempHome: string;
  mcpServers: Record<string, McpHttpServerConfig>;
  isPublicRepo: boolean;
}

function writeCodexConfig({ tempHome, mcpServers, isPublicRepo }: WriteCodexConfigParams): string {
  const codexDir = join(tempHome, ".codex");
  mkdirSync(codexDir, { recursive: true });
  const configPath = join(codexDir, "config.toml");

  // build MCP servers section
  const mcpServerSections: string[] = [];
  for (const [name, config] of Object.entries(mcpServers)) {
    if (config.type !== "http") continue;
    log.info(`» Adding MCP server '${name}' at ${config.url}`);
    mcpServerSections.push(`[mcp_servers.${name}]\nurl = "${config.url}"`);
  }

  // SECURITY: for public repos, enforce env filtering via shell_environment_policy
  // this prevents vuln if user's ~/.codex/config.toml has ignore_default_excludes=true
  // for private repos, no filtering - agents use native shell with full env access
  const shellPolicy = isPublicRepo
    ? `[shell_environment_policy]
ignore_default_excludes = false`
    : "";

  writeFileSync(
    configPath,
    `# written by pullfrog
${shellPolicy}

${mcpServerSections.join("\n\n")}
`.trim() + "\n"
  );

  if (isPublicRepo) {
    log.info(`» Codex config written to ${configPath} (env filtering: enabled)`);
  } else {
    log.info(`» Codex config written to ${configPath} (private repo: no env filtering)`);
  }

  return codexDir;
}

export const codex = agent({
  name: "codex",
  install: async () => {
    return await installFromNpmTarball({
      packageName: "@openai/codex",
      version: "latest",
      executablePath: "bin/codex.js",
    });
  },
  run: async ({ payload, mcpServers, apiKey, cliPath, repo, effort }) => {
    const tempHome = process.env.PULLFROG_TEMP_DIR!;

    // create config directory for codex before setting HOME
    const configDir = join(tempHome, ".config", "codex");
    mkdirSync(configDir, { recursive: true });

    const codexDir = writeCodexConfig({
      tempHome,
      mcpServers,
      isPublicRepo: repo.isPublic,
    });

    setupProcessAgentEnv({
      OPENAI_API_KEY: apiKey,
      HOME: tempHome,
      CODEX_HOME: codexDir, // point Codex to our config directory
    });

    // get model and reasoning effort based on effort level
    const model = codexModel[effort];
    const modelReasoningEffort = codexReasoningEffort[effort];
    log.info(`Using model: ${model}`);
    if (modelReasoningEffort) {
      log.info(`Using modelReasoningEffort: ${modelReasoningEffort}`);
    }

    // Configure Codex
    const codexOptions: CodexOptions = {
      apiKey,
      codexPathOverride: cliPath,
    };

    if (payload.sandbox) {
      log.info("🔒 sandbox mode enabled: restricting to read-only operations");
    }

    const codex = new Codex(codexOptions);

    // Build thread options with model and optional model_reasoning_effort
    const baseThreadOptions = payload.sandbox
      ? {
          model,
          approvalPolicy: "never" as const,
          sandboxMode: "read-only" as const,
          networkAccessEnabled: false,
        }
      : {
          model,
          approvalPolicy: "never" as const,
          // use danger-full-access to allow git operations (workspace-write blocks .git directory writes)
          sandboxMode: "danger-full-access" as const,
          networkAccessEnabled: true,
        };

    const threadOptions: ThreadOptions = modelReasoningEffort
      ? { ...baseThreadOptions, modelReasoningEffort }
      : baseThreadOptions;

    const thread = codex.startThread(threadOptions);

    try {
      const streamedTurn = await thread.runStreamed(addInstructions({ payload, repo }));

      let finalOutput = "";
      for await (const event of streamedTurn.events) {
        const handler = messageHandlers[event.type];
        log.debug(JSON.stringify(event, null, 2));
        if (handler) {
          handler(event as never);
        }

        if (event.type === "item.completed" && event.item.type === "agent_message") {
          finalOutput = event.item.text;
        }
      }

      return {
        success: true,
        output: finalOutput,
      };
    } catch (error) {
      const errorMessage = error instanceof Error ? error.message : String(error);
      log.error(`Codex execution failed: ${errorMessage}`);
      return {
        success: false,
        error: errorMessage,
        output: "",
      };
    }
  },
});

// Track command execution IDs to identify when command results come back
const commandExecutionIds = new Set<string>();

type ThreadEventHandler<type extends ThreadEvent["type"]> = (
  event: Extract<ThreadEvent, { type: type }>
) => void;

const messageHandlers: {
  [type in ThreadEvent["type"]]: ThreadEventHandler<type>;
} = {
  "thread.started": () => {
    // No logging needed
  },
  "turn.started": () => {
    // No logging needed
  },
  "turn.completed": async (event) => {
    await log.summaryTable([
      [
        { data: "Input Tokens", header: true },
        { data: "Cached Input Tokens", header: true },
        { data: "Output Tokens", header: true },
      ],
      [
        String(event.usage.input_tokens || 0),
        String(event.usage.cached_input_tokens || 0),
        String(event.usage.output_tokens || 0),
      ],
    ]);
  },
  "turn.failed": (event) => {
    log.error(`Turn failed: ${event.error.message}`);
  },
  "item.started": (event) => {
    const item = event.item;
    if (item.type === "command_execution") {
      commandExecutionIds.add(item.id);
      log.toolCall({
        toolName: item.command,
        input: (item as any).args || {},
      });
    } else if (item.type === "agent_message") {
      // Will be handled on completion
    } else if (item.type === "mcp_tool_call") {
      log.toolCall({
        toolName: item.tool,
        input: {
          server: item.server,
          ...((item as any).arguments || {}),
        },
      });
    }
    // Reasoning items are handled on completion for better readability
  },
  "item.updated": (event) => {
    const item = event.item;
    if (item.type === "command_execution") {
      if (item.status === "in_progress" && item.aggregated_output) {
        // Command is still running, could show progress if needed
      }
    }
  },
  "item.completed": (event) => {
    const item = event.item;
    if (item.type === "agent_message") {
      log.box(item.text.trim(), { title: "Codex" });
    } else if (item.type === "command_execution") {
      const isTracked = commandExecutionIds.has(item.id);
      if (isTracked) {
        log.startGroup(`bash output`);
        if (item.status === "failed" || (item.exit_code !== undefined && item.exit_code !== 0)) {
          log.warning(item.aggregated_output || "Command failed");
        } else {
          log.info(item.aggregated_output || "");
        }
        log.endGroup();
        commandExecutionIds.delete(item.id);
      }
    } else if (item.type === "mcp_tool_call") {
      if (item.status === "failed" && item.error) {
        log.warning(`MCP tool call failed: ${item.error.message}`);
      }
    } else if (item.type === "reasoning") {
      // Display reasoning in a human-readable format
      const reasoningText = item.text.trim();
      // Remove markdown bold markers if present for cleaner output
      const cleanText = reasoningText.replace(/\*\*/g, "");
      log.box(cleanText, { title: "Codex" });
    }
  },
  error: (event) => {
    log.error(`Error: ${event.message}`);
  },
};