Files
dev/code-rs
zeekay 9b016bda1a fix(release): the npm publish has shipped nothing since April
@hanzo/dev's latest is 0.6.91, published 2026-04-01. Every release run
since has ended red without publishing, for two independent reasons.

1. actions/upload-artifact@v3. The pin carries a comment about
   git.hanzo.ai presenting as GHES, where v4 raises
   GHESNotSupportedError — true, but this file lives under
   .github/workflows/ and therefore runs on github.com, which now
   hard-fails v3 during "Set up job":

     This request has been automatically failed because it uses a
     deprecated version of `actions/upload-artifact: v3`.

   Not one step executed. Two hosts, opposite requirements, one file:
   v3 belongs only under .hanzo/workflows/. Both uploads and the
   download move to v4.

2. Default fail-fast. The aarch64 leg reached the deprecation check
   first and died in 4s, cancelling the other four targets, so
   `release` was skipped entirely. A run that read as one broken
   architecture actually shipped zero. fail-fast: false.

And the packaging loop `continue`s past any artifact it does not
recognise, so a missing target would have quietly produced four npm
packages while @hanzo/dev still named five in optionalDependencies —
users on the fifth arch installing a wrapper with no binary under it.
A new step names the five and refuses before packaging.

Also the nine workspace tests that had preflight red, both stale
against the rename to `dev`:

- bash_completion_uses_code_command_name asserted the literal `_code`,
  a second copy of the product name that went stale the moment
  CLI_COMMAND_NAME became "dev". Derive the expectation from the
  constant so it cannot drift again.

- The seven VT100 snapshots recorded a status header that now includes
  `Directory: <cwd>`, resolved from std::env::current_dir() — the
  checkout path of whoever ran the test. Those snapshots only ever
  matched one machine. The harness now pins cwd to /snapshot: absolute
  so it is taken verbatim, outside $HOME so it is never abbreviated to
  ~/…, and outside any git repo so no Branch: segment appears.

Every architecture stays in the matrix. These are native runners
(ubuntu-24.04-arm, macos-14 for both darwin targets) — no QEMU, so
arm64 costs a runner minute, not emulation.

Verified locally on 1.90.0: 8 passed / 0 failed in
vt100_chatwidget_snapshot, 1 passed / 0 failed for the completion test.
2026-08-06 14:23:32 -07:00
..

Codex CLI (Rust Implementation)

We provide Codex CLI as a standalone, native executable to ensure a zero-dependency install.

Installing Codex

Today, the easiest way to install Codex is via npm:

npm i -g @openai/codex
codex

You can also install via Homebrew (brew install codex) or download a platform-specific release directly from our GitHub Releases.

What's new in the Rust CLI

The Rust implementation is now the maintained Codex CLI and serves as the default experience. It includes a number of features that the legacy TypeScript CLI never supported.

Config

Codex supports a rich set of configuration options. Note that the Rust CLI uses config.toml instead of config.json. See docs/config.md for details.

Model Context Protocol Support

Codex CLI functions as an MCP client that can connect to MCP servers on startup. See the mcp_servers section in the configuration documentation for details.

It is still experimental, but you can also launch Codex as an MCP server by running codex mcp-server. Use the @modelcontextprotocol/inspector to try it out:

npx @modelcontextprotocol/inspector codex mcp-server

Use codex mcp to add/list/get/remove MCP server launchers defined in config.toml, and codex mcp-server to run the MCP server directly.

Notifications

You can enable notifications by configuring a script that is run whenever the agent finishes a turn. The notify documentation includes a detailed example that explains how to get desktop notifications via terminal-notifier on macOS.

codex exec to run Codex programmatically/non-interactively

To run Codex non-interactively, run codex exec PROMPT (you can also pass the prompt via stdin) and Codex will work on your task until it decides that it is done and exits. Output is printed to the terminal directly. You can set the RUST_LOG environment variable to see more about what's going on.

Typing @ triggers a fuzzy-filename search over the workspace root. Use up/down to select among the results and Tab or Enter to replace the @ with the selected path. You can use Esc to cancel the search.

Esc–Esc to edit a previous message

When the chat composer is empty, press Esc to prime “backtrack” mode. Press Esc again to open a transcript preview highlighting the last user message; press Esc repeatedly to step to older user messages. Press Enter to confirm and Codex will fork the conversation from that point, trim the visible transcript accordingly, and pre‑fill the composer with the selected user message so you can edit and resubmit it.

In the transcript preview, the footer shows an Esc edit prev hint while editing is active.

--cd/-C flag

Sometimes it is not convenient to cd to the directory you want Codex to use as the "working root" before running Codex. Fortunately, codex supports a --cd option so you can specify whatever folder you want. You can confirm that Codex is honoring --cd by double-checking the workdir it reports in the TUI at the start of a new session.

Shell completions

Generate shell completion scripts via:

code completion bash
code completion zsh
code completion fish

Experimenting with the Codex Sandbox

To test to see what happens when a command is run under the sandbox provided by Codex, we provide the following subcommands in Codex CLI:

# macOS
codex debug seatbelt [--full-auto] [COMMAND]...

# Linux
codex debug landlock [--full-auto] [COMMAND]...

Selecting a sandbox policy via --sandbox

The Rust CLI exposes a dedicated --sandbox (-s) flag that lets you pick the sandbox policy without having to reach for the generic -c/--config option:

# Run Codex with the default, read-only sandbox
codex --sandbox read-only

# Allow the agent to write within the current workspace while still blocking network access
codex --sandbox workspace-write

# Danger! Disable sandboxing entirely (only do this if you are already running in a container or other isolated env)
codex --sandbox danger-full-access

The same setting can be persisted in ~/.code/config.toml via the top-level sandbox_mode = "MODE" key (Code will also read legacy ~/.codex/config.toml), e.g. sandbox_mode = "workspace-write".

If you want to prevent the agent from updating Git metadata (e.g., local safety), you can opt‑out with a workspace‑write tweak:

sandbox_mode = "workspace-write"

[sandbox_workspace_write]
allow_git_writes = false   # default is true; set false to protect .git

Debugging Virtual Cursor

Use these console helpers to diagnose motion/cancellation behavior when testing in a real browser:

  • Disable clickPulse transforms and force long CSS duration:

    window.__vc && (window.__vc.clickPulse = () => (console.debug('[VC] clickPulse disabled'), 0), window.__vc.setMotion({ engine: 'css', cssDurationMs: 10000 }))

  • Wrap moveTo to log duplicates with sequence and inter-call delta:

    (() => { const vc = window.__vc; if (!vc || vc.__wrapped) return; const orig = vc.moveTo; let seq=0, last=0; vc.moveTo = function(x,y,o){ const now=Date.now(); console.debug('[VC] moveTo call',{seq:++seq,x,y,o,sincePrevMs:last?now-last:null}); last=now; return orig.call(this,x,y,o); }; vc.__wrapped = true; console.debug('[VC] moveTo wrapper installed'); })();

  • Trigger a test move (adjust coordinates as needed):

    window.__vc && window.__vc.moveTo(200, 200)

Code Organization

This folder is the root of a Cargo workspace. It contains quite a bit of experimental code, but here are the key crates:

  • core/ contains the business logic for Codex. Ultimately, we hope this to be a library crate that is generally useful for building other Rust/native applications that use Codex.
  • exec/ "headless" CLI for use in automation.
  • tui/ CLI that launches a fullscreen TUI built with Ratatui.
  • cli/ CLI multitool that provides the aforementioned CLIs via subcommands.