8a26ea0fe0
Release builds are taking awhile and part of the reason that we are building binaries that we are not really using. Adding Windows binaries into releases (https://github.com/openai/codex/pull/2035) slows things down, so we need to get some time back. - `codex-exec` is basically a standalone `codex exec` that we were offering because it's a bit smaller as it does not include all the bits to power the TUI. We were using it in our experimental GitHub Action, so this PR updates the Action to use `codex exec` instead. - `codex-linux-sandbox` was a helper binary for the TypeScript version of the CLI, but I am about to axe that, so we don't need this either. If we decide to bring `codex-exec` back at some point, we should use a separate instances so we can build it in parallel with `codex`. (I think if we had beefier build machines, this wouldn't be so bad, but that's not the case with the default runners from GitHub.)
126 lines
4.4 KiB
YAML
126 lines
4.4 KiB
YAML
name: "Codex [reusable action]"
|
|
description: "A reusable action that runs a Codex model."
|
|
|
|
inputs:
|
|
openai_api_key:
|
|
description: "The value to use as the OPENAI_API_KEY environment variable when running Codex."
|
|
required: true
|
|
trigger_phrase:
|
|
description: "Text to trigger Codex from a PR/issue body or comment."
|
|
required: false
|
|
default: ""
|
|
github_token:
|
|
description: "Token so Codex can comment on the PR or issue."
|
|
required: true
|
|
codex_args:
|
|
description: "A whitespace-delimited list of arguments to pass to Codex. Due to limitations in YAML, arguments with spaces are not supported. For more complex configurations, use the `codex_home` input."
|
|
required: false
|
|
default: "--config hide_agent_reasoning=true --full-auto"
|
|
codex_home:
|
|
description: "Value to use as the CODEX_HOME environment variable when running Codex."
|
|
required: false
|
|
codex_release_tag:
|
|
description: "The release tag of the Codex model to run, e.g., 'rust-v0.3.0'. Defaults to the latest release."
|
|
required: false
|
|
default: ""
|
|
|
|
runs:
|
|
using: "composite"
|
|
steps:
|
|
# Do this in Bash so we do not even bother to install Bun if the sender does
|
|
# not have write access to the repo.
|
|
- name: Verify user has write access to the repo.
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
PERMISSION=$(gh api \
|
|
"/repos/${GITHUB_REPOSITORY}/collaborators/${{ github.event.sender.login }}/permission" \
|
|
| jq -r '.permission')
|
|
|
|
if [[ "$PERMISSION" != "admin" && "$PERMISSION" != "write" ]]; then
|
|
exit 1
|
|
fi
|
|
|
|
- name: Download Codex
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
shell: bash
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
# Determine OS/arch and corresponding Codex artifact name.
|
|
uname_s=$(uname -s)
|
|
uname_m=$(uname -m)
|
|
|
|
case "$uname_s" in
|
|
Linux*) os="linux" ;;
|
|
Darwin*) os="apple-darwin" ;;
|
|
*) echo "Unsupported operating system: $uname_s"; exit 1 ;;
|
|
esac
|
|
|
|
case "$uname_m" in
|
|
x86_64*) arch="x86_64" ;;
|
|
arm64*|aarch64*) arch="aarch64" ;;
|
|
*) echo "Unsupported architecture: $uname_m"; exit 1 ;;
|
|
esac
|
|
|
|
# linux builds differentiate between musl and gnu.
|
|
if [[ "$os" == "linux" ]]; then
|
|
if [[ "$arch" == "x86_64" ]]; then
|
|
triple="${arch}-unknown-linux-musl"
|
|
else
|
|
# Only other supported linux build is aarch64 gnu.
|
|
triple="${arch}-unknown-linux-gnu"
|
|
fi
|
|
else
|
|
# macOS
|
|
triple="${arch}-apple-darwin"
|
|
fi
|
|
|
|
# Note that if we start baking version numbers into the artifact name,
|
|
# we will need to update this action.yml file to match.
|
|
artifact="codex-${triple}.tar.gz"
|
|
|
|
TAG_ARG="${{ inputs.codex_release_tag }}"
|
|
# The usage is `gh release download [<tag>] [flags]`, so if TAG_ARG
|
|
# is empty, we do not pass it so we can default to the latest release.
|
|
gh release download ${TAG_ARG:+$TAG_ARG} --repo openai/codex \
|
|
--pattern "$artifact" --output - \
|
|
| tar xzO > /usr/local/bin/codex
|
|
chmod +x /usr/local/bin/codex
|
|
|
|
# Display Codex version to confirm binary integrity.
|
|
codex --version
|
|
|
|
- name: Install Bun
|
|
uses: oven-sh/setup-bun@v2
|
|
with:
|
|
bun-version: 1.2.11
|
|
|
|
- name: Install dependencies
|
|
shell: bash
|
|
run: |
|
|
cd ${{ github.action_path }}
|
|
bun install --production
|
|
|
|
- name: Run Codex
|
|
shell: bash
|
|
run: bun run ${{ github.action_path }}/src/main.ts
|
|
# Process args plus environment variables often have a max of 128 KiB,
|
|
# so we should fit within that limit?
|
|
env:
|
|
INPUT_CODEX_ARGS: ${{ inputs.codex_args || '' }}
|
|
INPUT_CODEX_HOME: ${{ inputs.codex_home || ''}}
|
|
INPUT_TRIGGER_PHRASE: ${{ inputs.trigger_phrase || '' }}
|
|
OPENAI_API_KEY: ${{ inputs.openai_api_key }}
|
|
GITHUB_TOKEN: ${{ inputs.github_token }}
|
|
GITHUB_EVENT_ACTION: ${{ github.event.action || '' }}
|
|
GITHUB_EVENT_LABEL_NAME: ${{ github.event.label.name || '' }}
|
|
GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number || '' }}
|
|
GITHUB_EVENT_ISSUE_BODY: ${{ github.event.issue.body || '' }}
|
|
GITHUB_EVENT_REVIEW_BODY: ${{ github.event.review.body || '' }}
|
|
GITHUB_EVENT_COMMENT_BODY: ${{ github.event.comment.body || '' }}
|