mirror of
https://github.com/openai/codex.git
synced 2026-10-30 19:18:49 +00:00
Dmitriy Kovalenko
b91f2515f5
## What changed - Include `codex-exec-server` in canonical CLI and app-server packages and advertise its path through `execServer` in `codex-package.json`. - Build and sign the executor in release workflows, preserve signed prebuilt inputs, and verify packaged signatures. Use empty entitlements for the macOS executor. - Have installers check for the executor when package metadata advertises it, while continuing to accept older packages. - Omit the standalone executor and its manifest entry from npm packages to stay within npm's package size limit. Keep `codex exec-server` and its runtime helpers available. ## Testing Add package smoke tests for executor initialization, version reporting, filesystem and process sandbox enforcement, and invalid-argument/configuration parity with `codex exec-server`. Extend archive, npm staging, and macOS signing tests to cover executor contents, executable permissions, preserved bytes, and entitlement verification. GitOrigin-RevId: bc741fe7faa6fe631d076de18d448c55247c23c7
109 lines
2.9 KiB
Python
109 lines
2.9 KiB
Python
load("@bazel_skylib//rules:common_settings.bzl", "string_flag")
|
|
load("//bazel/rules:runtime_package.bzl", "runtime_archive")
|
|
|
|
exports_files([
|
|
"clippy.toml",
|
|
])
|
|
|
|
filegroup(
|
|
name = "workspace-files",
|
|
srcs = glob(
|
|
[
|
|
"*",
|
|
".cargo/**",
|
|
],
|
|
exclude = [
|
|
"BUILD.bazel",
|
|
],
|
|
),
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
test_suite(
|
|
name = "e2e-benchmarks",
|
|
tags = ["manual"],
|
|
tests = [
|
|
"//codex-rs/cli:codex-help-bench",
|
|
],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
string_flag(
|
|
name = "runtime_package_build_mode",
|
|
build_setting_default = "release",
|
|
values = [
|
|
"release",
|
|
"debug",
|
|
],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
alias(
|
|
name = "runtime_package",
|
|
actual = ":runtime_package_combined",
|
|
tags = ["manual"],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
# These targets produce flat staging archives for the existing signing and
|
|
# packaging steps. Release builds retain their binaries and debug symbols.
|
|
runtime_archive(
|
|
name = "runtime_package_combined",
|
|
srcs = [
|
|
"//codex-rs/app-server:release_files",
|
|
"//codex-rs/cli:release_files",
|
|
"//codex-rs/code-mode-host:release_files",
|
|
"//codex-rs/exec-server-cli:release_files",
|
|
] + select({
|
|
"@platforms//os:linux": ["//codex-rs/bwrap:release_files"],
|
|
"@platforms//os:windows": [
|
|
"//codex-rs/windows-sandbox-rs:command-runner-release_files",
|
|
"//codex-rs/windows-sandbox-rs:sandbox-setup-release_files",
|
|
],
|
|
"//conditions:default": [],
|
|
}),
|
|
tags = ["manual"],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
runtime_archive(
|
|
name = "runtime_package_primary",
|
|
srcs = [
|
|
"//codex-rs/cli:release_files",
|
|
"//codex-rs/code-mode-host:release_files",
|
|
"//codex-rs/exec-server-cli:release_files",
|
|
"//codex-rs/responses-api-proxy:release_files",
|
|
] + select({
|
|
"@platforms//os:linux": ["//codex-rs/bwrap:release_files"],
|
|
"//conditions:default": [],
|
|
}),
|
|
tags = ["manual"],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
runtime_archive(
|
|
name = "runtime_package_app-server",
|
|
srcs = [
|
|
"//codex-rs/app-server:release_files",
|
|
"//codex-rs/code-mode-host:release_files",
|
|
"//codex-rs/exec-server-cli:release_files",
|
|
] + select({
|
|
"@platforms//os:linux": ["//codex-rs/bwrap:release_files"],
|
|
"//conditions:default": [],
|
|
}),
|
|
tags = ["manual"],
|
|
visibility = ["//visibility:public"],
|
|
)
|
|
|
|
runtime_archive(
|
|
name = "runtime_package_helpers",
|
|
srcs = [
|
|
"//codex-rs/windows-sandbox-rs:command-runner-release_files",
|
|
"//codex-rs/windows-sandbox-rs:sandbox-setup-release_files",
|
|
"//codex-rs/windows-sandbox-service:release_files",
|
|
],
|
|
tags = ["manual"],
|
|
target_compatible_with = ["@platforms//os:windows"],
|
|
visibility = ["//visibility:public"],
|
|
)
|