mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-06 10:48:12 +02:00
feat(adapters): add GPT-6.1 Sol and refresh shared coding harness pins (#14942)
## Thinking Path > - Paperclip is the open source app people use to manage AI agents for work. > - Agents run through coding-agent adapters and the native runner. Both use the same installed provider CLIs, model catalogs, and reasoning controls. > - OpenAI released GPT-6.1 Sol (`gpt-6.1-sol`) in Codex. Anthropic released Claude Sonnet 5.5. The static Codex, Bedrock, and OpenCode catalogs do not list these IDs. > - The shared provider pack pins Codex 0.156.0 and OpenCode 1.18.32. The evaluation image pins older Grok, Gemini, Kimi, Cursor, and GitHub CLI releases. Codex 0.156.0 has no bundled metadata for GPT-6.1 Sol. > - A model entry without a current harness, or a harness pin without its runner integrity checks, fails at run time. > - This pull request adds the verified model IDs and moves the harness pins, executable digests, controller checks, and image pins together. > - The benefit is that operators can select the current models, and the native and local adapters share one current CLI installation. ## Linked Issues or Issue Description Refs #13829 and #13838 (the September 22, 2026 model and harness refresh). Related pull requests: #14993 (merged October 5, 2026, superseding #14816) added the direct Claude Sonnet 5.5 entry and refreshed the Claude runtime to Agent SDK 0.3.286 / Claude Code 2.1.286. This pull request does not change the Claude runtime or the direct Claude model list; it keeps the #14993 pins and adds only the Bedrock Sonnet 5.5 ID. After #14993 merged, this branch was rebased onto `master` (October 5, 2026). The six overlapping pin regions (`docker/daytona-runner/Dockerfile`, `docker/daytona-runner/README.md`, `package.json`, `pnpm-workspace.yaml`, `packages/adapters/claude-local/src/index.test.ts`, `packages/paperclip-runner/src/backends/native-backend-factory.test.ts`) were resolved by keeping this pull request's Codex 0.160.0 and OpenCode 1.18.34 pins next to #14993's Claude 0.3.286 / 2.1.286 pins, taking the union of the Sonnet 5.5 model IDs in the Claude test, and merging both README paragraphs. The Sonnet 5.5 effort and CLI-gate lines in the Claude adapter were identical in both pull requests and merged without a diff. #14917 and #14918 reordered the Claude and Codex model lists earlier; the new entries sit where those ordering rules put them. Sources checked on 2026-10-02: - [OpenAI Codex models](https://learn.chatgpt.com/docs/models): GPT-6.1 Sol uses `gpt-6.1-sol`, supports reasoning efforts from Light to Ultra, and has Standard and Fast modes at launch. The page also records that `gpt-5.4` and `gpt-5.4-mini` retired from Codex with ChatGPT sign-in on August 31, 2026, and that `gpt-5.5` retires on October 14, 2026. Neither retirement applies to the OpenAI API. - [Codex CLI releases](https://github.com/openai/codex/releases) 0.157.0 through 0.160.0. The bundled model metadata in the 0.160.0 Linux binary contains `gpt-6.1-sol`. - [Claude Sonnet 5.5](https://platform.claude.com/docs/en/models/sonnet-5-5/overview): Bedrock ID `anthropic.claude-sonnet-5-5`, released September 28, 2026. - [OpenCode releases](https://github.com/anomalyco/opencode/releases) 1.18.33 and 1.18.34 (fixes only). The OpenCode model registry lists both added provider-qualified IDs. - npm `latest` tags for `@xai-official/grok` 1.0.46, `@google/gemini-cli` 0.62.0, and `@moonshot-ai/kimi-code` 2.1.1. [xAI](https://docs.x.ai/docs/models), [Google](https://ai.google.dev/gemini-api/docs/models), and [Kimi](https://www.kimi.com/code/docs/en/kimi-code/models.html) list no newer coding models. - Cursor CLI 2026.10.01-e373342 is the version the official installer resolves. The pinned digest is the SHA-256 of the versioned Linux x64 archive. - [GitHub CLI 2.102.0](https://github.com/cli/cli/releases/tag/v2.102.0) (security fixes). The pinned digest matches the release `checksums.txt`. ## What Changed - Codex adapter: add `gpt-6.1-sol` to the model list, the Fast mode list, and the Ultra effort set. It is the first entry: #14918 orders the list newest version first, and its description notes the ChatGPT app lists GPT-6.1 Sol first. Update the adapter documentation text. - Claude adapter: add `us.anthropic.claude-sonnet-5-5` (Bedrock Sonnet 5.5) to the Bedrock catalog in the newest-Sonnet slot after Opus 5.5; `us.anthropic.claude-sonnet-5` moves into the older-Sonnet group, matching what `sortClaudeModels` from #14917 produces at runtime. Any Sonnet 5.5 ID (direct or Bedrock-qualified) now gets the documented `xhigh` and `max` efforts and requires Claude Code 2.1.284 or later on the CLI lane (the Claude Code changelog entry for 2.1.284 adds `claude-sonnet-5-5`). These two lines are identical to the ones #14993 merged, so the branch carries no diff for them. - OpenCode adapter: add `openai/gpt-6.1-sol` and `anthropic/claude-sonnet-5-5` to the static fallback catalog. - Codex runtime pin 0.156.0 → 0.160.0 in the root and workspace overrides, the runner package, the Codex ACP package patch, the qualified ACPX profiles, the Linux x64 executable digest, the Rust provider backend and its tests, the provider-pack manifest pins, the remote controller pins, the sandbox npm install spec, and the opt-in qualification scripts. - Remote Codex compatibility window: upper bound 0.157.0 → 0.161.0. The minimum stays at 0.149.0. - OpenCode runtime pin 1.18.32 → 1.18.34 in the runner package, the materialization script, the server and Rust qualified versions, the eval and live-session labels, fixtures, and the configuration label. - Evaluation image (`docker/daytona-runner/Dockerfile`): Grok CLI 1.0.46, Gemini CLI 0.62.0, Kimi Code 2.1.1, Cursor CLI 2026.10.01-e373342 with its digest, GitHub CLI 2.102.0 with its digest, Codex and OpenCode version probes, and the refreshed lockfile digest. The Claude Code 2.1.286 probe comes from #14993 and is unchanged here. - `pnpm-lock.yaml` is not part of this pull request. The repository's pull request gate rejects lockfile edits, and the refresh bot regenerates the lockfile on master (the same flow #13838 used). The Dockerfile `PAPERCLIP_RUNNER_LOCK_SHA256` default is the digest of the lockfile that `pnpm install --resolution-only --ignore-scripts --no-frozen-lockfile` (the refresh workflow's command) produces for the combined pins on the rebased branch (`e1856797…`); that lockfile differs from master only in the `@openai/codex` 0.160.0 platform packages, the `@anthropic-ai/claude-agent-sdk` 0.3.286 override that #14993 introduced (the open refresh-bot pull request #14872 carries that part), `opencode-ai` 1.18.34 with its Linux x64 baseline, and the `codex-acp` patch hash. - Documentation: runner README, runner compatibility doc, environment variable example, and a new `doc/adapter-model-audit-2026-10-02.md` with sources and deferred items. - Tests: Codex adapter catalog, server adapter models, Codex compatibility window, native session executor pins, runner package contract, OpenCode materialization, and UI effort options. Unchanged on purpose: Claude Agent SDK 0.3.286 / Claude Code 2.1.286 (already on `master` from #14993), ACP bridges (`acpx` 0.13.1, `claude-agent-acp` 0.73.0, `codex-acp` 1.6.2; newer upstream releases need a separate qualification), the native Grok runtime 1.0.13, Pi 0.84.2 / 0.87.1 (the Pi 1.0 runner stack covers it), and Hermes 0.19.0 (current). `gpt-5.4` and `gpt-5.4-mini` stay in the picker because the OpenAI API still serves them. ## Verification Run on Linux x64 with Node 25.9.0 and pnpm 9.15.4 after `pnpm install --no-frozen-lockfile` (the refreshed lockfile stays local; see above). The results below were re-run on the rebased head (October 5, 2026) for the suites the conflict resolution touches; the other rows are from the original run and are covered by CI on every push: - Rebased head: `packages/adapters/codex-local` 482 passed; `packages/adapters/claude-local` 340 passed, 4 failed (`execute.remote`, `test.probe`, `execute.acp-fallback`, `acp` spawn/env-hardening cases that fail identically on unchanged `master` in this host environment); `server` adapter-models + codex-runtime-compatibility + native-session-executor + adapter-registry 607 passed, 1 failed (the same adapter-registry override-pause case as before, also failing on `master` here); `packages/paperclip-runner` native-backend-factory + qualified-profiles 36 passed; `ui` codex-reasoning-effort + config-fields + model-utils 19 passed. Rust, full typecheck, build, and the Docker image are left to CI as before. - `vitest run` in `packages/adapters/codex-local`: 13 passed. `vitest run` in `packages/adapters/claude-local` (whole package, including the new Sonnet 5.5 gate and effort tests): see the latest CI run and the comment below. `vitest run` in `packages/adapters/opencode-local`: 48 passed, 1 failed (`runtime-config.test.ts` reads the host `PAPERCLIP_OPENCODE_PROVIDERS` variable; it fails the same way on the unchanged base). - `vitest run src/__tests__/adapter-models.test.ts src/services/native-runtime/codex-runtime-compatibility.test.ts src/__tests__/adapter-registry.test.ts` in `server`: 84 passed, 1 failed (`adapter-registry.test.ts` override pause test; it fails the same way on the unchanged base). - `vitest run` in `ui` for `codex-reasoning-effort`, `agent-setup-fields`, `config-fields`, and `ComposerRunSettingsPicker`: 25 passed. - `node --test test/acpx-codex-package-contract.test.mjs scripts/materialize-opencode-binary.test.mjs scripts/runner-protocol-eval-campaign.test.mjs` in `packages/paperclip-runner`: 23 passed. The package contract test verifies the installed Codex ACP executable digest and the 0.160.0 patch pin. - `vitest run src/drivers/acpx src/backends src/drivers/opencode src/live/live-session.test.ts` in `packages/paperclip-runner`: 626 passed, 5 failed, 1 skipped. The 5 failures (`installation-integrity.test.ts` `/proc/self/fd` module loading and one OpenCode answer-selection test) also fail on the unchanged base under Node 25; Linux CI runs Node 24. - `pnpm run test:opencode:qualification` in `packages/paperclip-runner` against the installed OpenCode 1.18.34 executable: passed. - `codex --version` from the installed pack prints `codex-cli 0.160.0`. The Linux x64 executable digest `12eb3e81…652aad` was computed from the `@openai/codex@0.160.0-linux-x64` archive after checking its registry `dist.integrity`. - `pnpm check:token-gates`: all gates clean. - `pnpm run typecheck:typescript` in `packages/paperclip-runner`: passed. Package typechecks ran one at a time; see the comment below for the server and UI results. Not run here, and needed from CI: - Rust tests and `pnpm -r typecheck` / `pnpm build` for the server (no `cargo` in this environment; the server typecheck prepares the runner vendor build). - The Docker evaluation image build and the real-binary Codex startup and session-resume probes (no Docker; the probes need the compiled `paperclip-runnerd`). The trusted CI runner workflow covers them. - Authenticated inference with any new model. This change is metadata and startup validation only. ## Risks - Codex 0.160.0 changes the bundled model catalog and app-server behaviour (authoritative provider catalogs, incremental running-turn tracking). The patched `codex-acp` 1.6.2 bridge is unchanged and declares `^0.148.0`; it worked with 0.156.0 under the same override. If CI probes show a protocol change, the pin can return to 0.156.0 by reverting this pull request. - The compatibility window upper bound moves to `<0.161.0`. Remote images with Codex 0.157 to 0.160 become accepted. Older images stay accepted down to 0.149.0. - Until the refresh bot lands the regenerated lockfile on master, the Dockerfile lockfile digest default does not match the committed lockfile. The trusted CI workflow computes the digest from its own resolution at build time, so this affects only a local build that passes no digest. - Existing saved model selections and effort settings are not changed. Agents on `gpt-5.4` or `gpt-5.5` with ChatGPT sign-in need a model change before the OpenAI retirement dates; that is documented, not enforced. - Rollout order: deploy the controller and runner from this change before promoting a sandbox image that carries these pins. Older controllers reject the new provider-pack pins. ## Model Used - Claude Fable 5.1 (Anthropic, model ID `claude-fable-5-1`), 1M context window, adaptive thinking, tool use. The model ran as a Paperclip agent through the Claude Code harness, performed the web research, edited the code, and ran the tests listed above. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have searched GitHub for duplicate or related PRs and linked them above - [x] I have either (a) linked existing issues with `Fixes: #` / `Closes #` / `Refs #` OR (b) described the issue in-PR following the relevant issue template - [x] I have not referenced internal/instance-local Paperclip issues or links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip` URLs) - [x] My branch name describes the change (e.g. `docs/...`, `fix/...`) and contains no internal Paperclip ticket id or instance-derived details - [x] I have run tests locally and they pass - [x] I have added or updated tests where applicable - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [ ] All Paperclip CI gates are green - [ ] Greptile is 5/5 with no open P2s, recommendations, or follow-ups - [x] I will address all Greptile and reviewer comments before requesting merge 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Bender (Fable) <noreply@paperclip.ing> Co-authored-by: devinfoley <139239+devinfoley@users.noreply.github.com> Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
54 files changed
+238
-118
No files matched your search
@@ -0,0 +1,93 @@
|
||||
# Adapter model and harness audit: October 2, 2026
|
||||
|
||||
This audit follows the [September 22, 2026 audit](adapter-model-audit-2026-09-22.md).
|
||||
It covers model selection in the coding-agent adapters and the shared harness
|
||||
pins in the runner, the provider pack, and the evaluation image. Catalog
|
||||
entries identify models; provider accounts and installed CLIs determine access.
|
||||
No agent defaults or saved model selections are migrated.
|
||||
|
||||
## Model changes
|
||||
|
||||
| Adapter | Changes from the audit |
|
||||
| --- | --- |
|
||||
| Codex and the Codex runner catalog | Add GPT-6.1 Sol (`gpt-6.1-sol`). Expose efforts through Ultra and Fast mode, as documented. Keep `gpt-5.6-sol` as the default. |
|
||||
| Claude on Bedrock | Add Sonnet 5.5 (`us.anthropic.claude-sonnet-5-5`), using the catalog's existing US inference-profile convention. Sonnet 5.5 IDs (direct or Bedrock-qualified) get the documented `xhigh` and `max` efforts and require Claude Code 2.1.284 or later on the CLI lane. |
|
||||
| OpenCode | Add `openai/gpt-6.1-sol` and `anthropic/claude-sonnet-5-5` to the static fallback used by remote environments. Both IDs are present in the OpenCode model registry. |
|
||||
| Claude Code (direct) | No change in this audit. [#14993](https://github.com/paperclipai/paperclip/pull/14993) (merged October 5, 2026, superseding #14816) adds Sonnet 5.5 (`claude-sonnet-5-5`, Claude Code 2.1.284 or later) and refreshes the Claude runtime. |
|
||||
| Grok Build, Gemini CLI, Kimi Code, Cursor | No new verified model IDs. Grok 4.7, Gemini 3.8 Flash, and Kimi K3 remain the newest documented models. |
|
||||
|
||||
## Harness changes
|
||||
|
||||
| Harness | Before | After |
|
||||
| --- | --- | --- |
|
||||
| Codex CLI (shared provider pack) | 0.156.0 | 0.160.0 |
|
||||
| OpenCode (shared provider pack) | 1.18.32 | 1.18.34 |
|
||||
| Grok CLI (`@xai-official/grok`) | 1.0.41 | 1.0.46 |
|
||||
| Gemini CLI | 0.60.0 | 0.62.0 |
|
||||
| Kimi Code CLI | 2.0.2 | 2.1.1 |
|
||||
| Cursor CLI | 2026.09.18-9a7762b | 2026.10.01-e373342 |
|
||||
| GitHub CLI | 2.101.0 | 2.102.0 |
|
||||
| Claude Agent SDK / Claude Code | 0.3.280 / 2.1.280 | 0.3.286 / 2.1.286 via #14993 (merged); this branch keeps that pin |
|
||||
| Hermes | 0.19.0 | 0.19.0 (current) |
|
||||
| ACPX, `claude-agent-acp`, `codex-acp` bridges | 0.13.1 / 0.73.0 / 1.6.2 | Unchanged; separately qualified |
|
||||
| Pi (`@earendil-works/pi-coding-agent`) | 0.87.1 (fleet image) | Unchanged; Pi 1.0 is qualified upstream in the Pi runner stack |
|
||||
|
||||
The remote Codex compatibility window moves to `>=0.149.0 <0.161.0`. The
|
||||
minimum stays fixed. See
|
||||
[paperclip-runner-compatibility.md](architecture/paperclip-runner-compatibility.md).
|
||||
|
||||
## Sources and verification
|
||||
|
||||
- [OpenAI's Codex model guide](https://learn.chatgpt.com/docs/models) lists
|
||||
GPT-6.1 Sol (`gpt-6.1-sol`) with reasoning efforts from Light to Ultra and
|
||||
Standard and Fast modes at launch. The bundled Codex 0.160.0 model metadata
|
||||
also contains `gpt-6.1-sol`. The same page records that `gpt-5.4` and
|
||||
`gpt-5.4-mini` retired from Codex with ChatGPT sign-in on August 31, 2026,
|
||||
and that `gpt-5.5` retires from Codex with ChatGPT sign-in on October 14,
|
||||
2026. Neither retirement applies to the OpenAI API, so the picker keeps
|
||||
those IDs for API-key users; see "Deferred items".
|
||||
- [Codex CLI releases](https://github.com/openai/codex/releases) 0.157.0
|
||||
through 0.160.0 add GPT-6 Sol and Luna metadata, app-server pagination, and
|
||||
authoritative provider catalogs. The Linux x64 executable digest comes from
|
||||
the integrity-verified `@openai/codex@0.160.0-linux-x64` archive.
|
||||
- [Claude Sonnet 5.5](https://platform.claude.com/docs/en/models/sonnet-5-5/overview)
|
||||
documents the Bedrock ID `anthropic.claude-sonnet-5-5` and the September 28,
|
||||
2026 release. The [Claude Code changelog](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md)
|
||||
entry for 2.1.284 adds `claude-sonnet-5-5`, so that version is the CLI minimum. [Models overview](https://platform.claude.com/docs/en/about-claude/models/overview)
|
||||
lists `xhigh` and `max` effort support for the 5.5 generation.
|
||||
- [OpenCode releases](https://github.com/anomalyco/opencode/releases)
|
||||
1.18.33 and 1.18.34 contain fixes only. The OpenCode model registry at
|
||||
models.dev lists both added provider-qualified IDs.
|
||||
- Grok CLI 1.0.46 is the `latest` tag on npm. [xAI's model list](https://docs.x.ai/docs/models)
|
||||
still ends at Grok 4.7. Gemini CLI 0.62.0 and Kimi Code 2.1.1 are the
|
||||
`latest` tags on npm; [Google's model catalog](https://ai.google.dev/gemini-api/docs/models)
|
||||
and [Kimi's model page](https://www.kimi.com/code/docs/en/kimi-code/models.html)
|
||||
list no newer coding models.
|
||||
- Cursor CLI 2026.10.01-e373342 is the version the official installer
|
||||
resolves; the pinned archive digest comes from the versioned tarball, and
|
||||
the extracted binary reports that version. [Cursor's catalog](https://cursor.com/docs/models-and-pricing)
|
||||
shows new Grok 4.7 500k and Kimi K3 rows without exact CLI IDs, so no
|
||||
fallback IDs were added.
|
||||
- [GitHub CLI 2.102.0](https://github.com/cli/cli/releases/tag/v2.102.0)
|
||||
contains security fixes for download commands. The pinned digest matches the
|
||||
release `checksums.txt`.
|
||||
- [Hermes on PyPI](https://pypi.org/project/hermes-agent/) remains at 0.19.0.
|
||||
|
||||
## Deferred items
|
||||
|
||||
- `gpt-5.4` and `gpt-5.4-mini` stay in the Codex picker because the OpenAI API
|
||||
still serves them. A later audit can remove them once API retirement is
|
||||
published or operators confirm no API-key agents depend on them. `gpt-5.5`
|
||||
needs the same review after October 14, 2026.
|
||||
- The ACP bridges (ACPX 0.19.4, `claude-agent-acp` 0.85.1, `codex-acp` 2.1.1)
|
||||
are newer upstream. They carry reviewed patches and qualified executable
|
||||
digests, so they need a separate qualification campaign rather than a pin
|
||||
bump. ACPX 0.15.1 and 0.17.0 also change message limits and session
|
||||
journal records.
|
||||
- Pi 1.0.0 is published, but the runner's Pi profile and the fleet image stay
|
||||
on the qualified 0.84.2 / 0.87.1 pins until the Pi 1.0 runner stack lands.
|
||||
- The native Grok runtime (`native:grok` 1.0.13) is bound by a qualified
|
||||
profile digest and is not refreshed by this audit.
|
||||
- Claude Mythos 5.1 remains invitation-only with no public selectable ID.
|
||||
- Cursor's exact IDs for Grok 4.7 500k, Kimi K3, and GLM 5.3 are not shown
|
||||
in the documentation and the unauthenticated CLI returns no list.
|
||||
@@ -46,15 +46,15 @@ would hide the runtime that executed the task.
|
||||
|
||||
## Remote Codex version window
|
||||
|
||||
Remote native Codex runs accept stable CLI versions **`>=0.149.0 <0.157.0`**.
|
||||
The install pin remains `0.156.0`. A sandbox image can therefore use an older
|
||||
Remote native Codex runs accept stable CLI versions **`>=0.149.0 <0.161.0`**.
|
||||
The install pin is `0.160.0`. A sandbox image can therefore use an older
|
||||
compatible Codex without failing startup or installing another copy.
|
||||
|
||||
The minimum is fixed at **`0.149.0`** until maintainers deliberately change it.
|
||||
It is not a rolling one-month support window. The official
|
||||
[`@openai/codex` publication history](https://registry.npmjs.org/@openai/codex)
|
||||
records `0.149.0` on 2026-08-20, `0.153.4` on 2026-09-04, and `0.156.0` on
|
||||
2026-09-22. See also the [Codex changelog](https://learn.chatgpt.com/docs/changelog).
|
||||
records `0.149.0` on 2026-08-20, `0.153.4` on 2026-09-04, `0.156.0` on
|
||||
2026-09-22, and `0.160.0` on 2026-10-01. See also the [Codex changelog](https://learn.chatgpt.com/docs/changelog).
|
||||
This is an explicit compatibility window, not a claim that every Codex minor
|
||||
release follows a backward-compatible protocol.
|
||||
|
||||
@@ -65,7 +65,7 @@ release follows a backward-compatible protocol.
|
||||
- The same check applies to discovered, explicitly staged, and npm-installed
|
||||
remote Codex executables, including the final executable after linking.
|
||||
- For an incompatible image, the existing
|
||||
`PAPERCLIP_RUNNER_REMOTE_CODEX_NPM_SPEC=@openai/codex@0.156.0` configuration
|
||||
`PAPERCLIP_RUNNER_REMOTE_CODEX_NPM_SPEC=@openai/codex@0.160.0` configuration
|
||||
allows installation of the pinned runtime. Without that configuration,
|
||||
startup reports the supported range and the remediation.
|
||||
- Runner binary contracts, required runner capabilities, artifact digests,
|
||||
@@ -85,6 +85,12 @@ app-server binaries with a local deterministic Responses API fixture. Both
|
||||
passed initialization, thread creation with a dynamic tool, a tool-call/result
|
||||
round trip, turn completion, and thread resume. This verifies the tested
|
||||
protocol path; it is not a live model, Linux sandbox, or exhaustive feature test.
|
||||
The 2026-10-02 refresh moved the install pin and the upper bound to `0.160.0`
|
||||
after verifying the integrity-checked Linux x64 `0.160.0` executable digest and
|
||||
the installed ACP package contract. Codex `0.157.0` through `0.160.0` add the
|
||||
GPT-6.1 Sol catalog entry and app-server pagination without a documented
|
||||
app-server protocol break; the Linux CI qualification workflow covers the real
|
||||
startup and session-resume probes for the new pin.
|
||||
Version-boundary and remote artifact-preparation regressions are covered by
|
||||
`codex-runtime-compatibility.test.ts` and `native-session-executor.test.ts`.
|
||||
|
||||
|
||||
@@ -28,7 +28,7 @@ COPY cli/package.json ./cli/package.json
|
||||
# The complete resolved lock (including transitive integrity hashes) is reviewed.
|
||||
# Reject registry-time drift BEFORE installing packages or running lifecycle code.
|
||||
# Refresh this digest together with source/provider dependency changes.
|
||||
ARG PAPERCLIP_RUNNER_LOCK_SHA256=2c46a68811ba1d504a41b6f4d3f642bc93f4a1c615097754c9c6486881dba8e6
|
||||
ARG PAPERCLIP_RUNNER_LOCK_SHA256=e1856797158f7d0bdb728b9d6c6dda3d65ad5f7896e68216883174de508431a7
|
||||
RUN printf '%s pnpm-lock.yaml\n' "${PAPERCLIP_RUNNER_LOCK_SHA256}" > /tmp/provider-lock.sha256 \
|
||||
&& sha256sum -c /tmp/provider-lock.sha256 \
|
||||
&& pnpm install --frozen-lockfile --filter '@paperclipai/paperclip-runner...'
|
||||
@@ -56,9 +56,9 @@ ENV PATH=${PAPERCLIP_RUNNER_PROVIDER_PACK_ROOT}/node_modules/.bin:/usr/local/sha
|
||||
# Never add a second CLI version to work around a runner compatibility pin.
|
||||
RUN npm uninstall -g @anthropic-ai/claude-code @openai/codex opencode-ai \
|
||||
&& npm install -g \
|
||||
@xai-official/grok@1.0.41 \
|
||||
@google/gemini-cli@0.60.0 \
|
||||
@moonshot-ai/kimi-code@2.0.2 \
|
||||
@xai-official/grok@1.0.46 \
|
||||
@google/gemini-cli@0.62.0 \
|
||||
@moonshot-ai/kimi-code@2.1.1 \
|
||||
&& npm cache clean --force
|
||||
|
||||
# Hermes requires Python >=3.11,<3.14; the image's default Python is newer.
|
||||
@@ -69,8 +69,8 @@ RUN /usr/bin/python3 -m venv /opt/hermes \
|
||||
&& /opt/hermes/bin/pip install --no-cache-dir hermes-agent==0.19.0 \
|
||||
&& ln -sf /opt/hermes/bin/hermes /usr/local/bin/hermes
|
||||
|
||||
ARG CURSOR_VERSION=2026.09.18-9a7762b
|
||||
ARG CURSOR_SHA256_AMD64=b1308f5a2fc05458b9d8966752986bb23a971bbcc67c842c1df94c4b8132bad9
|
||||
ARG CURSOR_VERSION=2026.10.01-e373342
|
||||
ARG CURSOR_SHA256_AMD64=a79726c6e644520e993970be4c45775a6889802b67abe461a677a53219ae28e8
|
||||
RUN set -eu; \
|
||||
arch="$(dpkg --print-architecture)"; \
|
||||
[ "$arch" = "amd64" ] || { echo "FATAL: cursor pin only covers amd64, not $arch" >&2; exit 1; }; \
|
||||
@@ -84,8 +84,8 @@ RUN set -eu; \
|
||||
ln -sf /usr/local/bin/cursor-agent /usr/local/bin/agent; \
|
||||
chmod -R a+rX /opt/cursor
|
||||
|
||||
ARG GH_VERSION=2.101.0
|
||||
ARG GH_SHA256_AMD64=9bca2d1c16825f109907a23307628a2f0698fbf99662b73a5cf0b020293072b8
|
||||
ARG GH_VERSION=2.102.0
|
||||
ARG GH_SHA256_AMD64=bb766f710eef8ede859c18578c72c327597cd4c8a85b06001b1f3843c6019386
|
||||
RUN set -eu; \
|
||||
arch="$(dpkg --print-architecture)"; \
|
||||
[ "$arch" = "amd64" ] || { echo "FATAL: gh pin only covers amd64, not $arch" >&2; exit 1; }; \
|
||||
@@ -139,9 +139,9 @@ RUN /bin/sh -lc 'set -eu; \
|
||||
for command_name in acpx claude-agent-acp codex-acp; do \
|
||||
command -v "$command_name" >/dev/null || { echo "FATAL: $command_name not on PATH for daytona user" >&2; exit 1; }; \
|
||||
done; \
|
||||
test "$(codex --version)" = "codex-cli 0.156.0"; \
|
||||
test "$(codex --version)" = "codex-cli 0.160.0"; \
|
||||
test "$(claude --version)" = "2.1.286 (Claude Code)"; \
|
||||
test "$(opencode --version)" = "1.18.32"; \
|
||||
test "$(opencode --version)" = "1.18.34"; \
|
||||
test "$(acpx --version)" = "0.13.1"; \
|
||||
test "$(claude-agent-acp --version)" = "0.73.0"; \
|
||||
test "$(codex-acp --version)" = "@agentclientprotocol/codex-acp 1.6.2"'
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
This image is the Paperclip Cloud fleet sandbox image plus a source-built
|
||||
`paperclip-runnerd` and immutable provider pack. The pack contains Node 24.11,
|
||||
OpenCode 1.18.32, the compiled OpenCode proxy, ACPX 0.13.1 sidecar, qualified ACP
|
||||
OpenCode 1.18.34, the compiled OpenCode proxy, ACPX 0.13.1 sidecar, qualified ACP
|
||||
agents, and the production lockfile. Its manifest digests each executable bridge
|
||||
and binds the pack to the runner source revision, avoiding artifact upload and
|
||||
npm installation on every fresh lease.
|
||||
@@ -14,14 +14,18 @@ image that this Dockerfile can extend directly.
|
||||
|
||||
## Harness versions
|
||||
|
||||
The October 1, 2026 refresh pins Codex 0.156.0, Claude Agent SDK
|
||||
0.3.286 (Claude Code 2.1.286), and OpenCode 1.18.32 in the shared provider
|
||||
The October 2026 refreshes pin Codex 0.160.0, Claude Agent SDK
|
||||
0.3.286 (Claude Code 2.1.286), and OpenCode 1.18.34 in the shared provider
|
||||
pack. Claude Code 2.1.280 is the minimum for
|
||||
[Opus 5.5](https://code.claude.com/docs/en/model-config) and 2.1.284 is the
|
||||
minimum for Sonnet 5.5; the pinned runtime also supports Fable 5.1. Codex uses
|
||||
the current [GPT-6 Sol and Luna model IDs](https://learn.chatgpt.com/docs/models).
|
||||
Grok CLI 1.0.41 supports the current
|
||||
[Grok 4.7](https://docs.x.ai/developers/grok-4-7) model family.
|
||||
minimum for Sonnet 5.5; the pinned runtime also supports Fable 5.1. Codex
|
||||
0.160.0 ships bundled metadata for the current
|
||||
[GPT-6.1 Sol, GPT-6 Sol, and GPT-6 Luna model IDs](https://learn.chatgpt.com/docs/models).
|
||||
The same refresh pins Grok CLI 1.0.46, Gemini CLI 0.62.0, Kimi Code 2.1.1,
|
||||
Cursor CLI 2026.10.01-e373342, and GitHub CLI 2.102.0 in the sandbox layer.
|
||||
Grok CLI 1.0.46 supports the current
|
||||
[Grok 4.7](https://docs.x.ai/developers/grok-4-7) model family. Hermes stays
|
||||
at 0.19.0, the newest release on PyPI.
|
||||
|
||||
Keep the patched ACP bridge versions separate from their CLI runtime pins.
|
||||
Their executable digests do not change when only the runtime dependency
|
||||
|
||||
@@ -24,7 +24,7 @@ All environment variables that Paperclip uses for server configuration.
|
||||
| `PAPERCLIP_RUNNER_CA_BUNDLE_PATH` | (unset) | Optional PEM CA bundle for direct runner WSS. Platform roots remain enabled. There is no insecure TLS bypass. |
|
||||
| `PAPERCLIP_RUNNER_REMOTE_BINARY_PATH` | (host build) | Host-local path to a `paperclip-runnerd` artifact built for the remote target OS and architecture. Required when Paperclip and the remote sandbox do not share a compatible platform; build metadata and the required transport mode are verified before launch. |
|
||||
| `PAPERCLIP_RUNNER_REMOTE_CODEX_PATH` | (unset) | Optional host-local path to a Codex executable built for the remote target OS and architecture. For remote Codex-backed runners, Paperclip stages and verifies this executable beside `paperclip-runnerd`. |
|
||||
| `PAPERCLIP_RUNNER_REMOTE_CODEX_NPM_SPEC` | (unset) | Optional pinned npm package spec (for example, `@openai/codex@0.156.0`) installed inside each fresh remote lease when its Codex harness is not baked into the sandbox image. Mutually exclusive with `PAPERCLIP_RUNNER_REMOTE_CODEX_PATH`; Paperclip verifies the installed executable before starting `runnerd`. |
|
||||
| `PAPERCLIP_RUNNER_REMOTE_CODEX_NPM_SPEC` | (unset) | Optional pinned npm package spec (for example, `@openai/codex@0.160.0`) installed inside each fresh remote lease when its Codex harness is not baked into the sandbox image. Mutually exclusive with `PAPERCLIP_RUNNER_REMOTE_CODEX_PATH`; Paperclip verifies the installed executable before starting `runnerd`. |
|
||||
| `PAPERCLIP_RUNNER_REMOTE_PROVIDER_PACK_PATH` | `/opt/paperclip-runner/provider-pack` in Docker; otherwise unset | Host-local path to the immutable provider pack built by `pnpm --filter @paperclipai/paperclip-runner build:provider-pack`. Stamped standard Docker images include the pack; downstream compositions and the `cloud` target inherit it. Unstamped local Docker builds skip pack generation. The pack includes its target-built Node 24.11+ runtime, locked production dependencies, OpenCode proxy/executable, and ACPX sidecar. Remote OpenCode and ACPX fail closed without it. A preinstalled pack is accepted only when its complete digested manifest matches this build-owned pack; otherwise Paperclip stages this pack into the sandbox. |
|
||||
| `PAPERCLIP_HIDDEN_SETTINGS` | (unset) | Comma-separated settings surfaces to hide from the UI and floor at the API, for operators hosting Paperclip for others (managed cloud, internal shared server). See [Hiding settings surfaces](#hiding-settings-surfaces). |
|
||||
| `PAPERCLIP_SETTING_DEFAULTS` | (unset) | JSON object replacing the schema default of selected instance settings, for hosting operators. See [Operator setting defaults](#operator-setting-defaults). |
|
||||
|
||||
+1
-1
@@ -121,7 +121,7 @@
|
||||
"postgres@3.4.9": "patches/postgres@3.4.9.patch"
|
||||
},
|
||||
"overrides": {
|
||||
"@agentclientprotocol/codex-acp@1.6.2>@openai/codex": "0.156.0",
|
||||
"@agentclientprotocol/codex-acp@1.6.2>@openai/codex": "0.160.0",
|
||||
"@agentclientprotocol/claude-agent-acp@0.73.0>@anthropic-ai/claude-agent-sdk": "0.3.286",
|
||||
"rollup": ">=4.59.0",
|
||||
"react": "^19.2.8",
|
||||
|
||||
@@ -8,7 +8,12 @@ describe("Claude model defaults", () => {
|
||||
expect(claudeLocalReasoningEffortsForModel(model)).toEqual(["low", "medium", "high", "xhigh", "max"]);
|
||||
});
|
||||
|
||||
it.each(["claude-sonnet-5-5", "claude-sonnet-5-5[1m]"])("requires CLI 2.1.284 and offers all efforts for %s", (model) => {
|
||||
it.each([
|
||||
"claude-sonnet-5-5",
|
||||
"claude-sonnet-5-5[1m]",
|
||||
"us.anthropic.claude-sonnet-5-5",
|
||||
"global.anthropic.claude-sonnet-5-5[1m]",
|
||||
])("requires CLI 2.1.284 and offers all efforts for %s", (model) => {
|
||||
expect(minimumClaudeCliVersionForModel(model)).toBe("2.1.284");
|
||||
expect(claudeLocalReasoningEffortsForModel(model)).toEqual(["low", "medium", "high", "xhigh", "max"]);
|
||||
});
|
||||
|
||||
@@ -17,13 +17,15 @@ const BEDROCK_MODELS: AdapterModel[] = [
|
||||
// Fable 5.1's documented geo inference ID carries no -v1 suffix, unlike earlier entries.
|
||||
{ id: "us.anthropic.claude-fable-5-1", label: "Bedrock Fable 5.1" },
|
||||
{ id: "us.anthropic.claude-opus-5-5", label: "Bedrock Opus 5.5" },
|
||||
{ id: "us.anthropic.claude-sonnet-5", label: "Bedrock Sonnet 5" },
|
||||
// Sonnet 5.5's documented Bedrock ID is dateless, like Fable 5.1 and Opus 5.5.
|
||||
{ id: "us.anthropic.claude-sonnet-5-5", label: "Bedrock Sonnet 5.5" },
|
||||
{ id: "us.anthropic.claude-haiku-4-5-20251001-v1:0", label: "Bedrock Haiku 4.5" },
|
||||
{ id: "us.anthropic.claude-fable-5", label: "Bedrock Fable 5" },
|
||||
{ id: "us.anthropic.claude-opus-5", label: "Bedrock Opus 5" },
|
||||
{ id: "us.anthropic.claude-opus-4-8", label: "Bedrock Opus 4.8" },
|
||||
{ id: "us.anthropic.claude-opus-4-7", label: "Bedrock Opus 4.7" },
|
||||
{ id: "us.anthropic.claude-opus-4-6-v1", label: "Bedrock Opus 4.6" },
|
||||
{ id: "us.anthropic.claude-sonnet-5", label: "Bedrock Sonnet 5" },
|
||||
{ id: "us.anthropic.claude-sonnet-4-6", label: "Bedrock Sonnet 4.6" },
|
||||
{ id: "us.anthropic.claude-sonnet-4-5-20250929-v2:0", label: "Bedrock Sonnet 4.5" },
|
||||
];
|
||||
|
||||
@@ -15,7 +15,8 @@ describe("codex local adapter metadata", () => {
|
||||
// alias, so it must not be advertised or used as the default (it triggers a fallback warning).
|
||||
expect(DEFAULT_CODEX_LOCAL_MODEL).toBe("gpt-5.6-sol");
|
||||
// Ordered like the ChatGPT app: newest version first, then by capability within a version (#14878).
|
||||
expect(modelIds.slice(0, 12)).toEqual([
|
||||
expect(modelIds.slice(0, 13)).toEqual([
|
||||
"gpt-6.1-sol",
|
||||
"gpt-6-astra",
|
||||
"gpt-6-sol",
|
||||
"gpt-6-luna",
|
||||
@@ -32,12 +33,13 @@ describe("codex local adapter metadata", () => {
|
||||
expect(modelIds).not.toContain("gpt-5.6");
|
||||
expect(isCodexLocalFastModeSupported(DEFAULT_CODEX_LOCAL_MODEL)).toBe(true);
|
||||
expect(isCodexLocalFastModeSupported("gpt-6-astra")).toBe(true);
|
||||
expect(isCodexLocalFastModeSupported("gpt-6.1-sol")).toBe(true);
|
||||
expect(isCodexLocalFastModeSupported("gpt-6-sol")).toBe(true);
|
||||
expect(modelIds).not.toContain("gpt-5.3-codex");
|
||||
expect(modelIds).not.toContain("gpt-5.3-codex-spark");
|
||||
});
|
||||
|
||||
it.each(["gpt-6-astra", "gpt-6-sol", " gpt-6-sol ", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6"])("uses the reasoning efforts advertised for %s", (model) => {
|
||||
it.each(["gpt-6-astra", "gpt-6.1-sol", "gpt-6-sol", " gpt-6-sol ", "gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6"])("uses the reasoning efforts advertised for %s", (model) => {
|
||||
expect(codexLocalReasoningEffortsForModel(model)).toEqual([
|
||||
"low",
|
||||
"medium",
|
||||
|
||||
@@ -14,6 +14,7 @@ export const DEFAULT_CODEX_LOCAL_MODEL = PAPERCLIP_RUNNER_DEFAULT_MODELS.codex;
|
||||
export const DEFAULT_CODEX_LOCAL_BYPASS_APPROVALS_AND_SANDBOX = true;
|
||||
export const CODEX_LOCAL_FAST_MODE_SUPPORTED_MODELS = [
|
||||
"gpt-6-astra",
|
||||
"gpt-6.1-sol",
|
||||
"gpt-6-sol",
|
||||
"gpt-6-luna",
|
||||
"gpt-5.6-sol",
|
||||
@@ -71,6 +72,7 @@ export function codexLocalReasoningEffortsForModel(
|
||||
const normalizedModel = normalizeCodexModel(model);
|
||||
switch (normalizedModel) {
|
||||
case "gpt-6-astra":
|
||||
case "gpt-6.1-sol":
|
||||
case "gpt-6-sol":
|
||||
case "gpt-5.6-sol":
|
||||
case "gpt-5.6-terra":
|
||||
@@ -110,6 +112,7 @@ export function isCodexLocalFastModeSupported(model: string | null | undefined):
|
||||
// then by decreasing capability inside each version, older models at the end. The server
|
||||
// returns this list as written and the model dropdown keeps its order.
|
||||
export const models = [
|
||||
{ id: "gpt-6.1-sol", label: "gpt-6.1-sol" },
|
||||
{ id: "gpt-6-astra", label: "gpt-6-astra" },
|
||||
{ id: "gpt-6-sol", label: "gpt-6-sol" },
|
||||
{ id: "gpt-6-luna", label: "gpt-6-luna" },
|
||||
@@ -138,10 +141,10 @@ Core fields:
|
||||
- cwd (string, optional): default absolute working directory fallback for the agent process (created if missing when possible)
|
||||
- instructionsFilePath (string, optional): absolute path to a markdown instructions file prepended to stdin prompt at runtime
|
||||
- model (string, optional): Codex model id
|
||||
- modelReasoningEffort (string, optional): reasoning effort override passed via -c model_reasoning_effort=...; GPT-6 Astra/Sol and GPT-5.6 Sol/Terra support low|medium|high|xhigh|max|ultra; GPT-6 Luna and GPT-5.6 Luna support low|medium|high|xhigh|max
|
||||
- modelReasoningEffort (string, optional): reasoning effort override passed via -c model_reasoning_effort=...; GPT-6 Astra, GPT-6.1 Sol, GPT-6 Sol, and GPT-5.6 Sol/Terra support low|medium|high|xhigh|max|ultra; GPT-6 Luna and GPT-5.6 Luna support low|medium|high|xhigh|max
|
||||
- promptTemplate (string, optional): run prompt template
|
||||
- search (boolean, optional): run codex with --search
|
||||
- fastMode (boolean, optional): enable Codex Fast mode; supported on GPT-6 (astra/sol/luna), GPT-5.6 (sol/terra/luna), GPT-5.5, GPT-5.4 and passed through for manual model IDs
|
||||
- fastMode (boolean, optional): enable Codex Fast mode; supported on GPT-6 (astra/sol/luna), GPT-6.1 Sol, GPT-5.6 (sol/terra/luna), GPT-5.5, GPT-5.4 and passed through for manual model IDs
|
||||
- dangerouslyBypassApprovalsAndSandbox (boolean, optional): run with bypass flag
|
||||
- command (string, optional): defaults to "codex"
|
||||
- extraArgs (string[], optional): additional CLI args
|
||||
@@ -172,7 +175,7 @@ Notes:
|
||||
- Paperclip injects desired local skills into the effective CODEX_HOME/skills/ directory at execution time so Codex can discover "$paperclip" and related skills without polluting the project working directory. For new and updated agents, Paperclip assigns an isolated managed home at ~/.paperclip/instances/<id>/companies/<companyId>/agents/<agentId>/codex-home/skills/; when CODEX_HOME is explicitly overridden in adapter config, that override is used instead.
|
||||
- New and updated codex_local agents persist an empty OPENAI_API_KEY override by default so a host-level OPENAI_API_KEY cannot leak into Codex runs through process inheritance. Explicit CODEX_HOME overrides must not point at the shared company codex-home, $CODEX_HOME, or ~/.codex.
|
||||
- Some model/tool combinations reject certain effort levels (for example minimal with web search enabled).
|
||||
- Fast mode is supported on GPT-6 (astra/sol/luna), GPT-5.6 (sol/terra/luna), GPT-5.5, GPT-5.4 and manual model IDs. When enabled for those models, Paperclip applies \`service_tier="fast"\` and \`features.fast_mode=true\`.
|
||||
- Fast mode is supported on GPT-6 (astra/sol/luna), GPT-6.1 Sol, GPT-5.6 (sol/terra/luna), GPT-5.5, GPT-5.4 and manual model IDs. When enabled for those models, Paperclip applies \`service_tier="fast"\` and \`features.fast_mode=true\`.
|
||||
- When Paperclip realizes a workspace/runtime for a run, it injects PAPERCLIP_WORKSPACE_* and PAPERCLIP_RUNTIME_* env vars for agent-side tooling.
|
||||
- The ACP engine keeps its workspace sandbox and enables network access on each turn. Explicit sandbox_workspace_write.network_access overrides in extraArgs (or env.PAPERCLIP_CODEX_ACP_NETWORK_ACCESS="false") disable it; execution-target network denial wins. The bundled ACP patch is needed because upstream mode presets override Codex config.toml on every turn.
|
||||
- The CLI engine defaults to a writable workspace sandbox with network access for unattended work and Paperclip API calls. It does not enable the dangerous bypass flag. Explicit sandbox modes/profiles and network overrides in extraArgs retain their meaning. An execution-target network denial remains enforced.
|
||||
|
||||
@@ -508,7 +508,7 @@ describe("codex_local ACP lane", () => {
|
||||
});
|
||||
});
|
||||
|
||||
it.each([["gpt-6-astra", "ultra"], ["gpt-6-sol", "ultra"], ["gpt-6-luna", "max"], ["gpt-5.6-sol", "ultra"], ["gpt-5.6-terra", "ultra"], ["gpt-5.6-luna", "max"]])("forwards %s controls to the ACPX Codex target", (model, effort) => {
|
||||
it.each([["gpt-6-astra", "ultra"], ["gpt-6.1-sol", "ultra"], ["gpt-6-sol", "ultra"], ["gpt-6-luna", "max"], ["gpt-5.6-sol", "ultra"], ["gpt-5.6-terra", "ultra"], ["gpt-5.6-luna", "max"]])("forwards %s controls to the ACPX Codex target", (model, effort) => {
|
||||
expect(buildCodexAcpConfig({
|
||||
engine: "acp",
|
||||
model,
|
||||
|
||||
@@ -9,7 +9,7 @@ describe("buildCodexExecArgs", () => {
|
||||
if (resumeSessionId) expect(args.slice(-3)).toEqual(["resume", resumeSessionId, "-"]);
|
||||
});
|
||||
|
||||
it.each([["gpt-6-astra", "ultra"], ["gpt-6-sol", "ultra"], ["gpt-6-luna", "max"], ["gpt-5.6-sol", "ultra"], ["gpt-5.6-terra", "ultra"], ["gpt-5.6-luna", "max"]])("forwards %s, its supported reasoning effort, and fast mode", (model, effort) => {
|
||||
it.each([["gpt-6-astra", "ultra"], ["gpt-6.1-sol", "ultra"], ["gpt-6-sol", "ultra"], ["gpt-6-luna", "max"], ["gpt-5.6-sol", "ultra"], ["gpt-5.6-terra", "ultra"], ["gpt-5.6-luna", "max"]])("forwards %s, its supported reasoning effort, and fast mode", (model, effort) => {
|
||||
const result = buildCodexExecArgs({
|
||||
model,
|
||||
modelReasoningEffort: effort,
|
||||
@@ -148,7 +148,7 @@ describe("buildCodexExecArgs", () => {
|
||||
expect(result.fastModeRequested).toBe(true);
|
||||
expect(result.fastModeApplied).toBe(false);
|
||||
expect(result.fastModeIgnoredReason).toContain(
|
||||
"currently only supported on gpt-6-astra, gpt-6-sol, gpt-6-luna, gpt-5.6-sol, gpt-5.6-terra, gpt-5.6-luna, gpt-5.5, gpt-5.4 or manually configured model IDs",
|
||||
"currently only supported on gpt-6-astra, gpt-6.1-sol, gpt-6-sol, gpt-6-luna, gpt-5.6-sol, gpt-5.6-terra, gpt-5.6-luna, gpt-5.5, gpt-5.4 or manually configured model IDs",
|
||||
);
|
||||
expect(result.args).toEqual([
|
||||
"exec",
|
||||
|
||||
@@ -94,7 +94,7 @@ describe("buildCodexLocalConfig", () => {
|
||||
});
|
||||
});
|
||||
|
||||
it.each([["gpt-6-astra", "ultra"], ["gpt-6-sol", "ultra"], ["gpt-6-luna", "max"], ["gpt-5.6-sol", "ultra"], ["gpt-5.6-terra", "ultra"], ["gpt-5.6-luna", "max"]])("persists the exact %s model and supported controls", (model, effort) => {
|
||||
it.each([["gpt-6-astra", "ultra"], ["gpt-6.1-sol", "ultra"], ["gpt-6-sol", "ultra"], ["gpt-6-luna", "max"], ["gpt-5.6-sol", "ultra"], ["gpt-5.6-terra", "ultra"], ["gpt-5.6-luna", "max"]])("persists the exact %s model and supported controls", (model, effort) => {
|
||||
const config = buildCodexLocalConfig(
|
||||
makeValues({
|
||||
model,
|
||||
|
||||
@@ -54,6 +54,7 @@ export function isValidOpenCodeModelId(value: unknown): value is string {
|
||||
export const models: Array<{ id: string; label: string }> = [
|
||||
{ id: DEFAULT_OPENCODE_LOCAL_MODEL, label: DEFAULT_OPENCODE_LOCAL_MODEL },
|
||||
{ id: "openai/gpt-6-astra", label: "openai/gpt-6-astra" },
|
||||
{ id: "openai/gpt-6.1-sol", label: "openai/gpt-6.1-sol" },
|
||||
{ id: "openai/gpt-6-sol", label: "openai/gpt-6-sol" },
|
||||
{ id: "openai/gpt-6-luna", label: "openai/gpt-6-luna" },
|
||||
{ id: "openai/gpt-5.6-sol", label: "openai/gpt-5.6-sol" },
|
||||
@@ -62,6 +63,7 @@ export const models: Array<{ id: string; label: string }> = [
|
||||
{ id: "anthropic/claude-opus-5-5", label: "anthropic/claude-opus-5-5" },
|
||||
{ id: "anthropic/claude-opus-5", label: "anthropic/claude-opus-5" },
|
||||
{ id: "anthropic/claude-fable-5-1", label: "anthropic/claude-fable-5-1" },
|
||||
{ id: "anthropic/claude-sonnet-5-5", label: "anthropic/claude-sonnet-5-5" },
|
||||
{ id: "anthropic/claude-sonnet-5", label: "anthropic/claude-sonnet-5" },
|
||||
{ id: "google/gemini-3.8-flash", label: "google/gemini-3.8-flash" },
|
||||
{ id: "xai/grok-4.7", label: "xai/grok-4.7" },
|
||||
|
||||
@@ -165,11 +165,11 @@
|
||||
"dependencies": {
|
||||
"@agentclientprotocol/claude-agent-acp": "0.73.0",
|
||||
"@agentclientprotocol/codex-acp": "1.6.2",
|
||||
"@openai/codex": "0.156.0",
|
||||
"@openai/codex": "0.160.0",
|
||||
"acpx": "0.13.1",
|
||||
"ajv": "^8.20.0",
|
||||
"json-schema-to-ts": "^3.1.1",
|
||||
"opencode-ai": "1.18.32",
|
||||
"opencode-ai": "1.18.34",
|
||||
"react-markdown": "^10.1.0",
|
||||
"remark-gfm": "^4.0.1",
|
||||
"smol-toml": "^1.4.2"
|
||||
|
||||
@@ -161,7 +161,7 @@ impl AcpxProviderDescriptor {
|
||||
"@agentclientprotocol/codex-acp",
|
||||
"1.6.2",
|
||||
Some("@openai/codex"),
|
||||
Some("0.156.0"),
|
||||
Some("0.160.0"),
|
||||
"sha256:c4538599d1ab767db5dff50934f13bb5ba313a59d9c4a83e993fac4617ea63d3",
|
||||
),
|
||||
"pi" => (
|
||||
@@ -2266,7 +2266,7 @@ mod tests {
|
||||
"@agentclientprotocol/codex-acp",
|
||||
"1.6.2",
|
||||
json!("@openai/codex"),
|
||||
json!("0.156.0"),
|
||||
json!("0.160.0"),
|
||||
"sha256:c4538599d1ab767db5dff50934f13bb5ba313a59d9c4a83e993fac4617ea63d3",
|
||||
)
|
||||
};
|
||||
|
||||
@@ -24,7 +24,7 @@ use crate::qualified_launch::verify_launch_artifact;
|
||||
use crate::question_response::validate_question_response;
|
||||
|
||||
pub const CODEX_APP_SERVER_MAX_FRAME_BYTES: usize = 4 * 1024 * 1024;
|
||||
const QUALIFIED_OPENCODE_VERSION: &str = "1.18.32";
|
||||
const QUALIFIED_OPENCODE_VERSION: &str = "1.18.34";
|
||||
const DEFAULT_PROVIDER_TRACE_MAX_BYTES: usize = 64 * 1024 * 1024;
|
||||
const MAX_BUFFERED_MESSAGES: usize = 1_024;
|
||||
const MAX_BUFFERED_MESSAGE_BYTES: usize = 16 * 1024 * 1024;
|
||||
|
||||
@@ -4933,7 +4933,7 @@ mod tests {
|
||||
CodexProviderConfig {
|
||||
provider: "opencode".to_owned(),
|
||||
driver: "opencode_server".to_owned(),
|
||||
provider_version: "1.18.32".to_owned(),
|
||||
provider_version: "1.18.34".to_owned(),
|
||||
command: PathBuf::from("node"),
|
||||
args: Vec::new(),
|
||||
cwd: std::env::current_dir()
|
||||
@@ -5295,7 +5295,7 @@ mod tests {
|
||||
CodexProviderConfig {
|
||||
provider: "opencode".to_owned(),
|
||||
driver: "opencode_server".to_owned(),
|
||||
provider_version: "1.18.32".to_owned(),
|
||||
provider_version: "1.18.34".to_owned(),
|
||||
command: PathBuf::from("node"),
|
||||
args: Vec::new(),
|
||||
cwd: std::env::current_dir()
|
||||
|
||||
@@ -83,7 +83,7 @@ fn checkpoints_the_sidecar_and_rebinds_consecutive_warm_runs_before_accepting_wo
|
||||
"providerVersion": "0.13.1", "agent": "codex", "model": "gpt-5.6-sol",
|
||||
"acpxVersion": "0.13.1", "agentServerPackage": "@agentclientprotocol/codex-acp",
|
||||
"agentServerVersion": "1.6.2", "agentRuntimePackage": "@openai/codex",
|
||||
"agentRuntimeVersion": "0.156.0", "commandDigest": PROFILE_DIGEST,
|
||||
"agentRuntimeVersion": "0.160.0", "commandDigest": PROFILE_DIGEST,
|
||||
"sidecarCommand": sidecar, "sidecarArgs": args, "runtimeDirectory": fixture.0,
|
||||
"normalizedSessionId": "session-1", "runId": "run-1", "cwd": fixture.0,
|
||||
"instructions": "Complete the supplied work.",
|
||||
|
||||
+2
-2
@@ -182,7 +182,7 @@ fn prepare_payload(directory: &Path, agent: &str) -> Value {
|
||||
fn prepare_payload_with_mode(directory: &Path, agent: &str, mode: &str) -> Value {
|
||||
let operations = Vec::new();
|
||||
let (runtime_package, runtime_version) = if agent == "codex" {
|
||||
(json!("@openai/codex"), json!("0.156.0"))
|
||||
(json!("@openai/codex"), json!("0.160.0"))
|
||||
} else {
|
||||
(Value::Null, Value::Null)
|
||||
};
|
||||
@@ -800,7 +800,7 @@ fn opencode_prepare_payload(directory: &Path) -> Value {
|
||||
"kind": "opencode",
|
||||
"provider": "opencode",
|
||||
"driver": "opencode_server",
|
||||
"providerVersion": "1.18.32",
|
||||
"providerVersion": "1.18.34",
|
||||
"command": directory.join("qualified-opencode-proxy-command"),
|
||||
"args": [directory.join("qualified-opencode-proxy-script")],
|
||||
"cwd": directory,
|
||||
|
||||
@@ -309,8 +309,8 @@ try {
|
||||
const payload = {
|
||||
pins: {
|
||||
nodeMinimum: minimumNodeVersion.join("."),
|
||||
codex: "0.156.0",
|
||||
opencode: "1.18.32",
|
||||
codex: "0.160.0",
|
||||
opencode: "1.18.34",
|
||||
acpx: "0.13.1",
|
||||
grok: "1.0.13",
|
||||
claudeAcp: "0.73.0",
|
||||
|
||||
@@ -13,7 +13,7 @@ import {
|
||||
import { dirname, join, resolve } from "node:path";
|
||||
import { pathToFileURL } from "node:url";
|
||||
|
||||
const OPENCODE_VERSION = "1.18.32";
|
||||
const OPENCODE_VERSION = "1.18.34";
|
||||
const BASELINE_PACKAGE = "opencode-linux-x64-baseline";
|
||||
|
||||
function readPackage(path) {
|
||||
|
||||
@@ -35,14 +35,14 @@ async function fixture(options = {}) {
|
||||
join(packageRoot, "package.json"),
|
||||
JSON.stringify({
|
||||
name: "opencode-ai",
|
||||
version: options.packageVersion ?? "1.18.32",
|
||||
version: options.packageVersion ?? "1.18.34",
|
||||
}),
|
||||
),
|
||||
writeFile(
|
||||
join(baselineRoot, "package.json"),
|
||||
JSON.stringify({
|
||||
name: "opencode-linux-x64-baseline",
|
||||
version: options.baselineVersion ?? "1.18.32",
|
||||
version: options.baselineVersion ?? "1.18.34",
|
||||
}),
|
||||
),
|
||||
writeFile(join(packageRoot, "bin", "opencode.exe"), "sentinel\n"),
|
||||
@@ -50,11 +50,11 @@ async function fixture(options = {}) {
|
||||
const source = join(baselineRoot, "bin", "opencode");
|
||||
if (options.symlinkSource) {
|
||||
const realSource = join(root, "real-opencode");
|
||||
await writeFile(realSource, "#!/bin/sh\necho 1.18.32\n");
|
||||
await writeFile(realSource, "#!/bin/sh\necho 1.18.34\n");
|
||||
await chmod(realSource, 0o755);
|
||||
await symlink(realSource, source);
|
||||
} else {
|
||||
await writeFile(source, "#!/bin/sh\necho 1.18.32\n");
|
||||
await writeFile(source, "#!/bin/sh\necho 1.18.34\n");
|
||||
await chmod(source, 0o755);
|
||||
}
|
||||
return packageRoot;
|
||||
@@ -67,7 +67,7 @@ test("materializes the pinned baseline executable with a verified version", asyn
|
||||
platform: "linux",
|
||||
architecture: "x64",
|
||||
});
|
||||
assert.equal(result.version, "1.18.32");
|
||||
assert.equal(result.version, "1.18.34");
|
||||
assert.match(result.sourceDigest, /^[0-9a-f]{64}$/);
|
||||
});
|
||||
|
||||
@@ -80,7 +80,7 @@ test("refuses version, file-type, and platform drift", async () => {
|
||||
platform: "linux",
|
||||
architecture: "x64",
|
||||
}),
|
||||
/Expected opencode-linux-x64-baseline@1\.18\.32/,
|
||||
/Expected opencode-linux-x64-baseline@1\.18\.34/,
|
||||
);
|
||||
|
||||
const symlinkSource = await fixture({ symlinkSource: true });
|
||||
|
||||
@@ -34,7 +34,7 @@ async function fixture() {
|
||||
provider: "opencode",
|
||||
driver: "opencode_server",
|
||||
model: "openrouter/example/model",
|
||||
opencodeVersion: "1.18.32",
|
||||
opencodeVersion: "1.18.34",
|
||||
};
|
||||
const evalCase = {
|
||||
schema: "paperclip-runner/eval-case/v1",
|
||||
|
||||
@@ -72,7 +72,7 @@ function transportDriverIdentity(input: NativeExecutionInput): {
|
||||
return {
|
||||
kind: "opencode_server",
|
||||
displayName: "OpenCode server",
|
||||
version: "1.18.32",
|
||||
version: "1.18.34",
|
||||
};
|
||||
case "claude_managed":
|
||||
return {
|
||||
|
||||
@@ -127,7 +127,7 @@ function acpxExecution(
|
||||
? "@openai/codex"
|
||||
: "@anthropic-ai/claude-agent-sdk",
|
||||
agentRuntimeVersion:
|
||||
agent === "pi" ? "0.84.2" : agent === "codex" ? "0.156.0" : "0.3.286",
|
||||
agent === "pi" ? "0.84.2" : agent === "codex" ? "0.160.0" : "0.3.286",
|
||||
commandDigest:
|
||||
agent === "codex"
|
||||
? "sha256:c4538599d1ab767db5dff50934f13bb5ba313a59d9c4a83e993fac4617ea63d3"
|
||||
@@ -292,7 +292,7 @@ describe("native backend factory", () => {
|
||||
await expect(backend.descriptor()).resolves.toMatchObject({
|
||||
kind: "runner",
|
||||
name: "opencode_server",
|
||||
version: "1.18.32",
|
||||
version: "1.18.34",
|
||||
capabilities: {
|
||||
steering: false,
|
||||
resume: true,
|
||||
@@ -445,7 +445,7 @@ describe("native backend factory", () => {
|
||||
await expect(backend.descriptor()).resolves.toMatchObject({
|
||||
kind: "runner",
|
||||
name: "opencode_server",
|
||||
version: "1.18.32",
|
||||
version: "1.18.34",
|
||||
capabilities: {
|
||||
resume: true,
|
||||
interruption: true,
|
||||
|
||||
@@ -171,9 +171,9 @@ export function evalSessionProviderVersion(
|
||||
request: EvalSessionRequest,
|
||||
): string | null {
|
||||
if (request.provider === "opencode") {
|
||||
const version = request.opencodeVersion ?? "1.18.32";
|
||||
if (version !== "1.18.32") {
|
||||
throw new Error(`OpenCode evals require exact version 1.18.32; received ${version}`);
|
||||
const version = request.opencodeVersion ?? "1.18.34";
|
||||
if (version !== "1.18.34") {
|
||||
throw new Error(`OpenCode evals require exact version 1.18.34; received ${version}`);
|
||||
}
|
||||
return version;
|
||||
}
|
||||
|
||||
@@ -336,7 +336,7 @@ async function handle(message: RpcMessage): Promise<void> {
|
||||
case "initialize":
|
||||
result = {
|
||||
user: { sessionId: "opencode" },
|
||||
serverInfo: { name: "opencode", version: "1.18.32" },
|
||||
serverInfo: { name: "opencode", version: "1.18.34" },
|
||||
};
|
||||
break;
|
||||
case "thread/start":
|
||||
|
||||
@@ -73,13 +73,13 @@ const QUALIFIED_CLAUDE_DARWIN_RUNTIMES = {
|
||||
|
||||
const QUALIFIED_CODEX_LINUX_X64_RUNTIME = Object.freeze({
|
||||
runtimePackageName: "@openai/codex",
|
||||
runtimePackageVersion: "0.156.0",
|
||||
runtimePackageVersion: "0.160.0",
|
||||
packageName: "@openai/codex-linux-x64",
|
||||
packageVersion: "0.156.0-linux-x64",
|
||||
dependencyDeclaration: "npm:@openai/codex@0.156.0-linux-x64",
|
||||
packageVersion: "0.160.0-linux-x64",
|
||||
dependencyDeclaration: "npm:@openai/codex@0.160.0-linux-x64",
|
||||
relativeExecutable: "vendor/x86_64-unknown-linux-musl/bin/codex",
|
||||
executableDigest:
|
||||
"sha256:78a11f06e0a2dda42d13fba1d50dc62e8cbdb2d5f69789722f4d4d99b5cdbe30",
|
||||
"sha256:12eb3e81114588aca3b7998f4f19e8997b056aca08e57a7ca7c8a3ec8c652aad",
|
||||
environmentVariable: "CODEX_PATH",
|
||||
});
|
||||
|
||||
|
||||
@@ -34,7 +34,7 @@ describe("qualified ACPX profiles", () => {
|
||||
it("binds Codex ACP to the CLI runtime it launches", () => {
|
||||
expect(QUALIFIED_ACPX_PROFILES.codex).toMatchObject({
|
||||
agentRuntimePackage: "@openai/codex",
|
||||
agentRuntimeVersion: "0.156.0",
|
||||
agentRuntimeVersion: "0.160.0",
|
||||
});
|
||||
});
|
||||
|
||||
|
||||
@@ -105,7 +105,7 @@ export const QUALIFIED_ACPX_PROFILES: Readonly<
|
||||
agentServerPackage: "@agentclientprotocol/codex-acp",
|
||||
agentServerVersion: "1.6.2",
|
||||
agentRuntimePackage: "@openai/codex",
|
||||
agentRuntimeVersion: "0.156.0",
|
||||
agentRuntimeVersion: "0.160.0",
|
||||
commandDigest:
|
||||
"sha256:c4538599d1ab767db5dff50934f13bb5ba313a59d9c4a83e993fac4617ea63d3",
|
||||
qualificationModel: "gpt-5.6-sol",
|
||||
|
||||
@@ -333,7 +333,7 @@ describe("OpenCodeServerDriver", () => {
|
||||
headers: { "Content-Type": "application/json" },
|
||||
});
|
||||
if (url.pathname === "/global/health")
|
||||
return json({ healthy: true, version: "1.18.32" });
|
||||
return json({ healthy: true, version: "1.18.34" });
|
||||
if (url.pathname === "/event") {
|
||||
return new Response(
|
||||
new ReadableStream<Uint8Array>({
|
||||
@@ -705,7 +705,7 @@ describe("OpenCodeServerDriver", () => {
|
||||
output: 2,
|
||||
costUsd: 0.001,
|
||||
provider: "openrouter",
|
||||
driverVersion: "1.18.32",
|
||||
driverVersion: "1.18.34",
|
||||
});
|
||||
await session.interrupt?.({ turnId: turn.turnId });
|
||||
const snapshot = await session.snapshot();
|
||||
|
||||
@@ -73,7 +73,7 @@ import { nativeMcpLaunchBinding } from "../native-mcp.js";
|
||||
import { materializeNativeRuntimeSkills } from "../runtime-context-materializer.js";
|
||||
|
||||
export const OPENCODE_SERVER_DRIVER_KIND = "opencode_server" as const;
|
||||
export const QUALIFIED_OPENCODE_VERSION = "1.18.32" as const;
|
||||
export const QUALIFIED_OPENCODE_VERSION = "1.18.34" as const;
|
||||
export const QUALIFIED_OPENCODE_MODEL =
|
||||
"openrouter/deepseek/deepseek-v4-flash-0731" as const;
|
||||
|
||||
|
||||
@@ -897,7 +897,7 @@ describe("Capability live runnerd and Codex session", () => {
|
||||
expect(session.snapshot().config).toMatchObject({
|
||||
provider: "opencode",
|
||||
driver: "opencode_server",
|
||||
providerVersion: "1.18.32",
|
||||
providerVersion: "1.18.34",
|
||||
requestedModel: "openrouter/deepseek/deepseek-v4-flash-0731",
|
||||
});
|
||||
await service.shutdown(session.id);
|
||||
|
||||
@@ -965,7 +965,7 @@ export class CapabilityLiveSessionService {
|
||||
? "aws_agentcore_harness_api"
|
||||
: input.provider === "acpx" ? "acpx_runtime" : "codex_app_server",
|
||||
providerVersion: input.provider === "opencode"
|
||||
? "1.18.32"
|
||||
? "1.18.34"
|
||||
: input.provider === "claude_managed"
|
||||
? input.managedProfile!.agentVersion
|
||||
: input.provider === "aws_agentcore"
|
||||
|
||||
@@ -4672,7 +4672,7 @@ class DurablePrpCodexTransport implements CodexAppServerTransport {
|
||||
? "opencode_server"
|
||||
: "codex_app_server",
|
||||
providerVersion:
|
||||
provider === "opencode" ? "1.18.32" : "codex-app-server-v1",
|
||||
provider === "opencode" ? "1.18.34" : "codex-app-server-v1",
|
||||
command:
|
||||
provider === "opencode"
|
||||
? providerNodeCommand
|
||||
|
||||
@@ -57,7 +57,7 @@ const nativeSessionExecutor = await readFile(
|
||||
);
|
||||
|
||||
test("the runner pins every qualified ACPX production dependency", () => {
|
||||
assert.equal(runnerPackage.dependencies["@openai/codex"], "0.156.0");
|
||||
assert.equal(runnerPackage.dependencies["@openai/codex"], "0.160.0");
|
||||
assert.equal(runnerPackage.dependencies["@anthropic-ai/claude-agent-sdk"], undefined);
|
||||
assert.equal(rootPackage.pnpm.overrides["@agentclientprotocol/codex-acp@1.6.2>@openai/codex"], runnerPackage.dependencies["@openai/codex"]);
|
||||
assert.equal(rootPackage.pnpm.overrides["@agentclientprotocol/claude-agent-acp@0.73.0>@anthropic-ai/claude-agent-sdk"], "0.3.286");
|
||||
@@ -142,7 +142,7 @@ test("old and new pnpm configuration both apply the exact runtime patches", () =
|
||||
providerPackBuilder,
|
||||
/copyFileSync\(process\.execPath, stableNodeCommand\)/,
|
||||
);
|
||||
assert.match(codexPatch, /\+ "@openai\/codex": "0\.156\.0"/);
|
||||
assert.match(codexPatch, /\+ "@openai\/codex": "0\.160\.0"/);
|
||||
});
|
||||
|
||||
test("the ACPX patch preserves launch-only state and verified spawning", () => {
|
||||
|
||||
@@ -258,7 +258,7 @@ const server = createServer(async (request, response) => {
|
||||
if (request.headers.authorization !== expectedAuth)
|
||||
return json(response, 401, { error: "unauthorized" });
|
||||
if (request.url === "/global/health")
|
||||
return json(response, 200, { healthy: true, version: "1.18.32" });
|
||||
return json(response, 200, { healthy: true, version: "1.18.34" });
|
||||
if (request.url === "/event") {
|
||||
eventConnections += 1;
|
||||
response.writeHead(200, {
|
||||
|
||||
@@ -6,7 +6,7 @@ diff --git a/package.json b/package.json
|
||||
"dependencies": {
|
||||
"@agentclientprotocol/sdk": "^1.3.0",
|
||||
- "@openai/codex": "^0.148.0",
|
||||
+ "@openai/codex": "0.156.0",
|
||||
+ "@openai/codex": "0.160.0",
|
||||
"diff": "^9.0.0",
|
||||
"open": "^11.0.0",
|
||||
"vscode-jsonrpc": "^9.0.1",
|
||||
|
||||
+1
-1
@@ -32,7 +32,7 @@ patchedDependencies:
|
||||
# Agent CLIs share the current runtime used by the native provider pack.
|
||||
# pnpm patches change package files, but overrides control dependency resolution.
|
||||
overrides:
|
||||
"@agentclientprotocol/codex-acp@1.6.2>@openai/codex": "0.156.0"
|
||||
"@agentclientprotocol/codex-acp@1.6.2>@openai/codex": "0.160.0"
|
||||
"@agentclientprotocol/claude-agent-acp@0.73.0>@anthropic-ai/claude-agent-sdk": "0.3.286"
|
||||
rollup: ">=4.59.0"
|
||||
react: "^19.2.8"
|
||||
|
||||
@@ -100,7 +100,7 @@ try {
|
||||
if (!request.reservationId || request.maxCostUsd !== 0.5 || !["gpt-5.6-luna", "claude-sonnet-5", ...OPENROUTER_MODELS].includes(request.model)) throw new Error("Paid attempt requires ledger reservation and qualified model");
|
||||
if (isOpenRouter) {
|
||||
providerVersion = execFileSync(resolve("packages/paperclip-runner/node_modules/opencode-ai/bin/opencode.exe"), ["--version"], { encoding: "utf8" }).trim();
|
||||
if (providerVersion !== "1.18.32") throw new Error("OpenCode profile requires version 1.18.32");
|
||||
if (providerVersion !== "1.18.34") throw new Error("OpenCode profile requires version 1.18.34");
|
||||
}
|
||||
const providerEnvironment = isOpenRouter ? openRouterEnvironment() : request.model === "claude-sonnet-5" ? (() => {
|
||||
const token = process.env.CLAUDE_CODE_OAUTH_TOKEN;
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
// Opt-in real Codex qualification; no model turn or live account data.
|
||||
// Run from the repository root:
|
||||
// node --import ./server/node_modules/tsx/dist/loader.mjs scripts/tests/native-cleanup-paginated-codex.mjs
|
||||
// PAPERCLIP_TEST_CODEX_BINARY may select the exact installed Codex 0.156.0 binary.
|
||||
// PAPERCLIP_TEST_CODEX_BINARY may select the exact installed Codex 0.160.0 binary.
|
||||
// Fresh synthetic fixture directories are retained for inspection; never reuse live homes.
|
||||
import { spawn, execFileSync } from "node:child_process";
|
||||
import {
|
||||
@@ -26,10 +26,10 @@ if (
|
||||
execFileSync(codexBinary, ["--version"], {
|
||||
encoding: "utf8",
|
||||
timeout: 10000,
|
||||
}).trim() !== "codex-cli 0.156.0"
|
||||
}).trim() !== "codex-cli 0.160.0"
|
||||
) {
|
||||
throw new Error(
|
||||
"This opt-in qualification requires Codex CLI 0.156.0. Requalify deliberately before changing the pin.",
|
||||
"This opt-in qualification requires Codex CLI 0.160.0. Requalify deliberately before changing the pin.",
|
||||
);
|
||||
}
|
||||
const home = await mkdtemp(join(tmpdir(), "paperclip-paginated-probe-"));
|
||||
@@ -132,7 +132,7 @@ const lines =
|
||||
timestamp,
|
||||
cwd: home,
|
||||
originator: "codex",
|
||||
cli_version: "0.156.0",
|
||||
cli_version: "0.160.0",
|
||||
source: "cli",
|
||||
model_provider: "openai",
|
||||
selected_capability_roots: [],
|
||||
|
||||
@@ -88,7 +88,7 @@ if (args.length === 0 || (args.length === 1 && args[0] === "--help")) {
|
||||
}).trim();
|
||||
assert.equal(
|
||||
version,
|
||||
"codex-cli 0.156.0",
|
||||
"codex-cli 0.160.0",
|
||||
"qualified_codex_version_required",
|
||||
);
|
||||
const ledger = join(fixture, "provider-process-starts.txt");
|
||||
@@ -309,7 +309,7 @@ if (args.length === 0 || (args.length === 1 && args[0] === "--help")) {
|
||||
kind: "codex",
|
||||
provider: "codex",
|
||||
driver: "codex_app_server",
|
||||
providerVersion: "0.156.0",
|
||||
providerVersion: "0.160.0",
|
||||
command: shim,
|
||||
args: [
|
||||
"--cd",
|
||||
|
||||
@@ -50,6 +50,7 @@ describe("adapter model listing", () => {
|
||||
expect(models).toEqual(codexFallbackModels);
|
||||
// The bare gpt-5.6 alias is intentionally not advertised (Codex has no metadata for it).
|
||||
expect(models.some((model) => model.id === "gpt-5.6")).toBe(false);
|
||||
expect(models.some((model) => model.id === "gpt-6.1-sol")).toBe(true);
|
||||
expect(models.some((model) => model.id === "gpt-5.6-sol")).toBe(true);
|
||||
expect(models.some((model) => model.id === "gpt-5.6-terra")).toBe(true);
|
||||
expect(models.some((model) => model.id === "gpt-5.6-luna")).toBe(true);
|
||||
@@ -170,9 +171,11 @@ describe("adapter model listing", () => {
|
||||
// Fable 5.1 leads here too, using its documented dateless Bedrock ID.
|
||||
expect(models[0]?.id).toBe("us.anthropic.claude-fable-5-1");
|
||||
expect(models.map((model) => model.id)).toEqual(expect.arrayContaining([
|
||||
"us.anthropic.claude-opus-5-5", "us.anthropic.claude-opus-5", "us.anthropic.claude-sonnet-5",
|
||||
"us.anthropic.claude-fable-5-1", "us.anthropic.claude-opus-4-7", "us.anthropic.claude-sonnet-4-6",
|
||||
"us.anthropic.claude-opus-5-5", "us.anthropic.claude-opus-5", "us.anthropic.claude-sonnet-5-5",
|
||||
"us.anthropic.claude-sonnet-5", "us.anthropic.claude-fable-5-1", "us.anthropic.claude-opus-4-7",
|
||||
"us.anthropic.claude-sonnet-4-6",
|
||||
]));
|
||||
expect(models.some((model) => model.id === "claude-sonnet-5-5")).toBe(false);
|
||||
expect(models.map((model) => model.id)).not.toEqual(expect.arrayContaining(["us.anthropic.claude-opus-4-8-v1"]));
|
||||
expect(models.some((model) => model.id === "claude-fable-5-1")).toBe(false);
|
||||
expect(fetchSpy).not.toHaveBeenCalled();
|
||||
@@ -293,7 +296,7 @@ describe("adapter model listing", () => {
|
||||
const models = await listAdapterModels("opencode_local");
|
||||
|
||||
expect(models).toEqual(opencodeFallbackModels);
|
||||
expect(models.map((model) => model.id)).toEqual(expect.arrayContaining(["openai/gpt-6-astra", "openai/gpt-6-sol", "openai/gpt-6-luna", "openai/gpt-5.6-sol", "openai/gpt-5.6-terra", "openai/gpt-5.6-luna", "anthropic/claude-opus-5-5", "anthropic/claude-opus-5", "anthropic/claude-fable-5-1", "anthropic/claude-sonnet-5", "google/gemini-3.8-flash", "xai/grok-4.7"]));
|
||||
expect(models.map((model) => model.id)).toEqual(expect.arrayContaining(["openai/gpt-6-astra", "openai/gpt-6.1-sol", "openai/gpt-6-sol", "openai/gpt-6-luna", "openai/gpt-5.6-sol", "openai/gpt-5.6-terra", "openai/gpt-5.6-luna", "anthropic/claude-opus-5-5", "anthropic/claude-opus-5", "anthropic/claude-fable-5-1", "anthropic/claude-sonnet-5-5", "anthropic/claude-sonnet-5", "google/gemini-3.8-flash", "xai/grok-4.7"]));
|
||||
});
|
||||
|
||||
it("loads cursor models dynamically and caches them", async () => {
|
||||
|
||||
@@ -362,8 +362,8 @@ describe("server adapter registry", () => {
|
||||
const expectedCodexInstall = `if ! command -v 'codex' >/dev/null 2>&1; then ${buildSandboxNpmInstallCommand("@openai/codex")}; fi`;
|
||||
const expectedGeminiInstall = `if ! command -v 'gemini' >/dev/null 2>&1; then ${buildSandboxNpmInstallCommand("@google/gemini-cli")}; fi`;
|
||||
const expectedOpenCodeInstall = `if ! command -v 'opencode' >/dev/null 2>&1; then ${buildSandboxNpmInstallCommand("opencode-ai")}; fi`;
|
||||
const expectedRunnerCodexInstall = `if ! command -v 'codex' >/dev/null 2>&1; then ${buildSandboxNpmInstallCommand("@openai/codex@0.156.0")}; fi`;
|
||||
const expectedRunnerOpenCodeInstall = `if ! command -v 'opencode' >/dev/null 2>&1; then ${buildSandboxNpmInstallCommand("opencode-ai@1.18.32")}; fi`;
|
||||
const expectedRunnerCodexInstall = `if ! command -v 'codex' >/dev/null 2>&1; then ${buildSandboxNpmInstallCommand("@openai/codex@0.160.0")}; fi`;
|
||||
const expectedRunnerOpenCodeInstall = `if ! command -v 'opencode' >/dev/null 2>&1; then ${buildSandboxNpmInstallCommand("opencode-ai@1.18.34")}; fi`;
|
||||
|
||||
expect(findActiveServerAdapter("claude_local")?.getRuntimeCommandSpec?.({})).toEqual({
|
||||
command: "claude",
|
||||
|
||||
@@ -519,7 +519,7 @@ const paperclipRunnerAdapter: ServerAdapterModule = {
|
||||
"opencode",
|
||||
`opencode-ai@${QUALIFIED_OPENCODE_RUNNER_VERSION}`,
|
||||
)
|
||||
: buildNpmRuntimeCommandSpec(config, "codex", "@openai/codex@0.156.0"),
|
||||
: buildNpmRuntimeCommandSpec(config, "codex", "@openai/codex@0.160.0"),
|
||||
agentConfigurationDoc:
|
||||
"# Paperclip Runner\n\nAdapter: paperclip_runner\n\nRuns Codex, OpenCode, Claude Managed, AWS AgentCore, or ACPX Claude/Grok Build through the Rust Paperclip runner and authenticated PRP transport. Cursor, GitHub Copilot, and Pi are awaiting local and Daytona qualification and are not enabled for production runs. Managed providers use company-scoped qualified profiles, explicit retention acknowledgement, and spend limits.\n",
|
||||
getConfigSchema: () => ({
|
||||
|
||||
@@ -15,13 +15,13 @@ describe("remote Codex compatibility window", () => {
|
||||
vi.useRealTimers();
|
||||
}
|
||||
});
|
||||
it.each(["0.149.0", "0.149.1", "0.150.0", "0.150.1", "0.151.0", "0.152.1", "0.153.4", "0.154.0", "0.155.1", "0.156.0", "0.156.99"])(
|
||||
it.each(["0.149.0", "0.149.1", "0.150.0", "0.150.1", "0.151.0", "0.152.1", "0.153.4", "0.154.0", "0.155.1", "0.156.0", "0.156.99", "0.157.0", "0.158.0", "0.159.3", "0.160.0", "0.160.99"])(
|
||||
"accepts stable supported version %s", (version) => {
|
||||
expect(isSupportedRemoteCodexVersion(version)).toBe(true);
|
||||
expect(parseCodexCliVersion(`codex-cli ${version}\n`)).toBe(version);
|
||||
},
|
||||
);
|
||||
it.each(["0.148.99", "0.100.0", "0.157.0", "0.999.0", "1.0.0", "0.156.0-alpha.1", "0.149.0-dev", "0.156.0+custom", "00.149.0", "0.149", "0.149.9007199254740992", ""])(
|
||||
it.each(["0.148.99", "0.100.0", "0.161.0", "0.162.0", "0.999.0", "1.0.0", "0.160.0-alpha.1", "0.149.0-dev", "0.160.0+custom", "00.149.0", "0.149", "0.149.9007199254740992", ""])(
|
||||
"rejects unsupported or ambiguous version %s", (version) => {
|
||||
expect(isSupportedRemoteCodexVersion(version)).toBe(false);
|
||||
},
|
||||
@@ -30,9 +30,9 @@ describe("remote Codex compatibility window", () => {
|
||||
expect(parseCodexCliVersion("WARNING: PATH unchanged\r\n\rcodex-cli 0.149.0\r\n")).toBe("0.149.0");
|
||||
});
|
||||
it.each([
|
||||
"codex-cli 0.156.0-alpha.1", "codex-cli 0.156.0+custom", "codex-cli 0.156.0 garbage",
|
||||
"wrapper says codex-cli 0.156.0", "codex 0.156.0", "0.156.0", "",
|
||||
"codex-cli 0.149.0\ncodex-cli 0.156.0",
|
||||
"codex-cli 0.160.0-alpha.1", "codex-cli 0.160.0+custom", "codex-cli 0.160.0 garbage",
|
||||
"wrapper says codex-cli 0.160.0", "codex 0.160.0", "0.160.0", "",
|
||||
"codex-cli 0.149.0\ncodex-cli 0.160.0",
|
||||
])("does not partially parse %j as a supported stable CLI", (output) => {
|
||||
expect(parseCodexCliVersion(output)).toBeNull();
|
||||
});
|
||||
|
||||
@@ -6,7 +6,7 @@
|
||||
* Do not query a registry at startup.
|
||||
*/
|
||||
export const REMOTE_CODEX_MINIMUM_VERSION = "0.149.0";
|
||||
export const REMOTE_CODEX_MAXIMUM_VERSION_EXCLUSIVE = "0.157.0";
|
||||
export const REMOTE_CODEX_MAXIMUM_VERSION_EXCLUSIVE = "0.161.0";
|
||||
export const REMOTE_CODEX_SUPPORTED_RANGE =
|
||||
`>=${REMOTE_CODEX_MINIMUM_VERSION} <${REMOTE_CODEX_MAXIMUM_VERSION_EXCLUSIVE}`;
|
||||
|
||||
|
||||
@@ -1087,8 +1087,8 @@ describe("remote provider pack manifest", () => {
|
||||
const payload = {
|
||||
pins: {
|
||||
nodeMinimum: "24.11.0",
|
||||
codex: "0.156.0",
|
||||
opencode: "1.18.32",
|
||||
codex: "0.160.0",
|
||||
opencode: "1.18.34",
|
||||
acpx: "0.13.1",
|
||||
claudeAcp: "0.73.0",
|
||||
codexAcp: "1.6.2",
|
||||
@@ -1148,7 +1148,7 @@ describe("remote provider pack manifest", () => {
|
||||
);
|
||||
await writeManifest();
|
||||
expect(readRemoteProviderPackManifest(root).payload.pins.opencode).toBe(
|
||||
"1.18.32",
|
||||
"1.18.34",
|
||||
);
|
||||
const candidatePath = "provider-assets/pi/linux-x64";
|
||||
await mkdir(join(root, candidatePath), { recursive: true });
|
||||
@@ -2180,7 +2180,7 @@ describe("remote preinstalled executable discovery", () => {
|
||||
const shim =
|
||||
'#!/bin/sh\ncat "$(dirname "$0")/version.txt"\nprintf "%s\\n" "$@"\n';
|
||||
await writeFile(source, shim, { mode: 0o755 });
|
||||
await writeFile(join(installation, "version.txt"), "codex-cli 0.156.0\n");
|
||||
await writeFile(join(installation, "version.txt"), "codex-cli 0.160.0\n");
|
||||
// Existing deployments may already have the old symlink. Never write
|
||||
// through it into the shared installation while upgrading the launcher.
|
||||
await symlink(source, target);
|
||||
@@ -2193,7 +2193,7 @@ describe("remote preinstalled executable discovery", () => {
|
||||
execFileSync(target, ["--version", "argument with 'quotes'"], {
|
||||
encoding: "utf8",
|
||||
}),
|
||||
).toBe("codex-cli 0.156.0\n--version\nargument with 'quotes'\n");
|
||||
).toBe("codex-cli 0.160.0\n--version\nargument with 'quotes'\n");
|
||||
expect(await readFile(source, "utf8")).toBe(shim);
|
||||
}
|
||||
expect(await readdir(join(root, "workspace", "bin"))).toEqual(["codex"]);
|
||||
@@ -11177,7 +11177,7 @@ describe("runnerd provider runtime wiring", () => {
|
||||
}), stderr: "",
|
||||
};
|
||||
if (command.args?.[0] === "--version") return {
|
||||
exitCode: 0, timedOut: false, stdout: "codex-cli 0.156.0", stderr: "",
|
||||
exitCode: 0, timedOut: false, stdout: "codex-cli 0.160.0", stderr: "",
|
||||
};
|
||||
if (command.args?.[1]?.includes("base64")) return {
|
||||
exitCode: 1, timedOut: false, stdout: "", stderr: "",
|
||||
@@ -11254,7 +11254,7 @@ describe("runnerd provider runtime wiring", () => {
|
||||
}), stderr: "",
|
||||
};
|
||||
if (command.args?.[0] === "--version") return {
|
||||
exitCode: 0, timedOut: false, stdout: "codex-cli 0.156.0", stderr: "",
|
||||
exitCode: 0, timedOut: false, stdout: "codex-cli 0.160.0", stderr: "",
|
||||
};
|
||||
if (command.args?.[2] === "paperclip-runner-launch") {
|
||||
throw new Error("fixture_stop_after_launch_staging");
|
||||
@@ -11336,10 +11336,10 @@ describe("runnerd provider runtime wiring", () => {
|
||||
|
||||
it.each([
|
||||
...["current", "preinstalled-exact", "preinstalled-mismatch", "preinstalled-error", "preinstalled-timeout", "stale", "missing", "retained", "retained-mismatch", "retained-error", "retained-timeout", "retained-explicit"]
|
||||
.map((image) => ({ image, version: "0.156.0", compatible: true })),
|
||||
...["0.149.0", "0.149.1", "0.153.4", "0.156.1"]
|
||||
.map((image) => ({ image, version: "0.160.0", compatible: true })),
|
||||
...["0.149.0", "0.149.1", "0.153.4", "0.156.0", "0.160.1"]
|
||||
.map((version) => ({ image: "current", version, compatible: true })),
|
||||
...["0.148.9", "0.157.0", "1.0.0", "0.156.0-alpha.1", "unknown"]
|
||||
...["0.148.9", "0.161.0", "1.0.0", "0.160.0-alpha.1", "unknown"]
|
||||
.map((version) => ({ image: "current", version, compatible: false })),
|
||||
])("uses shared Codex and the server-owned replacement artifact (image=$image, Codex=$version)", async ({ image, version, compatible }) => {
|
||||
const retained = image.startsWith("retained");
|
||||
@@ -11433,7 +11433,7 @@ describe("runnerd provider runtime wiring", () => {
|
||||
controlPlaneRegistration: (authority: unknown) => Promise<unknown>;
|
||||
};
|
||||
await expect(transport.controlPlaneRegistration({})).rejects.toThrow(
|
||||
compatible ? "reached-preinstalled-codex-verification" : "runner_remote_provider_artifact_incompatible: supported Codex versions >=0.149.0 <0.157.0",
|
||||
compatible ? "reached-preinstalled-codex-verification" : "runner_remote_provider_artifact_incompatible: supported Codex versions >=0.149.0 <0.161.0",
|
||||
);
|
||||
if (!compatible) {
|
||||
expect(syncIn).not.toHaveBeenCalled();
|
||||
@@ -11441,7 +11441,7 @@ describe("runnerd provider runtime wiring", () => {
|
||||
expect(onLog).not.toHaveBeenCalledWith("stderr", expect.stringContaining("using compatible Codex"));
|
||||
return;
|
||||
}
|
||||
if (version !== "0.156.0") {
|
||||
if (version !== "0.160.0") {
|
||||
expect(onLog).toHaveBeenCalledWith("stderr", expect.stringContaining(`using compatible Codex ${version}`));
|
||||
}
|
||||
if (needsReplacement) {
|
||||
|
||||
@@ -9407,8 +9407,8 @@ const RUNNERD_BINARY_CONTRACT_VERSION = 2;
|
||||
const REMOTE_PROVIDER_PACK_SCHEMA = "paperclip-runner/remote-provider-pack/v1";
|
||||
const REMOTE_PROVIDER_PACK_PINS = {
|
||||
nodeMinimum: "24.11.0",
|
||||
codex: "0.156.0",
|
||||
opencode: "1.18.32",
|
||||
codex: "0.160.0",
|
||||
opencode: "1.18.34",
|
||||
acpx: "0.13.1",
|
||||
claudeAcp: "0.73.0",
|
||||
codexAcp: "1.6.2",
|
||||
|
||||
@@ -15,7 +15,7 @@ import {
|
||||
} from "../provider-profile-qualification.js";
|
||||
import { resolveAcpxQualification, type AcpxQualificationCandidate } from "./acpx-qualification.js";
|
||||
|
||||
export const QUALIFIED_OPENCODE_RUNNER_VERSION = "1.18.32" as const;
|
||||
export const QUALIFIED_OPENCODE_RUNNER_VERSION = "1.18.34" as const;
|
||||
export const DEFAULT_OPENCODE_RUNNER_MODEL =
|
||||
"openrouter/deepseek/deepseek-v4-flash-0731" as const;
|
||||
export const CLAUDE_MANAGED_BETA_VERSION = "managed-agents-2026-04-01" as const;
|
||||
|
||||
@@ -41,7 +41,7 @@ describe("Paperclip Runner Codex configuration", () => {
|
||||
const html = renderRunner({ provider: "codex" });
|
||||
|
||||
expect(html).toContain('<option value="codex" selected="">Codex</option>');
|
||||
expect(html).toContain("OpenCode 1.18.32");
|
||||
expect(html).toContain("OpenCode 1.18.34");
|
||||
expect(html).toContain('<option value="acpx">ACP agents</option>');
|
||||
expect(html).not.toContain("Permission mode");
|
||||
expect(html).not.toContain("Ask when requested");
|
||||
@@ -58,7 +58,7 @@ describe("Paperclip Runner Codex configuration", () => {
|
||||
});
|
||||
|
||||
expect(html).toContain(
|
||||
'<option value="opencode" selected="">OpenCode 1.18.32</option>',
|
||||
'<option value="opencode" selected="">OpenCode 1.18.34</option>',
|
||||
);
|
||||
expect(html).toContain("Full auto (allow)");
|
||||
expect(html).toContain('aria-label="Permission mode"');
|
||||
|
||||
@@ -231,7 +231,7 @@ export function CodexLocalConfigFields({
|
||||
}}
|
||||
>
|
||||
<option value="codex">Codex</option>
|
||||
<option value="opencode">OpenCode 1.18.32</option>
|
||||
<option value="opencode">OpenCode 1.18.34</option>
|
||||
<option value="claude_managed">Claude Managed</option>
|
||||
<option value="aws_agentcore">AWS AgentCore</option>
|
||||
<option value="acpx">ACP agents</option>
|
||||
|
||||
@@ -4,7 +4,7 @@ import { describe, expect, it } from "vitest";
|
||||
import { codexReasoningEffortOptions } from "./codex-reasoning-effort";
|
||||
|
||||
describe("codexReasoningEffortOptions", () => {
|
||||
it.each(["gpt-6-astra", "gpt-6-sol", "gpt-5.6-sol", "gpt-5.6-terra"])("exposes only the supported %s reasoning efforts", (model) => {
|
||||
it.each(["gpt-6-astra", "gpt-6.1-sol", "gpt-6-sol", "gpt-5.6-sol", "gpt-5.6-terra"])("exposes only the supported %s reasoning efforts", (model) => {
|
||||
expect(codexReasoningEffortOptions(model)).toEqual([
|
||||
{ value: "", label: "Default" },
|
||||
{ value: "low", label: "Low" },
|
||||
|
||||
Reference in new issue
Block a user