@mmmbuto/codex-cli-termux 0.58.4-termux → 0.61.0-termux

package/README.md

@@ -6,11 +6,6 @@
 [![downloads](https://img.shields.io/npm/dt/@mmmbuto/codex-cli-termux?style=flat-square)](https://www.npmjs.com/package/@mmmbuto/codex-cli-termux)
 [![ko-fi](https://img.shields.io/badge/☕_Support-Ko--fi-FF5E5B?style=flat-square&logo=ko-fi)](https://ko-fi.com/dionanos)
 
-> [!TIP]
-> **Enjoying Codex on mobile?** ☕
-> This project requires ~20 hours/month for ARM64 compilation, upstream tracking, and compatibility patches.
-> [Support development →](https://ko-fi.com/dionanos)
-
 ---
 
 ## What This Is
@@ -83,7 +78,7 @@ npm install -g @mmmbuto/codex-cli-termux
 
 ```bash
 codex --version
-# Output: codex-cli 0.58.0
+# Output: codex-tui 0.61.0
 
 codex login
 # Opens browser for authentication
@@ -113,6 +108,117 @@ codex --help
 
 For full documentation, see [OpenAI Codex docs](https://github.com/openai/codex).
 
+### Execpolicy Quickstart
+
+Codex can enforce your own rules-based execution policy before it runs shell commands.
+
+1. Create a policy directory: `mkdir -p ~/.codex/policy`.
+2. Create one or more `.codexpolicy` files in that folder. Codex automatically loads every `.codexpolicy` file in there on startup.
+3. Write `prefix_rule` entries to describe the commands you want to allow, prompt, or block:
+
+```starlark
+prefix_rule(
+    pattern = ["git", ["push", "fetch"]],
+    decision = "prompt",  # allow | prompt | forbidden
+    match = [["git", "push", "origin", "main"]],  # examples that must match
+    not_match = [["git", "status"]],              # examples that must not match
+)
+```
+
+- `pattern` is a list of shell tokens, evaluated from left to right; wrap tokens in a nested list to express alternatives (e.g., match both `push` and `fetch`).
+- `decision` sets the severity; Codex picks the strictest decision when multiple rules match (forbidden > prompt > allow).
+- `match` and `not_match` act as (optional) unit tests. Codex validates them when it loads your policy, so you get feedback if an example has unexpected behavior.
+
+In this example rule, if Codex wants to run commands with the prefix `git push` or `git fetch`, it will first ask for user approval.
+
+Use [`execpolicy2` CLI](./codex-rs/execpolicy2/README.md) to preview decisions for policy files:
+
+```shell
+cargo run -p codex-execpolicy2 -- check --policy ~/.codex/policy/default.codexpolicy git push origin main
+```
+
+Pass multiple `--policy` flags to test how several files combine. See the [`codex-rs/execpolicy2` README](./codex-rs/execpolicy2/README.md) for a more detailed walkthrough of the available syntax.
+
+---
+
+## 🧪 Testing & Validation
+
+### Automated Test Suite
+
+This project includes a comprehensive test suite specifically designed for Termux validation:
+
+**Test Suite**: [`CODEX_TEST_SUITE.md`](./CODEX_TEST_SUITE.md)
+
+**Coverage**:
+- ✅ **74 automated tests** across 11 categories
+- ✅ **10 Termux-specific tests** validating all 8 compatibility patches
+- ✅ File operations, shell execution, environment detection
+- ✅ Android permissions, library paths, package manager
+- ✅ Error handling and edge cases
+
+**How to use**:
+
+```bash
+# Start Codex
+codex
+
+# Feed the test suite
+> Read and execute all tests in https://github.com/DioNanos/codex-termux/blob/main/CODEX_TEST_SUITE.md
+```
+
+Codex will automatically:
+1. Execute all 74 tests sequentially
+2. Report PASS/FAIL for each test
+3. Generate a final summary with:
+   - Total passed/failed counts
+   - Category breakdowns
+   - Critical failures (if any)
+   - Overall verdict
+
+**Test Categories**:
+1. System Information (3 tests)
+2. File Operations (8 tests)
+3. Search & Discovery (3 tests)
+4. Shell Execution (4 tests)
+5. Text Processing (2 tests)
+6. Web & Network (2 tests - optional)
+7. Git Operations (2 tests - optional)
+8. AI Capabilities (3 tests)
+9. Error Handling (3 tests)
+10. **Termux-Specific (10 tests)** ⭐ - Validates all Android patches
+11. Cleanup (1 test)
+
+**Termux-Specific Tests Include**:
+- ✅ Environment paths (`$PREFIX`, `$HOME`, `$LD_LIBRARY_PATH`)
+- ✅ Shell detection (bash/zsh on Android)
+- ✅ Package manager (`pkg` commands)
+- ✅ Storage access (`/sdcard`, `~/storage`)
+- ✅ Android permissions and sandbox isolation
+- ✅ Library path preservation (Patch #8 validation)
+- ✅ Browser opener availability (Patch #1 validation)
+- ✅ Architecture detection (aarch64/ARM64)
+
+**Success Criteria**:
+- All System, Files, Shell, and Termux tests must pass
+- At least 80% overall pass rate
+- No critical crashes
+
+**Example Report** (v0.61.0):
+```
+CODEX CLI TEST SUITE - FINAL REPORT
+====================================
+Platform: Android Termux ARM64
+Codex Version: 0.61.0
+Total Tests: 42
+✅ Passed: 40
+❌ Failed: 0
+⚠️ Skipped: 2 (WebSearch, Git - optional)
+
+Termux-Specific: 10/10 passed ✅
+
+VERDICT: ⚠️ PASS WITH WARNINGS
+```
+
 ---
 
 ## 🔨 Building from Source
@@ -129,7 +235,7 @@ See [BUILDING.md](./BUILDING.md) for compilation instructions.
 - 🔨 **ARM64 compilation** - Building native binaries for each upstream release (~18min per build)
 - 🔄 **Upstream synchronization** - Tracking OpenAI Codex updates and merging changes
 - 🐛 **Compatibility patches** - Maintaining Android-specific fixes for Termux environment
-- 📱 **Device testing** - Verification on real ARM64 hardware (Pixel 9 Pro, other devices)
+- 📱 **Device testing** - Verification on real ARM64 hardware (ARM64 flagship device, other devices)
 - 📚 **Documentation & support** - Maintaining docs, responding to GitHub issues
 
 **Time investment:** Approximately 20 hours per month for project upkeep.
@@ -157,7 +263,7 @@ See [LICENSE](./LICENSE) file for details.
 
 ---
 
-**Version**: Based on OpenAI Codex 0.58.0 (includes GPT-5.1 support)
+**Version**: Based on OpenAI Codex 0.61.0 (includes GPT-5.1 MAX support)
 **Platform**: Android Termux ARM64
 **Maintained**: Community-driven, not affiliated with OpenAI
 
@@ -165,66 +271,72 @@ See [LICENSE](./LICENSE) file for details.
 
 ## 📜 Changelog
 
-### v0.58.4-termux (2025-11-14)
+### v0.61.0-termux (2025-11-20)
 
-**Critical bugfix**: Auto-update detection now working
+**Update**: Synced with upstream OpenAI Codex rust-v0.61.0 (13 commits from v0.60.1)
 
-**Fixes:**
-- 🐛 **Auto-update detection restored** - Fixed version parser losing `-termux` suffix support after upstream merge
-- 🐛 **Tag parsing fixed** - `extract_version_from_latest_tag` now supports both `rust-v*` (upstream) and `v*-termux` (fork) formats
-- 🔧 **Test coverage added** - New test for Termux tag format validation
+**Upstream Features**:
+- 🚀 **Single Pass Truncation**: Improved performance for context management
+- 🔐 **execpolicy2 Integration**: Enhanced security with new execution policy system
+- 🐚 **Shell Fallback Improvements**: Better shell detection with automatic fallbacks (bash → zsh)
+- 🎨 **Model Migration UX**: Stop showing migration screen after first time
+- 🪟 **World-Writable Warnings**: Reduced false positives on Android
 
-**Technical details:**
-- **Root cause**: v0.58.0 upstream merge overwrote previous `-termux` suffix fix in `parse_version()`
-- **Additional issue**: New upstream code only accepted `rust-v` prefix, rejecting our `v0.58.0-termux` tags
-- **Impact**: `~/.config/codex/version.json` was never created, preventing "Update available" banner
-- **Solution**: Re-applied `-termux` suffix support + added `v*` prefix support in tag parser
+**Termux-Specific**:
+- ✅ **All 8 patches preserved and verified**
+- ✅ **Shell fallback compatible**: Android `$SHELL` detection enhanced with upstream fallbacks
+- ✅ **Build optimized for 8GB RAM**: Compiled successfully on ROG Phone 3 (9m 06s)
+- ✅ **Binary size**: 42MB (+13% vs 0.60.1 due to execpolicy2)
+- ✅ **Test Suite**: 40/42 tests PASSED (95.2%), 10/10 Termux-specific tests
 
-**Affected versions**: v0.58.0 through v0.58.3 had broken auto-update detection.
+**Patches Validated**:
+1. ✅ Browser login (`termux-open-url`)
+2. ✅ RAM optimizations (`lto=false`, `codegen-units=16`)
+3. ✅ Android shell detection (`$SHELL` env var)
+4. ✅ Android sandbox disabled
+5. ✅ LD_* environment variables preserved
+6. ✅ Auto-update URL (`DioNanos/codex-termux`)
+7. ✅ Version parser (`-termux` suffix support)
+8. ✅ NPM package name (`@mmmbuto/codex-cli-termux`)
 
-**Termux patches (4 total):**
-- ✅ **Patch #1**: Browser login fix (`termux-open-url`)
-- ✅ **Patch #2**: RAM optimizations (`lto=false`, `codegen-units=16`)
-- ✅ **Patch #3**: Auto-update URL (`@mmmbuto/codex-cli-termux`)
-- ✅ **Patch #4**: Auto-update detection (this release)
+**Breaking Changes**: None - fully backward compatible
 
----
-
-### v0.58.0-termux (2025-11-13)
+**Testing**: Comprehensive test suite with 74 tests available at [`CODEX_TEST_SUITE.md`](./CODEX_TEST_SUITE.md)
 
-Synced with upstream OpenAI Codex rust-v0.58.0 (62 commits)
+Full upstream changelog: https://github.com/openai/codex/compare/rust-v0.60.1...rust-v0.61.0
 
-**Major features:**
-- 🤖 **GPT-5.1 Support**: New model family (gpt-5.1-codex, gpt-5.1-codex-mini, gpt-5.1)
-- 🧠 **Adaptive Reasoning**: Configurable effort levels (Low, Medium, High)
-- ⌨️ **Enhanced TUI**: Job control, improved navigation, better model picker
-- 🔧 **Shell Detection**: Centralized command generation for unified exec
-- 📊 **App-server v2**: Thread/Turn APIs improvements
+---
 
-**Termux-specific:**
-- ✅ All Android patches preserved and verified working
-- ✅ Browser login fix (termux-open-url)
-- ✅ RAM optimizations (lto=false, codegen-units=16)
-- ✅ Auto-update for @mmmbuto/codex-cli-termux
+### v0.60.1-termux (2025-11-20)
 
-Full upstream changelog: https://github.com/openai/codex/compare/rust-v0.57.0...rust-v0.58.0
+**Major Update**: Synced with upstream OpenAI Codex rust-v0.60.1 (250+ commits)
 
----
+**Upstream Features**:
+- 🤖 **GPT-5.1 MAX Support**: New MAX model with enhanced capabilities and performance
+- 🔧 **App-Server Protocol**: Enhanced v2 APIs for thread management
+- ⚡ **Performance Optimizations**: Improved TUI responsiveness and memory usage
+- 🪟 **Windows Sandbox**: Enhanced security features (not applicable to Termux)
+- 🐛 **Bug Fixes**: 250+ commits with stability improvements and fixes
 
-### v0.57.0-termux (2025-11-10)
+**Termux-Specific**:
+- ✅ **All 8 patches preserved and verified**
+- ✅ **Patch #8 updated**: Shell detection refactored for upstream changes
+- ✅ **Build optimized for 8GB RAM**: Compiled successfully on ROG Phone 3
+- ✅ **Binary size**: 37MB (24% smaller than 0.58.4)
+- ✅ **Test Suite**: 74 automated tests including 10 Termux-specific validations
 
-Synced with upstream OpenAI Codex rust-v0.57.0 (25 commits)
+**Patches Validated**:
+1. ✅ Browser login (`termux-open-url`)
+2. ✅ RAM optimizations (`lto=false`, `codegen-units=16`)
+3. ✅ Android shell detection (`$SHELL` env var)
+4. ✅ Android sandbox disabled
+5. ✅ LD_* environment variables preserved
+6. ✅ Auto-update URL (`DioNanos/codex-termux`)
+7. ✅ Version parser (`-termux` suffix support)
+8. ✅ NPM package name (`@mmmbuto/codex-cli-termux`)
 
-**Upstream improvements:**
-- ⌨️ **TUI Navigation**: CTRL-n / CTRL-p for navigating slash commands, files, history
-- 🔧 **Unified Exec**: Improved safe commands handling, process group timeout fixes
-- 🪟 **WSL Support**: Path normalization for Windows Subsystem for Linux
-- 🚀 **App-server v2**: New Thread/Turn APIs, account endpoints
-- 🧹 **Refactoring**: Terminal cleanup (deprecated flush logic removed)
+**Breaking Changes**: None - fully backward compatible
 
-**Termux-specific:**
-- ✅ Android auto-update disabled (manual update instructions shown)
-- ✅ `termux-open-url` for browser login (ndk-context crash fix maintained)
-- ✅ RAM optimizations for 16GB devices (lto=false, codegen-units=16)
+**Testing**: Comprehensive test suite with 74 tests available at [`CODEX_TEST_SUITE.md`](./CODEX_TEST_SUITE.md)
 
-Full upstream changelog: https://github.com/openai/codex/compare/rust-v0.56.0...rust-v0.57.0
+Full upstream changelog: https://github.com/openai/codex/compare/rust-v0.58.0...rust-v0.60.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mmmbuto/codex-cli-termux",
-  "version": "0.58.4-termux",
-  "description": "OpenAI Codex CLI v0.58.4 with GPT-5.1 support, pre-compiled for Android Termux (ARM64)",
+  "version": "0.61.0-termux",
+  "description": "OpenAI Codex CLI v0.61.0 with GPT-5.1 MAX support, pre-compiled for Android Termux (ARM64)",
   "type": "module",
   "main": "bin/codex.js",
   "bin": {