@mmmbuto/codex-cli-termux 0.60.1-termux → 0.61.1-termux

package/README.md

@@ -6,8 +6,6 @@
 [![downloads](https://img.shields.io/npm/dt/@mmmbuto/codex-cli-termux?style=flat-square)](https://www.npmjs.com/package/@mmmbuto/codex-cli-termux)
 [![ko-fi](https://img.shields.io/badge/☕_Support-Ko--fi-FF5E5B?style=flat-square&logo=ko-fi)](https://ko-fi.com/dionanos)
 
----
-> 💡 Like CLI tools? Check out my next project, **NexusCLI** — an open, developer-focused AI terminal cockpit: https://github.com/DioNanos/NexusCLI
 ---
 
 ## What This Is
@@ -80,7 +78,7 @@ npm install -g @mmmbuto/codex-cli-termux
 
 ```bash
 codex --version
-# Output: codex-tui 0.60.1
+# Output: codex-tui 0.61.0
 
 codex login
 # Opens browser for authentication
@@ -110,6 +108,37 @@ codex --help
 
 For full documentation, see [OpenAI Codex docs](https://github.com/openai/codex).
 
+### Execpolicy Quickstart
+
+Codex can enforce your own rules-based execution policy before it runs shell commands.
+
+1. Create a policy directory: `mkdir -p ~/.codex/policy`.
+2. Create one or more `.codexpolicy` files in that folder. Codex automatically loads every `.codexpolicy` file in there on startup.
+3. Write `prefix_rule` entries to describe the commands you want to allow, prompt, or block:
+
+```starlark
+prefix_rule(
+    pattern = ["git", ["push", "fetch"]],
+    decision = "prompt",  # allow | prompt | forbidden
+    match = [["git", "push", "origin", "main"]],  # examples that must match
+    not_match = [["git", "status"]],              # examples that must not match
+)
+```
+
+- `pattern` is a list of shell tokens, evaluated from left to right; wrap tokens in a nested list to express alternatives (e.g., match both `push` and `fetch`).
+- `decision` sets the severity; Codex picks the strictest decision when multiple rules match (forbidden > prompt > allow).
+- `match` and `not_match` act as (optional) unit tests. Codex validates them when it loads your policy, so you get feedback if an example has unexpected behavior.
+
+In this example rule, if Codex wants to run commands with the prefix `git push` or `git fetch`, it will first ask for user approval.
+
+Use [`execpolicy2` CLI](./codex-rs/execpolicy2/README.md) to preview decisions for policy files:
+
+```shell
+cargo run -p codex-execpolicy2 -- check --policy ~/.codex/policy/default.codexpolicy git push origin main
+```
+
+Pass multiple `--policy` flags to test how several files combine. See the [`codex-rs/execpolicy2` README](./codex-rs/execpolicy2/README.md) for a more detailed walkthrough of the available syntax.
+
 ---
 
 ## 🧪 Testing & Validation
@@ -174,18 +203,20 @@ Codex will automatically:
 - At least 80% overall pass rate
 - No critical crashes
 
-**Example Report**:
+**Example Report** (v0.61.0):
 ```
 CODEX CLI TEST SUITE - FINAL REPORT
 ====================================
-Total Tests: 74
-✅ Passed: 71
-❌ Failed: 1
+Platform: Android Termux ARM64
+Codex Version: 0.61.0
+Total Tests: 42
+✅ Passed: 40
+❌ Failed: 0
 ⚠️ Skipped: 2 (WebSearch, Git - optional)
 
 Termux-Specific: 10/10 passed ✅
 
-VERDICT: ✅ PASS
+VERDICT: ⚠️ PASS WITH WARNINGS
 ```
 
 ---
@@ -204,7 +235,7 @@ See [BUILDING.md](./BUILDING.md) for compilation instructions.
 - 🔨 **ARM64 compilation** - Building native binaries for each upstream release (~18min per build)
 - 🔄 **Upstream synchronization** - Tracking OpenAI Codex updates and merging changes
 - 🐛 **Compatibility patches** - Maintaining Android-specific fixes for Termux environment
-- 📱 **Device testing** - Verification on real ARM64 hardware (Pixel 9 Pro, other devices)
+- 📱 **Device testing** - Verification on real ARM64 hardware (ARM64 flagship device, other devices)
 - 📚 **Documentation & support** - Maintaining docs, responding to GitHub issues
 
 **Time investment:** Approximately 20 hours per month for project upkeep.
@@ -232,7 +263,7 @@ See [LICENSE](./LICENSE) file for details.
 
 ---
 
-**Version**: Based on OpenAI Codex 0.60.1 (includes GPT-5.1 MAX support)
+**Version**: Based on OpenAI Codex 0.61.0 (includes GPT-5.1 MAX support)
 **Platform**: Android Termux ARM64
 **Maintained**: Community-driven, not affiliated with OpenAI
 
@@ -240,6 +271,42 @@ See [LICENSE](./LICENSE) file for details.
 
 ## 📜 Changelog
 
+### v0.61.0-termux (2025-11-20)
+
+**Update**: Synced with upstream OpenAI Codex rust-v0.61.0 (13 commits from v0.60.1)
+
+**Upstream Features**:
+- 🚀 **Single Pass Truncation**: Improved performance for context management
+- 🔐 **execpolicy2 Integration**: Enhanced security with new execution policy system
+- 🐚 **Shell Fallback Improvements**: Better shell detection with automatic fallbacks (bash → zsh)
+- 🎨 **Model Migration UX**: Stop showing migration screen after first time
+- 🪟 **World-Writable Warnings**: Reduced false positives on Android
+
+**Termux-Specific**:
+- ✅ **All 8 patches preserved and verified**
+- ✅ **Shell fallback compatible**: Android `$SHELL` detection enhanced with upstream fallbacks
+- ✅ **Build optimized for 8GB RAM**: Compiled successfully on ROG Phone 3 (9m 06s)
+- ✅ **Binary size**: 42MB (+13% vs 0.60.1 due to execpolicy2)
+- ✅ **Test Suite**: 40/42 tests PASSED (95.2%), 10/10 Termux-specific tests
+
+**Patches Validated**:
+1. ✅ Browser login (`termux-open-url`)
+2. ✅ RAM optimizations (`lto=false`, `codegen-units=16`)
+3. ✅ Android shell detection (`$SHELL` env var)
+4. ✅ Android sandbox disabled
+5. ✅ LD_* environment variables preserved
+6. ✅ Auto-update URL (`DioNanos/codex-termux`)
+7. ✅ Version parser (`-termux` suffix support)
+8. ✅ NPM package name (`@mmmbuto/codex-cli-termux`)
+
+**Breaking Changes**: None - fully backward compatible
+
+**Testing**: Comprehensive test suite with 74 tests available at [`CODEX_TEST_SUITE.md`](./CODEX_TEST_SUITE.md)
+
+Full upstream changelog: https://github.com/openai/codex/compare/rust-v0.60.1...rust-v0.61.0
+
+---
+
 ### v0.60.1-termux (2025-11-20)
 
 **Major Update**: Synced with upstream OpenAI Codex rust-v0.60.1 (250+ commits)
@@ -273,29 +340,3 @@ See [LICENSE](./LICENSE) file for details.
 **Testing**: Comprehensive test suite with 74 tests available at [`CODEX_TEST_SUITE.md`](./CODEX_TEST_SUITE.md)
 
 Full upstream changelog: https://github.com/openai/codex/compare/rust-v0.58.0...rust-v0.60.1
-
----
-
-### v0.58.4-termux (2025-11-14)
-
-**Critical bugfix**: Auto-update detection now working
-
-**Fixes:**
-- 🐛 **Auto-update detection restored** - Fixed version parser losing `-termux` suffix support after upstream merge
-- 🐛 **Tag parsing fixed** - `extract_version_from_latest_tag` now supports both `rust-v*` (upstream) and `v*-termux` (fork) formats
-- 🔧 **Test coverage added** - New test for Termux tag format validation
-
-**Technical details:**
-- **Root cause**: v0.58.0 upstream merge overwrote previous `-termux` suffix fix in `parse_version()`
-- **Additional issue**: New upstream code only accepted `rust-v` prefix, rejecting our `v0.58.0-termux` tags
-- **Impact**: `~/.config/codex/version.json` was never created, preventing "Update available" banner
-- **Solution**: Re-applied `-termux` suffix support + added `v*` prefix support in tag parser
-
-**Affected versions**: v0.58.0 through v0.58.3 had broken auto-update detection.
-
-**Termux patches (4 total):**
-- ✅ **Patch #1**: Browser login fix (`termux-open-url`)
-- ✅ **Patch #2**: RAM optimizations (`lto=false`, `codegen-units=16`)
-- ✅ **Patch #3**: Auto-update URL (`@mmmbuto/codex-cli-termux`)
-- ✅ **Patch #4**: Auto-update detection (this release)
-

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mmmbuto/codex-cli-termux",
-  "version": "0.60.1-termux",
-  "description": "OpenAI Codex CLI v0.60.1 with GPT-5.1 MAX support, pre-compiled for Android Termux (ARM64)",
+  "version": "0.61.1-termux",
+  "description": "OpenAI Codex CLI v0.61.1 with GPT-5.1 MAX support, pre-compiled for Android Termux (ARM64)",
   "type": "module",
   "main": "bin/codex.js",
   "bin": {