codex 2.3.0__tar.gz → 2.3.1__tar.gz

codex-2.3.1/.dockerignore

@@ -0,0 +1,43 @@
+__pycache__
+!dist
+!docker/debian.sources
+.*cache
+.circleci
+.claude
+.coverage*
+.docker-token
+.DS_Store
+.env*
+.eslintcache
+.ghrc-token
+.git
+.mypy_cache
+.picopt_timestamp
+.picopt_treestamps.yaml
+.pypi-token
+.pytest_cache
+.ropeproject
+.ruff_cache
+.venv*
+*.egg-info
+*.py[co]
+*~
+*Dockerfile
+benchmark
+cache
+codex/static
+codex/static_build
+comics
+config
+dev*
+docker-compose*
+docker*
+MANIFEST
+monkeytype.sqlite3
+NEWS
+node_modules
+site
+test-results
+TODO.md
+update-builder-requirement.sh
+version.sh

codex-2.3.1/.github/workflows/ci.yml

@@ -0,0 +1,341 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    types: [opened, synchronize]
+    branches: [main, develop]
+
+env:
+  CI_IMAGE: ghcr.io/${{ github.repository }}-ci
+  CI_IMAGE_TAG: ghcr.io/${{ github.repository }}-ci:latest
+  CI_CONTAINER: ${{ github.event.repository.name }}-ci
+  IMAGE: ghcr.io/${{ github.repository }}
+  HUB_IMAGE: docker.io/ajslater/codex
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  # ---------------------------------------------------------------------------
+  # Lint, test, and build the Python wheel (amd64 only)
+  # ---------------------------------------------------------------------------
+  test:
+    name: Lint, Test & Build Dist
+    runs-on: ubuntu-24.04
+    if: |
+      github.ref_name == 'main' && github.event_name == 'push' ||
+      github.base_ref == 'main' ||
+      (github.base_ref == 'develop' && (github.head_ref == 'pre-release' || startsWith(github.head_ref, 'v')))
+    permissions:
+      contents: read
+      packages: write
+      checks: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          # Only fetch full history for the main push gate
+          fetch-depth: ${{ (github.ref_name == 'main' && github.event_name == 'push') && 0 || 1 }}
+
+      - name: Check for Redundant Tests & Existing Dist
+        id: gate
+        if: github.ref_name == 'main' && github.event_name == 'push'
+        env:
+          GH_REPO: ${{ github.repository }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: bin/ci-download-dist-if-identical.sh
+
+      - name: Set up Docker Buildx
+        if: steps.gate.outputs.dist_found != 'true'
+        uses: docker/setup-buildx-action@v4
+
+      - name: Log in to GHCR
+        if: steps.gate.outputs.dist_found != 'true'
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build dist-builder image
+        id: build-ci
+        if: steps.gate.outputs.dist_found != 'true'
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          target: codex-ci
+          load: true
+          tags: ${{ env.CI_IMAGE_TAG }}
+
+          cache-from: type=registry,ref=${{ env.CI_IMAGE }}:cache
+          cache-to: type=registry,ref=${{ env.CI_IMAGE }}:cache,mode=max
+
+      - name: Start Services
+        id: start-services
+        if: steps.build-ci.outcome == 'success'
+        run: |
+          mkdir -p dist test-results
+          docker compose up -d ci
+
+      - name: Lint
+        id: lint
+        if: steps.start-services.outcome == 'success'
+        run: docker exec ${{ env.CI_CONTAINER }} make lint
+
+      - name: Build for Tests & Dist
+        id: build-for-tests
+        if: steps.lint.outcome == 'success'
+        run: docker exec ${{ env.CI_CONTAINER }} make build-choices build-frontend collectstatic
+
+      - name: Tests
+        id: tests
+        if: steps.build-for-tests.outcome == 'success'
+        run: docker exec ${{ env.CI_CONTAINER }} make test-frontend django-check test-python -o build-choices
+
+      - name: Upload Test Results
+        id: upload-tests
+        if: "!cancelled() && steps.tests.outcome != 'skipped'"
+        uses: actions/upload-artifact@v7
+        with:
+          name: test-results
+          path: "**/test-results/pytest/*.xml"
+
+      - name: Publish Test Report
+        if: "!cancelled() && steps.upload-tests.outcome == 'success'"
+        uses: mikepenz/action-junit-report@v6
+        with:
+          report_paths: "**/test-results/pytest/*.xml"
+
+      - name: Build Distribution
+        id: build-dist
+        if: steps.tests.outcome == 'success'
+        run: docker exec ${{ env.CI_CONTAINER }} make build-only
+
+      - name: Stop Services
+        if: steps.start-services.outcome == 'success'
+        run: |
+          touch .env.package # hack because down is too promiscuous
+          docker compose down
+
+      - name: Upload dist artifact
+        if: "!cancelled() && steps.gate.outputs.dist_found == 'true' || steps.build-dist.outcome =='success'"
+        uses: actions/upload-artifact@v7
+        with:
+          name: python-dist
+          path: dist/
+          retention-days: 2
+
+      - name: Discord notification (Test Results)
+        if: "!cancelled() && false"
+        uses: sarisia/actions-status-discord@v1
+        with:
+          webhook: ${{ secrets.DISCORD_WEBHOOK }}
+          status: ${{ job.status }}
+          title: Lint & Test
+          description: "Tests for ${{ github.ref_name }} #${{ github.run_number }} ${{ job.status == 'success' && 'passed' || 'FAILED' }}"
+          color: ${{ job.status == 'success' && '0x28a745' || '0xd73a49' }}
+          url: "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+
+  # ---------------------------------------------------------------------------
+  # Build per-arch Docker images natively
+  # ---------------------------------------------------------------------------
+  build:
+    name: Build Image (${{ matrix.arch }})
+    needs: test
+    if: github.event_name == 'push' ||
+      (github.base_ref == 'develop' && github.head_ref == 'pre-release')
+    strategy:
+      matrix:
+        include:
+          - arch: amd64
+            runner: ubuntu-24.04
+          - arch: arm64
+            runner: ubuntu-24.04-arm
+    runs-on: ${{ matrix.runner }}
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Download dist artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: python-dist
+          path: dist/
+
+      - name: Set Build Context
+        run: |
+          VERSION=$(grep -Po '(?<=^version = ")[^"]+' pyproject.toml)
+          echo "CODEX_VERSION=${VERSION}" >> "$GITHUB_ENV"
+          echo "CODEX_WHEEL=$(find dist -name '*.whl' -print0 | xargs basename)" >> "$GITHUB_ENV"
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          platforms: linux/${{ matrix.arch }}
+          push: true
+          build-args: |
+            CODEX_VERSION=${{ env.CODEX_VERSION }}
+            CODEX_WHEEL=${{ env.CODEX_WHEEL }}
+          tags: ${{ env.IMAGE }}:${{ env.CODEX_VERSION }}-${{ matrix.arch }}
+          cache-from: type=gha,scope=build-${{ matrix.arch }}
+          cache-to: type=gha,scope=build-${{ matrix.arch }},mode=max
+
+  # ---------------------------------------------------------------------------
+  # Create multi-arch manifest and publish
+  # ---------------------------------------------------------------------------
+  deploy:
+    name: Deploy
+    needs: build
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v8.0.0
+
+      - name: Download dist artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: python-dist
+          path: dist/
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create and push manifest
+        run: |
+          VERSION=$(uv version --short)
+          TAG_ARGS=("-t" "${IMAGE}:${VERSION}")
+
+          # Positive regex check for Final versions (e.g., 1.2.3)
+          if [[ $VERSION =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            TAG_ARGS+=("-t" "${IMAGE}:latest")
+          fi
+
+          docker buildx imagetools create \
+            --annotation "index:org.opencontainers.image.title=Codex" \
+            --annotation "index:org.opencontainers.image.description=Codex Comic Server" \
+            --annotation "index:org.opencontainers.image.version=${VERSION}" \
+            --annotation "index:org.opencontainers.image.authors=AJ Slater <aj@slater.net>" \
+            --annotation "index:org.opencontainers.image.url=https://codex-reader.app" \
+            --annotation "index:org.opencontainers.image.source=https://github.com/ajslater/codex" \
+            --annotation "index:org.opencontainers.image.licenses=GPL-3.0-only" \
+            "${TAG_ARGS[@]}" \
+            "${IMAGE}:${VERSION}-amd64" \
+            "${IMAGE}:${VERSION}-arm64"
+
+      - name: Publish to PyPI
+        run: uv publish dist/*
+        env:
+          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_TOKEN }}
+
+      - name: Discord notification (Deploy Results)
+        if: "!cancelled() && false"
+        uses: sarisia/actions-status-discord@v1
+        with:
+          webhook: ${{ secrets.DISCORD_WEBHOOK }}
+          status: ${{ job.status }}
+          title: Deploy
+          description: "Deploy ${{ github.ref_name }} #${{ github.run_number }} ${{ job.status == 'success' && 'succeeded' || 'FAILED' }}"
+          color: ${{ job.status == 'success' && '0x28a745' || '0xd73a49' }}
+          url: "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+
+  # ---------------------------------------------------------------------------
+  # Republish final releases to Docker Hub as a deprecated derivative of the
+  # ghcr.io image: identical layers, one ENV and two labels, so stranded
+  # docker.io users get the in-app "move to ghcr.io" warning.
+  # ---------------------------------------------------------------------------
+  deploy-hub:
+    name: Deploy Deprecated Docker Hub Image
+    needs: deploy
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+    # DOCKER_USER / DOCKER_PASS are the Docker Hub credentials the old CI
+    # and bin/docker-tag-latest.sh already use. The secrets context is not
+    # allowed in a step if; a job env is. Forks and pull requests receive no
+    # secrets and skip cleanly, and deleting DOCKER_PASS is the switch that
+    # ends Docker Hub publishing.
+    env:
+      DOCKERHUB_ENABLED: ${{ secrets.DOCKER_PASS != '' }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Check for a final version
+        id: version
+        run: |
+          VERSION=$(grep -Po '(?<=^version = ")[^"]+' pyproject.toml)
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+          # The same rule that gives the ghcr.io index its latest tag.
+          # Alphas never reach Docker Hub: nothing prunes them there and
+          # the only tag stranded users pull is latest.
+          if [[ $VERSION =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "final=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Log in to Docker Hub
+        if: env.DOCKERHUB_ENABLED == 'true' && steps.version.outputs.final == 'true'
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKER_USER }}
+          password: ${{ secrets.DOCKER_PASS }}
+
+      - name: Build and push deprecated image
+        if: env.DOCKERHUB_ENABLED == 'true' && steps.version.outputs.final == 'true'
+        env:
+          VERSION: ${{ steps.version.outputs.version }}
+        run: |
+          # No RUN steps: buildx rewrites the config blob per platform and
+          # copies the ghcr.io layers across unchanged, so no QEMU is needed.
+          docker buildx build \
+            --file hub.Dockerfile \
+            --platform linux/amd64,linux/arm64 \
+            --build-arg "CODEX_VERSION=${VERSION}" \
+            --provenance=false \
+            --sbom=false \
+            --annotation "index:org.opencontainers.image.title=Codex" \
+            --annotation "index:org.opencontainers.image.description=DEPRECATED: this image has moved to ghcr.io/ajslater/codex" \
+            --annotation "index:org.opencontainers.image.version=${VERSION}" \
+            --annotation "index:org.opencontainers.image.authors=AJ Slater <aj@slater.net>" \
+            --annotation "index:org.opencontainers.image.url=https://codex-reader.app" \
+            --annotation "index:org.opencontainers.image.source=https://github.com/ajslater/codex" \
+            --annotation "index:org.opencontainers.image.licenses=GPL-3.0-only" \
+            --annotation "index:org.opencontainers.image.base.name=${IMAGE}:${VERSION}" \
+            --annotation "index:org.opencontainers.image.deprecated=true" \
+            --tag "${HUB_IMAGE}:${VERSION}" \
+            --tag "${HUB_IMAGE}:latest" \
+            --push \
+            .

codex-2.3.1/.gitignore

@@ -0,0 +1,104 @@
+__pycache__/
+__pypackages__/
+__snapshots__
+.*cache
+.claude
+.coverage
+.coverage.*
+.coverage*
+.dmypy.json
+.docker-token
+.DS_Store
+.eggs/
+.env
+.env-*
+.env.package
+.env.pushover
+.eslintcache
+.ghrc-token
+.hypothesis/
+.installed.cfg
+.ipynb_checkpoints
+.mypy_cache/
+.nox/
+.npm
+.pypi-token
+.pypirc
+.pyre/
+.pytest_cache/
+.Python
+.python-version
+.ropeproject
+.ruff_cache/
+.scrapy
+.spyderproject
+.spyproject
+.tox/
+.uv-publish-env
+.venv*
+.webassets-cache
+*.cover
+*.egg
+*.egg-info/
+*.log
+*.manifest
+*.mo
+*.pot
+*.py,cover
+*.py[cod]
+*.sage.py
+*.so
+*.spec
+*~
+*$py.class
+build
+build/
+celerybeat-schedule
+celerybeat.pid
+codex/static_build/
+codex/static/
+comics
+config
+coverage.xml
+develop-eggs/
+dist
+dist/
+dmypy.json
+docs/_build/
+downloads/
+eggs/
+env.bak/
+env/
+ENV/
+frontend/bundle-stats.html
+frontend/components.d.ts
+frontend/coverage
+frontend/src/choices/
+htmlcov/
+instance/
+ipython_config.py
+jspm_packages/
+lib/
+lib64/
+local_settings.py
+MANIFEST
+monkeytype.sqlite3
+node_modules
+node_modules/
+nosetests.xml
+parts/
+pip-delete-this-directory.txt
+pip-log.txt
+pip-wheel-metadata/
+profile_default/
+sdist/
+share/python-wheels/
+site/
+target/
+tasks/
+test-results
+TODO.md
+var/
+venv.bak/
+venv/
+wheels/