codex 0.142.0

Author: psumbera

README.md

@@ -61,7 +61,7 @@ build/install/codex/bin/codex --version
 - The wrapper uses the official Solaris Rust standalone installer target
   `x86_64-pc-solaris`.
 - The pinned Codex source is the upstream `openai/codex` release tag
-  `rust-v0.141.0`, built from its `codex-rs/` workspace.
+  `rust-v0.142.0`, built from its `codex-rs/` workspace.
 - Set `SOLARIS_CODEX_PROXY_SETUP=/path/to/proxy.sh` if your host needs an
   environment hook before downloads.
 - The codex build clears inherited Solaris `LD_*` hardening variables because

build-codex.sh

@@ -1006,6 +1006,11 @@ export RUSTY_V8_SRC_BINDING_PATH="${V8_INSTALL_DIR}/share/src_binding.rs"
 export CARGO_PROFILE_RELEASE_LTO=false
 export CARGO_PROFILE_RELEASE_DEBUG=none
 export CARGO_PROFILE_RELEASE_STRIP=symbols
+# The upstream release profile's default opt/codegen settings can spend hours
+# in LLVM on large Codex crates on Solaris. Keep the installed binary stripped
+# and optimized, but use a profile that reliably finishes on the build hosts.
+export CARGO_PROFILE_RELEASE_OPT_LEVEL=${CARGO_PROFILE_RELEASE_OPT_LEVEL:-1}
+export CARGO_PROFILE_RELEASE_CODEGEN_UNITS=${CARGO_PROFILE_RELEASE_CODEGEN_UNITS:-16}
 export RUSTFLAGS="${RUSTFLAGS:+${RUSTFLAGS} }-C link-arg=-lstdc++ -C link-arg=-lssp"
 export LD_OPTIONS=
 export LD_EXEC_OPTIONS=
@@ -1014,9 +1019,9 @@ export LD_SHARED_OPTIONS=
 
 refresh_cached_rusty_v8_archive
 
-jobs=${SOLARIS_CODEX_JOBS:-$(psrinfo | wc -l 2>/dev/null || printf 40)}
+jobs=${SOLARIS_CODEX_JOBS:-4}
 jobs=$(printf %s "${jobs}" | tr -cd '0-9')
-[[ -n "${jobs}" ]] || jobs=40
+[[ -n "${jobs}" ]] || jobs=4
 
 log "Building codex with ${jobs} jobs"
 (

patches/codex/0002-tui-disable-unsupported-clipboard-backends-on-solaris.patch

@@ -11,10 +11,10 @@ Why it is needed:
   at runtime when clipboard actions are attempted on Solaris
 
 diff --git a/codex-rs/tui/Cargo.toml b/codex-rs/tui/Cargo.toml
-index fb094ce..8399dfe 100644
+index 6c0b83a..c231dee 100644
 --- a/codex-rs/tui/Cargo.toml
 +++ b/codex-rs/tui/Cargo.toml
-@@ -140,9 +140,9 @@ windows-sys = { version = "0.52", features = [
+@@ -141,9 +141,9 @@ windows-sys = { version = "0.52", features = [
  ] }
  winsplit = "0.1"
 

patches/codex/0004-config-host-name-use-solaris-ai-canonname-fallback.patch

@@ -12,7 +12,7 @@ Why it is needed:
   `cannot find value AI_CANONNAME in crate libc`
 
 diff --git a/codex-rs/config/src/host_name.rs b/codex-rs/config/src/host_name.rs
-index dcd34b0..b7f9936 100644
+index eb67b7b..1e93289 100644
 --- a/codex-rs/config/src/host_name.rs
 +++ b/codex-rs/config/src/host_name.rs
 @@ -10,6 +10,11 @@ use winapi_util::sysinfo::get_computer_name;
@@ -24,10 +24,10 @@ index dcd34b0..b7f9936 100644
 +#[cfg(not(target_os = "solaris"))]
 +const AI_CANONNAME_FLAG: i32 = libc::AI_CANONNAME;
 +
+ /// Returns a process-cached canonical hostname, falling back to the normalized
+ /// kernel hostname. The first call on Unix may perform blocking DNS resolution.
  pub fn host_name() -> Option<String> {
-     HOST_NAME.clone()
- }
-@@ -39,7 +44,7 @@ fn normalize_host_name(hostname: &str) -> Option<String> {
+@@ -41,7 +46,7 @@ fn normalize_host_name(hostname: &str) -> Option<String> {
  #[cfg(unix)]
  fn local_fqdn_for_hostname(hostname: &str) -> Option<String> {
      let hints = AddrInfoHints {

patches/codex/0005-state-use-rollback-journal-on-solaris.patch

@@ -13,10 +13,10 @@ Why it is needed:
   `SQLITE_IOERR_SHMMAP` / SQLite extended error code 5386
 
 diff --git a/codex-rs/state/src/runtime.rs b/codex-rs/state/src/runtime.rs
-index 2937bf0..633c0d7 100644
+index 4b1d264..6a40994 100644
 --- a/codex-rs/state/src/runtime.rs
 +++ b/codex-rs/state/src/runtime.rs
-@@ -37,6 +37,8 @@ use codex_protocol::protocol::RolloutItem;
+@@ -38,6 +38,8 @@ use codex_protocol::protocol::RolloutItem;
  use log::LevelFilter;
  use serde_json::Value;
  use sqlx::ConnectOptions;
@@ -25,7 +25,7 @@ index 2937bf0..633c0d7 100644
  use sqlx::QueryBuilder;
  use sqlx::Row;
  use sqlx::Sqlite;
-@@ -46,9 +48,13 @@ use sqlx::migrate::Migrator;
+@@ -47,9 +49,13 @@ use sqlx::migrate::Migrator;
  use sqlx::sqlite::SqliteAutoVacuum;
  use sqlx::sqlite::SqliteConnectOptions;
  use sqlx::sqlite::SqliteJournalMode;
@@ -39,7 +39,7 @@ index 2937bf0..633c0d7 100644
  use std::path::Path;
  use std::path::PathBuf;
  use std::sync::Arc;
-@@ -347,11 +353,90 @@ async fn close_sqlite_pools(pools: &[&SqlitePool]) {
+@@ -359,11 +365,90 @@ async fn close_sqlite_pools(pools: &[&SqlitePool]) {
      }
  }
 
@@ -131,7 +131,7 @@ index 2937bf0..633c0d7 100644
          .synchronous(SqliteSynchronous::Normal)
          .busy_timeout(Duration::from_secs(5))
          .log_statements(LevelFilter::Off)
-@@ -398,6 +483,9 @@ async fn open_sqlite(
+@@ -410,6 +495,9 @@ async fn open_sqlite(
      spec: RuntimeDbSpec,
      telemetry_override: Option<&dyn DbTelemetry>,
  ) -> anyhow::Result<SqlitePool> {

patches/codex/0006-arg0-tolerate-solaris-stale-temp-cleanup.patch

@@ -10,10 +10,10 @@ What it does:
   process-scoped there and do not model a separate live Codex process
 
 diff --git a/codex-rs/arg0/src/lib.rs b/codex-rs/arg0/src/lib.rs
-index 2102eaf..1b0e530 100644
+index 1c28f81..501a172 100644
 --- a/codex-rs/arg0/src/lib.rs
 +++ b/codex-rs/arg0/src/lib.rs
-@@ -484,17 +484,41 @@ fn janitor_cleanup(temp_root: &Path) -> std::io::Result<()> {
+@@ -485,17 +485,41 @@ fn janitor_cleanup(temp_root: &Path) -> std::io::Result<()> {
              continue;
          };
 
@@ -61,7 +61,7 @@ index 2102eaf..1b0e530 100644
  fn try_lock_dir(dir: &Path) -> std::io::Result<Option<File>> {
      let lock_path = dir.join(LOCK_FILENAME);
      let lock_file = match File::options().read(true).write(true).open(&lock_path) {
-@@ -716,6 +740,10 @@ mod tests {
+@@ -717,6 +741,10 @@ mod tests {
      }
 
      #[test]

patches/codex/0010-exec-server-drain-fs-helper-output-concurrently.patch

@@ -10,18 +10,18 @@ before it can exit. Add a regression test that returns a helper-shaped response
 larger than a typical pipe buffer.
 
 diff --git a/codex-rs/exec-server/src/fs_sandbox.rs b/codex-rs/exec-server/src/fs_sandbox.rs
-index cd2cc38..c348b8d 100644
+index 3dbcf73..1ef9129 100644
 --- a/codex-rs/exec-server/src/fs_sandbox.rs
 +++ b/codex-rs/exec-server/src/fs_sandbox.rs
-@@ -16,6 +16,7 @@ use codex_sandboxing::SandboxablePreference;
+@@ -17,6 +17,7 @@ use codex_sandboxing::SandboxablePreference;
  use codex_utils_absolute_path::AbsolutePathBuf;
  use codex_utils_absolute_path::canonicalize_preserving_symlinks;
  use codex_utils_path_uri::PathUri;
 +use tokio::io::AsyncReadExt;
  use tokio::io::AsyncWriteExt;
  use tokio::process::Command;
 
-@@ -278,6 +279,25 @@ async fn run_command(
+@@ -299,6 +300,25 @@ async fn run_command(
      request_json: Vec<u8>,
  ) -> Result<FsHelperPayload, JSONRPCErrorError> {
      let mut child = spawn_command(command)?;
@@ -47,7 +47,7 @@ index cd2cc38..c348b8d 100644
      let mut stdin = child
          .stdin
          .take()
-@@ -286,15 +306,17 @@ async fn run_command(
+@@ -307,15 +327,17 @@ async fn run_command(
      stdin.shutdown().await.map_err(io_error)?;
      drop(stdin);
 
@@ -70,7 +70,7 @@ index cd2cc38..c348b8d 100644
      match response {
          FsHelperResponse::Ok(payload) => Ok(payload),
          FsHelperResponse::Error(error) => Err(error),
-@@ -335,6 +357,10 @@ fn io_error(err: std::io::Error) -> JSONRPCErrorError {
+@@ -358,6 +380,10 @@ fn io_error(err: std::io::Error) -> JSONRPCErrorError {
      internal_error(err.to_string())
  }
 
@@ -81,7 +81,7 @@ index cd2cc38..c348b8d 100644
  fn json_error(err: serde_json::Error) -> JSONRPCErrorError {
      internal_error(format!(
          "failed to encode or decode fs sandbox helper message: {err}"
-@@ -646,6 +672,58 @@ mod tests {
+@@ -675,6 +701,58 @@ mod tests {
          assert!(policy.can_read_path_with_cwd(alias_parent.as_path(), cwd.as_path()));
      }
 

versions.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 
-SOLARIS_CODEX_VERSION=0.141.0
+SOLARIS_CODEX_VERSION=0.142.0
 RUST_VERSION=1.95.0
 BINDGEN_CLI_VERSION=0.72.0
 RUST_TRIPLE=x86_64-pc-solaris