English | Українська
A local Python 3.12 supervisor for the official openai-codex==0.144.4 Python SDK and its pinned runtime. It performs no work unless all three authorization facts are present and unchanged: label status:ready-for-development, /agent approve by GitHub user NeoUKR, and that approval comment's timeline event ID recorded with the exact Issue scope hash.
The supervisor creates agent/<issue>-<slug> in an isolated worktree, removes GitHub credentials, and runs Codex with Sandbox.workspace_write. Codex may edit and run approved tests only. A new short-lived GitHub App token is acquired by the supervisor after the run, authorization is revalidated, the diff is checked, and only a draft PR may be created. Merge, release, repository administration, scope expansion, and passing the GitHub token to Codex are prohibited.
Allowed verification commands are supplied by the service configuration, never by Issue text. DSM_ALLOWED_TESTS_JSON is an array of argument arrays, for example [["python","-m","unittest","discover","-s","tests","-v"]]; shell strings are rejected. GitHub credentials are removed from both Codex and test environments, repository hooks are disabled for supervisor Git operations, and the remote must exactly match the authorized HTTPS repository.
DSM_GITHUB_REPOSITORY must also occur in the JSON array DSM_REPOSITORY_ALLOWLIST_JSON. Approval lookup is paginated and fails closed if its bounded traversal cannot establish the complete comment set.
The OpenAI master key is read from the DPAPI-protected Windows Credential Manager target DataSetsManager/OpenAI (override with DSM_OPENAI_CREDENTIAL_TARGET). The broker returns a one-read lease valid for at most 60 seconds. The supervisor passes it directly to Codex.login_api_key, never puts it in an environment variable, consumes the lease once, and logs the SDK runtime out after the turn.
This service is intentionally inactive until its separate GitHub App, dedicated Windows account, Codex authentication, protected worktree root, and pilot Issue are configured. See architecture and runbook.