Repository navigation
v0.1.0
askcodex 0.1.0 refactors command execution, credential handling and machine output while preserving the existing command paths and raw backend escape hatch.
Migration
- Semantic
--jsonresponses now use{"schema_version":1,"command":"...","result":{...}}. Change selectors such as.textto.result.text. Usage, models and transcription retain original responses in.backend. --eventsemits NDJSON. Ask streams text deltas and emits exactly one final result only after successful completion. Operational errors are structured on stderr../install.shinstalls only the binary by default. Use--skills agents|claude|allto synchronize skills and--check-authfor an explicit no-refresh auth check.- Internal library modules are now private. Public parsing, execution, errors, data models and configuration remain available.
- Stdin is limited to 16 MiB; WAV and combined PNG references to 25 MiB. Media must be regular files.
Reliability and security
Local inputs are prepared before authentication. Credential sessions retain their store; runtime credential documents have no generic serialization. Persistent kernel locks release automatically on process death, and OAuth redirects are disabled per request. Stream write failures stop response consumption immediately. Image publication retains atomic replacement behavior.
The lock coordinates participating new askcodex processes only, not Codex or older unlink-lock versions. Restoring old files cannot reverse a server-side token rotation. Keyring support and a native Codex credential-owner adapter remain unimplemented; the latter is plausible but unverified as a drop-in replacement.
Verification
366 offline Rust tests, 84 governance tests and 7 installer tests pass, along with format, Clippy, private rustdoc, release build, generated-reference comparison, and explicit archived command/help parity. Fresh synthetic text and WAV transcription calls passed with --no-refresh and unchanged credential bytes. Optional full live/image tests were not rerun.
See PR #2, command reference, and output contract.
Release archives cover Linux and macOS on x86_64 and ARM64. Verify downloads against the included SHA256SUMS.