UM-Codex v0.1.0-alpha.7

Install (or update to this version with the installer):

• Mac, in Terminal: curl -q -fsSL https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-macos.sh | sh
• Windows, in Windows PowerShell: [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; irm https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-windows.ps1 | iex

Already installed: um-codex update.

On a Mac with 0.1.0-alpha.1 or alpha.2, typing um-codex in Terminal doesn't work (it says "UM-Codex (none) can't be opened").
Update with the Mac install line above, or run the command by its full path:
"$HOME/Library/Application Support/UM-Codex/app/bin/um-codex" update.
After that, plain um-codex works (if it still doesn't, open the UM-Codex app once: that puts it right).

Images, pinned by digest:

• Agent: ghcr.io/sripadalab-um/um-codex-agent@sha256:8eb08ee5a0681c61539368d917d711ecabc9cfcc68ac5da828f474e9c0cb2d10
• Gateway: nginx@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

SHA256SUMS is signed with UM-Codex's release key (SHA256SUMS.sig); um-codex update checks it.
To check a download against SHA256SUMS: shasum -a 256 -c SHA256SUMS --ignore-missing
on Mac, or compare Get-FileHash <file> with it on Windows.

UM-Codex v0.1.0-alpha.6

UM-Codex 0.1.0-alpha.6: updates that work from the launcher, checked hourly

Fixed

• The launcher's Update button works on Macs where uv came from Homebrew. Before, it said "uv … wasn't found", because the app doesn't get Homebrew on its PATH. The installers now record where uv is, and UM-Codex also looks in Homebrew's usual places.

Changed

• Update checks: UM-Codex checks for a new release each time you open it or start a setup, and every hour while the launcher is open. "UM-Codex X is available · Update" appears soon after a release.
• Checks stay light: GitHub is asked at most every 10 minutes, and a "nothing changed" answer doesn't count against GitHub's limits. UMCODEX_NO_UPDATE_CHECK=1 turns checks off.

Updating from alpha.5 or earlier on a Mac: if the Update button says uv wasn't found, run um-codex update in Terminal once. From alpha.6 on, the button works.

---

Install (or update to this version with the installer):

• Mac, in Terminal: curl -q -fsSL https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-macos.sh | sh
• Windows, in Windows PowerShell: [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; irm https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-windows.ps1 | iex

Already installed: um-codex update.

On a Mac with 0.1.0-alpha.1 or alpha.2, typing um-codex in Terminal doesn't work (it says "UM-Codex (none) can't be opened").
Update with the Mac install line above, or run the command by its full path:
"$HOME/Library/Application Support/UM-Codex/app/bin/um-codex" update.
After that, plain um-codex works (if it still doesn't, open the UM-Codex app once: that puts it right).

Images, pinned by digest:

• Agent: ghcr.io/sripadalab-um/um-codex-agent@sha256:8eb08ee5a0681c61539368d917d711ecabc9cfcc68ac5da828f474e9c0cb2d10
• Gateway: nginx@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

SHA256SUMS is signed with UM-Codex's release key (SHA256SUMS.sig); um-codex update checks it.
To check a download against SHA256SUMS: shasum -a 256 -c SHA256SUMS --ignore-missing
on Mac, or compare Get-FileHash <file> with it on Windows.

UM-Codex v0.1.0-alpha.5

UM-Codex 0.1.0-alpha.5: On this computer, and the Codex app on Windows

New (experimental)

• On this computer (Mac). A setup can run Codex directly on your Mac, outside the sandbox, with computer control and the app's built-in browser.
  • It's under More options → "Where Codex runs", behind a caution dialog. Its card says "On this computer · experimental".
  • It uses the Toolkit through UM-Codex's relay, with no ChatGPT account, in a separate copy of the Codex app.
  • Codex asks before commands by default.
  • Chrome control isn't supported yet.
• The Codex app on Windows. "Open in: Codex app" now works on Windows too, in UM-Codex's own copy of the app.
  • It connects through Windows' own OpenSSH.
  • If it can't connect, it falls back to Terminal, and the setup's card says why.

Fixed

• UM-Codex's copies of the Codex app no longer take over your ChatGPT app's Chrome connection. Earlier versions' copies did, each time they started. If Chrome control in your own ChatGPT app stopped working, quit and reopen your ChatGPT app. If it still doesn't work, turn its Chrome plugin off and on.
• Uninstall stays within its own install:
  • uninstalling a test or development copy no longer removes your Toolkit key, the shared images, or another install's containers;
  • the real uninstall asks before removing leftovers from other copies.
• Updates ride out brief registry errors, and they give accurate messages.
• Windows: UM-Codex's ssh files get permissions Windows' OpenSSH accepts. Your own ~/.ssh/config keeps its permissions.

---

Install (or update to this version with the installer):

• Mac, in Terminal: curl -q -fsSL https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-macos.sh | sh
• Windows, in Windows PowerShell: [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; irm https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-windows.ps1 | iex

Already installed: um-codex update.

On a Mac with 0.1.0-alpha.1 or alpha.2, typing um-codex in Terminal doesn't work (it says "UM-Codex (none) can't be opened").
Update with the Mac install line above, or run the command by its full path:
"$HOME/Library/Application Support/UM-Codex/app/bin/um-codex" update.
After that, plain um-codex works (if it still doesn't, open the UM-Codex app once: that puts it right).

Images, pinned by digest:

• Agent: ghcr.io/sripadalab-um/um-codex-agent@sha256:8eb08ee5a0681c61539368d917d711ecabc9cfcc68ac5da828f474e9c0cb2d10
• Gateway: nginx@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

SHA256SUMS is signed with UM-Codex's release key (SHA256SUMS.sig); um-codex update checks it.
To check a download against SHA256SUMS: shasum -a 256 -c SHA256SUMS --ignore-missing
on Mac, or compare Get-FileHash <file> with it on Windows.

UM-Codex v0.1.0-alpha.4

UM-Codex 0.1.0-alpha.4: one click to start, one click to update

A simpler launcher

• First time: "Choose a folder and start…". Codex opens in the Codex app (on a Mac with the app), already set up.
• After that: one click on "Start ".
• No Name box. A setup is named after its folder, and you can rename it on its card.
• The form has three sections: Folder, Access and Codex, plus More options.
• Models are listed newest first.
• Far fewer pop-ups. The safety facts (your real files, what internet-on means) are short lines on each card, and a single status line shows Starting → Opening Codex → Connected.
• The ~/.ssh/config line for the Codex app is asked about once, by the installer.

One-click Update: when a new version is out, the launcher shows "UM-Codex X is available · Update". It installs the signed release in the background, then offers Reopen.

A more capable Codex in the sandbox

• Eight built-in skills:
  1. project environments;
  2. data analysis;
  3. scientific figures;
  4. documents and reports;
  5. notebooks;
  6. dashboards;
  7. software development;
  8. research handoff.
• New tools: Quarto (including PDFs offline with Typst), Shiny, renv, notebook tools, Streamlit and Dash.
• Everything works with the internet off.

Fixed

• Several UM-Codex installs (for example a test copy) no longer overwrite each other's Codex app connections.
• Windows: UM-Codex's ssh files get permissions Windows' OpenSSH accepts.

Coming next: the Codex app on Windows, and "On this computer" (computer and browser control, outside the sandbox).

---

Install (or update to this version with the installer):

• Mac, in Terminal: curl -q -fsSL https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-macos.sh | sh
• Windows, in Windows PowerShell: [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; irm https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-windows.ps1 | iex

Already installed: um-codex update.

On a Mac with 0.1.0-alpha.1 or alpha.2, typing um-codex in Terminal doesn't work (it says "UM-Codex (none) can't be opened").
Update with the Mac install line above, or run the command by its full path:
"$HOME/Library/Application Support/UM-Codex/app/bin/um-codex" update.
After that, plain um-codex works (if it still doesn't, open the UM-Codex app once: that puts it right).

Images, pinned by digest:

• Agent: ghcr.io/sripadalab-um/um-codex-agent@sha256:8eb08ee5a0681c61539368d917d711ecabc9cfcc68ac5da828f474e9c0cb2d10
• Gateway: nginx@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

SHA256SUMS is signed with UM-Codex's release key (SHA256SUMS.sig); um-codex update checks it.
To check a download against SHA256SUMS: shasum -a 256 -c SHA256SUMS --ignore-missing
on Mac, or compare Get-FileHash <file> with it on Windows.

UM-Codex v0.1.0-alpha.3

UM-Codex 0.1.0-alpha.3: Open in the Codex app (Mac)

New: "Open in: Codex app" (Mac)

• A setup can open in Codex's desktop app, which is part of the ChatGPT app, instead of a terminal. Choose it under "Open in" in the launcher window.
• Every command, file change and model call happens inside the sandbox, as before.
• UM-Codex opens its own copy of the app. That copy opens with no sign-in, already connected to your setup, on the setup's project, and with no first-run or new-model pop-ups. Your own ChatGPT app and its chats aren't touched.
• The first time, UM-Codex asks to add one line to ~/.ssh/config. Uninstalling removes it.
• Chats must show Remote · umcodex-… to run in the sandbox. Local chats in UM-Codex's copy are blocked with a reminder, because they would run on your Mac.
• The app's own browser runs on your Mac. Use UM-Codex's Browser tool to browse inside the sandbox.
• Stop in the launcher ends the session; the app then says it can't reconnect. Start the setup again, and the app reconnects by itself.
• Windows: not yet. The Codex app option is off there for now, and Terminal works.

Fixed

• Typing um-codex in Terminal on a Mac (see below if you have alpha.1 or alpha.2).

---

Install (or update to this version with the installer):

• Mac, in Terminal: curl -q -fsSL https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-macos.sh | sh
• Windows, in Windows PowerShell: [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; irm https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-windows.ps1 | iex

Already installed: um-codex update.

On a Mac with 0.1.0-alpha.1 or alpha.2, typing um-codex in Terminal doesn't work (it says "UM-Codex (none) can't be opened").
Update with the Mac install line above, or run the command by its full path:
"$HOME/Library/Application Support/UM-Codex/app/bin/um-codex" update.
After that, plain um-codex works (if it still doesn't, open the UM-Codex app once: that puts it right).

Images, pinned by digest:

• Agent: ghcr.io/sripadalab-um/um-codex-agent@sha256:4952e71ab5568d20b6b97de92d3ede5068b6115e5643ca9f1cc990da361a6fa0
• Gateway: nginx@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

SHA256SUMS is signed with UM-Codex's release key (SHA256SUMS.sig); um-codex update checks it.
To check a download against SHA256SUMS: shasum -a 256 -c SHA256SUMS --ignore-missing
on Mac, or compare Get-FileHash <file> with it on Windows.

UM-Codex v0.1.0-alpha.2

UM-Codex 0.1.0-alpha.2: the launcher window, the browser tool, and fixes

New

• A launcher window replaces the terminal questions. The UM-Codex app or shortcut opens a small page on your computer:

  • your setups as cards, with Start, Edit, Duplicate and Delete;
  • folders chosen with your system's folder picker, each set to "Read only" or "Read & write";
  • switches for the internet, the browser tool and approvals;
  • a plain summary before Start;
  • running sessions, each with Stop;
  • a first-run checklist.

  um-codex in a terminal still works.

• A browser tool inside the sandbox, offered when the internet is on. Codex can open websites in a fresh browser, with none of your logins, running in the container. It asks before actions like opening pages, clicking and typing; reading a page doesn't ask.

Fixed

• "Failed to persist config … config.toml" at every launch. UM-Codex's settings now live in Codex's read-only system layer, and your own Codex preferences can be saved again.
• Codex no longer switches models by itself. The setup's model is used, /model lists the Toolkit models Codex knows, and there's no upgrade prompt.
• Sessions are locked to full access inside the sandbox, so /permissions can't choose a mode that breaks commands in the container.

Updating from alpha.1: run um-codex update. The first time you open UM-Codex afterwards, the Desktop app and shortcuts switch to the launcher window by themselves.

Coming next: "Open in: Codex app". The Codex desktop app works in the sandbox through UM-Codex's connection; it's being tested now (Mac first).

---

Install (or update to this version with the installer):

• Mac, in Terminal: curl -q -fsSL https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-macos.sh | sh
• Windows, in Windows PowerShell: [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; irm https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-windows.ps1 | iex

Already installed: um-codex update.

Images, pinned by digest:

• Agent: ghcr.io/sripadalab-um/um-codex-agent@sha256:b317ed8fb9073b6a52c5bf580d4ccf61390b431c0cc1890b6fbf326a40b9c228
• Gateway: nginx@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

SHA256SUMS is signed with UM-Codex's release key (SHA256SUMS.sig); um-codex update checks it.
To check a download against SHA256SUMS: shasum -a 256 -c SHA256SUMS --ignore-missing
on Mac, or compare Get-FileHash <file> with it on Windows.

UM-Codex v0.1.0-alpha.1

UM-Codex 0.1.0-alpha.1: the first release

Full-power OpenAI Codex on the U-M GPT Toolkit, running in a sealed Docker environment on your Mac or Windows computer. At each launch you choose:

• which folders Codex can change;
• which it can only read;
• whether it can use the internet.

Then Codex opens in your terminal.

Install

• Mac: curl -fsSL https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-macos.sh | sh
• Windows (PowerShell): [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; irm https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-windows.ps1 | iex

The installer:

• installs Docker Desktop if you don't have it;
• on Windows, also turns on WSL and fixes Docker's VM logon right if needed;
• asks for your Toolkit API key, which goes into your Keychain or Credential Manager and never into the container;
• adds a UM-Codex app to the Desktop.

What's in it

• Saved setups: a working folder, more folders to change or only read, internet on or off, the model, and approvals. A summary screen comes before each launch.
• Your key stays out of the container. A relay on your computer adds it to Codex's requests, so nothing Codex runs can read it.
• When you quit, everything is removed except Codex's history for that setup, so codex resume works.
• Commands: um-codex doctor, um-codex key, um-codex update (signed releases, with --rollback) and um-codex uninstall.

Known limits

• With the internet on, Codex can also reach services on your own computer and on your local network or VPN. The launch screen says so.
• This alpha hasn't had a full install on a fresh Windows computer yet. CI runs the Windows installer's checks on a real Windows runner.

---

Install (or update to this version with the installer):

• Mac, in Terminal: curl -q -fsSL https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-macos.sh | sh
• Windows, in Windows PowerShell: [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072; irm https://github.com/SripadaLab-UM/um-codex/releases/latest/download/install-windows.ps1 | iex

Already installed: um-codex update.

Images, pinned by digest:

• Agent: ghcr.io/sripadalab-um/um-codex-agent@sha256:0b2eafa94fa781e5ffb63d3d1c5712a4b19f44f3021c752f2b1e9bf2cd89e8bb
• Gateway: nginx@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

SHA256SUMS is signed with UM-Codex's release key (SHA256SUMS.sig); um-codex update checks it.
To check a download against SHA256SUMS: shasum -a 256 -c SHA256SUMS --ignore-missing
on Mac, or compare Get-FileHash <file> with it on Windows.