Skip to content

v0.1.5 — OpenAI Codex as a second agent

Latest

Choose a tag to compare

@sricola sricola released this 19 Jun 00:48
· 1 commit to main since this release
c070f21

OpenAI Codex joins Claude Code as a selectable agent — same containment model: the real key (Anthropic or OpenAI) stays host-only, the VM only ever sees a budget-capped bearer token, egress is deny-by-default, and every change comes back as a human-gated git diff.

Added

  • drydock submit --agent claude|codex; operator default via default_agent / DRYDOCK_DEFAULT_AGENT. The credential gateway gained a vendor registry (Anthropic + OpenAI), with per-task USD metering + revoke for both. brokerd now accepts at least one of ANTHROPIC_API_KEY / OPENAI_API_KEY. drydock tasks shows duration + metered cost + outcome for Codex too.

Changed

  • Sandbox image renamed claude-sandboxdrydock-sandbox (hosts both CLIs); entrypoint.sh dispatches on DRYDOCK_AGENT. Re-run drydock init to rebuild. api.openai.com added to the default egress allowlist (gateway-routed, like api.anthropic.com).

Fixed

  • drydock start now accepts either vendor key — it previously refused to start without ANTHROPIC_API_KEY, blocking Codex-only operation.

Full notes in CHANGELOG.md. No third-party security audit; working alpha. macOS 26+ / Apple silicon.

Install: brew tap sricola/drydock && brew install drydock
sha256: b82af6287dcd1ffdc09f66a3e38b915bfb0d5f3c2c6d56c8ea3d02c5b608c865