ccswarm 0.9.0

AI Agent Workflow DevOps toolchain complementing Claude Code Agent Teams
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

//! Codex CLI provider (`codex` binary from openai/codex).
//!
//! Codex CLI is non-interactive via `codex exec "<prompt>"`. System prompt is prepended to
//! the user prompt because Codex has no dedicated `--system-prompt` flag.
//!
//! Session continuation uses `codex exec resume <thread-id> "<prompt>"` — a
//! subcommand with its own argv shape, selected when `options.session_id` is
//! set. The thread ID is provider-assigned: ccswarm learns it from the
//! `thread.started` event in `--json` output (see `codex_stream`).

use std::path::Path;

use super::{AgentProvider, ProviderKind, ProviderOptions, SameThreadContinuation};

pub(crate) struct CodexProvider;

impl AgentProvider for CodexProvider {
    fn kind(&self) -> ProviderKind {
        ProviderKind::Codex
    }

    fn same_thread_continuation(&self) -> SameThreadContinuation {
        SameThreadContinuation::ProviderAssignedId
    }

    fn build_command(
        &self,
        prompt: &str,
        working_dir: &Path,
        options: &ProviderOptions,
    ) -> tokio::process::Command {
        let mut cmd = tokio::process::Command::new("codex");
        cmd.arg("exec");

        // Resume is a subcommand: `codex exec resume <thread-id> <prompt>`.
        // It must come before the option flags that follow.
        if let Some(session_id) = &options.session_id {
            cmd.args(["resume", session_id]);
        }

        // Non-interactive pipeline execution:
        //   1. `--sandbox workspace-write` lets Codex write inside the cwd the way
        //      `claude --dangerously-skip-permissions` does. The blunter
        //      `--dangerously-bypass-approvals-and-sandbox` still observes some
        //      read-only policies in practice (observed 2026-04), so prefer the
        //      explicit policy flag.
        //   2. `--skip-git-repo-check` lets the pipeline run in scratch dirs.
        cmd.args(["--sandbox", "workspace-write", "--skip-git-repo-check"]);

        if let Some(model) = &options.model {
            cmd.args(["--model", model]);
        }

        // JSONL event output: needed for telemetry (real token counts) and
        // mandatory for multi-turn, where the thread ID arrives via the
        // `thread.started` event.
        if options.codex_json {
            cmd.arg("--json");
        }

        // Codex has no allow-list, worktree, or budget flag. Unsupported options are
        // silently ignored so the same flow YAML stays portable across providers.

        // Codex expects the prompt as the final positional argument (after flags).
        let merged_prompt = match &options.system_prompt {
            Some(sys) if !sys.is_empty() => format!("{sys}\n\n---\n\n{prompt}"),
            _ => prompt.to_string(),
        };
        cmd.arg(&merged_prompt);

        cmd.current_dir(working_dir);
        cmd
    }
}