source_template: ubuntu-25 name: Codex hostname: codex username: user task_name: build requires_codex_connection: true resources: disk_gib: 8 ram_mib: 2048 cpus: 1 # Standard CI/CD inputs: each `id` becomes an env var (UPPER_SNAKE) for every `run` step. # `source: account_codex` + `hidden: true` means Portacode fills these from Saved Inputs # written on Account Overview → Connect Codex (keys below). Not shown in the deploy form. inputs: - id: openai_api_key type: secret label: Codex gateway token required: true save: codex.openai_api_key hidden: true source: account_codex description: Auto-filled from Saved Input codex.openai_api_key (set when you Connect Codex). - id: portacode_codex_base_url type: url label: Codex gateway URL required: true save: codex.gateway_base_url hidden: true source: account_codex description: Auto-filled from Saved Input codex.gateway_base_url (set when you Connect Codex). instructions: # Keep each `run` as a single logical line (or short &&-chains). Multi-line `run: |` # blocks can lose newlines when the agent wraps the command for the runtime user. - run: sudo apt-get update - run: sudo apt-get install -y --no-install-recommends ca-certificates curl git python3 - run: curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash - - run: sudo apt-get install -y nodejs - run: sudo npm install -g @openai/codex@latest - run: codex --version - run: 'test -n "${PORTACODE_CODEX_BASE_URL:-}" && test -n "${OPENAI_API_KEY:-}"' - run: 'mkdir -p "$HOME/.codex"' - run: >- python3 -c 'import os; from pathlib import Path; base=os.environ["PORTACODE_CODEX_BASE_URL"].rstrip("/"); path=Path.home()/".codex"/"config.toml"; path.write_text("model = \"gpt-5.4\"\nmodel_provider = \"portacode_proxy\"\napproval_policy = \"never\"\nsandbox_mode = \"danger-full-access\"\ncli_auth_credentials_store = \"file\"\n\n[model_providers.portacode_proxy]\nname = \"Portacode Codex Proxy\"\nbase_url = \"%s\"\nwire_api = \"responses\"\nenv_key = \"OPENAI_API_KEY\"\n" % (base,)); print("Wrote", path)' - run: 'touch "$HOME/.bashrc"' - run: 'sed -i "/# >>> portacode-codex >>>/,/# <<< portacode-codex <<- printf '%s\n' '# >>> portacode-codex >>>' "export OPENAI_API_KEY=$(printf '%q' "$OPENAI_API_KEY")" "export PORTACODE_CODEX_BASE_URL=$(printf '%q' "$PORTACODE_CODEX_BASE_URL")" '# <<< portacode-codex <<<' >> "$HOME/.bashrc" # Codex refuses non-git dirs unless --skip-git-repo-check; also detach stdin so # automation's closed/piped stdin is not treated as extra prompt input. - run: 'mkdir -p "$HOME/codex-workspace" && git -C "$HOME/codex-workspace" init' - run: >- bash -lc 'set -a; source "$HOME/.bashrc"; set +a; codex exec --skip-git-repo-check -C "$HOME/codex-workspace" "Reply with exactly: CODEX_READY"