Commit History
-
Deploy 2026-05-08
Co-authored-by: OpenAI Codex <codex@openai.com>ade0b7e -
Fix stale tool error badges (#247)
Unverified signature* Fix GPU sandbox hardware OAuth failure Co-authored-by: OpenAI Codex <codex@openai.com> * Address sandbox sleep-time review Co-authored-by: OpenAI Codex <codex@openai.com> * Fix stale tool error badges Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>beb0c92 -
Deploy 2026-05-08
Co-authored-by: OpenAI Codex <codex@openai.com>55a2373 -
Fix GPU sandbox hardware OAuth failure (#246)
Unverified signature* Fix GPU sandbox hardware OAuth failure Co-authored-by: OpenAI Codex <codex@openai.com> * Address sandbox sleep-time review Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>60f7188 -
Create Hub artifact collections lazily (#245)
Unverified signature* Create Hub artifact collections lazily Co-authored-by: OpenAI Codex <codex@openai.com> * Cache lazy Hub collection slugs in child hooks Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>60474c1 -
Implement `/resume` command for CLI (#233)
Unverified signature* Add /resume command to CLI * Refine /resume feature * Refine /resume implementation * Address review comments --------- Co-authored-by: lewtun <lewis.c.tunstall@gmail.com>0321690
-
Deploy 2026-05-07
Co-authored-by: OpenAI Codex <codex@openai.com>e8252a8 -
Fix Pro entitlement checks (#239)
Unverified signature* Fix Pro entitlement checks Normalize HF Pro and paid org plan detection, allow premium model selection with quota enforcement, and clarify HF Jobs credit billing copy. Co-authored-by: OpenAI Codex <codex@openai.com> * Limit premium quota to personal Pro Ignore org membership for premium-model quota so users need personal HF Pro for the higher cap, while dev mode uses the Pro tier for local testing. Co-authored-by: OpenAI Codex <codex@openai.com> * Scope model switch errors to model picker Show model switch failures through local ChatInput state instead of rendering the shared agent error field globally. Co-authored-by: OpenAI Codex <codex@openai.com> * Restrict premium quota detection to Pro accounts Co-authored-by: OpenAI Codex <codex@openai.com> * Use boolean Pro signal for premium quota Co-authored-by: OpenAI Codex <codex@openai.com> * Use documented isPro field for quota tier Co-authored-by: OpenAI Codex <codex@openai.com> * Remove dead global chat error state Co-…d7637ba -
Skip sandbox spaces for artifact metadata (#241)
Unverified signature* Skip sandbox spaces for artifact metadata Co-authored-by: OpenAI Codex <codex@openai.com> * Address sandbox metadata PR feedback Co-authored-by: OpenAI Codex <codex@openai.com> * Avoid sandbox title metadata updates Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>1e1fe1f
-
License and Citation (#178)
Henri Bonamy +1: lewtun Unverified signature* added a license file, license badge, and citation details in readme * Apply suggestion from @lewtun --------- Co-authored-by: lewtun <lewis.c.tunstall@gmail.com>b4ae9d9 -
Add CLI local model support (#228)
Unverified signature* Add CLI local model support Co-authored-by: OpenAI Codex <codex@openai.com> * Add shared local model endpoint fallback Support LOCAL_LLM_BASE_URL and LOCAL_LLM_API_KEY as shared fallbacks while preserving provider-specific local overrides. Co-authored-by: OpenAI Codex <codex@openai.com> * Address local model review feedback Clarify local probe failure behavior, add regression coverage for rejected local switches, and simplify local model validation. Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>4668dbd -
Add backlog prioritization report tooling (#222)
Unverified signature* Add backlog prioritization script Co-authored-by: OpenAI Codex <codex@openai.com> * Fix backlog prioritizer LLM output handling Co-authored-by: OpenAI Codex <codex@openai.com> * Add backlog resolved-in-main checks Co-authored-by: OpenAI Codex <codex@openai.com> * Add GitHub issue publishing for backlog reports Co-authored-by: OpenAI Codex <codex@openai.com> * Address backlog prioritization review Handle GitHub rate limits gracefully, validate publish tokens early, and tighten resolution-link detection. Co-authored-by: OpenAI Codex <codex@openai.com> * Exclude generated backlog reports Apply a default label to generated report issues and skip that label during future GitHub backlog collection. Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>6aebbdf -
fix(security): remediate workflow vulnerability in .github/workflows/claude-review.yml (#231)
hf-security-analysis[bot] +1: hf-security-analysis[bot]Unverified signatureCo-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>fbc10a2 -
ci: prepare Claude Code bin directory (#230)
Unverified signatureCo-authored-by: OpenAI Codex <codex@openai.com>f196f43 -
Deploy 2026-05-06
Co-authored-by: OpenAI Codex <codex@openai.com>5996fec -
Force OAuth refresh after scope changes (#227)
Unverified signature* Force OAuth refresh after scope changes Co-authored-by: OpenAI Codex <codex@openai.com> * Address OAuth scope review comments Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>e90638c -
quick wins, after internal audit (#229)
Guillaume SalouUnverified signature* fix(api): cap /api/submit text to 100k chars Pydantic-level guard on SubmitRequest.text. Prevents a single oversized user message from bloating the conversation context for every subsequent turn (cost-amplification on Bedrock-tier models). 100k chars ≈ 25k tokens, well above any reasonable user prompt. * chore(api): disable FastAPI auto-docs on HF Spaces Gated on SPACE_ID env var, which is set by the HF Spaces runtime but not in local dev. /docs, /redoc, /openapi.json return 404 on the deployed Space; localhost keeps them for development convenience. Reduces public information disclosure of the full API surface. * fix(api): check session ownership before body validation on /truncate POST /api/truncate/{session_id} previously returned 422 (with the schema detail revealing 'user_message_index' is required) even when the caller didn't own the session, leaking the route's expected payload shape to unauthenticated probers. Now parses the body manually after _check_session_access, s…82bad21
-
Deploy 2026-05-05
Co-authored-by: OpenAI Codex <codex@openai.com>fd6002a -
Update README with new model version and usage instructions (#220)
Unverified signatureCo-authored-by: lewtun <lewis.c.tunstall@gmail.com>e152e8b -
Add collection OAuth scope (#226)
Unverified signature* Add collection OAuth scope Co-authored-by: OpenAI Codex <codex@openai.com> * Document GitHub PR-first workflow Co-authored-by: OpenAI Codex <codex@openai.com> * Document Space OAuth scope checks Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>8b35696 -
Allow Space OAuth collection writes
Co-authored-by: OpenAI Codex <codex@openai.com>91fa071 -
Deploy 2026-05-05
Co-authored-by: OpenAI Codex <codex@openai.com>19f9a99 -
Add ML Intern Hub artifact metadata (#225)
Unverified signature* Add ML Intern Hub artifact metadata Co-authored-by: OpenAI Codex <codex@openai.com> * Extend Hub artifact hooks to sandbox bash Co-authored-by: OpenAI Codex <codex@openai.com> * Create Hub artifact collections at session start Co-authored-by: OpenAI Codex <codex@openai.com> * Address Hub artifact PR review comments Co-authored-by: OpenAI Codex <codex@openai.com> * Respect Hub collection title limits Co-authored-by: OpenAI Codex <codex@openai.com> * Shorten collection session UUID fragments Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>4fc6e96
-
Add CI for tests and Ruff (#217)
Unverified signature* Add CI for tests and Ruff Co-authored-by: OpenAI Codex <codex@openai.com> * Enforce Ruff formatting in CI Co-authored-by: OpenAI Codex <codex@openai.com> * Document Ruff pre-commit checks Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>754345f -
Deploy 2026-05-04
Co-authored-by: OpenAI Codex <codex@openai.com>53d5c85 -
Preserve HF token across restored sessions (#218)
Unverified signature* Preserve HF token across restored sessions Carry the authenticated HF token internally through request dependencies without exposing it from auth/me, and retry CPU sandbox preload when a session previously failed only because the token was missing. Co-authored-by: OpenAI Codex <codex@openai.com> * Address HF token restore review feedback Only restart CPU sandbox preload after the specific missing-token failure and remove the dead user hf_token fallback. Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>5de6e8f -
Deploy 2026-05-04
Co-authored-by: OpenAI Codex <codex@openai.com>c69090d -
Skip redundant CPU sandbox hardware request (#216)
Unverified signature* Skip redundant CPU sandbox hardware request Avoid calling the Hub hardware endpoint for default cpu-basic sandboxes because duplicate_space already requests that tier. Keep the hardware retry path for non-default tiers. Co-authored-by: OpenAI Codex <codex@openai.com> * Address sandbox hardware review feedback Use the CPU hardware constant as the Sandbox.create default and document why the auto-sleep guard still needs the hardware endpoint. Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>6ea1c42 -
Deploy 2026-05-04
Co-authored-by: OpenAI Codex <codex@openai.com>a436c02 -
Retry sandbox hardware requests (#210)
Unverified signature* Retry sandbox hardware requests Retry transient Hub errors when requesting hardware for a newly duplicated private sandbox Space. This covers the deployed OAuth path where duplicate succeeds but /hardware can briefly return 401/Repository Not Found before the private Space is manageable. Co-authored-by: OpenAI Codex <codex@openai.com> * Address sandbox retry review feedback Narrow transient hardware retry handling to 401 and 404, add coverage for timeout propagation, and fix top-level spacing. Co-authored-by: OpenAI Codex <codex@openai.com> * Ensure auto CPU sandboxes are cleaned up Persist sandbox identity on session records, clean stale sandboxes during restore, skip preloading when delete/teardown restores a session, and clean live sandboxes during backend shutdown. Add a scheduled orphan sweeper workflow as a backstop. Co-authored-by: OpenAI Codex <codex@openai.com> * Remove scheduled sandbox sweeper Delete the GitHub Actions cron workflow for orphan sandbox cleanup and…7636865 -
Stop attaching timestamps to LLM messages (#209)
Unverified signature* Strip internal message metadata before LLM calls Co-authored-by: OpenAI Codex <codex@openai.com> * Simplify timestamp handling for provider messages Co-authored-by: OpenAI Codex <codex@openai.com> * Remove timestamp metadata regression test Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>93d536c -
fix(compaction): break infinite loop + truncate oversized messages (#213)
Guillaume SalouUnverified signature* fix(compaction): break the infinite-compaction loop, truncate oversized messages Sessions stuck in a compaction retry loop have been silently burning Bedrock budget while staying invisible in the session dataset. Pod logs from 2026-05-03 on prod-114 showed the pattern firing minute-after-minute on multiple replicas: Context compacted: 200001 -> 215566 tokens Context compacted: 215566 -> 215572 tokens ContextWindowExceededError — forcing compaction Context compacted: 200001 -> 215544 tokens ... Root cause: a single message in the "untouched" tail (typically a tool output of 80k+ tokens — bash dump, file content, CSV) keeps the post-compact context above the 90% threshold. Compaction triggers again, calls Bedrock again, gets the same 215k result, loops. ~$3 per Opus retry, indefinitely. Sessions never reach _run_session.finally → save_and_upload_detached never fires → cost is real but never lands in total_cost_usd. Cross-check: dataset Bedrock-only coverage on 2026-05-01 …d84b454
-
Deploy 2026-05-01
Co-authored-by: OpenAI Codex <codex@openai.com>ab0ff24 -
Fallback to free model for gated defaults (#208)
Unverified signature* Fallback to free model for gated defaults Co-authored-by: OpenAI Codex <codex@openai.com> * Cover explicit gated model access for HF users Co-authored-by: OpenAI Codex <codex@openai.com> * Seed model picker from created session Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>092f909 -
Deploy 2026-05-01
Co-authored-by: OpenAI Codex <codex@openai.com>cec2805 -
Document HF Space deploy flow (#207)
Unverified signatureCo-authored-by: OpenAI Codex <codex@openai.com>7b561e3 -
Auto-start CPU sandboxes for sessions (#200)
Unverified signature* Auto-start CPU sandboxes for sessions Co-authored-by: Codex <codex@openai.com> * Retry sandbox runtime visibility checks Co-authored-by: Codex <codex@openai.com> * Stabilize auto CPU sandbox creation Co-authored-by: OpenAI Codex <codex@openai.com> * Address sandbox PR review comments Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: Codex <codex@openai.com>8615c28 -
Deploy 2026-05-01
Co-authored-by: OpenAI Codex <codex@openai.com>a8e0e2c -
Add session YOLO auto-approval budget (#201)
Unverified signature* Add session YOLO auto-approval budget Co-authored-by: Codex <codex@openai.com> * Address YOLO approval review feedback Co-authored-by: Codex <codex@openai.com> --------- Co-authored-by: Codex <codex@openai.com>77324b8 -
Steer agent to HF kernels instead of pip install flash-attn (#204)
Darshan ThakareUnverified signature* chore: update the agent system prompt * chore: update the tool documentation7599843 -
Deploy 2026-05-01
Co-authored-by: OpenAI Codex <codex@openai.com>1c68712 -
Use HF username for personal trace uploads (#199)
Unverified signature* Use HF username for personal trace uploads Co-authored-by: OpenAI Codex <codex@openai.com> * Remove redundant HF token branch Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>71e1892 -
Deploy 2026-05-01
Co-authored-by: OpenAI Codex <codex@openai.com>5296b7a -
Auto-share session traces to a private HF dataset (#193)
Darshan Thakare +2: lewtun, Codex Unverified signature* feat: add share_traces toggle and per-user trace repo template * feat: support Claude Code JSONL format and per-target auth * feat: dual-upload sessions to private user trace dataset * chore: retry personal trace uploads on booting * feat: add /share-traces command to flip dataset visibility * docs: document HF trace auto-share and /share-traces * Use HF token owner for local dev auth Co-authored-by: Codex <codex@openai.com> * Rename personal session trace dataset Co-authored-by: Codex <codex@openai.com> * Add session dataset card metadata Co-authored-by: Codex <codex@openai.com> * Fix session trace upload review issues Co-authored-by: OpenAI Codex <codex@openai.com> * Preserve secret scrubbing before trace uploads Co-authored-by: OpenAI Codex <codex@openai.com> * Link ML Intern demo in dataset card Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: lewtun <lewis.c.tunstall@gmail.com> Co-authored-by: Codex <codex@openai.com>0bd7547
-
Deploy 2026-04-30
Co-authored-by: OpenAI Codex <codex@openai.com>ebeb11b -
Add DeepSeek V4 Pro model option (#189)
Unverified signature* Add DeepSeek V4 Pro model option Co-authored-by: Codex <codex@openai.com> * Remove DeepSeek feature tests Co-authored-by: Codex <codex@openai.com> --------- Co-authored-by: Codex <codex@openai.com>1b922dd -
Deploy 2026-04-30
Co-authored-by: OpenAI Codex <codex@openai.com>fef2d3e -
Add Hugging Face Space metadata
Co-authored-by: OpenAI Codex <codex@openai.com>decd08c -
Make sandboxes private (#195)
Unverified signature* Make sandbox Spaces private Co-authored-by: Codex <codex@openai.com> * Remove legacy sandbox auth fallback Co-authored-by: Codex <codex@openai.com> * Address sandbox privacy review comments Co-authored-by: Codex <codex@openai.com> --------- Co-authored-by: Codex <codex@openai.com>15d6506 -
Expose OpenAI models in the UI & make Claude model picker configurable (#183)
Unverified signature* Add agent dev server notes * Make frontend model configurable * Support env-selected frontend models * Use Claude-specific model env var * Add GPT-5.5 to web model picker * Gate GPT-5.5 as a premium model * Avoid duplicate session model fetch * Remove legacy Claude quota aliases * Document GitHub CLI PR body workflow * Gate only deployed paid model IDs * Nits5db99fa