Function main

actions/setup/js/codex_harness.cjs:353–563

* Main entry point: run codex with retry logic for transient API failures. * Codex does not support --continue session resumption, so all retries are fresh runs.

()

 * Codex does not support --continue session resumption, so all retries are fresh runs.
 */
async function main() {
  const [, , command, ...args] = process.argv;

  if (!command) {
    process.stderr.write("codex-harness: Usage: node codex_harness.cjs <command> [args...]\n");
    process.exit(1);
  }

  log(`starting: command=${command} maxRetries=${MAX_RETRIES} initialDelayMs=${INITIAL_DELAY_MS}` + ` backoffMultiplier=${BACKOFF_MULTIPLIER} maxDelayMs=${MAX_DELAY_MS}` + ` nodeVersion=${process.version} platform=${process.platform}`);

  // Pre-flight: skip the agent entirely when a noop has already been written by a prior step.
  // A noop indicates the work is complete or there is nothing to do — starting the agent
  // would be wasteful and potentially harmful.  This check runs before API key validation so
  // that a noop can be honoured even when credentials are absent.
  const safeOutputsPath = process.env.GH_AW_SAFE_OUTPUTS || "";
  if (safeOutputsPath && hasNoopInSafeOutputs(safeOutputsPath, { logger: log })) {
    log("pre-flight: noop message found in safe-outputs — skipping agent (work is already complete or no work needed)");
    process.exit(0);
  }

  // Diagnose API key presence so CI failures can be triaged without exposing secret values.
  const codexApiKey = process.env.CODEX_API_KEY;
  const openaiApiKey = process.env.OPENAI_API_KEY;
  const codexChildEnv = buildCodexChildEnv(process.env, codexApiKey, openaiApiKey);
  log(`secrets: CODEX_API_KEY=${codexApiKey ? `set (length=${codexApiKey.length})` : "not set"}` + ` OPENAI_API_KEY=${openaiApiKey ? `set (length=${openaiApiKey.length})` : "not set"}`);

  // Pre-flight: require at least one API key before spawning codex.
  // Without a key, codex exits immediately with "Missing environment variable" and every
  // retry attempt fails the same way. Failing here avoids burning the retry budget and
  // surfaces a clear, actionable message in CI logs.
  if (!codexApiKey && !openaiApiKey) {
    log("fatal: no API key available - set CODEX_API_KEY or OPENAI_API_KEY and retry");
    process.exit(1);
  }

  // Resolve the prompt for the initial run (reads --prompt-file content).
  // A missing or unreadable prompt file is treated as a fatal startup error.
  let resolvedArgs;
  try {
    resolvedArgs = resolveCodexPromptFileArgs(args);
  } catch (err) {
    const e = /** @type {Error} */ err;
    log(`fatal: ${e.message}`);
    process.exit(1);
  }

  // Safe arg list for logging: when --prompt-file was present, the last element of
  // resolvedArgs is the resolved prompt content. Replace it with a placeholder so that
  // task instructions are never written to stderr or captured in agent logs.
  const hadPromptFile = args.includes("--prompt-file");
  const safeArgs = hadPromptFile && resolvedArgs.length > 0 ? [...resolvedArgs.slice(0, -1), "<prompt omitted>"] : resolvedArgs;

  // Inject --json after `exec` to stream structured JSONL events to stdout, making
  // Codex output machine-readable in CI without affecting the stderr progress stream.
  resolvedArgs = injectJsonFlag(resolvedArgs);

  // Fetch AWF API proxy reflection data before running the agent to capture initial proxy state.
  // This is best-effort: failures are logged but do not affect the agent run.