🧭 Protocol: Plan Mode config + events

.a5c/config.yml

@@ -0,0 +1,26 @@
+remote_agents:
+  enabled: true
+  cache_timeout: 120
+  retry_attempts: 5
+  retry_delay: 2000
+  sources:
+    individual:
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/development/developer-agent.agent.md
+        alias: developer-agent
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/development/validator-agent.agent.md
+        alias: validator-agent
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/development/build-fixer-agent.agent.md
+        alias: build-fixer-agent
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/research/researcher-base-agent.agent.md
+        alias: researcher-base-agent
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/communication/content-writer-agent.agent.md
+        alias: content-writer-agent
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/development/producer-agent.agent.md
+        alias: producer-agent
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/development/conflict-resolver-agent.agent.md
+        alias: conflict-resolver-agent
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/development/recruiter-agent.agent.md
+        alias: recruiter-agent
+      - uri: https://raw.githubusercontent.com/a5c-ai/registry/main/agents/development/product-optimizer-agent.agent.md
+        alias: product-optimizer-agent
+    groups: {}

.github/workflows/a5c.yml

@@ -0,0 +1,135 @@
+# Template for a5c agent workflow aligned to pnpm/Corepack.
+# Maintainers: this template is authoritative. Please sync into
+# .github/workflows/a5c.yml so the active workflow uses pnpm caching:
+#   - actions/setup-node@v4 with `cache: pnpm`
+#   - `cache-dependency-path: pnpm-lock.yaml`
+
+name: a5c
+
+env:
+  DISABLE_AUTOUPDATER: 1
+  CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: 1
+  ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+  AZURE_OPENAI_PROJECT_NAME: ${{ vars.AZURE_OPENAI_PROJECT_NAME || '' }}
+  AZURE_OPENAI_API_KEY: ${{ secrets.AZURE_OPENAI_API_KEY || '' }}
+  OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY || '' }}
+  DEBUG: ${{ github.event.inputs.debug || 'false' }}
+  GITHUB_TOKEN: ${{ secrets.A5C_AGENT_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+  # Optional: supply a GitHub App token for validator checks
+  # A5C_AGENT_GITHUB_TOKEN: ${{ secrets.A5C_AGENT_GITHUB_TOKEN }}
+  # Feature flags for validator checks behavior
+  # A5C_VALIDATOR_ENABLE_CHECKS: "true"   # set false to disable Check Runs
+  # A5C_VALIDATOR_USE_STATUSES: "false"   # if supported, use commit statuses instead of checks
+  DISCORD_TOKEN: ${{ secrets.DISCORD_TOKEN }}
+  DISCORD_GUILD_ID: ${{ vars.DISCORD_GUILD_ID }}
+  A5C_CLI_TOOL: ${{ vars.A5C_CLI_TOOL }}
+  SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN || '' }}
+  SLACK_SIGNING_SECRET: ${{ secrets.SLACK_SIGNING_SECRET || '' }}
+  SLACK_APP_TOKEN: ${{ secrets.SLACK_APP_TOKEN || '' }}
+  VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN || '' }}
+  VERCEL_ORG_ID: ${{ vars.VERCEL_ORG_ID || '' }}
+  VERCEL_PROJECT_ID: ${{ vars.VERCEL_PROJECT_ID || '' }}
+  SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN || '' }}
+  SUPABASE_ORG_ID: ${{ vars.SUPABASE_ORG_ID || '' }}
+  SUPABASE_PROJECT_REF: ${{ vars.SUPABASE_PROJECT_REF || '' }}
+  SUPABASE_PROJECT_URL: ${{ vars.SUPABASE_PROJECT_URL || '' }}
+  SUPABASE_DB_PASSWORD: ${{ secrets.SUPABASE_DB_PASSWORD || '' }}
+  STRIPE_SECRET_KEY: ${{ secrets.STRIPE_SECRET_KEY || '' }}
+  STRIPE_PUBLISHABLE_KEY: ${{ secrets.STRIPE_PUBLISHABLE_KEY || '' }}
+  STRIPE_WEBHOOK_SECRET: ${{ secrets.STRIPE_WEBHOOK_SECRET || '' }}
+  STRIPE_WEBHOOK_URL: ${{ vars.STRIPE_WEBHOOK_URL || '' }}
+  STRIPE_WEBHOOK_ID: ${{ vars.STRIPE_WEBHOOK_ID || '' }}
+  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID || '' }}
+  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY || '' }}
+  AWS_REGION: ${{ vars.AWS_REGION || '' }}
+  GOOGLE_APPLICATION_CREDENTIALS: ${{ secrets.GOOGLE_APPLICATION_CREDENTIALS || '' }}
+  AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID || '' }}
+  AZURE_CLIENT_SECRET: ${{ secrets.AZURE_CLIENT_SECRET || '' }}
+  AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID || '' }}
+  AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID || '' }}
+  AZURE_ACR_NAME: ${{ vars.AZURE_ACR_NAME || '' }}
+  GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID || '' }}
+  GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET || '' }}
+  AUTH_GITHUB_CLIENT_ID: ${{ secrets.AUTH_GITHUB_CLIENT_ID || '' }}
+  AUTH_GITHUB_CLIENT_SECRET: ${{ secrets.AUTH_GITHUB_CLIENT_SECRET || '' }}
+  AUTH_GITHUB_ORG_ID: ${{ vars.AUTH_GITHUB_ORG_ID || '' }}
+  AUTH_GITHUB_ORG_NAME: ${{ vars.AUTH_GITHUB_ORG_NAME || '' }}
+  AUTH_GITHUB_ORG_DESCRIPTION: ${{ vars.AUTH_GITHUB_ORG_DESCRIPTION || '' }}
+  HEROKU_API_KEY: ${{ secrets.HEROKU_API_KEY || '' }}
+  HEROKU_APP_NAME: ${{ vars.HEROKU_APP_NAME || '' }}
+  HEROKU_APP_ID: ${{ vars.HEROKU_APP_ID || '' }}
+  HEROKU_APP_URL: ${{ vars.HEROKU_APP_URL || '' }}
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    branches: [main, develop, master]
+  push:
+    branches: []
+  issues:
+    types: [opened]
+  issue_comment:
+    types: [created]
+  schedule:
+    - cron: '*/30 * * * *'
+  workflow_run:
+    types: [completed]
+    workflows: [Build,Deploy,Tests,Release,E2E Tests,Infrastructure Deployment,Integration Tests,rust-ci]
+  workflow_dispatch:
+    inputs:
+      agent_uri:
+        description: 'Specific agent to run (optional - leave empty for auto-routing)'
+        required: false
+      debug:
+        description: 'Enable debug mode'
+        required: false
+        default: false
+        type: boolean
+
+jobs:
+  a5c:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      security-events: write
+      actions: write
+      attestations: write
+      checks: write
+      deployments: write
+      discussions: write
+      id-token: write
+      models: read
+      packages: write
+      pages: write
+      statuses: write
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Filter Self Workflow-run
+        id: filter-self
+        if: github.event_name == 'workflow_run' && (github.event.workflow_run.conclusion != 'failure' || github.event.workflow_run.head_branch != 'main')
+        run: |
+          echo "skip=true" >> "$GITHUB_OUTPUT"
+
+      - name: Run A5C
+        id: agents
+        if: steps.filter-self.outputs.skip != 'true'
+        uses: a5c-ai/action@main
+        with:
+          agent_uri: ${{ github.event.inputs.agent_uri || '' }}
+          github_token: ${{ secrets.A5C_AGENT_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+
+      - name: Upload artifacts
+        id: upload-artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: a5c-artifacts
+          path: |
+            /tmp/agent-output.md
+            /tmp/agent-output-*/**

README.md

@@ -83,6 +83,7 @@ Codex CLI supports a rich set of configuration options, with preferences stored
   - [Login on a "Headless" machine](./docs/authentication.md#connecting-on-a-headless-machine)
 - [**Advanced**](./docs/advanced.md)
   - [Non-interactive / CI mode](./docs/advanced.md#non-interactive--ci-mode)
+  - [Automation with codex exec](./docs/automation-exec.md)
   - [Tracing / verbose logging](./docs/advanced.md#tracing--verbose-logging)
   - [Model Context Protocol (MCP)](./docs/advanced.md#model-context-protocol-mcp)
 - [**Zero data retention (ZDR)**](./docs/zdr.md)
@@ -99,4 +100,3 @@ Codex CLI supports a rich set of configuration options, with preferences stored
 ## License
 
 This repository is licensed under the [Apache-2.0 License](LICENSE).
-

codex-cli/scripts/install_native_deps.sh

@@ -20,7 +20,7 @@ CODEX_CLI_ROOT=""
 # Until we start publishing stable GitHub releases, we have to grab the binaries
 # from the GitHub Action that created them. Update the URL below to point to the
 # appropriate workflow run:
-WORKFLOW_URL="https://github.com/openai/codex/actions/runs/16840150768" # rust-v0.20.0-alpha.2
+WORKFLOW_URL="https://github.com/a5c-incubator/codex/actions/runs/17322665068" # rust-v0.20.0-alpha.2
 
 while [[ $# -gt 0 ]]; do
   case "$1" in

codex-rs/README.md

@@ -63,6 +63,18 @@ codex completion zsh
 codex completion fish
 ```
 
+### Usage and Guardrail Resets
+
+Check your current guardrail usage and next reset times via:
+
+```
+codex usage
+# or
+codex /usage
+```
+
+When usage data is unavailable, the command prints a clear, non-fatal message and exits successfully.
+
 ### Experimenting with the Codex Sandbox
 
 To test to see what happens when a command is run under the sandbox provided by Codex, we provide the following subcommands in Codex CLI:

codex-rs/chatgpt/src/lib.rs

@@ -2,3 +2,4 @@ pub mod apply_command;
 mod chatgpt_client;
 mod chatgpt_token;
 pub mod get_task;
+pub mod usage;

codex-rs/chatgpt/src/usage.rs

@@ -0,0 +1,80 @@
+use anyhow::Context;
+use codex_core::config::Config;
+use serde::Deserialize;
+
+use crate::chatgpt_client::chatgpt_get_request;
+
+/// High-level summary of guardrail usage for display in CLI.
+#[derive(Debug, Clone, Default)]
+pub struct UsageSummary {
+    pub plan: Option<String>,
+    pub standard_used_minutes: Option<u64>,
+    pub standard_limit_minutes: Option<u64>,
+    pub reasoning_used_minutes: Option<u64>,
+    pub reasoning_limit_minutes: Option<u64>,
+    pub next_reset_at: Option<String>,
+}
+
+/// Flexible wire model so we can tolerate backend changes without breaking the CLI.
+#[derive(Debug, Deserialize)]
+struct RawUsage {
+    #[serde(default)]
+    plan: Option<String>,
+    #[serde(default)]
+    next_reset_at: Option<String>,
+    #[serde(default)]
+    reset_at: Option<String>,
+    #[serde(default)]
+    standard: Option<Bucket>,
+    #[serde(default)]
+    reasoning: Option<Bucket>,
+}
+
+#[derive(Debug, Deserialize)]
+struct Bucket {
+    #[serde(default)]
+    used_minutes: Option<u64>,
+    #[serde(default)]
+    limit_minutes: Option<u64>,
+    #[serde(default)]
+    used: Option<u64>,
+    #[serde(default)]
+    limit: Option<u64>,
+}
+
+impl From<RawUsage> for UsageSummary {
+    fn from(raw: RawUsage) -> Self {
+        let plan = raw.plan;
+        let next_reset_at = raw.next_reset_at.or(raw.reset_at);
+        let (mut standard_used_minutes, mut standard_limit_minutes) = (None, None);
+        let (mut reasoning_used_minutes, mut reasoning_limit_minutes) = (None, None);
+
+        if let Some(b) = raw.standard {
+            standard_used_minutes = b.used_minutes.or(b.used);
+            standard_limit_minutes = b.limit_minutes.or(b.limit);
+        }
+        if let Some(b) = raw.reasoning {
+            reasoning_used_minutes = b.used_minutes.or(b.used);
+            reasoning_limit_minutes = b.limit_minutes.or(b.limit);
+        }
+
+        UsageSummary {
+            plan,
+            standard_used_minutes,
+            standard_limit_minutes,
+            reasoning_used_minutes,
+            reasoning_limit_minutes,
+            next_reset_at,
+        }
+    }
+}
+
+/// Fetch ChatGPT guardrail usage using the current auth and config.
+pub async fn get_usage(config: &Config) -> anyhow::Result<UsageSummary> {
+    // This path is provided by the ChatGPT backend for Codex usage display.
+    // The structure is intentionally parsed via a flexible wire model.
+    let raw: RawUsage = chatgpt_get_request(config, "/wham/usage".to_string())
+        .await
+        .context("Failed to fetch usage from ChatGPT backend")?;
+    Ok(raw.into())
+}

codex-rs/cli/src/lib.rs

@@ -2,6 +2,7 @@ pub mod debug_sandbox;
 mod exit_status;
 pub mod login;
 pub mod proto;
+pub mod usage;
 
 use clap::Parser;
 use codex_common::CliConfigOverrides;

codex-rs/cli/src/main.rs

@@ -12,12 +12,14 @@ use codex_cli::login::run_login_with_api_key;
 use codex_cli::login::run_login_with_chatgpt;
 use codex_cli::login::run_logout;
 use codex_cli::proto;
+use codex_cli::usage::run_usage_command;
 use codex_common::CliConfigOverrides;
 use codex_exec::Cli as ExecCli;
 use codex_tui::Cli as TuiCli;
 use std::path::PathBuf;
 
 use crate::proto::ProtoCli;
+use codex_cli::usage::UsageCommand;
 
 /// Codex CLI
 ///
@@ -76,6 +78,10 @@ enum Subcommand {
     /// Internal: generate TypeScript protocol bindings.
     #[clap(hide = true)]
     GenerateTs(GenerateTsCommand),
+
+    /// Show current guardrail usage and reset times.
+    #[clap(visible_alias = "/usage")]
+    Usage(UsageCommand),
 }
 
 #[derive(Debug, Parser)]
@@ -212,6 +218,10 @@ async fn cli_main(codex_linux_sandbox_exe: Option<PathBuf>) -> anyhow::Result<()
         Some(Subcommand::GenerateTs(gen_cli)) => {
             codex_protocol_ts::generate_ts(&gen_cli.out_dir, gen_cli.prettier.as_deref())?;
         }
+        Some(Subcommand::Usage(mut usage_cli)) => {
+            prepend_config_flags(&mut usage_cli.config_overrides, cli.config_overrides);
+            run_usage_command(usage_cli.config_overrides).await?;
+        }
     }
 
     Ok(())