feat: add codex support and optimize runtime transport

.changeset/README.md

@@ -0,0 +1,10 @@
+# Changesets
+
+This repository uses Changesets to maintain the CLI release PR and changelog.
+
+Current policy:
+
+- Normal PRs may omit a changeset.
+- If a PR should be released, add a changeset for `@spencer-kit/coder-studio`.
+- Internal workspace changes that affect the CLI should still be described under the CLI package.
+- Non-CLI packages are currently internal-only and must not be targeted by changesets.

.changeset/config.json

@@ -1,17 +1,14 @@
 {
-  "$schema": "https://unpkg.com/@changesets/config@3.1.1/schema.json",
-  "changelog": "@changesets/cli/changelog",
+  "$schema": "https://unpkg.com/@changesets/config@3.1.4/schema.json",
+  "changelog": [
+    "@changesets/changelog-github",
+    {
+      "repo": "spencerkit/coder-studio"
+    }
+  ],
   "commit": false,
   "fixed": [],
-  "linked": [
-    [
-      "@spencer-kit/coder-studio",
-      "@spencer-kit/coder-studio-linux-x64",
-      "@spencer-kit/coder-studio-darwin-arm64",
-      "@spencer-kit/coder-studio-darwin-x64",
-      "@spencer-kit/coder-studio-win32-x64"
-    ]
-  ],
+  "linked": [],
   "access": "public",
   "baseBranch": "main",
   "updateInternalDependencies": "patch",

.github/workflows/ci.yml

@@ -1,120 +1,49 @@
 name: CI
 
 on:
+  pull_request:
   push:
     branches:
       - main
-  pull_request:
-
-permissions:
-  contents: read
 
 concurrency:
-  group: ci-${{ github.workflow }}-${{ github.ref }}
+  group: ci-${{ github.event_name }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
-  version-consistency:
-    name: Version Consistency
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --no-frozen-lockfile
-      - run: pnpm version:check
+  verify:
+    name: Lint, test, and build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
-  cli-cross-platform:
-    name: CLI Unit (${{ matrix.os }})
-    runs-on: ${{ matrix.os }}
-    needs: version-consistency
-    strategy:
-      fail-fast: false
-      matrix:
-        os:
-          - ubuntu-22.04
-          - macos-latest
-          - windows-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --no-frozen-lockfile
-      - run: pnpm test:cli
+      - name: Checkout repository
+        uses: actions/checkout@v4
 
-  transport-windows-smoke:
-    name: Transport Windows Smoke
-    runs-on: windows-2022
-    needs: version-consistency
-    steps:
-      - uses: actions/checkout@v4
-      - uses: dtolnay/rust-toolchain@stable
-      - name: Install Windows GNU target
-        run: rustup target add x86_64-pc-windows-gnu
-      - uses: Swatinem/rust-cache@v2
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
         with:
-          workspaces: apps/server -> .build/server/target
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --no-frozen-lockfile
-      - run: npx playwright install chromium
-      # Pin this smoke to windows-2022 because windows-latest currently tracks
-      # windows-2025 and GitHub-hosted windows-2025 does not reliably provide WSL.
-      - run: pnpm test:smoke:windows:transport -- --skip-wsl-preflight
+          version: 10.33.2
+          run_install: false
 
-  verify-linux:
-    name: Verify Linux Runtime
-    runs-on: ubuntu-22.04
-    needs: version-consistency
-    env:
-      CODER_STUDIO_START_TIMEOUT_MS: 45000
-      CODER_STUDIO_RUST_TARGET: x86_64-unknown-linux-musl
-    steps:
-      - uses: actions/checkout@v4
-      - name: Install Linux build dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y \
-            build-essential \
-            curl \
-            file \
-            musl-tools \
-            xvfb \
-            wget
-      - uses: dtolnay/rust-toolchain@stable
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
-          components: rustfmt, clippy
-      - name: Install Linux musl target
-        run: rustup target add x86_64-unknown-linux-musl
-      - uses: Swatinem/rust-cache@v2
-        with:
-          workspaces: apps/server -> .build/server/target
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: pnpm
-      - run: pnpm install --no-frozen-lockfile
-      - run: pnpm test:cli
-      - run: cargo fmt --manifest-path apps/server/Cargo.toml --all --check
-      - run: cargo clippy --manifest-path apps/server/Cargo.toml --all-targets -- -D warnings
-      - run: cargo check --manifest-path apps/server/Cargo.toml
-      - run: cargo test --manifest-path apps/server/Cargo.toml
-      - run: pnpm pack:local
-      - run: xvfb-run -a pnpm test:smoke
-      - run: npx playwright install --with-deps chromium
-      - run: xvfb-run -a pnpm test:e2e:release
-      - uses: actions/upload-artifact@v4
-        if: success()
-        with:
-          name: release-artifacts-linux
-          path: .artifacts/*
+          node-version: "24"
+          cache: "pnpm"
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Validate changesets metadata
+        run: pnpm changeset:validate
+
+      - name: Run lint
+        run: pnpm ci:lint
+
+      - name: Run tests
+        run: pnpm ci:test
+
+      - name: Run production build
+        run: pnpm ci:build

.github/workflows/publish.yml

@@ -0,0 +1,106 @@
+name: Publish CLI
+
+on:
+  workflow_dispatch:
+    inputs:
+      npm_tag:
+        description: "npm dist-tag to publish under"
+        required: true
+        default: "latest"
+        type: string
+
+concurrency:
+  group: publish-cli
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    name: Publish CLI package
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Ensure publish runs from main
+        run: |
+          if [ "${GITHUB_REF_NAME}" != "main" ]; then
+            echo "Publish workflow must run from main" >&2
+            exit 1
+          fi
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.33.2
+          run_install: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          cache: "pnpm"
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Ensure there are no pending release changesets
+        run: |
+          pending_changesets=$(find .changeset -maxdepth 1 -type f -name '*.md' ! -name 'README.md')
+          if [ -n "${pending_changesets}" ]; then
+            echo "Pending changesets exist. Merge the generated release PR before publishing." >&2
+            echo "${pending_changesets}" >&2
+            exit 1
+          fi
+
+      - name: Run release validation
+        run: pnpm ci:release:validate
+
+      - name: Read CLI version
+        id: release
+        run: |
+          version=$(node --input-type=module -e "import { readFileSync } from 'node:fs'; console.log(JSON.parse(readFileSync('packages/cli/package.json', 'utf8')).version)")
+          if [ -z "${version}" ]; then
+            echo "Failed to determine CLI version" >&2
+            exit 1
+          fi
+          echo "version=${version}" >> "${GITHUB_OUTPUT}"
+          echo "tag=v${version}" >> "${GITHUB_OUTPUT}"
+
+      - name: Ensure release tag does not already exist
+        run: |
+          if git rev-parse --verify --quiet "refs/tags/${{ steps.release.outputs.tag }}" >/dev/null; then
+            echo "Release tag ${{ steps.release.outputs.tag }} already exists" >&2
+            exit 1
+          fi
+
+      - name: Publish CLI to npm
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: |
+          if [ -z "${NODE_AUTH_TOKEN}" ]; then
+            echo "NPM_TOKEN secret is required for publishing" >&2
+            exit 1
+          fi
+          pnpm publish:cli -- --publish --no-build --tag "${{ inputs.npm_tag }}"
+
+      - name: Create and push release tag
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git tag "${{ steps.release.outputs.tag }}"
+          git push origin "${{ steps.release.outputs.tag }}"
+
+      - name: Create GitHub release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create "${{ steps.release.outputs.tag }}" \
+            --title "@spencer-kit/coder-studio ${{ steps.release.outputs.version }}" \
+            --generate-notes \
+            --verify-tag

.github/workflows/release-pr.yml

@@ -0,0 +1,51 @@
+name: Release PR
+
+on:
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: release-pr-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  release-pr:
+    name: Create or update release PR
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.33.2
+          run_install: false
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          cache: "pnpm"
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Validate changesets metadata
+        run: pnpm changeset:validate
+
+      - name: Create or update release PR
+        uses: changesets/action@v1
+        with:
+          version: pnpm version-packages
+          commit: "release: version packages"
+          title: "release: version packages"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}