switch Codex Harness to OpenCode API

Dockerfile

@@ -6,8 +6,8 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     python3 python3-pip python3-venv ca-certificates curl git bash procps \
     && rm -rf /var/lib/apt/lists/*
 
-# CodeWhale is the current continuation of DeepSeek-TUI.
-RUN npm install -g codewhale@0.9.10 @openai/codex
+# Official OpenAI Codex CLI runtime.
+RUN npm install -g @openai/codex
 
 RUN usermod -l user -d /home/user -m node && groupmod -n user node
 
@@ -15,7 +15,7 @@ ENV HOME=/home/user \
     PATH=/home/user/.local/bin:/usr/local/bin:$PATH \
     PYTHONUNBUFFERED=1 \
     PORT=7860 \
-    DEEPSEEK_MCP_CONFIG=/home/user/app/.codewhale/mcp.json
+
 
 WORKDIR /home/user/app
 

README.md

@@ -100,10 +100,10 @@ favorites and preferences. Backups exclude credentials, tokens and uploaded
 file contents, providing a manual cross-device migration path without claiming
 server-side synchronization.
 
-Custom chat UI backed by CodeWhale/DeepSeek and a restricted Marine MCP bridge.
+Custom chat UI backed by OpenAI Codex/OpenCode and a restricted Marine MCP bridge.
 
 Public UI: port 7860.
-Private CodeWhale Runtime: 127.0.0.1:7878.
+Private OpenAI Codex Runtime: 127.0.0.1:7878.
 The Runtime token never enters the browser.
 
 ## Functional sidebar

harness_safe.cordis.yml

@@ -1,31 +1,11 @@
-- id: sdk-jsonrpc-server
-  name: '@deepseek-ai/dsh-sdk-jsonrpc-server'
-  config:
-    maxTokensAsSuccess: true
-
-- id: llm-deepseek
-  name: '@deepseek-ai/dsh-llm-deepseek'
-  config:
-    apiKeyEnv: DEEPSEEK_API_KEY
-    streamIdleTimeoutMs: 300000
-    models:
-      - id: !!js process.env.DSH_MODEL ?? 'glm-5.2'
-        contextWindow: !!js Number(process.env.DSH_CONTEXT_WINDOW ?? 128000)
+# Codex Harness configuration
+# Model execution is handled by official OpenAI Codex CLI.
+# Provider endpoint/key are injected through OPENAI-compatible environment variables.
 
-- id: agent-spine
-  name: '@deepseek-ai/dsh-agent-spine-demo'
+- id: codex-harness
+  name: "@openai/codex"
   config:
-    includeHarnessIdentity: true
-    includeRuntimeContext: false
-    persona: !!js process.env.DSH_SYSTEM_PROMPT ?? 'You are Global Marine Foundation Data Agent. Reply in Chinese by default. Only output the final answer.'
-    workspaceContext: false
-    skills:
-      enabled: false
-    toolBash: false
-    toolJobs: false
+    modelEnv: CODEX_MODEL
+    apiKeyEnv: OPENAI_API_KEY
+    baseUrlEnv: OPENAI_BASE_URL
 
-- id: sessions
-  name: '@deepseek-ai/dsh-session-persistence-jsonl'
-  config:
-    root: !!js process.env.DSH_SESSION_ROOT ?? '/tmp/deepseek-harness-sessions'
-    compression: none

services/chat_runtime.py

@@ -263,7 +263,7 @@ async def stream_chat(tid,prompt):
             })
         turn=((tr or {}).get("turn") or {}).get("id")
         answer=""
-        yield out("status",{"text":"DeepSeek 正在处理…","stage":"compose","step":4,"total_steps":5})
+        yield out("status",{"text":"Codex 正在处理…","stage":"compose","step":4,"total_steps":5})
 
         async for rec in events(tid,since):
             if turn and rec.get("turn_id") and rec["turn_id"]!=turn:
@@ -364,7 +364,7 @@ async def stream_chat(tid,prompt):
                     if detail:
                         raise RuntimeError(detail)
                     raise RuntimeError(
-                        "DeepSeek 回合已结束，但 CodeWhale 没有产生 assistant 文本。"
+                        "Codex 回合已结束，但 CodeWhale 没有产生 assistant 文本。"
                     )
                 final_answer=_sanitize_final_answer(answer)
                 if not final_answer:

start.sh

@@ -8,33 +8,34 @@ python3 /home/user/app/scripts/preflight.py
 # Required non-model settings
 # ============================================================
 
-: "${CODEWHALE_RUNTIME_TOKEN:?Missing CODEWHALE_RUNTIME_TOKEN secret}"
 : "${MARINE_API_URL:?Missing MARINE_API_URL variable}"
 
 # ============================================================
 # Model key
 #
-# We do NOT require or use DEEPSEEK_API_KEY.
+# We do NOT require or use OPENCODE_API_KEY.
 # Prefer the dedicated OpenCode Go secret.
 # Fall back to OPENAI_API_KEY only if you chose to store the same
 # OpenCode Go key under that name in Hugging Face.
 # ============================================================
 
-MODEL_API_KEY="${OPENAI_API_KEY:-}"
+MODEL_API_KEY="${OPENCODE_API_KEY:-${OPENAI_API_KEY:-}}"
 
 if [ -z "${MODEL_API_KEY}" ]; then
   echo "[startup] ERROR: no OpenCode Go key was injected."
-  echo "[startup] Expected: OPENAI_API_KEY"
+  echo "[startup] Expected: OPENCODE_API_KEY or OPENAI_API_KEY"
   echo "[startup] Available environment variable names containing KEY/API:"
   env | cut -d= -f1 | grep -E 'KEY|API' | sort || true
   exit 1
 fi
 
 # ============================================================
-# Force CodeWhale to OpenCode Go -> GLM-5.3
+# Official OpenAI Codex CLI runtime
 # ============================================================
 
 export OPENAI_API_KEY="${MODEL_API_KEY}"
+# OpenCode is an OpenAI-compatible provider for Codex CLI
+export OPENAI_BASE_URL="${OPENCODE_BASE_URL:-${OPENAI_BASE_URL:-}}"
 export CODEX_MODEL="${CODEX_MODEL:-gpt-5-codex}"
 
 # ============================================================
@@ -42,7 +43,6 @@ export CODEX_MODEL="${CODEX_MODEL:-gpt-5-codex}"
 # ============================================================
 
 export PORT="${PORT:-7860}"
-export CODEWHALE_INTERNAL_URL="http://127.0.0.1:7878"
 export FISHERIES_EXPORT_ROOT="${FISHERIES_EXPORT_ROOT:-/tmp/squid_fisheries_exports}"
 export HF_FISHERIES_CACHE_ROOT="${HF_FISHERIES_CACHE_ROOT:-/tmp/squid_hf_fisheries_cache}"
 if [ -z "${PUBLIC_BASE_URL:-}" ] && [ -n "${SPACE_HOST:-}" ]; then
@@ -53,7 +53,7 @@ fi
 # Build private Marine MCP runtime configuration
 # ============================================================
 
-RUNTIME_MCP_CONFIG="/tmp/codewhale-marine-mcp.json"
+RUNTIME_MCP_CONFIG="/tmp/codex-marine-mcp.json"
 export RUNTIME_MCP_CONFIG
 
 python3 - <<'PY_MCP_CONFIG'
@@ -117,49 +117,6 @@ p.chmod(0o600)
 print("[startup] private Marine MCP runtime config ready")
 PY_MCP_CONFIG
 
-# Legacy CodeWhale MCP-config variable name.
-# This only points to the MCP config file; it does NOT select DeepSeek.
-export DEEPSEEK_MCP_CONFIG="${RUNTIME_MCP_CONFIG}"
-
-# ============================================================
-# Startup information
-# ============================================================
-
-echo "[startup] CodeWhale:"
-codewhale --version
-echo "[startup] provider=${CODEWHALE_PROVIDER}"
-echo "[startup] model=${CODEWHALE_MODEL}"
-echo "[startup] endpoint=${OPENAI_BASE_URL:-}"
-echo "[startup] OpenCode Go key present=yes"
-
-# ============================================================
-# Start CodeWhale Runtime
-# ============================================================
-
-codewhale app-server --http \
-  --host 127.0.0.1 \
-  --port 7878 \
-  --auth-token "${CODEWHALE_RUNTIME_TOKEN}" &
-
-CW_PID=$!
-trap 'kill "$CW_PID" 2>/dev/null || true' EXIT INT TERM
-
-for i in $(seq 1 60); do
-  if curl -fsS --max-time 2 \
-    http://127.0.0.1:7878/health \
-    >/dev/null 2>&1; then
-    echo "[startup] private CodeWhale Runtime ready"
-    break
-  fi
-
-  kill -0 "$CW_PID" 2>/dev/null || {
-    echo "[startup] CodeWhale exited"
-    exit 1
-  }
-
-  sleep 1
-done
-
 # ============================================================
 # Marine API health check
 # ============================================================

static/js/app.js

@@ -905,7 +905,7 @@ function openServiceDiagnostics(data,appState){
   document.querySelector(".drawer-backdrop")?.remove();
   const marine=data.marine||{},hf=data.huggingface||{},d=data.diagnostic||{};
   const items=[
-    ["DeepSeek Harness",!!(appState.harness_available||appState.runtime),null,appState.harness_model||appState.model||"-"],
+    ["OpenAI Codex Harness",!!(appState.harness_available||appState.runtime),null,appState.harness_model||appState.model||"-"],
     ["Marine API",!!marine.health?.ok,marine.health?.response_ms,serviceText(marine.health)],
     ["Domains",!!marine.domains?.ok,marine.domains?.response_ms,serviceText(marine.domains)],
     ["Ocean",!!marine.ocean?.ok,marine.ocean?.response_ms,serviceText(marine.ocean)],
@@ -961,7 +961,7 @@ async function renderServices(){
     const [appState,data]=await Promise.all([j("/api/status"),j("/api/sidebar/services")]);
     const marine=data.marine||{},hf=data.huggingface||{},d=data.diagnostic||{};
     const rows=[
-      {name:appState.harness_available?"DeepSeek Harness":"CodeWhale Runtime",ok:!!(appState.harness_available||appState.runtime),detail:"模型："+(appState.harness_model||appState.model||"-"),ms:null},
+      {name:appState.harness_available?"OpenAI Codex Harness":"OpenAI Codex Runtime",ok:!!(appState.harness_available||appState.runtime),detail:"模型："+(appState.harness_model||appState.model||"-"),ms:null},
       {name:"学校 Marine API",ok:!!marine.health?.ok,detail:serviceText(marine.health),ms:marine.health?.response_ms},
       {name:"Ocean 数据域",ok:!!marine.ocean?.ok,detail:serviceText(marine.ocean),ms:marine.ocean?.response_ms},
       {name:"Tuna 渔业数据",ok:!!hf.ok&&Number(hf.tuna_file_count||0)>0,detail:hf.ok?("Hugging Face Dataset · "+(hf.tuna_file_count||0)+" 个匹配文件 · "+formatBytes(hf.tuna_size_bytes)):(hf.error||"读取失败"),ms:hf.response_ms},
@@ -1516,8 +1516,8 @@ async function status(){
     const ok=llmOk&&s.marine_api;
     $("dot").className="dot "+(ok?"ok":"warn");
     const runtimeName=s.harness_available
-      ? "DeepSeek Harness"
-      : "CodeWhale fallback";
+      ? "OpenAI Codex Harness"
+      : "OpenAI Codex fallback";
     $("st").textContent=ok
       ? runtimeName+" · "+(s.marine_mcp?"Ocean MCP 已连接":"数据服务在线")
       : "部分服务不可用";

ui_server.py

@@ -2746,7 +2746,7 @@ input::placeholder{color:#526f86}
     <div class="visual-copy">
       <span class="eyebrow"><i></i>SECURE RESEARCH WORKSPACE</span>
       <h1>连接全球海洋数据<br>与智能分析能力</h1>
-      <p>统一访问 Ocean、Tuna 与 Squid 数据资产，连接学校数据服务器、DeepSeek Harness 与 Marine MCP。</p>
+      <p>统一访问 Ocean、Tuna 与 Squid 数据资产，连接学校数据服务器、OpenAI Codex Harness 与 Marine MCP。</p>
     </div>
     <div class="feature-row">
       <span class="feature">🌊 Ocean Data</span>