Discover newly installed Codex without requiring a desktop relogin

Author: Fook Me

packages/shadowfetch-missions/data/usr/lib/shadowfetch/missions/sf_mission_account.py

@@ -13,6 +13,11 @@ class AccountError(RuntimeError):
     pass
 
 
+def codex_executable():
+    """Find a first-run install before the desktop has refreshed its PATH."""
+    return shutil.which('codex') or shutil.which('codex', path=str(Path.home() / '.local/bin'))
+
+
 def account_home(*, create=False):
     home = Path.home()
     parent = home
@@ -65,7 +70,7 @@ def main(argv=None):
     try:
         if os.getuid() == 0:
             raise AccountError('Run this as your desktop user, not root')
-        codex = shutil.which('codex')
+        codex = codex_executable()
         if not codex:
             raise AccountError('Install Codex from the agent setup first')
         home = account_home(create=args.action == 'login')

packages/shadowfetch-missions/data/usr/lib/shadowfetch/missions/sf_missions.py

@@ -361,7 +361,9 @@ def checkpoint_call(name, ws, **kwargs):
         raise MissionError(f"Workspace {name} failed: {clean(exc)}")
 
 def executable(name):
-    found = shutil.which(name)
+    sys.path.insert(0, str(Path(__file__).resolve().parent))
+    from sf_mission_account import codex_executable
+    found = codex_executable() if name == "codex" else shutil.which(name)
     if found:
         return found
     for parent in Path(__file__).resolve().parents:
@@ -786,14 +788,14 @@ def review(store, mid, decision):
 
 def capabilities():
     sys.path.insert(0, str(Path(__file__).resolve().parent))
-    from sf_mission_account import account_home, AccountError
+    from sf_mission_account import account_home, AccountError, codex_executable
     try:
         dedicated_account_present = (account_home() / "auth.json").is_file()
     except (AccountError, OSError):
         dedicated_account_present = False
     credential_file = Path.home() / ".config/shadowfetch/missions/codex.env"
     credential_file_present = credential_file.is_file() and not credential_file.is_symlink() and credential_file.stat().st_uid == os.getuid() and not stat.S_IMODE(credential_file.stat().st_mode) & 0o077
-    return {"version": VERSION, "workspace_root": str(workspace_root()), "runtimes": {"offline": {"kinds": ["media"], "requires_network_approval": False}, "codex": {"kinds": ["code", "report"], "installed": bool(shutil.which("codex")), "api_key_configured": bool(os.environ.get("CODEX_API_KEY") or os.environ.get("OPENAI_API_KEY")), "dedicated_account_present": dedicated_account_present, "worker_environment_file": str(credential_file), "worker_environment_file_present": credential_file_present, "configuration": "Run shadowfetch-mission-account login for a dedicated account, or save a user-owned0600 CODEX_API_KEY environment file and restart the idle worker. Credential presence does not verify authentication.", "requires_network_approval": True, "authentication": "Dedicated Codex account or worker API key; stored credentials are not a verified login"}}, "tools": {name: bool(shutil.which(name)) for name in ("bwrap", "ffmpeg", "ffprobe", "shadowfetch-firebreak")}, "kinds": ["code", "report", "media"], "states": ["queued", "running", "waiting-review", "completed", "failed", "cancelled", "undone"], "max_attempts": 3, "max_parallel": 1, "local_ai": "deferred", "grok_bot": "Launch the official desktop cloud teammate separately; it has no supported mission CLI adapter"}
+    return {"version": VERSION, "workspace_root": str(workspace_root()), "runtimes": {"offline": {"kinds": ["media"], "requires_network_approval": False}, "codex": {"kinds": ["code", "report"], "installed": bool(codex_executable()), "api_key_configured": bool(os.environ.get("CODEX_API_KEY") or os.environ.get("OPENAI_API_KEY")), "dedicated_account_present": dedicated_account_present, "worker_environment_file": str(credential_file), "worker_environment_file_present": credential_file_present, "configuration": "Run shadowfetch-mission-account login for a dedicated account, or save a user-owned0600 CODEX_API_KEY environment file and restart the idle worker. Credential presence does not verify authentication.", "requires_network_approval": True, "authentication": "Dedicated Codex account or worker API key; stored credentials are not a verified login"}}, "tools": {name: bool(shutil.which(name)) for name in ("bwrap", "ffmpeg", "ffprobe", "shadowfetch-firebreak")}, "kinds": ["code", "report", "media"], "states": ["queued", "running", "waiting-review", "completed", "failed", "cancelled", "undone"], "max_attempts": 3, "max_parallel": 1, "local_ai": "deferred", "grok_bot": "Launch the official desktop cloud teammate separately; it has no supported mission CLI adapter"}
 
 
 def worker(store, once=False):

packages/shadowfetch-missions/tests/test_mission_account.py

@@ -21,6 +21,15 @@ def setUp(self):
         self.patch.start()
         self.addCleanup(self.patch.stop)
 
+    def test_fresh_install_without_desktop_path_refresh(self):
+        binary = self.home / '.local/bin/codex'
+        binary.parent.mkdir(parents=True)
+        binary.write_text('#!/bin/sh\nexit 0\n')
+        with patch.dict(os.environ, {'PATH': '/nonexistent'}):
+            self.assertIsNone(account.codex_executable())
+            binary.chmod(0o755)
+            self.assertEqual(account.codex_executable(), str(binary))
+
     def test_missing_login_does_not_create_storage(self):
         with self.assertRaises(account.AccountError):
             account.account_home()

tools/qa_4_0_0/native_mission_acceptance.py

@@ -44,7 +44,7 @@ def cli(*values):
 
     try:
         capabilities = cli('capabilities')
-        check('Codex CLI installed and API key configured for this QA process', capabilities['runtimes']['codex']['installed'] and capabilities['runtimes']['codex']['api_key_configured'])
+        check('Codex CLI installed and credentials available; real inference verified below', capabilities['runtimes']['codex']['installed'] and (capabilities['runtimes']['codex']['api_key_configured'] or capabilities['runtimes']['codex'].get('dedicated_account_present', False)))
         if args.kind == 'code':
             (scope / 'title.py').write_text('def normalize_title(title):\n    return title\n')
             tests = "from title import normalize_title\nassert normalize_title('  Shadowfetch \\n Linux  ') == 'Shadowfetch Linux'\nassert normalize_title('Ice\\tEdition') == 'Ice Edition'\nassert normalize_title('  café   日本語 ') == 'café 日本語'\nassert normalize_title('   ') == ''\nprint('4 independent normalization checks passed')\n"