Finish Radar automation wiring

.github/workflows/refresh-release-delta.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     env:
-      GH_API_TOKEN: ${{ secrets.GITHUB_PAT_Y }}
+      GITHUB_TOKEN: ${{ github.token }}
     steps:
       - name: Fetch latest code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -42,8 +42,7 @@ jobs:
           cargo run -p decodex --bin decodex -- radar refresh-release-delta \
             --repo openai/codex \
             --signals-dir site/src/content/signals \
-            --out site/src/content/release-deltas/openai-codex-latest.json \
-            --token-env GH_API_TOKEN
+            --out site/src/content/release-deltas/openai-codex-latest.json
 
       - name: Detect content changes
         id: changes

.github/workflows/refresh-upstream-radar.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     env:
-      GH_API_TOKEN: ${{ secrets.GITHUB_PAT_Y }}
+      GITHUB_TOKEN: ${{ github.token }}
     steps:
       - name: Fetch latest code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -41,7 +41,6 @@ jobs:
         run: |
           cargo run -p decodex --bin decodex -- radar refresh-upstream-queue \
             --repo openai/codex \
-            --token-env GH_API_TOKEN \
             --search-limit 40
 
       - name: Detect content changes

apps/decodex/src/cli.rs

@@ -1712,7 +1712,7 @@ mod tests {
 			"--repo",
 			"openai/codex",
 			"--token-env",
-			"GH_API_TOKEN",
+			"GITHUB_TOKEN",
 			"--search-limit",
 			"40",
 		]);
@@ -1730,7 +1730,7 @@ mod tests {
 					}
 				),
 			}) if repo == "openai/codex"
-				&& token_env == "GH_API_TOKEN"
+				&& token_env == "GITHUB_TOKEN"
 				&& queue_out == Path::new("artifacts/github/review-queue/openai-codex-latest.json")
 		));
 	}
@@ -1748,7 +1748,7 @@ mod tests {
 			"--out",
 			"site/src/content/release-deltas/openai-codex-latest.json",
 			"--token-env",
-			"GH_API_TOKEN",
+			"GITHUB_TOKEN",
 		]);
 
 		assert!(matches!(
@@ -1765,7 +1765,7 @@ mod tests {
 					}
 				),
 			}) if repo == "openai/codex"
-				&& token_env == "GH_API_TOKEN"
+				&& token_env == "GITHUB_TOKEN"
 				&& signals_dir == Path::new("site/src/content/signals")
 				&& out == Path::new("site/src/content/release-deltas/openai-codex-latest.json")
 		));

apps/decodex/src/radar.rs

@@ -1115,12 +1115,7 @@ pub(crate) fn ledger_summary(
 
 /// Build a deterministic GitHub change bundle and write it to disk.
 pub(crate) fn build_bundle(request: &RadarBundleBuildRequest) -> crate::prelude::Result<PathBuf> {
-	let token_env = request
-		.token_env
-		.clone()
-		.or_else(routed_token_env)
-		.unwrap_or_else(|| "GITHUB_TOKEN".into());
-	let token = env::var(&token_env).ok().filter(|value| !value.is_empty());
+	let token = github_token(request.token_env.as_deref());
 	let client = GithubClient::new(token.as_deref())?;
 	let bundle = match (request.pr, request.commit.as_deref()) {
 		(Some(pr_number), _) => client.build_pr_bundle(&request.repo, pr_number, &request.notes)?,
@@ -2227,11 +2222,16 @@ fn repo_default_branch(api: &GitHubApi, repo: &str) -> crate::prelude::Result<St
 }
 
 fn github_token(token_env: Option<&str>) -> Option<String> {
-	let token_env = token_env
-		.map(str::to_owned)
-		.or_else(routed_token_env)
-		.unwrap_or_else(|| "GITHUB_TOKEN".to_owned());
+	if let Some(token_env) = token_env {
+		return env_token(token_env);
+	}
+
+	routed_token_env()
+		.and_then(|token_env| env_token(&token_env))
+		.or_else(|| env_token("GITHUB_TOKEN"))
+}
 
+fn env_token(token_env: &str) -> Option<String> {
 	env::var(token_env).ok().filter(|token| !token.is_empty())
 }
 
@@ -5511,6 +5511,8 @@ fn known_schemas() -> String {
 #[cfg(test)]
 mod tests {
 	use std::{
+		env,
+		ffi::OsString,
 		fs,
 		path::{Path, PathBuf},
 	};
@@ -5524,6 +5526,41 @@ mod tests {
 		RefreshKind,
 	};
 
+	struct TestEnvVars {
+		_lock: crate::test_support::TestEnvLockGuard,
+		previous: Vec<(String, Option<OsString>)>,
+	}
+
+	impl TestEnvVars {
+		fn set(vars: &[(&str, Option<&str>)]) -> Self {
+			let lock = crate::test_support::TestEnvVarGuard::lock();
+			let previous = vars
+				.iter()
+				.map(|(key, _)| ((*key).to_owned(), env::var_os(key)))
+				.collect::<Vec<_>>();
+
+			for (key, value) in vars {
+				match value {
+					Some(value) => unsafe { env::set_var(key, value) },
+					None => unsafe { env::remove_var(key) },
+				}
+			}
+
+			Self { _lock: lock, previous }
+		}
+	}
+
+	impl Drop for TestEnvVars {
+		fn drop(&mut self) {
+			for (key, previous) in self.previous.drain(..).rev() {
+				match previous {
+					Some(previous) => unsafe { env::set_var(key, previous) },
+					None => unsafe { env::remove_var(key) },
+				}
+			}
+		}
+	}
+
 	#[test]
 	fn accepts_valid_bundle_and_rejects_missing_commits() {
 		let mut bundle = valid_bundle();
@@ -5728,6 +5765,27 @@ mod tests {
 		assert_errors(&social_post, ["decision.daily_limit must be 8"]);
 	}
 
+	#[test]
+	fn default_github_token_falls_back_to_workflow_token() {
+		let _env = TestEnvVars::set(&[
+			("GITHUB_PAT_X", Some("")),
+			("GITHUB_PAT_Y", Some("")),
+			("GITHUB_TOKEN", Some("workflow-token")),
+		]);
+
+		assert_eq!(super::github_token(None).as_deref(), Some("workflow-token"));
+	}
+
+	#[test]
+	fn explicit_github_token_env_does_not_fall_back_to_workflow_token() {
+		let _env = TestEnvVars::set(&[
+			("DECODEX_TEST_MISSING_RADAR_TOKEN", None),
+			("GITHUB_TOKEN", Some("workflow-token")),
+		]);
+
+		assert_eq!(super::github_token(Some("DECODEX_TEST_MISSING_RADAR_TOKEN")), None);
+	}
+
 	#[test]
 	fn validates_json_files_from_directory() {
 		let temp_dir = tempfile::tempdir().expect("temporary directory should be created");

artifacts/github/README.md

@@ -11,5 +11,6 @@ at most 21 days, then move cold batches to dedicated `radar-archive-*` GitHub Re
 assets and keep the recovery manifest under `artifacts/archive/index/`.
 
 Rust-owned bundle build and validation commands live under `decodex radar bundle ...`.
-Remaining deterministic scripts live under `scripts/github/` during migration.
+The remaining `scripts/github/` files are AI-helper and schema-support surfaces, not
+GitHub Actions deterministic refresh entrypoints.
 Repo-local editorial instructions live under `dev/skills/github-signal/`.

artifacts/github/bundles/openai-codex-pr-25636.json

@@ -0,0 +1,116 @@
+{
+  "analysis_mode": "pr_first",
+  "commits": [
+    {
+      "author": "jif-oai",
+      "committed_at": "2026-06-01T15:55:10Z",
+      "message": "Rename multi-agent v2 assign_task tool",
+      "sha": "c9bdb5255b2b4b5d365a1be3ec3a94e34a4e0af0",
+      "url": "https://github.com/openai/codex/commit/c9bdb5255b2b4b5d365a1be3ec3a94e34a4e0af0"
+    }
+  ],
+  "default_branch": "main",
+  "docs_refs": [
+    "codex-rs/rollout-trace/README.md"
+  ],
+  "examples_refs": [],
+  "extracted_flags": [
+    "DEFAULT_MULTI_AGENT_V2_SUBAGENT_USAGE_HINT_TEXT",
+    "MAX_WAIT_TIMEOUT_MS",
+    "MIN_WAIT_TIMEOUT_MS"
+  ],
+  "files": [
+    {
+      "additions": 2,
+      "deletions": 2,
+      "patch_excerpt": "@@ -195,7 +195,7 @@ At the start of your turn, you are the active agent.\n You can spawn sub-agents to handle subtasks, and those sub-agents can spawn their own sub-agents.\n All agents in the team, including the agents that you can assign tasks to, are equally intelligent and capable, and have access to the same set of tools.\n \n-You can use `spawn_agent` to create a new agent, `assign_task` to give an existing agent a new task and trigger a turn, and `send_message` to pass a message to a running agent without triggering a turn.\n+You can use `spawn_agent` to create a new agent, `followup_task` to give an existing agent a new task and trigger a turn, and `send_message` to pass a message to a running agent without triggering a turn.\n Child agents can also spawn their own sub-agents.\n You can decide how much context you want to propagate to your sub-agents with the `fork_turns` parameter.\n \n@...",
+      "path": "codex-rs/core/src/config/mod.rs",
+      "status": "modified"
+    },
+    {
+      "additions": 5,
+      "deletions": 4,
+      "patch_excerpt": "@@ -179,12 +179,13 @@ pub fn create_send_message_tool() -> ToolSpec {\n     })\n }\n \n-pub fn create_assign_task_tool() -> ToolSpec {\n+pub fn create_followup_task_tool() -> ToolSpec {\n     let properties = BTreeMap::from([\n         (\n             \"target\".to_string(),\n             JsonSchema::string(Some(\n-                \"Agent id or canonical task name to message (from spawn_agent).\".to_string(),\n+                \"Agent id or canonical task name to send a follow-up task to (from spawn_agent).\"\n+                    .to_string(),\n             )),\n         ),\n         (\n@@ -196,8 +197,8 @@ pub fn create_assign_task_tool() -> ToolSpec {\n     ]);\n \n     ToolSpec::Function(ResponsesApiTool {\n-        name: \"assign_task\".to_string(),\n-        description: \"Send a message to an existing non-root target agent and trigger a turn in that target. If the target is currently mid-turn, the message is qu...",
+      "path": "codex-rs/core/src/tools/handlers/multi_agents_spec.rs",
+      "status": "modified"
+    },
+    {
+      "additions": 5,
+      "deletions": 5,
+      "patch_excerpt": "@@ -247,25 +247,25 @@ fn send_message_tool_requires_message_and_has_no_output_schema() {\n }\n \n #[test]\n-fn assign_task_tool_requires_message_and_has_no_output_schema() {\n+fn followup_task_tool_requires_message_and_has_no_output_schema() {\n     let ToolSpec::Function(ResponsesApiTool {\n         name,\n         parameters,\n         output_schema,\n         ..\n-    }) = create_assign_task_tool()\n+    }) = create_followup_task_tool()\n     else {\n-        panic!(\"assign_task should be a function tool\");\n+        panic!(\"followup_task should be a function tool\");\n     };\n-    assert_eq!(name, \"assign_task\");\n+    assert_eq!(name, \"followup_task\");\n     assert_eq!(\n         parameters.schema_type,\n         Some(JsonSchemaType::Single(JsonSchemaPrimitiveType::Object))\n     );\n     let properties = parameters\n         .properties\n         .as_ref()\n-        .expect(\"assign_task should use object pa...",
+      "path": "codex-rs/core/src/tools/handlers/multi_agents_spec_tests.rs",
+      "status": "modified"
+    },
+    {
+      "additions": 15,
+      "deletions": 13,
+      "patch_excerpt": "@@ -8,8 +8,8 @@ use crate::session::tests::make_session_and_context;\n use crate::session_prefix::format_subagent_notification_message;\n use crate::thread_manager::thread_store_from_config;\n use crate::tools::context::ToolOutput;\n-use crate::tools::handlers::multi_agents_v2::AssignTaskHandler as AssignTaskHandlerV2;\n use crate::tools::handlers::multi_agents_v2::CloseAgentHandler as CloseAgentHandlerV2;\n+use crate::tools::handlers::multi_agents_v2::FollowupTaskHandler as FollowupTaskHandlerV2;\n use crate::tools::handlers::multi_agents_v2::ListAgentsHandler as ListAgentsHandlerV2;\n use crate::tools::handlers::multi_agents_v2::SendMessageHandler as SendMessageHandlerV2;\n use crate::tools::handlers::multi_agents_v2::SpawnAgentHandler as SpawnAgentHandlerV2;\n@@ -1413,7 +1413,7 @@ async fn multi_agent_v2_send_message_accepts_root_target_from_child() {\n }\n \n #[tokio::test]\n-async fn multi_agent_...",
+      "path": "codex-rs/core/src/tools/handlers/multi_agents_tests.rs",
+      "status": "modified"
+    },
+    {
+      "additions": 2,
+      "deletions": 2,
+      "patch_excerpt": "@@ -28,15 +28,15 @@ use serde::Deserialize;\n use serde::Serialize;\n use serde_json::Value as JsonValue;\n \n-pub(crate) use assign_task::Handler as AssignTaskHandler;\n pub(crate) use close_agent::Handler as CloseAgentHandler;\n+pub(crate) use followup_task::Handler as FollowupTaskHandler;\n pub(crate) use list_agents::Handler as ListAgentsHandler;\n pub(crate) use send_message::Handler as SendMessageHandler;\n pub(crate) use spawn::Handler as SpawnAgentHandler;\n pub(crate) use wait::Handler as WaitAgentHandler;\n \n-mod assign_task;\n mod close_agent;\n+mod followup_task;\n mod list_agents;\n mod message_tool;\n mod send_message;",
+      "path": "codex-rs/core/src/tools/handlers/multi_agents_v2.rs",
+      "status": "modified"
+    },
+    {
+      "additions": 5,
+      "deletions": 5,
+      "patch_excerpt": "@@ -1,28 +1,28 @@\n-use super::message_tool::AssignTaskArgs;\n+use super::message_tool::FollowupTaskArgs;\n use super::message_tool::MessageDeliveryMode;\n use super::message_tool::handle_message_string_tool;\n use super::*;\n-use crate::tools::handlers::multi_agents_spec::create_assign_task_tool;\n+use crate::tools::handlers::multi_agents_spec::create_followup_task_tool;\n use codex_tools::ToolSpec;\n \n pub(crate) struct Handler;\n \n #[async_trait::async_trait]\n impl ToolExecutor<ToolInvocation> for Handler {\n     fn tool_name(&self) -> ToolName {\n-        ToolName::plain(\"assign_task\")\n+        ToolName::plain(\"followup_task\")\n     }\n \n     fn spec(&self) -> ToolSpec {\n-        create_assign_task_tool()\n+        create_followup_task_tool()\n     }\n \n     async fn handle(\n         &self,\n         invocation: ToolInvocation,\n     ) -> Result<Box<dyn crate::tools::context::ToolOutput>, FunctionCallE...",
+      "path": "codex-rs/core/src/tools/handlers/multi_agents_v2/followup_task.rs",
+      "status": "renamed"
+    },
+    {
+      "additions": 5,
+      "deletions": 5,
+      "patch_excerpt": "@@ -1,6 +1,6 @@\n //! Shared argument parsing and dispatch for the v2 text-only agent messaging tools.\n //!\n-//! `send_message` and `assign_task` share the same submission path and differ only in whether the\n+//! `send_message` and `followup_task` share the same submission path and differ only in whether the\n //! resulting `InterAgentCommunication` should wake the target immediately.\n \n use super::*;\n@@ -40,8 +40,8 @@ pub(crate) struct SendMessageArgs {\n \n #[derive(Debug, Deserialize)]\n #[serde(deny_unknown_fields)]\n-/// Input for the MultiAgentV2 `assign_task` tool.\n-pub(crate) struct AssignTaskArgs {\n+/// Input for the MultiAgentV2 `followup_task` tool.\n+pub(crate) struct FollowupTaskArgs {\n     pub(crate) target: String,\n     pub(crate) message: String,\n }\n@@ -55,7 +55,7 @@ fn message_content(message: String) -> Result<String, FunctionCallError> {\n     Ok(message)\n }\n \n-/// Handles the...",
+      "path": "codex-rs/core/src/tools/handlers/multi_agents_v2/message_tool.rs",
+      "status": "modified"
+    },
+    {
+      "additions": 2,
+      "deletions": 2,
+      "patch_excerpt": "@@ -38,8 +38,8 @@ use crate::tools::handlers::multi_agents_common::MAX_WAIT_TIMEOUT_MS;\n use crate::tools::handlers::multi_agents_common::MIN_WAIT_TIMEOUT_MS;\n use crate::tools::handlers::multi_agents_spec::SpawnAgentToolOptions;\n use crate::tools::handlers::multi_agents_spec::WaitAgentTimeoutOptions;\n-use crate::tools::handlers::multi_agents_v2::AssignTaskHandler as AssignTaskHandlerV2;\n use crate::tools::handlers::multi_agents_v2::CloseAgentHandler as CloseAgentHandlerV2;\n+use crate::tools::handlers::multi_agents_v2::FollowupTaskHandler as FollowupTaskHandlerV2;\n use crate::tools::handlers::multi_agents_v2::ListAgentsHandler as ListAgentsHandlerV2;\n use crate::tools::handlers::multi_agents_v2::SendMessageHandler as SendMessageHandlerV2;\n use crate::tools::handlers::multi_agents_v2::SpawnAgentHandler as SpawnAgentHandlerV2;\n@@ -686,7 +686,7 @@ fn add_collaboration_tools(context: &CoreTo...",
+      "path": "codex-rs/core/src/tools/spec_plan.rs",
+      "status": "modified"
+    },
+    {
+      "additions": 26,
+      "deletions": 4,
+      "patch_excerpt": "@@ -766,6 +766,7 @@ async fn multi_agent_feature_selects_one_agent_tool_family() {\n         \"wait_agent\",\n         \"close_agent\",\n         \"send_message\",\n+        \"followup_task\",\n         \"assign_task\",\n         \"list_agents\",\n     ]);\n@@ -790,12 +791,12 @@ async fn multi_agent_feature_selects_one_agent_tool_family() {\n     v2.assert_visible_contains(&[\n         \"spawn_agent\",\n         \"send_message\",\n-        \"assign_task\",\n+        \"followup_task\",\n         \"wait_agent\",\n         \"close_agent\",\n         \"list_agents\",\n     ]);\n-    v2.assert_visible_lacks(&[\"send_input\", \"resume_agent\"]);\n+    v2.assert_visible_lacks(&[\"send_input\", \"resume_agent\", \"assign_task\"]);\n     let spawn_agent_description = match v2.visible_spec(\"spawn_agent\") {\n         ToolSpec::Function(tool) => tool.description.as_str(),\n         other => panic!(\"expected spawn_agent function spec, got {other:?}\"),\n@@ -8...",
+      "path": "codex-rs/core/src/tools/spec_plan_tests.rs",
+      "status": "modified"
+    },
+    {
+      "additions": 1,
+      "deletions": 1,
+      "patch_excerpt": "@@ -177,7 +177,7 @@ the edges between them.\n \n ```mermaid\n flowchart LR\n-    RootTool[\"root ToolCall\\nspawn_agent / assign_task / send_message\"]\n+    RootTool[\"root ToolCall\\nspawn_agent / followup_task / send_message\"]\n     ChildInput[\"child ConversationItem\\ninjected task/message\"]\n     ChildThread[\"child AgentThread\"]\n     ChildResult[\"child assistant ConversationItem\\nresult message\"]",
+      "path": "codex-rs/rollout-trace/README.md",
+      "status": "modified"
+    },
+    {
+      "additions": 1,
+      "deletions": 1,
+      "patch_excerpt": "@@ -267,7 +267,7 @@ fn dispatched_tool_kind(tool_name: &str, _payload: &ToolDispatchPayload) -> Tool\n         \"image_generation\" | \"image_query\" => ToolCallKind::ImageGeneration,\n         \"spawn_agent\" => ToolCallKind::SpawnAgent,\n         \"send_message\" => ToolCallKind::SendMessage,\n-        \"assign_task\" | \"followup_task\" => ToolCallKind::AssignAgentTask,\n+        \"followup_task\" | \"assign_task\" => ToolCallKind::AssignAgentTask,\n         \"wait_agent\" => ToolCallKind::WaitAgent,\n         \"close_agent\" => ToolCallKind::CloseAgent,\n         other => ToolCallKind::Other {",
+      "path": "codex-rs/rollout-trace/src/tool_dispatch.rs",
+      "status": "modified"
+    }
+  ],
+  "linked_issues": [],
+  "notes": [
+    "Built from GitHub pull-request, commits, files, and repo endpoints."
+  ],
+  "primary_pr": {
+    "body": "## Summary\n\nRenames the MultiAgentV2 turn-triggering tool from `assign_task` to `followup_task` so the exposed tool name better describes sending an additional task to an existing agent.\n\nThis updates the tool spec, handler/module names, registry wiring, default multi-agent v2 usage hints, and tests. Rollout trace classification keeps accepting legacy `assign_task` events so older traces still reduce correctly, while docs show the new tool name.\n\n## Test plan\n\n- `just test -p codex-core followup_task`\n- `just test -p codex-core -E 'test(multi_agent_feature_selects_one_agent_tool_family) | test(multi_agent_v2_can_use_configured_tool_namespace) | test(code_mode_only_can_expose_namespaced_multi_agent_v2_as_normal_tools)'`\n- `just test -p codex-rollout-trace`\n- `just fix -p codex-core`\n- `just fix -p codex-rollout-trace`\n\nNotes: `just fmt` ran `cargo fmt` but failed in the Python ruff phase because the local environment could not resolve `hatchling>=1.27.0` from the configured internal registry. A full `just test -p codex-core` also hit unrelated environment-sensitive integration failures involving missing spawned test binaries/sandbox behavior; the changed multi-agent spec/handler tests passed in the filtered runs above.",
+    "labels": [],
+    "merged_at": "2026-06-01T17:57:12Z",
+    "number": 25636,
+    "state": "merged",
+    "title": "[codex] Rename multi-agent v2 assign_task to followup_task",
+    "url": "https://github.com/openai/codex/pull/25636"
+  },
+  "repo": "openai/codex",
+  "schema": "github_change_bundle/v1"
+}