2586 Commits

• Fetch Requirements from cloud (#10167)

  Load requirements from Codex Backend. It only does this for enterprise
  customers signed in with ChatGPT.
  
  Todo in follow-up PRs:
  * Add to app-server and exec too
  * Switch from fail-open to fail-closed on failure

  gt-oai · 2026-01-30 12:03:29 +00:00
  e85d019daa
• Conversation naming (#8991)

  Session renaming:
  - `/rename my_session`
  - `/rename` without arg and passing an argument in `customViewPrompt`
  - AppExitInfo shows resume hint using the session name if set instead of
  uuid, defaults to uuid if not set
  - Names are stored in `CODEX_HOME/sessions.jsonl`
  
  Session resuming:
  - codex resume <name> lookup for `CODEX_HOME/sessions.jsonl` first entry
  matching the name and resumes the session
  
  ---------
  
  Co-authored-by: jif-oai <jif@openai.com>

  pap-openai · 2026-01-30 10:40:09 +00:00
  1ef5455eb6
• chore: unify metric (#10220)
  jif-oai · 2026-01-30 11:13:43 +01:00
  25ad414680
• feat: backfill timing metric (#10218)

  1. Add a metric to measure the backfill time
  2. Add a unit to the timing histogram

  jif-oai · 2026-01-30 10:19:41 +01:00
  129787493f
• Chore: plan mode do not include free form question and always include isOther (#10210)

  We should never ask a freeform question when planning and we should
  always include isOther as an escape hatch.

  Shijie Rao · 2026-01-30 01:19:24 -08:00
  a0ccef9d5c
• Add community links to startup tooltips (#10177)

  ## Summary
  - add startup tooltip for OpenAI community Discord
  - add startup tooltip for Codex community forum
  
  ## Testing
  - not run (text-only tooltip change)

  Josh McKinney · 2026-01-30 10:14:15 +01:00
  c0cad80668
• nit: actually run tests (#10217)
  jif-oai · 2026-01-30 10:02:46 +01:00
  f8056e62d4
• feat: add output to /ps (#10154)

  <img width="599" height="238" alt="Screenshot 2026-01-29 at 13 24 57"
  src="https://github.com/user-attachments/assets/1e9a5af2-f649-476c-b310-ae4938814538"
  />

  jif-oai · 2026-01-30 09:00:44 +01:00
  a270a28a06
• MCP tool call approval (simplified version) (#10200)

  Add elicitation approval request for MCP tool call requests.

  Matthew Zeng · 2026-01-29 23:40:32 -08:00
  34f89b12d0
• chore(personality) new schema with fallbacks (#10147)

  ## Summary
  Let's dial in this api contract in a bit more with more robust fallback
  behavior when model_instructions_template is false.
  
  Switches to a more explicit template / variables structure, with more
  fallbacks.
  
  ## Testing
  - [x] Adding unit tests
  - [x] Tested locally

  Dylan Hurd · 2026-01-30 00:10:12 -07:00
  e3ab0bd973
• load from yaml (#10194)
  alexsong-oai · 2026-01-29 21:44:12 -05:00
  d550fbf41a
• feat(tui): route employee feedback follow-ups to internal link (#10198)

  ## Problem
  OpenAI employees were sent to the public GitHub issue flow after
  `/feedback`, which is the wrong follow-up path internally.
  
  ## Mental model
  After feedback upload completes, we render a follow-up link/message.
  That link should be audience-aware but must not change the upload
  pipeline itself.
  
  ## Non-goals
  - Changing how feedback is captured or uploaded
  - Changing external user behavior
  
  ## Tradeoffs
  We detect employees via the authenticated account email suffix
  (`@openai.com`). If the email is unavailable (e.g., API key auth), we
  default to the external behavior.
  
  ## Architecture
  - Introduce `FeedbackAudience` and thread it from `App` -> `ChatWidget`
  -> `FeedbackNoteView`
  - Gate internal messaging/links on `FeedbackAudience::OpenAiEmployee`
  - Internal follow-up link is now `http://go/codex-feedback-internal`
  - External GitHub URL remains byte-for-byte identical
  
  ## Observability
  No new telemetry; this only changes rendered follow-up instructions.
  
  ## Tests
  - `just fmt`
  - `cargo test -p codex-tui --lib`

  Josh McKinney · 2026-01-30 02:12:46 +00:00
  36f2fe8af9
• add error messages for the go plan type (#10181)

  Adds support for the Go plan type
  Updates rate limit error messages to point to the usage page

  willwang-openai · 2026-01-30 01:17:25 +00:00
  a9cf449a80
• [feat] persist dynamic tools in session rollout file (#10130)

  Add dynamic tools to rollout file for persistence & read from rollout on
  resume. Ran a real example and spotted the following in the rollout
  file:
  ```
  {"timestamp":"2026-01-29T01:27:57.468Z","type":"session_meta","payload":{"id":"019c075d-3f0b-77e3-894e-c1c159b04b1e","timestamp":"2026-01-29T01:27:57.451Z","...."dynamic_tools":[{"name":"demo_tool","description":"Demo dynamic tool","inputSchema":{"additionalProperties":false,"properties":{"city":{"type":"string"}},"required":["city"],"type":"object"}}],"git":{"commit_hash":"ebc573f15c01b8af158e060cfedd401f043e9dfa","branch":"dev/cc/dynamic-tools","repository_url":"https://github.com/openai/codex.git"}}}
  ```

  Celia Chen · 2026-01-30 01:10:00 +00:00
  7151387474
• chore(app-server): document AuthMode (#10191)

  Explain what this is and what it's used for.

  Owen Lin · 2026-01-29 16:48:15 -08:00
  c6e1288ef1
• tui: add feature-gated /plan slash command to switch to Plan mode (#10103)

  ## Summary
  Adds a simple `/plan` slash command in the TUI that switches the active
  collaboration mode to Plan mode. The command is only available when the
  `collaboration_modes` feature is enabled.
  
  ## Changes
  - Add `plan_mask` helper in `codex-rs/tui/src/collaboration_modes.rs`
  - Add `SlashCommand::Plan` metadata in
  `codex-rs/tui/src/slash_command.rs`
  - Implement and hard-gate `/plan` dispatch in
  `codex-rs/tui/src/chatwidget.rs`
  - Hide `/plan` when collaboration modes are disabled in
  `codex-rs/tui/src/bottom_pane/slash_commands.rs`
  - Update command popup tests in
  `codex-rs/tui/src/bottom_pane/command_popup.rs`
  - Add a focused unit test for `/plan` in
  `codex-rs/tui/src/chatwidget/tests.rs`
  
  ## Behavior notes
  - `/plan` is now a no-op if `Feature::CollaborationModes` is disabled.
  - When enabled, `/plan` switches directly to Plan mode without opening
  the picker.
  
  ## Codex author
  `codex resume 019c05da-d7c3-7322-ae2c-3ca38d0ef702`

  Charley Cunningham · 2026-01-29 16:40:43 -08:00
  11958221a3
• feat(app-server): support external auth mode (#10012)

  This enables a new use case where `codex app-server` is embedded into a
  parent application that will directly own the user's ChatGPT auth
  lifecycle, which means it owns the user’s auth tokens and refreshes it
  when necessary. The parent application would just want a way to pass in
  the auth tokens for codex to use directly.
  
  The idea is that we are introducing a new "auth mode" currently only
  exposed via app server: **`chatgptAuthTokens`** which consist of the
  `id_token` (stores account metadata) and `access_token` (the bearer
  token used directly for backend API calls). These auth tokens are only
  stored in-memory. This new mode is in addition to the existing `apiKey`
  and `chatgpt` auth modes.
  
  This PR reuses the shape of our existing app-server account APIs as much
  as possible:
  - Update `account/login/start` with a new `chatgptAuthTokens` variant,
  which will allow the client to pass in the tokens and have codex
  app-server use them directly. Upon success, the server emits
  `account/login/completed` and `account/updated` notifications.
  - A new server->client request called
  `account/chatgptAuthTokens/refresh` which the server can use whenever
  the access token previously passed in has expired and it needs a new one
  from the parent application.
  
  I leveraged the core 401 retry loop which typically triggers auth token
  refreshes automatically, but made it pluggable:
  - **chatgpt** mode refreshes internally, as usual.
  - **chatgptAuthTokens** mode calls the client via
  `account/chatgptAuthTokens/refresh`, the client responds with updated
  tokens, codex updates its in-memory auth, then retries. This RPC has a
  10s timeout and handles JSON-RPC errors from the client.
  
  Also some additional things:
  - chatgpt logins are blocked while external auth is active (have to log
  out first. typically clients will pick one OR the other, not support
  both)
  - `account/logout` clears external auth in memory
  - Ensures that if `forced_chatgpt_workspace_id` is set via the user's
  config, we respect it in both:
  - `account/login/start` with `chatgptAuthTokens` (returns a JSON-RPC
  error back to the client)
  - `account/chatgptAuthTokens/refresh` (fails the turn, and on next
  request app-server will send another `account/chatgptAuthTokens/refresh`
  request to the client).

  Owen Lin · 2026-01-29 23:46:04 +00:00
  81a17bb2c1
• [Codex][CLI] Show model-capacity guidance on 429 (#10118)

  ###### Problem
  Users get generic 429s with no guidance when a model is at capacity.
  ###### Solution
  Detect model-cap headers, surface a clear “try a different model”
  message, and keep behavior non‑intrusive (no auto‑switch).
  ###### Scope
  CLI/TUI only; protocol + error mapping updated to carry model‑cap info.
  ###### Tests
        - just fmt
        - cargo test -p codex-tui
  - cargo test -p codex-core --lib
  shell_snapshot::tests::try_new_creates_and_deletes_snapshot_file --
  --nocapture (ran in isolated env)
        - validate local build with backend
       
  <img width="719" height="845" alt="image"
  src="https://github.com/user-attachments/assets/1470b33d-0974-4b1f-b8e6-d11f892f4b54"
  />

  Colin Young · 2026-01-29 14:59:07 -08:00
  b79bf69af6
• updating comment to better indicate intent of skipping quit in the main slash command menu (#10186)

  Updates comment indicating intent for skipping `quit` in the main slash
  command dropdown.

  natea-oai · 2026-01-29 14:41:42 -08:00
  ca9d417633
• Remove WebSocket wire format (#10179)

  I'd like WireApi to go away (when chat is removed) and WebSockets is
  still responses API just over a different transport.

  pakrym-oai · 2026-01-29 13:50:53 -08:00
  fbb3a30953
• fix: /approvals -> /permissions (#10184)

  I believe we should be recommending `/permissions` in light of
  https://github.com/openai/codex/pull/9561.

  Michael Bolin · 2026-01-29 20:36:53 +00:00
  2d9ac8227a
• Add features enable/disable subcommands (#10180)

  ## Summary
  - add `codex features enable <feature>` and `codex features disable
  <feature>`
  - persist feature flag changes to `config.toml` (respecting profile)
  - print the under-development feature warning when enabling prerelease
  features
  - keep `features list` behavior unchanged and add unit/integration tests
  
  ## Testing
  - cargo test -p codex-cli

  Josh McKinney · 2026-01-29 20:35:03 +00:00
  03aee7140f
• Better handling skill depdenencies on ENV VAR. (#9017)

  An experimental flow for env var skill dependencies. Skills can now
  declare required env vars in SKILL.md; if missing, the CLI prompts the
  user to get the value, and Core will store it in memory (eventually to a
  local persistent store)
  <img width="790" height="169" alt="image"
  src="https://github.com/user-attachments/assets/cd928918-9403-43cb-a7e7-b8d59bcccd9a"
  />

  xl-openai · 2026-01-29 14:13:30 -05:00
  bdd8a7d58b
• Fall back to http when websockets fail (#10139)

  I expect not all proxies work with websockets, fall back to http if
  websockets fail.

  pakrym-oai · 2026-01-29 10:36:21 -08:00
  3b1cddf001
• feat: reduce span exposition (#10171)

  This only avoids the creation of duplicates spans

  jif-oai · 2026-01-29 18:15:22 +00:00
  798c4b3260
• Add OpenAI docs MCP tooltip (#10175)
  Josh McKinney · 2026-01-29 17:34:59 +00:00
  3e798c5a7d
• chore: unify log queries (#10152)

  Unify log queries to only have SQLX code in the runtime and use it for
  both the log client and for tests

  jif-oai · 2026-01-29 16:28:15 +00:00
  e6c4f548ab
• feat: add log retention and delete them after 90 days (#10151)
  jif-oai · 2026-01-29 16:55:01 +01:00
  d6631fb5a9
• feat: adding thread ID to logs + filter in the client (#10150)
  jif-oai · 2026-01-29 16:53:30 +01:00
  89c5f3c4d4
• chore: improve client (#10149)

  <img width="883" height="84" alt="Screenshot 2026-01-29 at 11 13 12"
  src="https://github.com/user-attachments/assets/090a2fec-94ed-4c0f-aee5-1653ed8b1439"
  />

  jif-oai · 2026-01-29 11:25:22 +01:00
  4ba911d48c
• feat: log db client (#10087)

  ```
  just log -h
  if [ "${1:-}" = "--" ]; then shift; fi; cargo run -p codex-state --bin logs_client -- "$@"
      Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.21s
       Running `target/debug/logs_client -h`
  Tail Codex logs from state.sqlite with simple filters
  
  Usage: logs_client [OPTIONS]
  
  Options:
        --codex-home <CODEX_HOME>  Path to CODEX_HOME. Defaults to $CODEX_HOME or ~/.codex [env: CODEX_HOME=]
        --db <DB>                  Direct path to the SQLite database. Overrides --codex-home
        --level <LEVEL>            Log level to match exactly (case-insensitive)
        --from <RFC3339|UNIX>      Start timestamp (RFC3339 or unix seconds)
        --to <RFC3339|UNIX>        End timestamp (RFC3339 or unix seconds)
        --module <MODULE>          Substring match on module_path
        --file <FILE>              Substring match on file path
        --backfill <BACKFILL>      Number of matching rows to show before tailing [default: 200]
        --poll-ms <POLL_MS>        Poll interval in milliseconds [default: 500]
    -h, --help                     Print help
    ```

  jif-oai · 2026-01-29 11:11:47 +01:00
  6a06726af2
• feat: async backfill (#10089)
  jif-oai · 2026-01-29 09:57:50 +00:00
  714dc8d8bd
• feat: add log db (#10086)

  Add a log DB. The goal is just to store our logs in a `.sqlite` DB to
  make it easier to crawl them and drop the oldest ones.

  jif-oai · 2026-01-29 10:23:03 +01:00
  780482da84
• fix: remove references to corepack (#10138)

  Currently, our `npm publish` logic is failing.
  
  There were a number of things that were merged recently that seemed to
  contribute to this situation, though I think we have fixed most of them,
  but this one stands out:
  
  https://github.com/openai/codex/pull/10115
  
  As best I can tell, we tried to fix the pnpm version to a specific hash,
  but we did not do it consistently (though `shell-tool-mcp/package.json`
  had it specified twice...), so for this PR, I ran:
  
  ```
  $ git ls-files | grep package.json
  codex-cli/package.json
  codex-rs/responses-api-proxy/npm/package.json
  package.json
  sdk/typescript/package.json
  shell-tool-mcp/package.json
  ```
  
  and ensured that all of them now have this line:
  
  ```json
    "packageManager": "pnpm@10.28.2+sha512.41872f037ad22f7348e3b1debbaf7e867cfd448f2726d9cf74c08f19507c31d2c8e7a11525b983febc2df640b5438dee6023ebb1f84ed43cc2d654d2bc326264"
  ```
  
  I also went and deleted all of the `corepack` stuff that was added by
  https://github.com/openai/codex/pull/10115.
  
  If someone can explain why we need it and verify it does not break `npm
  publish`, then we can bring it back.

  Michael Bolin · 2026-01-28 23:31:25 -08:00
  4d9ae3a298
• fix: ignore key release events during onboarding (#10131)

  ## Summary
  - guard onboarding key handling to ignore KeyEventKind::Release
  - handle key events at the onboarding screen boundary to avoid
  double-triggering widgets
  
  ## Related
  - https://github.com/ratatui/ratatui/issues/347
  
  ## Testing
  - cd codex-rs && just fmt
  - cd codex-rs && cargo test -p codex-tui

  Josh McKinney · 2026-01-28 22:13:53 -08:00
  e70592f85a
• fix(tui) reorder personality command (#10134)

  ## Summary
  Reorder it down the list
  
  ## Testing 
  - [x] Tests pass

  Dylan Hurd · 2026-01-28 22:51:57 -07:00
  be33de3f87
• emit a metric when we can't spawn powershell (#10125)

  This will help diagnose and measure the impact of a user-reported bug
  with the elevated sandbox and powershell

  iceweasel-oai · 2026-01-28 21:51:51 -08:00
  8cc338aecf
• chore(core) personality under development (#10133)

  ## Summary
  Have one or two more changes coming in for this.

  Dylan Hurd · 2026-01-28 22:00:48 -07:00
  335713f7e9
• [connectors] Support connectors part 2 - slash command and tui (#9728)

  - [x] Support `/apps` slash command to browse the apps in tui.
  - [x] Support inserting apps to prompt using `$`.
  - [x] Lots of simplification/renaming from connectors to apps.

  Matthew Zeng · 2026-01-28 19:51:58 -08:00
  b9cd089d1f
• removing quit from dropdown menu, but not autocomplete [cli] (#10128)

  Currently we have both `\quit` and `\exit` which do the same thing. This
  removes `\quit` from the slash command menu but allows it to still be an
  autocomplete option & working for those used to that command.
  
  `/quit` autocomplete:
  <img width="232" height="108" alt="Screenshot 2026-01-28 at 4 32 53 PM"
  src="https://github.com/user-attachments/assets/d71e079f-77f6-4edc-9590-44a01e2a4ff5"
  />
  
  slash command menu:
  <img width="425" height="191" alt="Screenshot 2026-01-28 at 4 32 36 PM"
  src="https://github.com/user-attachments/assets/a9458cff-1784-4ce0-927d-43ad13d2a97c"
  />

  natea-oai · 2026-01-28 17:52:27 -08:00
  ecc66f4f52
• chore(config) Update personality instructions (#10114)

  ## Summary
  Add personality instructions so we can let users try it out, in tandem
  with making it an experimental feature
  
  ## Testing
  - [x] Tested locally

  Dylan Hurd · 2026-01-29 01:14:44 +00:00
  9757e1418d
• Add app-server compaction item notifications tests (#10123)

  - add v2 tests covering local + remote auto-compaction item
  started/completed notifications

  Ahmed Ibrahim · 2026-01-29 01:00:38 +00:00
  52609c6f42
• chore(config) personality as a feature (#10116)

  ## Summary
  Sets up an explicit Feature flag for `/personality`, so users can now
  opt in to it via `/experimental`. #10114 also updates the config
  
  ## Testing
  - [x] Tested locally

  Dylan Hurd · 2026-01-28 17:58:28 -07:00
  ce3d764ae1
• Ensure auto-compaction starts after turn started (#10129)

  Start auto-compaction only after TurnStarted is emitted.\nAdd an
  integration test for deterministic ordering.

  Ahmed Ibrahim · 2026-01-28 16:51:20 -08:00
  26590d7927
• [bazel] Improve runfiles handling (#10098)

  we can't use runfiles directory on Windows due to path lengths, so swap
  to manifest strategy. Parsing the manifest is a bit complex and the
  format is changing in Bazel upstream, so pull in the official Rust
  library (via a small hack to make it importable...) and cleanup all the
  associated logic to work cleanly in both bazel and cargo without extra
  confusion

  zbarsky-openai · 2026-01-29 00:15:44 +00:00
  8497163363
• default enable compression, update test helpers (#10102)

  set `enable_request_compression` flag to default-enabled.
  
  update integration test helpers to decompress `zstd` if flag set.

  sayan-oai · 2026-01-28 12:25:40 -08:00
  ff9fa56368
• Added tui.notifications_method config option (#10043)

  This PR adds a new `tui.notifications_method` config option that accepts
  values of "auto", "osc9" and "bel". It defaults to "auto", which
  attempts to auto-detect whether the terminal supports OSC 9 escape
  sequences and falls back to BEL if not.
  
  The PR also removes the inconsistent handling of notifications on
  Windows when WSL was used.

  Eric Traut · 2026-01-28 12:00:32 -08:00
  147e7118e0
• allow elevated sandbox to be enabled without base experimental flag (#10028)

  elevated flag = elevated sandbox
  experimental flag = non-elevated sandbox
  both = elevated

  iceweasel-oai · 2026-01-28 11:38:29 -08:00
  66de985e4e
• compaction (#10034)

  # External (non-OpenAI) Pull Request Requirements
  
  Before opening this Pull Request, please read the dedicated
  "Contributing" markdown file or your PR may be closed:
  https://github.com/openai/codex/blob/main/docs/contributing.md
  
  If your PR conforms to our contribution guidelines, replace this text
  with a detailed and high quality description of your changes.
  
  Include a link to a bug report or enhancement request.

  Ahmed Ibrahim · 2026-01-28 11:36:11 -08:00
  b7edeee8ca
• chore: deprecate old web search feature flags (#10097)

  deprecate all old web search flags and aliases, including:
  - `[features].web_search_request` and `[features].web_search_cached`
  - `[tools].web_search`
  - `[features].web_search`
  
  slightly rework `legacy_usages` to enable pointing to non-features from
  deprecated features; we need to point to `web_search` (not under
  `[features]`) from things like `[features].web_search_cached` and
  `[features].web_search_request`.
  
  Added integration tests to confirm deprecation notice is shown on
  explicit enablement and disablement of deprecated flags.

  sayan-oai · 2026-01-28 10:55:57 -08:00
  851617ff5a