55 Commits

• fix: report an appropriate error in the TUI for malformed rules (#9011)

  The underlying issue is that when we encountered an error starting a
  conversation (any sort of error, though making `$CODEX_HOME/rules` a
  file rather than folder was the example in #8803), then we were writing
  the message to stderr, but this could be printed over by our UI
  framework so the user would not see it. In general, we disallow the use
  of `eprintln!()` in this part of the code for exactly this reason,
  though this was suppressed by an `#[allow(clippy::print_stderr)]`.
  
  This attempts to clean things up by changing `handle_event()` and
  `handle_tui_event()` to return a `Result<AppRunControl>` instead of a
  `Result<bool>`, which is a new type introduced in this PR (and depends
  on `ExitReason`, also a new type):
  
  ```rust
  #[derive(Debug)]
  pub(crate) enum AppRunControl {
      Continue,
      Exit(ExitReason),
  }
  
  #[derive(Debug, Clone)]
  pub enum ExitReason {
      UserRequested,
      Fatal(String),
  }
  ```
  
  This makes it possible to exit the primary control flow of the TUI with
  richer information. This PR adds `ExitReason` to the existing
  `AppExitInfo` struct and updates `handle_app_exit()` to print the error
  and exit code `1` in the event of `ExitReason::Fatal`.
  
  I tried to create an integration test for this, but it was a bit
  involved, so I published it as a separate PR:
  https://github.com/openai/codex/pull/9166. For this PR, please have
  faith in my manual testing!
  
  Fixes https://github.com/openai/codex/issues/8803.
  
  
  
  
  ---
  [//]: # (BEGIN SAPLING FOOTER)
  Stack created with [Sapling](https://sapling-scm.com). Best reviewed
  with [ReviewStack](https://reviewstack.dev/openai/codex/pull/9011).
  * #9166
  * __->__ #9011

  Michael Bolin · 2026-01-13 23:21:32 +00:00
  2cd1a0a45e
• Use thread rollback for Esc backtrack (#9140)

  - Swap Esc backtrack to roll back the current thread instead of forking

  Ahmed Ibrahim · 2026-01-13 09:17:39 +00:00
  3a300d1117
• feat: wire fork to codex cli (#8994)

  ## Summary
  - add `codex fork` subcommand and `/fork` slash command mirroring resume
  - extend session picker to support fork/resume actions with dynamic
  labels in tui/tui2
  - wire fork selection flow through tui bootstraps and add fork-related
  tests

  Anton Panasenko · 2026-01-12 10:09:11 -08:00
  4223948cf5
• Elevated sandbox NUX (#8789)

  Elevated Sandbox NUX:
  
  * prompt for elevated sandbox setup when agent mode is selected (via
  /approvals or at startup)
  * prompt for degraded sandbox if elevated setup is declined or fails
  * introduce /elevate-sandbox command to upgrade from degraded
  experience.

  iceweasel-oai · 2026-01-08 16:23:06 -08:00
  6372ba9d5f
• feat: open prompt in configured external editor (#7606)

  Add `ctrl+g` shortcut to enable opening current prompt in configured
  editor (`$VISUAL` or `$EDITOR`).
  
  
  - Prompt is updated with editor's content upon editor close.
  - Paste placeholders are automatically expanded when opening the
  external editor, and are not "recompressed" on close
  - They could be preserved in the editor, but it would be hard to prevent
  the user from modifying the placeholder text directly, which would drop
  the mapping to the `pending_paste` value
  - Image placeholders stay as-is
  - `ctrl+g` explanation added to shortcuts menu, snapshot tests updated
  
  
  
  https://github.com/user-attachments/assets/4ee05c81-fa49-4e99-8b07-fc9eef0bbfce

  sayan-oai · 2025-12-22 15:12:23 -08:00
  4673090f73
• feat: experimental menu (#8071)

  This will automatically render any `Stage::Beta` features.
  
  The change only gets applied to the *next session*. This started as a
  bug but actually this is a good thing to prevent out of distribution
  push
  
  <img width="986" height="288" alt="Screenshot 2025-12-15 at 15 38 35"
  src="https://github.com/user-attachments/assets/78b7a71d-0e43-4828-a118-91c5237909c7"
  />
  
  
  <img width="509" height="109" alt="Screenshot 2025-12-15 at 17 35 44"
  src="https://github.com/user-attachments/assets/6933de52-9b66-4abf-b58b-a5f26d5747e2"
  />

  jif-oai · 2025-12-17 17:08:03 +00:00
  ac6ba286aa
• Make migration screen dynamic (#7896)

  # External (non-OpenAI) Pull Request Requirements
  
  Before opening this Pull Request, please read the dedicated
  "Contributing" markdown file or your PR may be closed:
  https://github.com/openai/codex/blob/main/docs/contributing.md
  
  If your PR conforms to our contribution guidelines, replace this text
  with a detailed and high quality description of your changes.
  
  Include a link to a bug report or enhancement request.

  Ahmed Ibrahim · 2025-12-11 16:41:04 -08:00
  c787e9d0c0
• Enhance model picker (#7709)

  # External (non-OpenAI) Pull Request Requirements
  
  Before opening this Pull Request, please read the dedicated
  "Contributing" markdown file or your PR may be closed:
  https://github.com/openai/codex/blob/main/docs/contributing.md
  
  If your PR conforms to our contribution guidelines, replace this text
  with a detailed and high quality description of your changes.
  
  Include a link to a bug report or enhancement request.

  Ahmed Ibrahim · 2025-12-08 14:22:51 -08:00
  71c75e648c
• Migrate model preset (#7542)

  - Introduce `openai_models` in `/core`
  - Move `PRESETS` under it
  - Move `ModelPreset`, `ModelUpgrade`, `ReasoningEffortPreset`,
  `ReasoningEffortPreset`, and `ReasoningEffortPreset` to `protocol`
  - Introduce `Op::ListModels` and `EventMsg::AvailableModels`
  
  Next steps:
  - migrate `app-server` and `tui` to use the introduced Operation

  Ahmed Ibrahim · 2025-12-03 20:30:43 +00:00
  71504325d3
• add slash resume (#7302)

  `codex resume` isn't that discoverable. Adding it to the slash commands
  can help

  Ahmed Ibrahim · 2025-12-03 11:25:44 -08:00
  2ad980abf4
• feat: tweak windows sandbox strings (#6875)

  New strings:
  1. Approval mode picker just says "Select Approval Mode"
  1. Updated "Auto" to "Agent"
  1. When you select "Agent", you get "Agent mode on Windows uses an
  experimental sandbox to limit network and filesystem access. [Learn
  more]"
  1. Updated world-writable warning to "The Windows sandbox cannot protect
  writes to folders that are writable by Everyone. Consider removing write
  access for Everyone from the following folders: {folders}"
  
  ---------
  
  Co-authored-by: iceweasel-oai <iceweasel@openai.com>

  ae · 2025-11-19 06:00:06 +00:00
  7e6316d4aa
• Prompt to turn on windows sandbox when auto mode selected. (#6618)

  - stop prompting users to install WSL 
  - prompt users to turn on Windows sandbox when auto mode requested.
  
  <img width="1660" height="195" alt="Screenshot 2025-11-17 110612"
  src="https://github.com/user-attachments/assets/c67fc239-a227-417e-94bb-599a8ed8f11e"
  />
  <img width="1684" height="168" alt="Screenshot 2025-11-17 110637"
  src="https://github.com/user-attachments/assets/d18c3370-830d-4971-8746-04757ae2f709"
  />
  <img width="1655" height="293" alt="Screenshot 2025-11-17 110719"
  src="https://github.com/user-attachments/assets/d21f6ce9-c23e-4842-baf6-8938b77c16db"
  />

  iceweasel-oai · 2025-11-18 11:38:18 -08:00
  4bada5a84d
• background rate limits fetch (#6789)

  fetching rate limits every minute asynchronously

  zhao-oai · 2025-11-17 16:06:26 -08:00
  4000e26303
• NUX for gpt5.1 (#6561)

  - Introducing a screen to inform users of model changes. 
  - Config name is being passed to be able to reuse this component in the
  future for future models

  Ahmed Ibrahim · 2025-11-13 01:24:21 +00:00
  e63ab0dd65
• Add opt-out for rate limit model nudge (#6433)

  ## Summary
  - add a `hide_rate_limit_model_nudge` notice flag plus config edit
  plumbing so the rate limit reminder preference is persisted and
  documented
  - extend the chat widget prompt with a "never show again" option, and
  wire new app events so selecting it hides future nudges immediately and
  writes the config
  - add unit coverage and refresh the snapshot for the three-option prompt
  
  ## Testing
  - `just fmt`
  - `just fix -p codex-tui`
  - `just fix -p codex-core`
  - `cargo test -p codex-tui`
  - `cargo test -p codex-core` *(fails at
  `exec::tests::kill_child_process_group_kills_grandchildren_on_timeout`:
  grandchild process still alive)*
  
  ------
  [Codex
  Task](https://chatgpt.com/codex/tasks/task_i_6910d7f407748321b2661fc355416994)

  Ahmed Ibrahim · 2025-11-10 09:21:53 -08:00
  e743d251a7
• more world-writable warning improvements (#6389)

  3 improvements:
  1. show up to 3 actual paths that are world-writable
  2. do the scan/warning for Read-Only mode too, because it also applies
  there
  3. remove the "Cancel" option since it doesn't always apply (like on
  startup)

  iceweasel-oai · 2025-11-08 11:35:43 -08:00
  a47181e471
• Windows Sandbox: Show Everyone-writable directory warning (#6283)

  Show a warning when Auto Sandbox mode becomes enabled, if we detect
  Everyone-writable directories, since they cannot be protected by the
  current implementation of the Sandbox.
  
  This PR also includes changes to how we detect Everyone-writable to be
  *much* faster

  iceweasel-oai · 2025-11-06 10:44:42 -08:00
  871d442b8e
• feat(tui): clarify Windows auto mode requirements (#5568)

  ## Summary
  - Coerce Windows `workspace-write` configs back to read-only, surface
  the forced downgrade in the approvals popup,
    and funnel users toward WSL or Full Access.
  - Add WSL installation instructions to the Auto preset on Windows while
  keeping the preset available for other
    platforms.
  - Skip the trust-on-first-run prompt on native Windows so new folders
  remain read-only without additional
    confirmation.
  - Expose a structured sandbox policy resolution from config to flag
  Windows downgrades and adjust tests (core,
  exec, TUI) to reflect the new behavior; provide a Windows-only approvals
  snapshot.
  
    ## Testing
    - cargo fmt
  - cargo test -p codex-core
  config::tests::add_dir_override_extends_workspace_writable_roots
  - cargo test -p codex-exec
  suite::resume::exec_resume_preserves_cli_configuration_overrides
  - cargo test -p codex-tui
  chatwidget::tests::approvals_selection_popup_snapshot
  - cargo test -p codex-tui
  approvals_popup_includes_wsl_note_for_auto_mode
    - cargo test -p codex-tui windows_skips_trust_prompt
    - just fix -p codex-core
    - just fix -p codex-tui

  Josh McKinney · 2025-10-28 01:19:32 +00:00
  66a4b89822
• Improve feedback (#5661)

  <img width="1099" height="153" alt="image"
  src="https://github.com/user-attachments/assets/2c901884-8baf-4b1b-b2c4-bcb61ff42be8"
  />
  
  <img width="1082" height="125" alt="image"
  src="https://github.com/user-attachments/assets/6336e6c9-9ace-46df-a383-a807ceffa524"
  />
  
  <img width="1102" height="103" alt="image"
  src="https://github.com/user-attachments/assets/78883682-7e44-4fa3-9e04-57f7df4766fd"
  />

  Ahmed Ibrahim · 2025-10-24 22:28:14 -07:00
  71f838389b
• [app-server] model/list API (#5382)

  Adds a `model/list` paginated API that returns the list of models
  supported by Codex.

  Owen Lin · 2025-10-21 11:15:17 -07:00
  26f314904a
• feat(tui): Add confirmation prompt for enabling full access approvals (#4980)

  ## Summary
  Adds a confirmation screen when a user attempts to select Full Access
  via the `/approvals` flow in the TUI.
  
  If the user selects the remember option, the preference is persisted to
  config.toml as `full_access_warning_acknowledged`, so they will not be
  prompted again.
  
  
  ## Testing
  - [x] Adds snapshot test coverage for the approvals flow and the
  confirmation flow
  <img width="865" height="187" alt="Screenshot 2025-10-08 at 6 04 59 PM"
  src="https://github.com/user-attachments/assets/fd1dac62-28b0-4835-ba91-5da6dc5ec4c4"
  />
  
  
  
  ------
  https://chatgpt.com/codex/tasks/task_i_68e6c5c458088322a28efa3207058180
  
  ---------
  
  Co-authored-by: Fouad Matin <169186268+fouad-openai@users.noreply.github.com>
  Co-authored-by: Fouad Matin <fouad@openai.com>

  Dylan · 2025-10-16 17:31:46 -07:00
  78f2785595
• revert /name for now (#4978)

  There was a regression where we'd read entire rollout contents if there
  was no /name present.

  dedrisian-oai · 2025-10-08 17:13:49 -07:00
  4300236681
• feat: Set chat name (#4974)

  Set chat name with `/name` so they appear in the codex resume page:
  
  
  https://github.com/user-attachments/assets/c0252bba-3a53-44c7-a740-f4690a3ad405

  dedrisian-oai · 2025-10-08 16:35:35 -07:00
  ec238a2c39
• Make model switcher two-stage (#4178)

  https://github.com/user-attachments/assets/16d5c67c-e580-4a29-983c-a315f95424ee

  easong-openai · 2025-10-02 19:38:24 +00:00
  06e34d4607
• rework patch/exec approval UI (#4573)

  | Scenario | Screenshot |
  | ---------------------- |
  ----------------------------------------------------------------------------------------------------------------------------------------------------
  |
  | short patch | <img width="1096" height="533" alt="short patch"
  src="https://github.com/user-attachments/assets/8a883429-0965-4c0b-9002-217b3759b557"
  /> |
  | short command | <img width="1096" height="533" alt="short command"
  src="https://github.com/user-attachments/assets/901abde8-2494-4e86-b98a-7cabaf87ca9c"
  /> |
  | long patch | <img width="1129" height="892" alt="long patch"
  src="https://github.com/user-attachments/assets/fa799a29-a0d6-48e6-b2ef-10302a7916d3"
  /> |
  | long command | <img width="1096" height="892" alt="long command"
  src="https://github.com/user-attachments/assets/11ddf79b-98cb-4b60-ac22-49dfa7779343"
  /> |
  | viewing complete patch | <img width="1129" height="892" alt="viewing
  complete patch"
  src="https://github.com/user-attachments/assets/81666958-af94-420e-aa66-b60d0a42b9db"
  /> |

  Jeremy Rose · 2025-10-01 14:29:05 -07:00
  07c1db351a
• feat: Add view stack to BottomPane (#4026)

  Adds a "View Stack" to the bottom pane to allow for pushing/popping
  bottom panels.
  
  `esc` will go back instead of dismissing.
  
  Benefit: We retain the "selection state" of a parent panel (e.g. the
  review panel).

  dedrisian-oai · 2025-09-22 11:29:39 -07:00
  8daba53808
• feat: Add more /review options (#3961)

  Adds the following options:
  
  1. Review current changes
  2. Review a specific commit
  3. Review against a base branch (PR style)
  4. Custom instructions
  
  <img width="487" height="330" alt="Screenshot 2025-09-20 at 2 11 36 PM"
  src="https://github.com/user-attachments/assets/edb0aaa5-5747-47fa-881f-cc4c4f7fe8bc"
  />
  
  ---
  
  \+ Adds the following UI helpers:
  
  1. Makes list selection searchable
  2. Adds navigation to the bottom pane, so you could add a stack of
  popups
  3. Basic custom prompt view

  dedrisian-oai · 2025-09-21 20:18:35 -07:00
  5996ee0e5f
• feat: update model save (#3589)

  Edit model save to save by default as global or on the profile depending
  on the session

  jimmyfraiture2 · 2025-09-14 16:25:43 -07:00
  99e1d33bd1
• feat: reasoning effort as optional (#3527)

  Allow the reasoning effort to be optional

  jif-oai · 2025-09-12 12:06:33 -07:00
  c6fd056aa6
• Change forking to read the rollout from file (#3440)

  This PR changes get history op to get path. Then, forking will use a
  path. This will help us have one unified codepath for resuming/forking
  conversations. Will also help in having rollout history in order. It
  also fixes a bug where you won't see the UI when resuming after forking.

  Ahmed Ibrahim · 2025-09-10 17:42:54 -07:00
  162e1235a8
• rework message styling (#2877)

  https://github.com/user-attachments/assets/cf07f62b-1895-44bb-b9c3-7a12032eb371

  Jeremy Rose · 2025-09-02 17:29:58 +00:00
  e442ecedab
• Resume conversation from an earlier point in history (#2607)

  Fixing merge conflict of this: #2588
  
  
  https://github.com/user-attachments/assets/392c7c37-cf8f-4ed6-952e-8215e8c57bc4

  Ahmed Ibrahim · 2025-08-23 23:23:15 -07:00
  c6a52d611c
• refactor: move slash command handling into chatwidget (#2536)

  no functional change, just moving the code that handles /foo into
  chatwidget, since most commands just do things with chatwidget.

  Jeremy Rose · 2025-08-21 10:36:58 -07:00
  16d16a4ddc
• show thinking in transcript (#2538)

  record the full reasoning trace and show it in transcript mode

  Jeremy Rose · 2025-08-20 17:09:46 -07:00
  9193eb6b53
• refactor onboarding screen to a separate "app" (#2524)

  this is in preparation for adding more separate "modes" to the tui, in
  particular, a "transcript mode" to view a full history once #2316 lands.
  
  1. split apart "tui events" from "app events".
  2. remove onboarding-related events from AppEvent.
  3. move several general drawing tools out of App and into a new Tui
  class

  Jeremy Rose · 2025-08-20 20:47:24 +00:00
  0d12380c3b
• Add a slash command to control permissions (#2474)

  A slash command to control permissions
  
  
  
  https://github.com/user-attachments/assets/c0edafcd-2085-4e09-8009-ba69c4f1c153
  
  ---------
  
  Co-authored-by: ae <ae@openai.com>

  Ahmed Ibrahim · 2025-08-20 05:34:37 +00:00
  202af12926
• Support changing reasoning effort (#2435)

  https://github.com/user-attachments/assets/50198ee8-5915-47a3-bb71-69af65add1ef
  
  Building up on #2431 #2428

  Ahmed Ibrahim · 2025-08-19 17:55:07 +00:00
  e91c3d6d1c
• Show progress indicator for /diff command (#2245)

  ## Summary
  - Show a temporary Working on diff state in the bottom pan 
  - Add `DiffResult` app event and dispatch git diff asynchronously
  
  ## Testing
  - `just fmt`
  - `just fix` *(fails: `let` expressions in this position are unstable)*
  - `cargo test --all-features` *(fails: `let` expressions in this
  position are unstable)*
  
  ------
  https://chatgpt.com/codex/tasks/task_i_689a839f32b88321840a893551d5fbef

  aibrahim-oai · 2025-08-15 15:32:41 -07:00
  d3078b9adc
• use a central animation loop (#2268)

  instead of each shimmer needing to have its own animation thread, have
  render_ref schedule a new frame if it wants one and coalesce to the
  earliest next frame. this also makes the animations
  frame-timing-independent, based on start time instead of frame count.

  Jeremy Rose · 2025-08-14 16:59:47 -04:00
  20cd61e2a4
• remove "status text" in bottom line (#2279)

  this used to hold the most recent log line, but it was kinda broken and
  not that useful.

  Jeremy Rose · 2025-08-14 14:10:21 -04:00
  b42e679227
• Re-add markdown streaming (#2029)

  Wait for newlines, then render markdown on a line by line basis. Word wrap it for the current terminal size and then spit it out line by line into the UI. Also adds tests and fixes some UI regressions.

  easong-openai · 2025-08-12 17:37:28 -07:00
  6340acd885
• Revert "Streaming markdown (#1920)" (#1981)

  This reverts commit 2b7139859e.

  easong-openai · 2025-08-08 01:38:39 +00:00
  52e12f2b6c
• Streaming markdown (#1920)

  We wait until we have an entire newline, then format it with markdown and stream in to the UI. This reduces time to first token but is the right thing to do with our current rendering model IMO. Also lets us add word wrapping!

  easong-openai · 2025-08-07 18:26:47 -07:00
  2b7139859e
• Migrate GitWarning to OnboardingScreen (#1915)

  This paves the way to do per-directory approval settings
  (https://github.com/openai/codex/pull/1912).
  
  This also lets us pass in a Config/ChatWidgetArgs into onboarding which
  can then mutate it and emit the ChatWidgetArgs it wants at the end which
  may be modified by the said approval settings.
  
  <img width="1180" height="428" alt="CleanShot 2025-08-06 at 19 30 55"
  src="https://github.com/user-attachments/assets/4dcfda42-0f5e-4b6d-a16d-2597109cc31c"
  />

  Gabriel Peal · 2025-08-06 22:39:07 -04:00
  8a990b5401
• First pass at a TUI onboarding (#1876)

  This sets up the scaffolding and basic flow for a TUI onboarding
  experience. It covers sign in with ChatGPT, env auth, as well as some
  safety guidance.
  
  Next up:
  1. Replace the git warning screen
  2. Use this to configure default approval/sandbox modes
  
  
  Note the shimmer flashes are from me slicing the video, not jank.
  
  https://github.com/user-attachments/assets/0fbe3479-fdde-41f3-87fb-a7a83ab895b8

  Gabriel Peal · 2025-08-06 18:22:14 -04:00
  2d5de795aa
• remove conversation history widget (#1727)

  this widget is no longer used.

  Jeremy Rose · 2025-07-30 10:05:40 -07:00
  347c81ad00
• Easily Selectable History (#1672)

  This update replaces the previous ratatui history widget with an
  append-only log so that the terminal can handle text selection and
  scrolling. It also disables streaming responses, which we'll do our best
  to bring back in a later PR. It also adds a small summary of token use
  after the TUI exits.

  easong-openai · 2025-07-25 01:56:40 -07:00
  480e82b00d
• Implement redraw debounce (#1599)

  ## Summary
  - debouce redraw events so repeated requests don't overwhelm the
  terminal
  - add `RequestRedraw` event and schedule redraws after 100ms
  
  ## Testing
  - `cargo clippy --tests`
  - `cargo test` *(fails: Sandbox Denied errors in landlock tests)*
  
  ------
  https://chatgpt.com/codex/tasks/task_i_68792a65b8b483218ec90a8f68746cd8
  
  ---------
  
  Co-authored-by: Michael Bolin <mbolin@openai.com>

  aibrahim-oai · 2025-07-17 12:54:55 -07:00
  bb30ab9e96
• Add paste summarization to Codex TUI (#1549)

  ## Summary
  - introduce `Paste` event to avoid per-character paste handling
  - collapse large pasted blocks to `[Pasted Content X lines]`
  - store the real text so submission still includes it
  - wire paste handling through `App`, `ChatWidget`, `BottomPane`, and
  `ChatComposer`
  
  ## Testing
  - `cargo test -p codex-tui`
  
  
  ------
  https://chatgpt.com/codex/tasks/task_i_6871e24abf80832184d1f3ca0c61a5ee
  
  
  https://github.com/user-attachments/assets/eda7412f-da30-4474-9f7c-96b49d48fbf8

  aibrahim-oai · 2025-07-12 15:32:00 -07:00
  72504f1d9c
• feat: highlight matching characters in fuzzy file search (#1420)

  Using the new file-search API introduced in
  https://github.com/openai/codex/pull/1419, matching characters are now
  shown in bold in the TUI:
  
  
  https://github.com/user-attachments/assets/8bbcc6c6-75a3-493f-8ea4-b2a063e09b3a
  
  Fixes https://github.com/openai/codex/issues/1261

  Michael Bolin · 2025-06-28 15:04:23 -07:00
  4a341efe92