3
0
Fork 0
mirror of https://github.com/openai/codex.git synced 2026-06-15 18:02:12 -07:00
Lightweight coding agent that runs in your terminal
  • Rust 96.1%
  • Python 2.9%
  • Starlark 0.3%
  • TypeScript 0.2%
  • Shell 0.2%
  • Other 0.1%
Find a file
viyatb-oai 6e50b22e55
exec-server: default remote transport to Noise (#26245)
## Why

The transport in
[openai/codex#26242](https://github.com/openai/codex/pull/26242) needs
to be used by every remote orchestrator-to-executor connection before
JSON-RPC traffic starts.

## Changes

- Generates one executor Noise identity when remote exec-server starts
and registers its public key.
- Creates a harness identity for each physical remote environment
connection.
- Fetches a fresh registry bundle before connecting and validates the
authenticated harness key before completing the executor handshake.
- Multiplexes encrypted logical streams over the existing executor
WebSocket.
- Adds bounded stream, handshake-failure, and reassembly state.
- Adds safe lifecycle diagnostics without logging keys, authorizations,
plaintext, or ciphertext.
- Covers reconnects, replay rejection, validation failure, framing
limits, and encrypted JSON-RPC tool traffic.

## Stack

1. [openai/codex#26242](https://github.com/openai/codex/pull/26242):
Noise channel and relay transport
2. **[openai/codex#26245](https://github.com/openai/codex/pull/26245)**:
remote registration and runtime activation

## Verification

- `just test -p codex-exec-server`
- `just fix -p codex-exec-server`
- `just bazel-lock-check`
- `cargo shear`

---------

Co-authored-by: Codex <noreply@openai.com>
2026-06-15 17:39:00 -07:00
.codex Run core integration tests against a Wine-backed Windows executor (#28401) 2026-06-16 00:38:41 +00:00
.devcontainer build: run buildifier from just fmt (#28125) 2026-06-13 21:43:39 -07:00
.github Run core integration tests against a Wine-backed Windows executor (#28401) 2026-06-16 00:38:41 +00:00
.vscode Recommend Bazel VSCode extension. (#25161) 2026-05-29 15:24:41 -07:00
bazel Run core integration tests against a Wine-backed Windows executor (#28401) 2026-06-16 00:38:41 +00:00
codex-cli cli: add package path from install context (#26189) 2026-06-03 19:08:19 -07:00
codex-rs exec-server: default remote transport to Noise (#26245) 2026-06-15 17:39:00 -07:00
docs build: run buildifier from just fmt (#28125) 2026-06-13 21:43:39 -07:00
patches [codex] Provide ARM64 MinGW powl compatibility support (#27323) 2026-06-11 11:21:47 -07:00
scripts Run core integration tests against a Wine-backed Windows executor (#28401) 2026-06-16 00:38:41 +00:00
sdk build: run buildifier from just fmt (#28125) 2026-06-13 21:43:39 -07:00
third_party bazel: add PowerShell to Wine test harness (#28120) 2026-06-14 04:52:32 +00:00
tools build: run buildifier from just fmt (#28125) 2026-06-13 21:43:39 -07:00
.bazelignore [bazel] Improve runfiles handling (#10098) 2026-01-29 00:15:44 +00:00
.bazelrc build(v8): update rusty_v8 to 149.2.0 (#26464) 2026-06-06 14:27:23 -07:00
.bazelversion [bazel] Upgrade to bazel9 (#9576) 2026-01-21 13:25:36 +00:00
.codespellignore [codex] Update imagegen system skill (#18852) 2026-04-22 15:08:10 +00:00
.codespellrc Remove js_repl feature (#19410) 2026-04-24 17:49:29 -07:00
.gitattributes Mark hooks schema fixtures as generated (#19194) 2026-04-23 14:11:16 -07:00
.gitignore Harden package-manager install policy (#19163) 2026-04-24 14:36:19 -04:00
.markdownlint-cli2.yaml fix(tui): document paste-burst state machine (#9020) 2026-01-13 11:48:31 -08:00
.npmrc chore: migrate to pnpm for improved monorepo management (#287) 2025-04-18 16:25:15 -07:00
.prettierignore [apply-patch] Clean up apply-patch tool definitions (#2539) 2025-08-21 20:07:41 -07:00
.prettierrc.toml Initial commit 2025-04-16 12:56:08 -04:00
AGENTS.md feat(app-server): expose rate-limit reset credits (#28143) 2026-06-15 21:54:01 +00:00
announcement_tip.toml Add CLI update announcement (#17942) 2026-04-15 11:39:06 -07:00
BUILD.bazel ci: cross-compile Windows Bazel tests (#20585) 2026-05-01 15:55:28 -07:00
CHANGELOG.md Documentation improvement: add missing period (#3754) 2025-10-30 13:01:33 -07:00
cliff.toml docs(changelog): update install command to @openai/codex@<version> (#2073) 2025-10-18 11:02:22 -07:00
defs.bzl Run core integration tests against a Wine-backed Windows executor (#28401) 2026-06-16 00:38:41 +00:00
flake.lock fix(nix): update flake for newer Rust toolchain requirements (#10302) 2026-01-31 11:34:53 -08:00
flake.nix fix(nix): use correct version from Cargo.toml in flake build (#11770) 2026-02-13 12:19:25 -08:00
justfile build: run buildifier from just fmt (#28125) 2026-06-13 21:43:39 -07:00
LICENSE Initial commit 2025-04-16 12:56:08 -04:00
MODULE.bazel build: run buildifier from just fmt (#28125) 2026-06-13 21:43:39 -07:00
MODULE.bazel.lock exec-server: add Noise relay transport (#26242) 2026-06-15 16:39:41 -07:00
NOTICE Remove js_repl feature (#19410) 2026-04-24 17:49:29 -07:00
package.json Harden package-manager install policy (#19163) 2026-04-24 14:36:19 -04:00
pnpm-lock.yaml [codex] Fix high severity dependency alerts (#18167) 2026-04-20 11:59:50 -07:00
pnpm-workspace.yaml Harden package-manager install policy (#19163) 2026-04-24 14:36:19 -04:00
rbe.bzl build: run buildifier from just fmt (#28125) 2026-06-13 21:43:39 -07:00
README.md docs: update README.md to mention curl-based installer (#24106) 2026-05-22 18:39:08 +00:00
SECURITY.md [docs] Restore SECURITY.md update from PR 17848 (#18004) 2026-04-15 15:09:39 -07:00
workspace_root_test_launcher.bat.tpl ci: cross-compile Windows Bazel tests (#20585) 2026-05-01 15:55:28 -07:00
workspace_root_test_launcher.sh.tpl ci: cross-compile Windows Bazel tests (#20585) 2026-05-01 15:55:28 -07:00

Codex CLI is a coding agent from OpenAI that runs locally on your computer.

Codex CLI splash


If you want Codex in your code editor (VS Code, Cursor, Windsurf), install in your IDE.
If you want the desktop app experience, run codex app or visit the Codex App page.
If you are looking for the cloud-based agent from OpenAI, Codex Web, go to chatgpt.com/codex.


Quickstart

Installing and running Codex CLI

Run the following on Mac or Linux to install Codex CLI:

curl -fsSL https://chatgpt.com/codex/install.sh | sh

Run the following on Windows to install Codex CLI:

powershell -ExecutionPolicy ByPass -c "irm https://chatgpt.com/codex/install.ps1 | iex"

Codex CLI can also be installed via the following package managers:

# Install using npm
npm install -g @openai/codex
# Install using Homebrew
brew install --cask codex

Then simply run codex to get started.

You can also go to the latest GitHub Release and download the appropriate binary for your platform.

Each GitHub Release contains many executables, but in practice, you likely want one of these:

  • macOS
    • Apple Silicon/arm64: codex-aarch64-apple-darwin.tar.gz
    • x86_64 (older Mac hardware): codex-x86_64-apple-darwin.tar.gz
  • Linux
    • x86_64: codex-x86_64-unknown-linux-musl.tar.gz
    • arm64: codex-aarch64-unknown-linux-musl.tar.gz

Each archive contains a single entry with the platform baked into the name (e.g., codex-x86_64-unknown-linux-musl), so you likely want to rename it to codex after extracting it.

Using Codex with your ChatGPT plan

Run codex and select Sign in with ChatGPT. We recommend signing into your ChatGPT account to use Codex as part of your Plus, Pro, Business, Edu, or Enterprise plan. Learn more about what's included in your ChatGPT plan.

You can also use Codex with an API key, but this requires additional setup.

Docs

This repository is licensed under the Apache-2.0 License.