Skip to content

v0.1.0 — First Public Release / 首个公开版本

Choose a tag to compare

View all tags
@XiaoDuoYa XiaoDuoYa released this 30 Aug 17:19
· 5 commits to main since this release
v0.1.0
9ac01e9

Codex with ChatGPT v0.1.0

ChatGPT thinks. Codex works.

This is the first public release of Codex with ChatGPT — a collaboration layer that uses ChatGPT Web as the planning and review brain while Codex keeps full ownership of execution.

No API key. No reverse proxy. No cookies or session extraction.

Your repository stays local. ChatGPT reads only what it needs through an OAuth-protected, read-only MCP bridge, while Codex handles editing, shell commands, tests, Git, and recovery.

✨ Highlights

  • ChatGPT ↔ Codex planning and review loop

    • Structured INIT → PLAN → EXECUTED → REVIEW → DONE workflow
    • ChatGPT independently inspects workspace state, diffs, tests, and execution summaries
    • Codex remains the only execution layer

  • Read-only local workspace bridge

    • 8 read-only MCP tools for workspace inspection
    • Workspace-bound access control
    • OAuth 2.1 + PKCE
    • One-time pairing codes
    • Cloudflare-backed secure public connectivity

  • One-paste, agent-driven setup

    • Environment detection
    • Automatic dependency installation
    • Build and Skill installation
    • Connector setup and pairing
    • Automatic diagnostics and repair
    • Users are only interrupted for things that genuinely require them, such as login, CAPTCHA, or 2FA

  • Automatic updates

    • Installed Skills check for updates once per day
    • Codex can pull, rebuild, reinstall, restart, and continue the original task automatically
    • Manual update is always available by saying “Update Codex with ChatGPT”

🧠 Workspace & conversation improvements

  • One ChatGPT connector per workspace
  • Existing workspaces can preserve their long-running C2C conversation
  • New workspaces can be organized into a dedicated ChatGPT Project
  • New Codex sessions create their own chats inside the workspace Project
  • C2C verifies workspace_info before accepting a new conversation binding
  • New conversations are explicitly kept in Chat mode
  • Multiple workspaces can remain isolated from one another

Special thanks to @AtlaxTech for the workspace → ChatGPT Project → session chat proposal that helped shape the new conversation model.

🛠 Reliability & UX

A large part of this release is about making C2C something users don't have to babysit.

  • Added a doctor gate before entering the ChatGPT workflow
  • Automatically repairs stale temporary public addresses
  • Recreates dead ChatGPT connectors instead of attempting to reconnect to an expired address
  • Keeps and reuses a single in-app ChatGPT tab
  • Replaced long browser waits with short DOM checks so slow ChatGPT responses are not treated as failures
  • Automatically allowlists the C2C state directory in the Codex sandbox
  • Added optional stable Cloudflare hostnames so connectors can survive restarts
  • Added update-first troubleshooting guidance for fast recovery from newly fixed issues

🔐 Security hardening

This release also contains several community-driven security improvements.

  • Sensitive-file filtering is shared across MCP reads and Git diffs
  • Directory-scoped diffs can no longer accidentally expose nested sensitive files
  • Rename/copy provenance is checked before exposing Git patches
  • Sensitive paths remain protected even when files move across directory boundaries
  • Literal Git pathspecs prevent pathspec interpretation issues
  • Diff execution uses bounded batching and fails closed on errors
  • OAuth pairing-page dynamic content is HTML-escaped
  • Added CSP, frame, content-type, referrer, and cache protections to OAuth HTML
  • Fixed HTTPS OAuth callback navigation after pairing-page CSP hardening
  • Expanded regression coverage around workspace boundaries, OAuth, sensitive files, and MCP behavior

Thanks to:

🪟 Compatibility fixes

  • Fixed fresh installation and test behavior on Windows
  • Fixed Windows dynamic ESM imports using file URLs
  • Improved Windows sandbox/path normalization
  • Fixed recursive Node fallback globs such as **/*.ts so workspace-root files are included
  • Improved behavior on systems where symlink creation is unavailable

Thanks to:

📚 Documentation

  • Bilingual English / Simplified Chinese onboarding
  • One-paste installation prompt for non-technical users
  • Architecture, protocol, security, and troubleshooting documentation
  • Update-first troubleshooting notice
  • Installation philosophy: if the agent can safely do it, the user shouldn't have to

⚠️ Platform note

The fully automated workflow currently targets environments where Codex has access to the ChatGPT in-app browser.

The underlying bridge contains cross-platform support, but combinations such as Linux + VS Code Codex extension are not yet guaranteed to support the complete browser-driven C2C workflow.

中文

这是 Codex with ChatGPT 的第一个公开 Release。

核心理念没有变：

ChatGPT 负责思考，Codex 负责干活。

ChatGPT 负责理解需求、规划、Review 和 Debug 策略；Codex 保留完整执行权，负责修改代码、Shell、Git、测试和修复。

仓库不会被整体上传。ChatGPT 通过受 OAuth 保护的只读 MCP Bridge，只读取当前任务真正需要的工作区内容。

这版重点

  • ChatGPT ↔ Codex 完整规划与审查闭环
  • 只读 MCP Workspace Bridge
  • OAuth 2.1 + PKCE + 一次性配对码
  • 一段 Prompt 自动安装和配置
  • 自动检测依赖、自动修复、自动更新、自动重启
  • 每个 Workspace 独立 Connector
  • ChatGPT Project + Session Chat 会话组织
  • 可选固定 Cloudflare 域名
  • Windows 兼容性改进
  • Git Diff / 敏感文件 / OAuth 安全加固
  • Browser workflow 稳定性改进
  • 更完善的回归测试与故障恢复逻辑

最重要的一点：

能让 Agent 自己完成的事情，就不要让用户完成。

用户只需要表达自己想做什么；其余配置、检查、安装、修复和更新，应该尽可能由 Agent 自己处理。

感谢所有提交 Issue、测试不同环境、提出方案和贡献代码的人。❤️

This is only the beginning.

Contributors

EdisonJwa, vetrovk, and 4 other contributors
Assets 2
Loading