Repository navigation
Codex OpenPencil v0.3.13 makes the desktop Canvas entry open a verified, editable canvas in Codex's built-in browser, and pins the dependency-remediated Rust runtime for new installations.
Open the canvas
Choose ＋ → OpenPencil Canvas → 在 Codex 中打开 (Open in Codex). The launcher sends one opening request to the current chat, Codex opens the existing canvas in its built-in browser, and the launcher confirms the native editor's ready receipt. The real desktop button-to-chat-to-browser chain has been verified. Hosts without text-message handoff provide 复制打开指令 (Copy opening instruction) to paste and send in the current chat. Failed or uncertain handoffs do not automatically launch an external browser or resend a message.
Install with one prompt
Give Codex this:
按照 https://github.com/ZSeven-W/codex-openpencil 的 INSTALL.md 帮我安装并配置 OpenPencil，打开可编辑画布，做一个单页手机任务管理 APP。
Or:
Install and set up https://github.com/ZSeven-W/codex-openpencil following its INSTALL.md, open an editable canvas, and create a single-page mobile task app.
Requires Node.js 22+, Git, and a recent local Codex client with plugin support. Setup downloads and verifies the matching Rust editor and web assets; no Rust compiler, API key, DSH, separate OpenPencil desktop app, or GitHub account is required.
Image generation is enabled by default and may consume Codex image-generation quota. Say “只搜图”, “不要生图”, or “use stock images only” to skip generation. Unavailable or failed generation falls back to stock search.
What changed since v0.3.9
- Replaced blocked local-frame navigation and the temporary default-browser launcher with the current-chat/in-app-browser handoff. Ready receipts distinguish a delivered message from a connected editor.
- Preserve the launching host's theme and existing canvas session. Unsupported messaging and clipboard denial have explicit fallbacks.
- Pin
runtime-v0.8.5-d155cd0with verified sizes and SHA-256 values for all six OS/CPU builds. Its dependency audit passes with reviewed, documented exceptions for an unchanged build-only Copilot SDK ZIP dependency. - Keep runtime-only releases out of GitHub Latest so the plugin release is the normal download and release-information entry point.
- Update both READMEs with the tested desktop opening flow and retain the full Codex screenshot banner.
Selection-based chat editing, guarded saves/recovery, live slide previews, generated-image import, and the existing Code panel remain available. In the ordinary browser canvas, the Code panel provides baseline source; continue implementation in the current chat with “继续转代码”.
Validation
- All 87 plugin regression tests and six Node.js 22/24 package CI jobs passed.
- Fresh public installation passed on macOS, Windows and Linux, each on ARM64 and x64: empty plugin/runtime state, public Codex CLI 0.162.1, real native edit/save/independent reopen, installed-plugin and terminal smoke checks, and repeat setup. POSIX runners also tested a real PTY.
- Runtime dependency audit, production Web/WASM gate and all six native build/smoke jobs passed.
- The actual Codex desktop MCP Apps button delivered to the current chat; the in-app browser and originating launcher both showed “画布已连接”.
Fresh install CI · Package CI · Runtime build/audit · Validation record
Runner installation coverage does not establish bare-OS dependency provisioning or MCP Apps behavior in every host version. The current desktop handoff is verified; hosts with fewer capabilities use the documented copy fallback.
Update an existing installation
In your existing clone, run git pull --ff-only, then npm run setup. A new plugin connection may require fully quitting and reopening Codex. Closing only the canvas tab can leave the previous plugin connection loaded. Valid custom runtimes remain selected; the managed published runtime follows the new pin. Setup verification uses an isolated test document.