codex-plugin-cc

Prevent git command injection attacks

Fixed a security vulnerability where special characters in git branch names could be interpreted as shell commands. The code now ensures git commands are executed directly without shell expansion, and added a test to verify branch names with special characters like '&' are handled safely.

Plugin version updated to 1.0.5

The Codex plugin version has been bumped from 1.0.4 to 1.0.5 across all configuration files, including the marketplace listing, package manifests, and plugin definitions.

Add Claude session transfer command

Added a new `/codex:transfer` command that converts a Claude Code conversation into a persistent Codex thread, letting users continue the same context directly in Codex. The command automatically detects the current Claude session transcript and outputs a resume command for seamless continuation.

Plugin version bumped to 1.0.4

Updated the Codex plugin version from 1.0.3 to 1.0.4 across all configuration files, including package metadata and marketplace listings.

Fix rescue command routing recursion

Fixed an infinite loop in the rescue command by changing how it routes requests to the Codex rescue subagent. Instead of using ambiguous prose that caused the system to call itself recursively, the command now explicitly uses the Agent tool with proper routing and runs inline rather than in a forked context, ensuring the Agent tool remains available.

Secure job ID argument handling

Fixed a security vulnerability where unquoted job IDs in cancel, result, and status commands could allow shell metacharacters to be executed. Job ID arguments are now properly quoted to prevent command injection attacks.

Fixed invalid reasoning effort setting

Corrected an unsupported 'xhigh' value to 'high' in the README configuration example to prevent users from encountering errors when applying the documented settings.

Specify model for rescue agent

The codex-rescue agent now explicitly declares which AI model it uses (Sonnet), ensuring predictable performance and cost. Previously it relied on a default assignment, which could vary.

Fix session runtime with --cwd flag

The setup and status commands now correctly read session runtime information when using the --cwd flag to specify a different working directory, ensuring they look in the right location for shared session data regardless of where the command is invoked from.

Release version 1.0.3

Updated the Codex plugin to version 1.0.3 across all configuration files and added new version management scripts to automate future version bumps.

Prevent embedding oversized review diffs

Fixed an issue where large or malicious code diffs could be embedded in adversarial review requests, which could cause performance problems. The system now checks diff sizes and handles buffer overflow errors gracefully.

Cancel only targets current Claude session

When canceling a Codex job without specifying a job ID, the cancel command now only considers active jobs from the current Claude session, ignoring jobs from other sessions. Jobs can still be explicitly canceled by ID even if they belong to a different session.

Isolate task resumption by Claude session

Tasks can now only be resumed within the same Claude session they were created in. The system now filters available tasks based on the current session ID, preventing tasks from one session from appearing as resume candidates in another session.

Handle older Codex CLI gracefully

Fixed an issue where thread naming would fail on older versions of Codex CLI that don't support the thread/name/set feature. The system now gracefully handles this unsupported method while still catching and reporting real errors like authentication or network failures.

Fix environment variables in app server

Fixed a bug where the app server process wasn't inheriting environment variables from the parent process, which broke integrations that rely on environment variables like DATABRICKS_TOKEN. The fix ensures that when no explicit environment is provided, the child process now inherits the parent's environment variables.

Codex auth status via app-server

Changed Codex readiness checks to use app-server authentication status instead of local login status, and added support for reusing existing broker sessions during auth checks.

Support Git Bash on Windows

Fixed shell configuration on Windows to respect the SHELL environment variable, enabling proper support for Git Bash and other shell environments instead of always forcing the default Windows shell.

Fix review crashes on untracked directories

The review tool now gracefully skips untracked directories and broken symlinks instead of crashing. This prevents the working-tree review feature from failing when encountering nested directories or broken symbolic links.

Increase test timing tolerances

Extended timeouts and delays in background task tests to reduce flakiness caused by timing-sensitive operations. Changes include increasing a task completion delay from 400ms to 5000ms, a status check timeout from 5000ms to 15000ms, and adding a 15000ms timeout to a polling operation.

Plugin version updated to 1.0.2

The Codex plugin version has been bumped from 1.0.1 to 1.0.2 across all configuration and package files.

Add pull request CI workflow

Added automated testing and build checks that run whenever a pull request is opened. The workflow installs dependencies, runs the test suite, and builds the project to ensure code quality before merging.

Allow user questions in rescue command

Updated the /codex:rescue command to permit the AskUserQuestion tool alongside Bash, enabling the rescue agent to ask for user input when needed during investigation or fixes.

Tests now work on Windows

Fixed the test suite to run reliably across Windows, macOS, and Linux by using cross-platform path handling, creating Windows command wrappers for the fake test binary, and adding shell options that match how the code runs in production. Windows test pass rate improved from 12 to 59 out of 64 tests.

Fix app-server startup on Windows

Fixed an issue where the Codex app-server failed to start on Windows due to Node.js being unable to resolve .cmd shims without shell support. The fix adds platform-specific shell and window-hiding options to properly spawn the process and ensures child processes are fully cleaned up on exit, preventing orphaned processes from accumulating.

Make test paths portable

Updated test files to dynamically derive repository root paths from test file locations instead of using hardcoded absolute paths. This makes the tests work correctly regardless of where the repository is cloned.

Release version 1.0.1

Updated the plugin version from 1.0.0 to 1.0.1 across all configuration files, including package metadata and marketplace listings.

Fix command execution on Windows

Fixed an issue where npm-installed command-line tools (like Codex) couldn't be found on Windows. The fix enables shell mode on Windows only, allowing the system to properly resolve .cmd shims that npm uses for global tool installation.

Add plugin reload documentation

Updated the README with instructions for reloading plugins using the /reload-plugins command, making setup clearer for new users.

Initial project setup and release

Launched the Codex plugin repository with complete source code, documentation, and test suite. This includes a Claude Code plugin for code review and task delegation, along with comprehensive CLI tooling, hooks, and skill definitions.