codex/config.toml

# aOS agent configuration for Codex.
#
# Copied into the persistent shared CODEX_HOME by the entrypoint. Codex
# and Chat deliberately share one authenticated session; per-agent model and
# filesystem restrictions are applied by their aOS runtime adapters.

# Writes stay inside the agent's own worktree. The Chat agent overrides this to
# read-only in code, so its configuration cannot widen its access.
sandbox_mode = "workspace-write"
approval_policy = "never"

[sandbox_workspace_write]
network_access = true

# The aOS tool surface: agents, desktop, workspaces, machines, GitHub,
# Hugging Face and the ChatGPT schedules. The bearer token carries the write
# scope; operator-only actions are refused by the server, not by the client.
[mcp_servers.aos]
url = "http://127.0.0.1:43117/mcp"

[mcp_servers.aos.http_headers]
Authorization = "Bearer ${AOS_AGENT_TOKEN}"

# Hooks are the inbound half: aOS injects identity and unread messages
# rather than the agent polling for them.
[[hooks.SessionStart]]
[[hooks.SessionStart.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs SessionStart"

[[hooks.PostCompact]]
[[hooks.PostCompact.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs PostCompact"

[[hooks.SubagentStart]]
[[hooks.SubagentStart.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs SubagentStart"

[[hooks.UserPromptSubmit]]
[[hooks.UserPromptSubmit.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs UserPromptSubmit"

# The activity hooks: these fire on every tool call, so they carry a short
# timeout and record one small store write. They are what the panel's pets
# animate from — without them a companion only knows "working" for the whole
# of a twenty-minute turn.
[[hooks.PreToolUse]]
[[hooks.PreToolUse.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs PreToolUse"
timeout = 5

[[hooks.PostToolUse]]
[[hooks.PostToolUse.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs PostToolUse"
timeout = 5

[[hooks.Notification]]
[[hooks.Notification.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs Notification"
timeout = 5

[[hooks.Stop]]
[[hooks.Stop.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs Stop"

[[hooks.SessionEnd]]
[[hooks.SessionEnd.hooks]]
type = "command"
command = "node /opt/os/scripts/aos-hook.mjs SessionEnd"