切换供应商，失败自动回滚Switch providers with rollback
混合 OAuth 与 API Key profile，按真实协议写入 Codex 配置。写入失败时恢复原文件。Mix OAuth and API key profiles, write the real Codex protocol, and restore original files when an update fails.
Codex-- Manager
安全切换供应商，整理本地会话，不交出你的 Context 配置。 Switch relay providers and manage local Codex sessions without surrendering your Context configuration.
arm64
Apple Silicon 应用包Apple Silicon app bundle
3
受保护的 Context 表protected Context tables
30d
默认会话归档阈值default archive threshold
AGPL
开源许可open-source license
把 Codex 管理缩到必要范围。Keep Codex management deliberately small.
保留供应商切换、会话生命周期和配置诊断。删除渲染注入、launcher、市场与自动更新。Keep provider switching, session lifecycle, and config diagnostics. Remove injection, launchers, marketplaces, and auto-update.
用 Codex 原生语义整理会话Manage sessions with native semantics
活动与归档分页、可恢复归档、首次预览确认，以及每 24 小时一次的安全检查。Paginated active and archived views, reversible archives, consent preview, and a safe daily check.
real application
供应商状态保持可读Provider state stays inspectable
profile、协议、登录方式和当前选择在一个工作界面中呈现。没有装饰性的假终端或演示数据。Profiles, protocols, sign-in modes, and the active choice share one work surface. No decorative terminal or fabricated data.
写供应商配置，不改你的 Context。Write provider config. Leave Context alone.
每条供应商写入路径都先快照三张表，再把原始 TOML 内容逐字回植。Every provider write snapshots three tables, then grafts their original TOML content back verbatim.
切换前保护Protect before switching读取并保存现有 Context 表，不依赖托管副本。Read and retain live Context tables without trusting managed copies.
写入后回植Graft after writing上游完成供应商写入后，使用
toml_edit 恢复原表。After upstream provider writes, restore original tables with toml_edit.失败时回滚Roll back on failure配置与认证文件保持同一个事务边界。Keep config and authentication files inside one rollback boundary.
~/.codex/config.toml
# snapshot before provider write
[mcp_servers]
transport = "preserved"
[skills]
enabled = "preserved"
[plugins]
state = "preserved"
# grafted back verbatim
下载，校验，放进 Applications。Download, verify, move to Applications.
当前公开包面向 Apple Silicon。更新采用覆盖安装，用户设置保留在独立目录。The public build targets Apple Silicon. Updates replace the app while user settings remain in a separate directory.
首次安装First install
下载应用 zip 与 SHA256SUMS，校验后把应用移入 /Applications。Download the app zip and SHA256SUMS, verify the archive, then move the app to /Applications.
shasum -a 256 -c SHA256SUMS
覆盖更新Update退出应用，用新版覆盖
/Applications/Codex-- Manager.app。Quit the app and replace /Applications/Codex-- Manager.app.设置保留Settings
~/.codex-session-delete/ 不会随覆盖安装删除。remains outside the app bundle.首次打开First launch当前包未公证，必要时在「隐私与安全性」中选择「仍要打开」。The build is not notarized. Use Open Anyway in Privacy & Security when required.
边界写在页面上。The boundaries are part of the product.
Codex-- 宁可禁用不安全路径，也不假装已经解决。Codex-- disables unsafe paths instead of pretending they are solved.
只发布 arm64arm64 only
当前没有 Intel 构建，也没有 Developer ID 签名或 Apple 公证。There is no Intel build, Developer ID signature, or Apple notarization yet.
不实现本地协议代理No local protocol proxy
Chat Completions 与聚合供应商依赖已删除的上游 launcher，请勿使用。Chat Completions and aggregator profiles depend on the removed upstream launcher and should not be used.
不回退到全历史改写No full-history fallback
上游缺少 active-only 写入时，provider 适配保持禁用。Provider adaptation stays disabled while upstream lacks active-only writes.
只管理你明确选择的部分。Manage only what you explicitly choose.
下载可校验的 macOS 应用，或直接阅读完整 AGPL 源码。Download the verifiable macOS app or inspect the complete AGPL source.