# Common — codex transport

- `cwd: <absolute path>` is MANDATORY (agent won't launch without it).
- Task in `=== TASK FOR CODEX ===` / `=== END TASK ===` (wrapper forwards only this block).
- `codex options:` line passed verbatim to `scripts/codex-run.sh` after mode; saved to `$JOB/codex-flags` (NUL-delimited) and re-applied on `resume` so permissions survive retries.
- Overrides: `-m <model>` (e.g. `<model-from-discovery>`), `-c model_reasoning_effort="<effort-from-discovery>"` (per-model, run `scripts/codex-models.sh` to list), `-s read-only|workspace-write|danger-full-access`, `--dangerously-bypass-approvals-and-sandbox` (global, hoisted before `exec`), `--add-dir <dir>`, `-c key=value`. Never `--ephemeral`.
- Codex has shell+apply_patch always, browser_use stable. MCP via `codex mcp list` if needed.
- Wait-loop: agent polls `$JOB/status` with short 60s foreground calls, streams `tail -5 $JOB/events.jsonl` via `SendMessage` (to: main) without ending turn; final answer + `thread_id` only in last message.
- Resume: on `stalled`/`error` or orchestrator SendMessage, write new `$JOB/prompt.md` and `codex-run.sh $JOB resume $(cat $JOB/thread_id)` with saved flags.