Codex CLI plugin marketplace. 25 expert plugins for APEX workflow, SOLID/DRY enforcement, framework specialists, and MCP integrations. The implementation follows the official Codex CLI documentation at developers.openai.com/codex.

codex plugin marketplace add https://github.com/fusengine/codex.git
~/.codex/.tmp/marketplaces/fusengine-codex/setup.sh

Windows PowerShell:

codex plugin marketplace add https://github.com/fusengine/codex.git
~/.codex/.tmp/marketplaces/fusengine-codex/setup.ps1

That is all. The script runs from the temporary Codex marketplace checkout, installs dependencies, registers the marketplace, enables hooks, copies AGENTS.md, enables the 19 plugins, prompts for Codex configuration (model, reasoning effort, personality, approval policy, sandbox mode) and MCP API keys, installs a shell autoloader (~/.config/fish/conf.d/codex-env.fish, ~/.zshrc, ~/.bashrc, or the PowerShell profile), and resolves plugin ${VAR} placeholders into static values in ~/.codex/config.toml.

Prerequisites: Bun and the current stable Codex CLI.

The setup prompts for base ~/.codex/config.toml keys and MultiAgentV2 concurrency, then configures required features. (skip) preserves an existing prompted value.

The namespace/metadata pair is runtime-proven on Codex 0.144.1 but remains V2 internal behavior, not a stable public API. Exact custom selection uses agent_type with fork_turns = "none" (or bounded positive history); omitted or "all" history rejected role/model/reasoning overrides in that tested runtime. The returned configured nickname is identity evidence; the task path alone is not.

The setup prompts key by key. Empty input skips a key. Signup URLs are shown as placeholders. Values are stored in ~/.codex/.env with chmod 600 and are loaded by the shell autoloader.

You can pre-export keys before running setup.sh; existing environment values are detected and the prompt is skipped.

1. bun install - installer dependencies
2. codex plugin marketplace add https://github.com/fusengine/codex.git (or direct ~/.codex/config.toml patch when Codex CLI is unavailable)
3. Enables hooks and MultiAgentV2 in ~/.codex/config.toml, removing incompatible legacy agent limits
4. Copies AGENTS.md to ~/.codex/AGENTS.md with overwrite prompt
5. Enables the 19 plugins ([plugins."NAME@fusengine-codex"] enabled = true)
6. Prompts for Codex config and auto-sets suppress_unstable_features_warning
7. Prompts for API keys and writes ~/.codex/.env with chmod 600
8. Installs the shell autoloader
9. Resolves ${VAR} placeholders from plugin mcp.json.bak files into static [mcp_servers.X] blocks in ~/.codex/config.toml
10. Prints the final MCP report and missing environment variables

Why resolve variables during setup? Codex CLI 0.130.x does not interpolate ${VAR} in plugin mcp.json.bak files (openai/codex#19582). The configurator resolves values during installation so Codex receives static config entries.

The marketplace name matches the folder name (kebab-case, no prefix). Codex docs require the outer folder name and plugin.json name to be the same normalized plugin name.

• SessionStart - session boot (startup, resume, clear)
• UserPromptSubmit - user prompt submission
• PreToolUse - before tool execution (matcher = regex on tool name)
• PostToolUse - after tool execution
• PermissionRequest - when approval is required
• Stop - end of turn

Do not register PreCompact for plugin hooks until Codex stabilizes it.

Originals (12): exa, sequential-thinking, context7, gemini-design, shadcn, magic, memory, next-devtools, graphiti, qdrant, XcodeBuildMCP, apple-docs.

Added in v1.2.0 (+12): astro-docs, filesystem, fuse-browser, postgres, github, supabase, slack, sentry, stripe, notion, brave-search, replicate. They are installable through the interactive mcp-select prompt during setup.

codex-plugins/
├── AGENTS.md                          # global Codex rules
├── setup.sh                           # install entry point
├── package.json                       # Bun, type: module
├── tsconfig.json                      # Bun strict
├── .agents/plugins/marketplace.json   # 19-plugin registry
├── plugins/                           # 19 plugins
│   └── <plugin>/
│       ├── .codex-plugin/plugin.json
│       ├── skills/<name>/SKILL.md
│       ├── agents/<name>.toml
│       ├── hooks/hooks.json
│       ├── mcp.json.bak               # MCP defs (installer source for config.toml)
│       ├── scripts/                   # Bun TS + Bun-to-Python wrappers
│       │   └── _legacy_py/            # archived Python originals
│       └── .cartographer/             # generated maps
└── scripts/                           # Bun tooling
    ├── migrate.ts                     # claude-plugins to codex-plugins
    ├── install-codex.ts               # installer entry
    ├── convert-py-to-bun.ts           # regex-based .py to .ts converter
    ├── fix-conformance.ts             # align manifests/models/marketplace
    ├── fix-real-issues.ts             # fix interfaces/matchers after audit
    ├── fix-legacy-py-paths.ts         # patch ~/.claude to ~/.codex in _legacy_py
    ├── final-conformance.ts           # SKILL.md cleanup and wrappers
    └── lib/
        └── install/                   # runner, marketplace, features, agents-md, enable-plugins, mcp

@fusengine/harness guard on Codex — git commit/git add and installs are hard-denied outside Ralph mode. Codex has no interactive approval channel and does not honor permissionDecision: "ask" (it fails open — Codex's own pre_tool_use.rs test unsupported_permission_decision_fails_open), so the harness downgrades every ask to an explicit deny. As a result git commit, git add, git checkout -b (and every git push / checkout / reset / merge / … confirmation gate) plus project installs (bun install, npm install, pip install, …) are denied on Codex unless RALPH_MODE=1 is set. Ralph mode exempts only the safe set (git add, git commit, git checkout -b, git status / diff / log) and project installs; system installs (brew, apt, …) stay denied even then, and destructive git (push --force, reset --hard, branch -D) is always blocked.

All gaps identified in the v1.1.x parity diff are closed in v1.2.0:

• Codex file backups before modification (fs-helpers.ts + backup.ts)
• setup-plugins.ts: centralized per-plugin install orchestration
• Expanded MCP catalog: +12 servers (mcp-catalog.ts, 24 total)
• Dedicated shell environment installers (conf.d / rc append / PowerShell profile)
• Built dist/ statusline (custom statusline not supported by Codex 0.130; tracked in issue #17827)
• [~] _shared/: duplicate apex_constants.ts identified versus apex-constants.ts; four other snake_case files are confirmed unique. Manual cleanup remains.
• commit-pro: assets restored from claude-plugins (commands/, CHANGELOG.md, LICENSE, README.md). Hooks were not restored.
• perf-env.ts: binary-verified Codex environment prompt (RUST_LOG, CODEX_TUI_ROUNDED, GIT_OPTIONAL_LOCKS)
• plugin-scanner.ts: post-install diagnostic report (manifest / hooks / MCP / skills / agents per plugin)

There is no Codex equivalent for Claude Code performance variables (CLAUDE_CODE_FORK_SUBAGENT, CLAUDE_CODE_ATTRIBUTION_HEADER, CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC, DISABLE_AUTOUPDATER). This was verified with strings $(which codex) on 0.130.0; those symbols do not exist in the binary. Codex has no CLI telemetry toggle or autoupdate toggle equivalent; telemetry is server-side and upgrades use codex --upgrade. perf-env.ts is limited to the three recognized environment variables.

Plugin diagnostic (19 plugins scanned):
  ai-pilot              manifest OK  hooks 4 evt / 12 hdl  mcp 2  skills 6  agents 5
  astro-expert          manifest OK  hooks 2 evt /  4 hdl  mcp 1  skills 12 agents 1
  ...
Issues: 0 missing manifest, 0 malformed hooks.json, 0 malformed mcp.json.bak.

bun run migrate                         # regenerate plugins/* from ../claude-plugins/
bun run scripts/convert-py-to-bun.ts    # batch py to ts conversion
bun run scripts/fix-conformance.ts      # align manifests/models/marketplace

MIT. See LICENSE when available.