multi-agent.md +188 −15
51- Ask Codex directly to steer a running sub-agent, stop it, or close completed agent threads.51- Ask Codex directly to steer a running sub-agent, stop it, or close completed agent threads.
52- The `wait` tool supports long polling windows for monitoring workflows (up to 1 hour per call).52- The `wait` tool supports long polling windows for monitoring workflows (up to 1 hour per call).
53 53
54## Process CSV batches with sub-agents
55
56Use `spawn_agents_on_csv` when you have many similar tasks that can be expressed as one row per work item. Codex reads the CSV, spawns one worker sub-agent per row, waits for the full batch to finish, and exports the combined results to CSV.
57
58This works well for repeated audits such as:
59
60- reviewing one file, package, or service per row
61- checking a list of incidents, PRs, or migration targets
62- generating structured summaries for many similar inputs
63
64The tool accepts:
65
66- `csv_path` for the source CSV
67- `instruction` for the worker prompt template, using `{column_name}` placeholders
68- `id_column` when you want stable item ids from a specific column
69- `output_schema` when each worker should return a JSON object with a fixed shape
70- `output_csv_path`, `max_concurrency`, and `max_runtime_seconds` for job control
71
72Each worker must call `report_agent_job_result` exactly once. If a worker exits without reporting a result, that row is marked as failed in the exported CSV.
73
74Example prompt:
75
76```
77Create /tmp/components.csv with columns path,owner and one row per frontend component.
78
79Then call spawn_agents_on_csv with:
80- csv_path: /tmp/components.csv
81- id_column: path
82- instruction: "Review {path} owned by {owner}. Return JSON with keys path, risk, summary, and follow_up via report_agent_job_result."
83- output_csv_path: /tmp/components-review.csv
84- output_schema: an object with required string fields path, risk, summary, and follow_up
85```
86
87When you run this through `codex exec`, Codex shows a single-line progress update on `stderr` while the batch is running. The exported CSV includes the original row data plus metadata such as `job_id`, `item_id`, `status`, `last_error`, and `result_json`.
88
89Related runtime settings:
90
91- `agents.max_threads` caps how many agent threads can stay open concurrently.
92- `agents.job_max_runtime_seconds` sets the default per-worker timeout for CSV fan-out jobs. A per-call `max_runtime_seconds` override takes precedence.
93- `sqlite_home` controls where Codex stores the SQLite-backed state used for agent jobs and their exported results.
94
54## Approvals and sandbox controls95## Approvals and sandbox controls
55 96
5697Sub-agents inherit your current sandbox policy, but they run withSub-agents inherit your current sandbox policy.
5798non-interactive approvals. If a sub-agent attempts an action that would require
5899a new approval, that action fails and the error is surfaced in the parentIn interactive CLI sessions, approval requests can surface from inactive agent
59100workflow.threads even while you are looking at the main thread. The approval overlay
101shows the source thread label, and you can press `o` to open that thread before
102you approve, reject, or answer the request.
103
104In non-interactive flows, or whenever a run cannot surface a fresh approval,
105an action that needs new approval fails and the error is surfaced back to the
106parent workflow.
107
108Codex also reapplies the parent turn’s live runtime overrides when it spawns a
109child. That includes sandbox and approval choices you set interactively during
110the session, such as `/approvals` changes or `--yolo`, even if the selected
111agent role loads a config file with different defaults.
60 112
61You can also override the sandbox configuration for individual [agent roles](#agent-roles) such as explicitly marking an agent to work in read-only mode.113You can also override the sandbox configuration for individual [agent roles](#agent-roles) such as explicitly marking an agent to work in read-only mode.
62 114
88| --- | --- | --- | --- |140| --- | --- | --- | --- |
89| `agents.max_threads` | number | No | Maximum number of concurrently open agent threads. |141| `agents.max_threads` | number | No | Maximum number of concurrently open agent threads. |
90| `agents.max_depth` | number | No | Maximum nesting depth for spawned agent threads (root session starts at 0). |142| `agents.max_depth` | number | No | Maximum nesting depth for spawned agent threads (root session starts at 0). |
143| `agents.job_max_runtime_seconds` | number | No | Default timeout per worker for `spawn_agents_on_csv` jobs. |
91| `[agents.<name>]` | table | No | Declares a role. `<name>` is used as the `agent_type` when spawning an agent. |144| `[agents.<name>]` | table | No | Declares a role. `<name>` is used as the `agent_type` when spawning an agent. |
92| `agents.<name>.description` | string | No | Human-facing role guidance shown to Codex when it decides which role to use. |145| `agents.<name>.description` | string | No | Human-facing role guidance shown to Codex when it decides which role to use. |
93| `agents.<name>.config_file` | string (path) | No | Path to a TOML config layer applied to spawned agents for that role. |146| `agents.<name>.config_file` | string (path) | No | Path to a TOML config layer applied to spawned agents for that role. |
96 149
97- Unknown fields in `[agents.<name>]` are rejected.150- Unknown fields in `[agents.<name>]` are rejected.
98- `agents.max_depth` defaults to `1`, which allows a direct child agent to spawn but prevents deeper nesting.151- `agents.max_depth` defaults to `1`, which allows a direct child agent to spawn but prevents deeper nesting.
152- `agents.job_max_runtime_seconds` is optional. When you leave it unset, `spawn_agents_on_csv` falls back to its per-call default timeout of 1800 seconds per worker.
99- Relative `config_file` paths are resolved relative to the `config.toml` file that defines the role.153- Relative `config_file` paths are resolved relative to the `config.toml` file that defines the role.
100- `agents.<name>.config_file` is validated at config load time and must point to an existing file.154- `agents.<name>.config_file` is validated at config load time and must point to an existing file.
101- If a role name matches a built-in role (for example, `explorer`), your user-defined role takes precedence.155- If a role name matches a built-in role (for example, `explorer`), your user-defined role takes precedence.
104 158
105### Example agent roles159### Example agent roles
106 160
107161Below is an example that overrides the definitions for the built-in `default` and `explorer` agent roles and defines a new `reviewer` role.The best role definitions are narrow and opinionated. Give each role one clear job, a tool surface that matches that job, and instructions that keep it from drifting into adjacent work.
108 162
109163Example `~/.codex/config.toml`:#### Example 1: PR review team
164
165This pattern splits review into three focused roles:
166
167- `explorer` maps the codebase and gathers evidence.
168- `reviewer` looks for correctness, security, and test risks.
169- `docs_researcher` checks framework or API documentation through a dedicated MCP server.
170
171Project config (`.codex/config.toml`):
110 172
111```173```
112174[agents.default][agents]
113175description = "General-purpose helper."max_threads = 6
176max_depth = 1
177
178[agents.explorer]
179description = "Read-only codebase explorer for gathering evidence before changes are proposed."
180config_file = "agents/explorer.toml"
114 181
115[agents.reviewer]182[agents.reviewer]
116183description = "Find security, correctness, and test risks in code."description = "PR reviewer focused on correctness, security, and missing tests."
117config_file = "agents/reviewer.toml"184config_file = "agents/reviewer.toml"
118 185
119186[agents.explorer][agents.docs_researcher]
120187description = "Fast codebase explorer for read-heavy tasks."description = "Documentation specialist that uses the docs MCP server to verify APIs and framework behavior."
121188config_file = "agents/custom-explorer.toml"config_file = "agents/docs-researcher.toml"
122```189```
123 190
124191Example config file for the `reviewer` role (`~/.codex/agents/reviewer.toml`):`agents/explorer.toml`:
192
193```
194model = "gpt-5.3-codex-spark"
195model_reasoning_effort = "medium"
196sandbox_mode = "read-only"
197developer_instructions = """
198Stay in exploration mode.
199Trace the real execution path, cite files and symbols, and avoid proposing fixes unless the parent agent asks for them.
200Prefer fast search and targeted file reads over broad scans.
201"""
202```
203
204`agents/reviewer.toml`:
125 205
126```206```
127model = "gpt-5.3-codex"207model = "gpt-5.3-codex"
128model_reasoning_effort = "high"208model_reasoning_effort = "high"
129209developer_instructions = "Focus on high priority issues, write tests to validate hypothesis before flagging an issue. When finding security issues give concrete steps on how to reproduce the vulnerability."sandbox_mode = "read-only"
210developer_instructions = """
211Review code like an owner.
212Prioritize correctness, security, behavior regressions, and missing test coverage.
213Lead with concrete findings, include reproduction steps when possible, and avoid style-only comments unless they hide a real bug.
214"""
215```
216
217`agents/docs-researcher.toml`:
218
219```
220model = "gpt-5.3-codex-spark"
221model_reasoning_effort = "medium"
222sandbox_mode = "read-only"
223developer_instructions = """
224Use the docs MCP server to confirm APIs, options, and version-specific behavior.
225Return concise answers with links or exact references when available.
226Do not make code changes.
227"""
228
229[mcp_servers.openaiDeveloperDocs]
230url = "https://developers.openai.com/mcp"
231```
232
233This setup works well for prompts like:
234
235```
236Review this branch against main. Have explorer map the affected code paths, reviewer find real risks, and docs_researcher verify the framework APIs that the patch relies on.
237```
238
239#### Example 2: frontend integration debugging team
240
241This pattern is useful for UI regressions, flaky browser flows, or integration bugs that cross application code and the running product.
242
243Project config (`.codex/config.toml`):
244
245```
246[agents]
247max_threads = 6
248max_depth = 1
249
250[agents.explorer]
251description = "Read-only codebase explorer for locating the relevant frontend and backend code paths."
252config_file = "agents/explorer.toml"
253
254[agents.browser_debugger]
255description = "UI debugger that uses browser tooling to reproduce issues and capture evidence."
256config_file = "agents/browser-debugger.toml"
257
258[agents.worker]
259description = "Implementation-focused agent for small, targeted fixes after the issue is understood."
260config_file = "agents/worker.toml"
130```261```
131 262
132263Example config file for the `explorer` role (`~/.codex/agents/custom-explorer.toml`):`agents/explorer.toml`:
133 264
134```265```
135model = "gpt-5.3-codex-spark"266model = "gpt-5.3-codex-spark"
136model_reasoning_effort = "medium"267model_reasoning_effort = "medium"
137sandbox_mode = "read-only"268sandbox_mode = "read-only"
269developer_instructions = """
270Map the code that owns the failing UI flow.
271Identify entry points, state transitions, and likely files before the worker starts editing.
272"""
273```
274
275`agents/browser-debugger.toml`:
276
277```
278model = "gpt-5.3-codex"
279model_reasoning_effort = "high"
280sandbox_mode = "workspace-write"
281developer_instructions = """
282Reproduce the issue in the browser, capture exact steps, and report what the UI actually does.
283Use browser tooling for screenshots, console output, and network evidence.
284Do not edit application code.
285"""
286
287[mcp_servers.chrome_devtools]
288url = "http://localhost:3000/mcp"
289startup_timeout_sec = 20
290```
291
292`agents/worker.toml`:
293
294```
295model = "gpt-5.3-codex"
296model_reasoning_effort = "medium"
297developer_instructions = """
298Own the fix once the issue is reproduced.
299Make the smallest defensible change, keep unrelated files untouched, and validate only the behavior you changed.
300"""
301
302[[skills.config]]
303path = "/Users/me/.agents/skills/docs-editor/SKILL.md"
304enabled = false
305```
306
307This setup works well for prompts like:
308
309```
310Investigate why the settings modal fails to save. Have browser_debugger reproduce it, explorer trace the responsible code path, and worker implement the smallest fix once the failure mode is clear.
138```311```