This is pretty interesting in a lot of non-surface-level ways.

I can see OpenAI pushing for this as a sort of more durable moat compared to the now huge number of agentic harnesses that run on your own machine.

This might be getting the foot into some sort of bundling as well. Like unrestricted models or custom fine tuned agents inside this and not providing direct APIs to those endpoints.

That being said I don't see a lot of reasons for people to jump on this if it doesn't bundle something killer. Like to me the fact that GPT Work runs on your own machines and all the artifacts and work in progress there for you to look at is sort of the whole point. I don't just want a final artifact.

Instead of this push for more vendor lock-in, give us the reasoning tokens we pay for. Thanks.

It's actually a really great idea, but it doesn't have to go beyound existing Responses or Chat Completions APIs.

We built that in my current company and it works wonders to just script entire persistent workflows with a simple SDK.

Perfect for when you want your data to be stolen programmatically.

What I want (which I don’t think exists?) is a way to trigger turns that the user can monitor in the codex application. I.e., when event X happens, my application triggers Codex to take a turn with input Y, which the user can monitor through codex. Right now the only way to get close to this is with polling or essentially rewriting a codex-like frontend.

The pricing on this is a bit confusing. Does each execution of an agent session create a new environment? And is that environment then billed for at least a full hour (despite prices being quoted per 20 minutes), after which it naturally expires? Is there a way to deliberately shut down an environment so you don't have to keep paying for it?

you can't use your subscription with this so it's likely the largest companies in the world that can truly use this

This was sorely needed.

Hopefully this kills the need to use the CLI and we can just use the API instead.

Why would you choose api vs sdk . Sdk in a sandbox feels much better .

Since a week or so everything I ask codex to do, no matter how small, uses at least 1% of my weekly limits and like 5% of my 5h limit. It's getting so bad I'm thinking of just canceling my OpenAI subscription, because this has no use anymore.

Now you, too, can ripoff mathematicians worldwide!

[flagged]

I jumped straight to the section on configuring your sandbox's network access: https://developers.openai.com/api/docs/guides/agents-api/env...

It offers three settings:

  enabled:    Allow outbound access. This is the
    default unless you inherit a template policy.
  disabled:   Block outbound access.
  restricted: Allow only the hosts listed in allowed_domains.

Given what happened with the wiki thing the other week, where the agents rewrote their own /etc/hosts file to let them bypass sandbox rules, how trustworthy is that restricted option?