← KombaiCONTENT HISTORY

Update to Kombai

Snapshot Nov 9, 2026 · 06:07 UTC · version 0.5.0

WHAT CHANGED

Package or technical metadata updated

Package or technical metadata updated

Observed in package metadata. These changes alone do not establish a new customer-facing feature.

Save Kombai and check future changes in Following.

Up to 3 plugins free · no card required.

All fields and original values.

These are saved file metadata. Open a changed file to read its text edits.

Package file

Before

Nov 2, 2026 · 12:56 UTC

5108dd66fe72683913cf8c0b67e73d348e9546f858fdc4f2dcc7fc889390ebc0

After

Nov 9, 2026 · 06:07 UTC

3644e78c5c3197da55d794fb216096372ba16649c1616fb7865ea626cc906561

Package file

Before

Nov 2, 2026 · 12:56 UTC

2552

After

Nov 9, 2026 · 06:07 UTC

2474

Package file

Before

Nov 2, 2026 · 12:56 UTC

3179413c60fbf2b6cfd706e631c26f0dc4227d625f460542efd8e7db28baa6a8

After

Nov 9, 2026 · 06:07 UTC

1c0820c4162a52154171b012278cd77afde8f8df3b4662362d4d0788af805ad3

Package file

Before

Nov 2, 2026 · 12:56 UTC

3843

After

Nov 9, 2026 · 06:07 UTC

4017

Compare saved observations

Download comparison JSON

README.md

− removed · + added

--- before
+++ after
@@ -1,8 +1,16 @@
 # Kombai for Codex
 
-This plugin teaches Codex to hand UI design and implementation work to the installed Kombai desktop app. It supplies a workflow skill and visual assets. The app independently owns the local `kombai` MCP server; this payload contains no MCP executable, `.mcp.json`, or fixed localhost address.
+This plugin's `work-with-kombai` skill runs the Kombai CLI (`npx -y @kombai/cli@0.1.5 skill`) and follows what it prints: Codex designs on a hosted Kombai canvas. The CLI needs Node.js 20 or later.
 
-Kombai must be installed and its MCP registered with Codex. You can turn on Codex in Kombai's MCP settings, or run `mcp install codex` through the **installed Kombai app executable**. The command requires a packaged Kombai build that includes this operation; it writes the Codex entry and the app's existing client skills. Check the result with `codex mcp get kombai --json`. If Codex cannot see newly registered tools in its current task, start a new Codex task.
+Its `about-kombai` skill runs `npx -y @kombai/cli@0.1.5 skill faq` and answers the user's questions about Kombai (accounts, credits, where designs and data live, updates, support) from what it prints.
+
+The skill requests approved execution outside Codex's sandbox before this first `npx` call
+and for later Kombai CLI commands, using the execution tool's
+`sandbox_permissions: "require_escalated"` setting. npm may need network access before Kombai
+starts, and the CLI writes `~/.kombai`. Update the installed plugin to receive this bootstrap
+guidance; updating only the CLI does not change the installed skill.
+
+The plugin ships skills only (`cli.view` is off in `kombai.package.json`, and `requires_local_executor` is set in the manifest): OpenAI's plugin directory drops a plugin's local MCP config. Kombai's canvas view is the Kombai CLI's MCP server, `kombai` (`npx -y @kombai/cli@0.1.5 mcp`), in the user's own Codex config. Setting the plugin up right after installing it runs its onboarding skill, `get-started-with-kombai` (the manifest's `onboardingSkill`; Codex's Try now after an install asks for it too, through the manifest's first `defaultPrompt`), which adds that server with `npx -y @kombai/cli@0.1.5 mcp install codex`, checks the Kombai sign-in, and ends with links that each open a new chat with a Kombai prompt filled in, so the user's first design chat has the view from its first message. Codex gives a chat only the MCP servers it had when it started, so that first onboarding chat can't show the canvas. The user can run the onboarding again: in a chat that has Kombai's view it shows the CLI's starters card, prompts to try with a Try button each. If the user skipped setup, the first time the `work-with-kombai` skill finds no `canvas_app` tool, it runs, without asking, `npx -y @kombai/cli@0.1.5 mcp install codex` to add that server to `config.toml` (`$CODEX_HOME`, else `~/.codex`), and continues in a new task, since a running task never picks up a new MCP server. `npx -y @kombai/cli@0.1.5 mcp uninstall codex` takes the entry out again; uninstalling the plugin leaves it in place. In the Codex desktop app the view is the only way the skill shows a canvas: never a browser or a link. Codex in a terminal gets no view; the skill opens the canvas in the browser instead. The skills read the plugin's Codex id from their own install path (`plugins/cache/<marketplace>/kombai/…`), for the `@Kombai` mention a new chat's prompt starts with: the same ZIP installs as `kombai@openai-curated-remote` from OpenAI's directory and under its marketplace's name when added as a local marketplace.
 
 For local development, point Codex at this package's marketplace root, then install its plugin:
 
@@ -11,37 +19,20 @@
 codex plugin add kombai@kombai --json
 ```
 
-This installs the plugin payload only. Register the MCP from the installed Kombai app or its settings.
-
-To rehearse the user journey, install this plugin **before** installing Kombai Dev. Ask Codex to
-use Kombai Dev for a task. It should explain that the requested app build is missing, without
-offering the production download as a substitute. Install and sign in to your Dev build, then
-tell Codex to continue. The workflow skill should locate that installed build, register its
-MCP with Codex (in a sandboxed task it should first ask to run that command outside the
-sandbox; when the chat's permissions refuse that, as they do in a desktop chat with no project
-set to ask for approval, it should ask you to switch the chat's permissions or run the command in
-Terminal), verify the entry, and offer to start a new Codex task that carries your request, since
-the current task cannot load the new tools. In the desktop app it starts that task itself once
-you agree; in the CLI or IDE extension it asks you to start one.
-
-For a direct registration diagnostic, `mcp install codex` must run through the installed
-**Kombai Dev** executable, not the production app. On macOS, find the executable name in that app's
-`Contents/Info.plist` and run the binary under `Contents/MacOS/`. Then inspect
-`codex mcp get kombai --json`: its command and gateway paths should point into the Dev
-installation, and its registration argument should name that build's launch record.
-Start a new Codex task after registration so it loads the changed MCP entry.
-
-The app's launch record is separate for each build identity, including Dev and variants.
-Codex currently has one user-level MCP key, `kombai`, shared by those builds. Registering
-another installed build replaces that key, and an opted-in app can refresh it at startup.
-Re-run the desired build's install command before testing if the entry points elsewhere.
+To install a packaged build, unzip `kombai-codex-plugin-0.4.2.zip` into a directory you will keep.
+The extracted root contains `.agents/plugins/marketplace.json`, which points to the bundled
+`plugins/codex` directory. Register the extracted root, then install the plugin:
 
-When Kombai is not installed, the workflow skill installs the official production build itself (Homebrew cask or the signed installer from agent.kombai.com, signature checked first) instead of sending the user to a download page; Codex asks the user to approve the download and the install. A non-production build is never substituted.
+```sh
+codex plugin marketplace add /absolute/path/to/kombai-codex-plugin-0.4.2 --json
+codex plugin add kombai@kombai --json
+```
 
-Signing in needs no visit to the Kombai app: a `not_signed_in` refusal opens Kombai's sign-in page in the user's browser, and the app finishes the sign-in by polling. The plugin never requests credentials in chat or stores them in MCP arguments.
+Start a new Codex chat after installation. Versions through 0.3.4 packaged only the plugin
+payload and cannot be registered directly as a marketplace; use a 0.3.5 or later ZIP.
 
-Kombai's questions during a run are asked in the Codex chat: `chat_question` shows them as a card the user answers in.
+Signing in happens in the browser: the CLI opens Kombai's sign-in page and shows a match code to compare. The plugin never requests credentials in chat or stores them in MCP arguments.
 
-The skill is [`skills/kombai-workflow/SKILL.md`](skills/kombai-workflow/SKILL.md). It complements the task-specific Kombai skills installed by the app, such as `design-with-kombai` and `code-with-kombai`.
+The skills are [`skills/work-with-kombai/SKILL.md`](skills/work-with-kombai/SKILL.md) and [`skills/about-kombai/SKILL.md`](skills/about-kombai/SKILL.md).
 
 Licensed under the [MIT License](LICENSE).
Full technical diff · 14 changed fields

changed /files/.codex-plugin~1plugin.json/sha256

BEFORE
"5108dd66fe72683913cf8c0b67e73d348e9546f858fdc4f2dcc7fc889390ebc0"
AFTER
"3644e78c5c3197da55d794fb216096372ba16649c1616fb7865ea626cc906561"

changed /files/.codex-plugin~1plugin.json/size

BEFORE
2552
AFTER
2474

changed /files/README.md/sha256

BEFORE
"3179413c60fbf2b6cfd706e631c26f0dc4227d625f460542efd8e7db28baa6a8"
AFTER
"1c0820c4162a52154171b012278cd77afde8f8df3b4662362d4d0788af805ad3"

changed /files/README.md/size

BEFORE
3843
AFTER
4017

changed /files/kombai.package.json/sha256

BEFORE
"028ed934e62e5b3d4e221528d78e0a326d6ec6505c02950b48d15180ac5610f6"
AFTER
"fc84fa15c0f0a1860c9932b9341b228b0cbada65bc4236cfbf40319de2162e03"

changed /files/kombai.package.json/size

BEFORE
462
AFTER
160

added /files/skills~1about-kombai~1SKILL.md

BEFORE
Field was absent
AFTER
{
  "sha256": "2be7ed0d4e826d93dca80c8ee0ba6f2bf2264b52ce75ceaec0c8993f45fe89c4",
  "size": 2169
}

added /files/skills~1about-kombai~1agents~1openai.yaml

BEFORE
Field was absent
AFTER
{
  "sha256": "fc3124d3291b7c8699b4d2b4fa29b1c4349624f8eb98c662401b9a7e0dbf1a75",
  "size": 167
}

added /files/skills~1get-started-with-kombai~1SKILL.md

BEFORE
Field was absent
AFTER
{
  "sha256": "d6f21e7e15558104a57b4cead0e7797270aa75962676d17bb41e8519dbd98b3d",
  "size": 4712
}

added /files/skills~1get-started-with-kombai~1agents~1openai.yaml

BEFORE
Field was absent
AFTER
{
  "sha256": "3787c5208646ad68ec70387cf5ed2e94776541dc1a37f96c7a0bdb3c5b94e4a7",
  "size": 165
}

removed /files/skills~1kombai-workflow~1SKILL.md

BEFORE
{
  "sha256": "bb39f4d50f8fd77a72a82d3aa91d5b637cfde273bb9299076e63cfda456c2877",
  "size": 8418
}
AFTER
Field is absent

removed /files/skills~1kombai-workflow~1agents~1openai.yaml

BEFORE
{
  "sha256": "0599d64db8c5395fa2b77a1b581ef024aa326eaedfe5550c84dd2a8bb45d21ab",
  "size": 191
}
AFTER
Field is absent

added /files/skills~1work-with-kombai~1SKILL.md

BEFORE
Field was absent
AFTER
{
  "sha256": "b62f8af558393f0aadf679064b4844f1bccd81a6ae44841396b24e1bf68fca32",
  "size": 3803
}

added /files/skills~1work-with-kombai~1agents~1openai.yaml

BEFORE
Field was absent
AFTER
{
  "sha256": "46ad14ebc0605de639eae10ecff7c7a2fbf1ef813389e4e3be53fd54d74beb1d",
  "size": 166
}
Full snapshot data
{
  "files": {
    ".codex-plugin/plugin.json": {
      "sha256": "3644e78c5c3197da55d794fb216096372ba16649c1616fb7865ea626cc906561",
      "size": 2474
    },
    "LICENSE": {
      "sha256": "b58f866b9adf186b0da68db34f1cfd38d4ff3803047fb732f28eb5e7126763ab",
      "size": 1067
    },
    "README.md": {
      "sha256": "1c0820c4162a52154171b012278cd77afde8f8df3b4662362d4d0788af805ad3",
      "size": 4017
    },
    "assets/icon.png": {
      "sha256": "ab7a446866e7349b285598fd11f7af3ea754aa285d588b1b3d390ddc797f2fe8",
      "size": 3580
    },
    "assets/logo.png": {
      "sha256": "b17ad1b72b5ee83a5175a2809dcab363142597723fef3d4f8e900bac8d85a2b2",
      "size": 41284
    },
    "kombai.package.json": {
      "sha256": "fc84fa15c0f0a1860c9932b9341b228b0cbada65bc4236cfbf40319de2162e03",
      "size": 160
    },
    "skills/about-kombai/SKILL.md": {
      "sha256": "2be7ed0d4e826d93dca80c8ee0ba6f2bf2264b52ce75ceaec0c8993f45fe89c4",
      "size": 2169
    },
    "skills/about-kombai/agents/openai.yaml": {
      "sha256": "fc3124d3291b7c8699b4d2b4fa29b1c4349624f8eb98c662401b9a7e0dbf1a75",
      "size": 167
    },
    "skills/get-started-with-kombai/SKILL.md": {
      "sha256": "d6f21e7e15558104a57b4cead0e7797270aa75962676d17bb41e8519dbd98b3d",
      "size": 4712
    },
    "skills/get-started-with-kombai/agents/openai.yaml": {
      "sha256": "3787c5208646ad68ec70387cf5ed2e94776541dc1a37f96c7a0bdb3c5b94e4a7",
      "size": 165
    },
    "skills/work-with-kombai/SKILL.md": {
      "sha256": "b62f8af558393f0aadf679064b4844f1bccd81a6ae44841396b24e1bf68fca32",
      "size": 3803
    },
    "skills/work-with-kombai/agents/openai.yaml": {
      "sha256": "46ad14ebc0605de639eae10ecff7c7a2fbf1ef813389e4e3be53fd54d74beb1d",
      "size": 166
    }
  }
}

SHA-256 of public snapshot: bf6a2b746441d19dd7fe55a7ea5f1850f58b98b2f83853bbcb01d14c40a1ab60