Update to Kombai
Snapshot Nov 9, 2026 · 06:07 UTC · version 0.5.0
Package or technical metadata updated
Package or technical metadata updated
Observed in package metadata. These changes alone do not establish a new customer-facing feature.
Up to 3 plugins free · no card required.
All fields and original values.
These are saved file metadata. Open a changed file to read its text edits.
Package file
Nov 2, 2026 · 12:56 UTC
5108dd66fe72683913cf8c0b67e73d348e9546f858fdc4f2dcc7fc889390ebc0
Nov 9, 2026 · 06:07 UTC
3644e78c5c3197da55d794fb216096372ba16649c1616fb7865ea626cc906561
Package file
Nov 2, 2026 · 12:56 UTC
2552
Nov 9, 2026 · 06:07 UTC
2474
Package file
Nov 2, 2026 · 12:56 UTC
3179413c60fbf2b6cfd706e631c26f0dc4227d625f460542efd8e7db28baa6a8
Nov 9, 2026 · 06:07 UTC
1c0820c4162a52154171b012278cd77afde8f8df3b4662362d4d0788af805ad3
Package file
Nov 2, 2026 · 12:56 UTC
3843
Nov 9, 2026 · 06:07 UTC
4017
Compare saved observations
Download comparison JSONChanged files
Choose a file to see its text changes. Binary or large files show metadata only.
skills/about-kombai/SKILL.md →
skills/about-kombai/agents/openai.yaml →
skills/get-started-with-kombai/SKILL.md →
skills/get-started-with-kombai/agents/openai.yaml →
skills/kombai-workflow/SKILL.md →
skills/kombai-workflow/agents/openai.yaml →
README.md
− removed · + added
--- before +++ after @@ -1,8 +1,16 @@ # Kombai for Codex -This plugin teaches Codex to hand UI design and implementation work to the installed Kombai desktop app. It supplies a workflow skill and visual assets. The app independently owns the local `kombai` MCP server; this payload contains no MCP executable, `.mcp.json`, or fixed localhost address. +This plugin's `work-with-kombai` skill runs the Kombai CLI (`npx -y @kombai/cli@0.1.5 skill`) and follows what it prints: Codex designs on a hosted Kombai canvas. The CLI needs Node.js 20 or later. -Kombai must be installed and its MCP registered with Codex. You can turn on Codex in Kombai's MCP settings, or run `mcp install codex` through the **installed Kombai app executable**. The command requires a packaged Kombai build that includes this operation; it writes the Codex entry and the app's existing client skills. Check the result with `codex mcp get kombai --json`. If Codex cannot see newly registered tools in its current task, start a new Codex task. +Its `about-kombai` skill runs `npx -y @kombai/cli@0.1.5 skill faq` and answers the user's questions about Kombai (accounts, credits, where designs and data live, updates, support) from what it prints. + +The skill requests approved execution outside Codex's sandbox before this first `npx` call +and for later Kombai CLI commands, using the execution tool's +`sandbox_permissions: "require_escalated"` setting. npm may need network access before Kombai +starts, and the CLI writes `~/.kombai`. Update the installed plugin to receive this bootstrap +guidance; updating only the CLI does not change the installed skill. + +The plugin ships skills only (`cli.view` is off in `kombai.package.json`, and `requires_local_executor` is set in the manifest): OpenAI's plugin directory drops a plugin's local MCP config. Kombai's canvas view is the Kombai CLI's MCP server, `kombai` (`npx -y @kombai/cli@0.1.5 mcp`), in the user's own Codex config. Setting the plugin up right after installing it runs its onboarding skill, `get-started-with-kombai` (the manifest's `onboardingSkill`; Codex's Try now after an install asks for it too, through the manifest's first `defaultPrompt`), which adds that server with `npx -y @kombai/cli@0.1.5 mcp install codex`, checks the Kombai sign-in, and ends with links that each open a new chat with a Kombai prompt filled in, so the user's first design chat has the view from its first message. Codex gives a chat only the MCP servers it had when it started, so that first onboarding chat can't show the canvas. The user can run the onboarding again: in a chat that has Kombai's view it shows the CLI's starters card, prompts to try with a Try button each. If the user skipped setup, the first time the `work-with-kombai` skill finds no `canvas_app` tool, it runs, without asking, `npx -y @kombai/cli@0.1.5 mcp install codex` to add that server to `config.toml` (`$CODEX_HOME`, else `~/.codex`), and continues in a new task, since a running task never picks up a new MCP server. `npx -y @kombai/cli@0.1.5 mcp uninstall codex` takes the entry out again; uninstalling the plugin leaves it in place. In the Codex desktop app the view is the only way the skill shows a canvas: never a browser or a link. Codex in a terminal gets no view; the skill opens the canvas in the browser instead. The skills read the plugin's Codex id from their own install path (`plugins/cache/<marketplace>/kombai/…`), for the `@Kombai` mention a new chat's prompt starts with: the same ZIP installs as `kombai@openai-curated-remote` from OpenAI's directory and under its marketplace's name when added as a local marketplace. For local development, point Codex at this package's marketplace root, then install its plugin: @@ -11,37 +19,20 @@ codex plugin add kombai@kombai --json ``` -This installs the plugin payload only. Register the MCP from the installed Kombai app or its settings. - -To rehearse the user journey, install this plugin **before** installing Kombai Dev. Ask Codex to -use Kombai Dev for a task. It should explain that the requested app build is missing, without -offering the production download as a substitute. Install and sign in to your Dev build, then -tell Codex to continue. The workflow skill should locate that installed build, register its -MCP with Codex (in a sandboxed task it should first ask to run that command outside the -sandbox; when the chat's permissions refuse that, as they do in a desktop chat with no project -set to ask for approval, it should ask you to switch the chat's permissions or run the command in -Terminal), verify the entry, and offer to start a new Codex task that carries your request, since -the current task cannot load the new tools. In the desktop app it starts that task itself once -you agree; in the CLI or IDE extension it asks you to start one. - -For a direct registration diagnostic, `mcp install codex` must run through the installed -**Kombai Dev** executable, not the production app. On macOS, find the executable name in that app's -`Contents/Info.plist` and run the binary under `Contents/MacOS/`. Then inspect -`codex mcp get kombai --json`: its command and gateway paths should point into the Dev -installation, and its registration argument should name that build's launch record. -Start a new Codex task after registration so it loads the changed MCP entry. - -The app's launch record is separate for each build identity, including Dev and variants. -Codex currently has one user-level MCP key, `kombai`, shared by those builds. Registering -another installed build replaces that key, and an opted-in app can refresh it at startup. -Re-run the desired build's install command before testing if the entry points elsewhere. +To install a packaged build, unzip `kombai-codex-plugin-0.4.2.zip` into a directory you will keep. +The extracted root contains `.agents/plugins/marketplace.json`, which points to the bundled +`plugins/codex` directory. Register the extracted root, then install the plugin: -When Kombai is not installed, the workflow skill installs the official production build itself (Homebrew cask or the signed installer from agent.kombai.com, signature checked first) instead of sending the user to a download page; Codex asks the user to approve the download and the install. A non-production build is never substituted. +```sh +codex plugin marketplace add /absolute/path/to/kombai-codex-plugin-0.4.2 --json +codex plugin add kombai@kombai --json +``` -Signing in needs no visit to the Kombai app: a `not_signed_in` refusal opens Kombai's sign-in page in the user's browser, and the app finishes the sign-in by polling. The plugin never requests credentials in chat or stores them in MCP arguments. +Start a new Codex chat after installation. Versions through 0.3.4 packaged only the plugin +payload and cannot be registered directly as a marketplace; use a 0.3.5 or later ZIP. -Kombai's questions during a run are asked in the Codex chat: `chat_question` shows them as a card the user answers in. +Signing in happens in the browser: the CLI opens Kombai's sign-in page and shows a match code to compare. The plugin never requests credentials in chat or stores them in MCP arguments. -The skill is [`skills/kombai-workflow/SKILL.md`](skills/kombai-workflow/SKILL.md). It complements the task-specific Kombai skills installed by the app, such as `design-with-kombai` and `code-with-kombai`. +The skills are [`skills/work-with-kombai/SKILL.md`](skills/work-with-kombai/SKILL.md) and [`skills/about-kombai/SKILL.md`](skills/about-kombai/SKILL.md). Licensed under the [MIT License](LICENSE).
Full technical diff · 14 changed fields
changed /files/.codex-plugin~1plugin.json/sha256
"5108dd66fe72683913cf8c0b67e73d348e9546f858fdc4f2dcc7fc889390ebc0"
"3644e78c5c3197da55d794fb216096372ba16649c1616fb7865ea626cc906561"
changed /files/.codex-plugin~1plugin.json/size
2552
2474
changed /files/README.md/sha256
"3179413c60fbf2b6cfd706e631c26f0dc4227d625f460542efd8e7db28baa6a8"
"1c0820c4162a52154171b012278cd77afde8f8df3b4662362d4d0788af805ad3"
changed /files/README.md/size
3843
4017
changed /files/kombai.package.json/sha256
"028ed934e62e5b3d4e221528d78e0a326d6ec6505c02950b48d15180ac5610f6"
"fc84fa15c0f0a1860c9932b9341b228b0cbada65bc4236cfbf40319de2162e03"
changed /files/kombai.package.json/size
462
160
added /files/skills~1about-kombai~1SKILL.md
Field was absent
{
"sha256": "2be7ed0d4e826d93dca80c8ee0ba6f2bf2264b52ce75ceaec0c8993f45fe89c4",
"size": 2169
}added /files/skills~1about-kombai~1agents~1openai.yaml
Field was absent
{
"sha256": "fc3124d3291b7c8699b4d2b4fa29b1c4349624f8eb98c662401b9a7e0dbf1a75",
"size": 167
}added /files/skills~1get-started-with-kombai~1SKILL.md
Field was absent
{
"sha256": "d6f21e7e15558104a57b4cead0e7797270aa75962676d17bb41e8519dbd98b3d",
"size": 4712
}added /files/skills~1get-started-with-kombai~1agents~1openai.yaml
Field was absent
{
"sha256": "3787c5208646ad68ec70387cf5ed2e94776541dc1a37f96c7a0bdb3c5b94e4a7",
"size": 165
}removed /files/skills~1kombai-workflow~1SKILL.md
{
"sha256": "bb39f4d50f8fd77a72a82d3aa91d5b637cfde273bb9299076e63cfda456c2877",
"size": 8418
}Field is absent
removed /files/skills~1kombai-workflow~1agents~1openai.yaml
{
"sha256": "0599d64db8c5395fa2b77a1b581ef024aa326eaedfe5550c84dd2a8bb45d21ab",
"size": 191
}Field is absent
added /files/skills~1work-with-kombai~1SKILL.md
Field was absent
{
"sha256": "b62f8af558393f0aadf679064b4844f1bccd81a6ae44841396b24e1bf68fca32",
"size": 3803
}added /files/skills~1work-with-kombai~1agents~1openai.yaml
Field was absent
{
"sha256": "46ad14ebc0605de639eae10ecff7c7a2fbf1ef813389e4e3be53fd54d74beb1d",
"size": 166
}Full snapshot data
{
"files": {
".codex-plugin/plugin.json": {
"sha256": "3644e78c5c3197da55d794fb216096372ba16649c1616fb7865ea626cc906561",
"size": 2474
},
"LICENSE": {
"sha256": "b58f866b9adf186b0da68db34f1cfd38d4ff3803047fb732f28eb5e7126763ab",
"size": 1067
},
"README.md": {
"sha256": "1c0820c4162a52154171b012278cd77afde8f8df3b4662362d4d0788af805ad3",
"size": 4017
},
"assets/icon.png": {
"sha256": "ab7a446866e7349b285598fd11f7af3ea754aa285d588b1b3d390ddc797f2fe8",
"size": 3580
},
"assets/logo.png": {
"sha256": "b17ad1b72b5ee83a5175a2809dcab363142597723fef3d4f8e900bac8d85a2b2",
"size": 41284
},
"kombai.package.json": {
"sha256": "fc84fa15c0f0a1860c9932b9341b228b0cbada65bc4236cfbf40319de2162e03",
"size": 160
},
"skills/about-kombai/SKILL.md": {
"sha256": "2be7ed0d4e826d93dca80c8ee0ba6f2bf2264b52ce75ceaec0c8993f45fe89c4",
"size": 2169
},
"skills/about-kombai/agents/openai.yaml": {
"sha256": "fc3124d3291b7c8699b4d2b4fa29b1c4349624f8eb98c662401b9a7e0dbf1a75",
"size": 167
},
"skills/get-started-with-kombai/SKILL.md": {
"sha256": "d6f21e7e15558104a57b4cead0e7797270aa75962676d17bb41e8519dbd98b3d",
"size": 4712
},
"skills/get-started-with-kombai/agents/openai.yaml": {
"sha256": "3787c5208646ad68ec70387cf5ed2e94776541dc1a37f96c7a0bdb3c5b94e4a7",
"size": 165
},
"skills/work-with-kombai/SKILL.md": {
"sha256": "b62f8af558393f0aadf679064b4844f1bccd81a6ae44841396b24e1bf68fca32",
"size": 3803
},
"skills/work-with-kombai/agents/openai.yaml": {
"sha256": "46ad14ebc0605de639eae10ecff7c7a2fbf1ef813389e4e3be53fd54d74beb1d",
"size": 166
}
}
}SHA-256 of public snapshot: bf6a2b746441d19dd7fe55a7ea5f1850f58b98b2f83853bbcb01d14c40a1ab60