# Codex I/O Bridge

The Codex I/O bridge observes the canonical Codex tmux pane and reports
heartbeat/progress state. Pane text is runtime observability only; it is not an
operator-question source.

Responsibilities:

- Watch `codex-autopilot:0.0` by default.
- Report heartbeat/progress state.
- Classify detected pane prompt text as non-actionable `codex_internal_context`.

Boundaries:

- It is tmux-local tooling only.
- It does not approve Codex platform permission UI.
- It does not execute arbitrary shell commands.
- It is not an approved-action execution trigger.
- Approved actions are executed only by `ai/tools/approved-action-dispatcher`
  through registered trusted daemon/supervisor paths. The dispatcher can run as
  its own trusted local-dev service; Codex I/O is not part of that execution
  path.
- Automatic freeform questions from pane scraping are disabled. The deprecated
  `--mirror-prompts` flag is compatibility-only and records detected pane text
  as non-actionable internal context without creating operator questions.

Commands:

```sh
ai/tools/codex-io-bridge/start-bridge.sh
ai/tools/codex-io-bridge/status.sh
CIO_TARGET=codex-autopilot:0.0 ai/tools/codex-io-bridge/watch.sh
ai/tools/codex-io-bridge/send-answer.sh --target codex-autopilot:0.0 --answer yes
```