Web Search
Search source probing, fallback ordering, evidence opening, result compaction, and localhost/private-network protections.
Tools and capabilities
Tooling is part of the runtime, not an afterthought.
CodeSeeX exposes a bounded set of hosted tools, preserves Codex-native client tools, and keeps community tools behind explicit local trust boundaries.
Workspace inspection
Read-only file and repository inspection tools support large-codebase reasoning without turning every operation into a shell script.
Native Apply Patch
Patch application is handed back to Codex in the expected client-tool shape, with repeated failure diagnostics instead of silent loops.
Vision module
Optional OpenAI-compatible image analysis and generation endpoints, configured from the desktop manager.
Community tools
Local command manifests under ~/.codeseex/extension/tools are disabled by default and require explicit trust.
Tool safety boundaries
Diagnostics store summaries and hashes where possible, not raw prompts or full tool output.
Tool safety boundaries
Tool safety boundaries
Tool access is useful only when the runtime can keep it bounded, observable, and scoped.
- Tool output is compacted before replay to reduce token pollution.
- Web opening rejects local, private, link-local, and non-global targets.
- Community tools execute as child processes declared by manifests you choose to trust.
- Diagnostics store summaries and hashes where possible, not raw prompts or full tool output.
Community tools
Local command manifests under ~/.codeseex/extension/tools are disabled by default and require explicit trust.