跪拜 Guibai
← All articles
Artificial Intelligence

OpenAI Ships an Official Claude Code Plugin — and the Multi-Agent Question Flips

By 鲁大猿 ·
Read original on juejin.cn ↗ Google Translate ↗ Alt translation

Multi-agent coding stops being a theoretical debate and becomes a configuration problem: the plugin makes it cheap to wire up a second opinion, but the real cost shifts to deciding who owns context, who gets write access, and who verifies the final diff. Get the roles wrong and you just bury three windows inside one.

Summary

OpenAI deprecated its Codex MCP server and released an official Claude Code plugin under its own GitHub organization. The plugin exposes commands for read-only review, adversarial review, task rescue, status polling, and result retrieval — deliberately keeping review and execution as separate paths. Codex can inspect code and surface problems without touching files; writable tasks require an explicit scope handoff. The design pushes a workflow where one primary agent holds full project context and a second agent is called only for bounded, independently verifiable jobs like diff auditing, stuck-test diagnosis, or small isolated changes. The update does not merge agent brains; it forces a decision about which tool drives and which tool assists. Even with fewer windows, four costs remain: context transfer gaps, permission boundaries, duplicated token spend, and the human acceptance step that no automation removes. A six-item handoff checklist — problem, read scope, write scope, forbidden zones, required verification, and evidence to return — turns out to be the practical interface for making multi-agent delegation work without chaos.

Takeaways
OpenAI’s official Claude Code plugin lives at `openai/codex-plugin-cc` and replaces the deprecated `codex mcp-server`.
The plugin separates read-only review from writable execution — review commands cannot modify files, while task delegation requires an explicit working directory and permission scope.
Available commands include ordinary review, adversarial review with follow-ups, `rescue` for stuck tasks, `status`, `result`, `transfer`, and `cancel`.
A primary agent should retain full task context and make final decisions; a secondary agent like Codex should receive only bounded, independently verifiable tasks.
Good handoff candidates: read-only diff audits, failed-test diagnosis, small isolated changes, and counterexample generation. Vague tasks like “optimize this module” handed to two agents produce two sets of vague changes.
Four costs survive window consolidation: context transfer loss, permission boundaries, duplicated token consumption, and the human acceptance step that must still check diffs, tests, and untouched edges.
A six-field handoff checklist — problem, read scope, write scope, forbidden zones, required verification, evidence to return — forces clarity before delegation and prevents the agent from silently filling in missing decisions.
Conclusions

The plugin’s real significance is not technical integration but organizational: it forces teams to assign roles (driver vs. specialist) rather than pick a single winner among AI coding tools.

Separating review from execution is a deliberate design choice that mirrors human code-review norms — asking for a second opinion should not hand over the keyboard by default.

The handoff checklist reveals that the bottleneck in multi-agent workflows is rarely agent capability; it is the human’s ability to specify verifiable boundaries and acceptance criteria before delegating.

Token economics change shape: a second opinion saves human switching time but doubles model calls per change, making it a cost decision rather than a pure productivity win.

The update reframes the market conversation from “which agent is strongest” to “which agent fits which role,” implying that future toolchains will be compositions, not monoliths.

Concepts & terms
Codex plugin for Claude Code
An official OpenAI plugin that lets Claude Code delegate read-only reviews or isolated writable tasks to OpenAI’s Codex agent, with commands for status polling, result retrieval, and cancellation.
Adversarial review
A review mode where the agent actively challenges the code with follow-up questions and counterexamples, rather than passively scanning for issues.
Task rescue
A plugin command (`rescue`) that hands a stuck or failing task from the primary agent to Codex for a fresh diagnosis or alternative approach.
Source: juejin.cn ↗ Google Translate ↗ Backup ↗