digital-brain 1.1.9 → 1.1.15

package/README.md

@@ -83,7 +83,8 @@ node ./bin/digital-brain.js init ./Digital Brain\ Vault
 - Generate reply-ready person context that keeps WhatsApp, iMessage, Slack, and LinkedIn evidence separate under the same person.
 - Create AI-readable memory files for future prompts.
 - Draft WhatsApp sends by default, send with explicit `--yes`, or configure auto-send mode during init.
-- Run an explicit WhatsApp auto-responder that uses local Ollama plus vault memory while the command is running.
+- Run an explicit WhatsApp auto-responder that uses Ollama or a Codex command plus vault memory while the command is running.
+- Choose the WhatsApp auto-reply provider during init: Ollama, Codex app bridge, or Codex CLI.
 - Enforce an AI-disclosure guard after repeated AI-assisted sends.
 
 ## Core Commands
@@ -98,6 +99,8 @@ digital-brain import-linkedin --input ./linkedin-archive.zip
 digital-brain send-whatsapp --to "Name" --message "text"
 digital-brain auto-whatsapp --allow "Name" --model llama3.1
 digital-brain auto-whatsapp --contact "+15551234567" --model llama3.1
+digital-brain auto-whatsapp --allow-all --provider codex --yes
+digital-brain auto-whatsapp --allow-all --provider codex-app --yes
 ```
 
 `init` remembers your vault globally, so `run` works from anywhere. `run` syncs the live local sources you selected, extracts relationships, and writes interpreted memory in one command.
@@ -124,10 +127,32 @@ digital-brain auto-whatsapp --allow "Mom" --model llama3.1
 digital-brain auto-whatsapp --allow "Mom" --model llama3.1 --yes
 digital-brain auto-whatsapp --allow "Mom" --model llama3.1 --yes --no-process-unread
 digital-brain auto-whatsapp --contact "+15551234567" --model llama3.1 --yes
+digital-brain auto-whatsapp --allow-all --provider codex --yes
+digital-brain auto-whatsapp --allow-all --provider codex-app --yes
 ```
 
+If you start without `--allow`, `--contact`, or `--allow-all` in an interactive terminal, Digital Brain asks whether to cover all contacts or select contacts from your WhatsApp chat list. With `--allow-all`, it still asks once before the first AI reply to each new chat and stores the decision in `08 Sources/WhatsApp/Outbound/auto-reply-whitelist.json`. Use `--auto-approve-new-chats` only if you intentionally want unattended first sends.
+
 Even with `--allow-all`, likely business, notification, OTP, delivery, bank, and support chats are skipped by default. Use explicit `--allow "Name"` or `--contact "+15551234567"` for trusted personal chats. Pass `--include-businesses` only if you intentionally want those chats included.
 
+The default provider is local Ollama. `--provider codex` uses the Codex CLI. `--provider codex-app` uses a file bridge for the Codex desktop app.
+
+```bash
+digital-brain auto-whatsapp --allow-all --provider codex --yes
+```
+
+If your Codex CLI needs a custom command, pass `--codex-command "..."` or set `DIGITAL_BRAIN_CODEX_COMMAND`. If the command contains `{promptFile}`, Digital Brain writes the reply prompt to a temp file and substitutes that path; otherwise it pipes the prompt to stdin.
+
+For the Codex desktop app bridge:
+
+```bash
+digital-brain auto-whatsapp --allow-all --provider codex-app --yes
+```
+
+Digital Brain writes requests to `08 Sources/WhatsApp/Outbound/Codex App Bridge/requests` and waits for matching JSON responses in `responses`.
+
+If you select `Codex app bridge` during `digital-brain init`, the vault also gets `Tools/Codex App Bridge Automation.md` with the exact prompt to use in the Codex app.
+
 If Digital Brain has already sent two AI-assisted messages to the same chat in the last 24 hours, the next send must disclose that AI is helping. Once that chat has received an AI disclosure, Digital Brain will not keep repeating it.
 
 ## Automation

package/bin/digital-brain.js

@@ -49,6 +49,7 @@ async function init(argv, args) {
   let activeWindow = args["active-window"] || "08:00-12:00";
   let timezone = args.timezone || Intl.DateTimeFormat().resolvedOptions().timeZone || "local";
   let outboundMode = args["outbound-mode"] || "draft";
+  let autoReplyProvider = args["auto-reply-provider"] || args.provider || "ollama";
   let privacyMode = args["privacy-mode"] || "standard";
   let sourceMarkdownMode = args["source-markdown-mode"] || "none";
   let selectedSources = parseList(args.sources || "whatsapp");
@@ -105,6 +106,13 @@ async function init(argv, args) {
       ["send-with-confirmation", "Send with confirmation", "Can send only after explicit command confirmation.", "✅"],
       ["auto-send", "Auto-send while running", "Lets auto-whatsapp send from allowlisted chats while it is running.", "🚦"],
     ], outboundMode);
+    if (outboundMode !== "disabled") {
+      autoReplyProvider = await select(rl, "WhatsApp auto-reply brain", [
+        ["ollama", "Ollama local model", "Runs fully local if Ollama and the model are installed.", "🦙"],
+        ["codex-app", "Codex app bridge", "Uses request/response files for a Codex desktop automation or thread.", "🧠"],
+        ["codex", "Codex CLI", "Uses a local codex command; only choose this if the CLI works.", "⌨️"],
+      ], autoReplyProvider);
+    }
     connectAi = await confirm(rl, "🔗 Add global AI pointers for Codex/Claude/Gemini?", true);
     responsibilityAccepted = await responsibilityGate(rl, { schedule, outboundMode });
     if (!responsibilityAccepted && needsResponsibilityGate({ schedule, outboundMode })) {
@@ -132,6 +140,7 @@ async function init(argv, args) {
     activeWindow,
     timezone,
     outboundMode,
+    autoReplyProvider,
     privacyMode,
     sourceMarkdownMode,
     selectedSources,
@@ -154,6 +163,7 @@ async function init(argv, args) {
   writeDefaultVault(vault);
   writeRefreshScript(vault, config);
   writeWatchScript(vault, config);
+  writeCodexAppBridgeGuide(vault, config);
 
   if (connectAi) {
     addGlobalPointer(path.join(os.homedir(), ".codex", "AGENTS.md"), vault, "Codex");
@@ -166,6 +176,14 @@ async function init(argv, args) {
   console.log(`Default vault saved: ${vault}`);
   console.log(`Refresh script: ${path.join(vault, "Tools", "digital-brain-refresh.sh")}`);
   console.log(`Always-on script: ${path.join(vault, "Tools", "digital-brain-watch.sh")}`);
+  if (autoReplyProvider === "codex-app") {
+    console.log(`Codex app bridge guide: ${path.join(vault, "Tools", "Codex App Bridge Automation.md")}`);
+    if (codexAppLooksAvailable()) {
+      console.log("Codex app detected. Add the generated bridge prompt as a Codex automation/thread to answer WhatsApp reply requests.");
+    } else {
+      console.log("Codex app config was not detected. The bridge guide was still generated for later use.");
+    }
+  }
   console.log("Next:");
   console.log("  digital-brain run");
   if (schedule === "always-on") console.log(`  "${path.join(vault, "Tools", "digital-brain-watch.sh")}"`);
@@ -408,6 +426,48 @@ done
   fs.chmodSync(scriptPath, 0o755);
 }
 
+function writeCodexAppBridgeGuide(vault, config) {
+  const toolsDir = path.join(vault, "Tools");
+  ensureDir(toolsDir);
+  const bridgeDir = path.join(vault, "08 Sources", "WhatsApp", "Outbound", "Codex App Bridge");
+  const requestsDir = path.join(bridgeDir, "requests");
+  const responsesDir = path.join(bridgeDir, "responses");
+  ensureDir(requestsDir);
+  ensureDir(responsesDir);
+  const prompt = `# Codex App Bridge Automation
+
+Use this prompt in a Codex desktop automation or a live Codex thread when Digital Brain is configured with:
+
+\`\`\`bash
+digital-brain auto-whatsapp --provider codex-app --yes
+\`\`\`
+
+Request folder:
+
+\`${requestsDir}\`
+
+Response folder:
+
+\`${responsesDir}\`
+
+Automation prompt:
+
+\`\`\`text
+Check for pending Digital Brain WhatsApp reply requests in ${requestsDir}. For each .json request that does not already have its response file present, read the request JSON, use its prompt field to produce exactly one WhatsApp reply as the user, and write JSON to the request's responsePath in the exact shape {"reply":"..."}. Do not send any WhatsApp message yourself. Do not write markdown or explanations in the response file. If a request cannot be answered, write {"error":"short reason"} to responsePath.
+\`\`\`
+
+Notes:
+
+- Digital Brain sends the WhatsApp message after the response file appears.
+- Keep the automation active while \`digital-brain auto-whatsapp --provider codex-app\` is running.
+- The default wait timeout is 5 minutes. Override with \`--provider-timeout-ms\`.
+`;
+  writeFileAtomic(path.join(toolsDir, "Codex App Bridge Automation.md"), prompt);
+  if (config.autoReplyProvider === "codex-app") {
+    writeFileAtomic(path.join(bridgeDir, "README.md"), prompt);
+  }
+}
+
 function addGlobalPointer(file, vault, label) {
   ensureDir(path.dirname(file));
   const block = `
@@ -522,6 +582,10 @@ function needsResponsibilityGate({ schedule, outboundMode }) {
   return schedule === "always-on" || ["send-with-confirmation", "auto-send"].includes(outboundMode);
 }
 
+function codexAppLooksAvailable() {
+  return fs.existsSync(path.join(os.homedir(), ".codex"));
+}
+
 function letterFor(index) {
   return String.fromCharCode(65 + index);
 }
@@ -593,6 +657,6 @@ Usage:
   digital-brain extract --days 30
   digital-brain interpret --days 30
   digital-brain send-whatsapp --to "Name" --message "Text" [--yes]
-  digital-brain auto-whatsapp --allow "Name" --contact "+15551234567" --model llama3.1 [--yes] [--no-process-unread]
+  digital-brain auto-whatsapp --allow "Name" --contact "+15551234567" --provider ollama|codex --model llama3.1 [--yes] [--no-process-unread]
 `);
 }

package/docs/AUTOMATIONS.md

@@ -31,6 +31,7 @@ digital-brain run
 - refresh interval in minutes for always-on mode, clamped to a minimum of 1
 - active time window
 - WhatsApp outbound mode
+- WhatsApp auto-reply provider: Ollama, Codex app bridge, or Codex CLI
 - whether to add AI adapter pointers
 
 Most questions are multiple choice. Pick with `A/B/C`, `1/2/3`, the exact value, or press Enter to use the displayed default.
@@ -45,6 +46,7 @@ Important defaults:
 - skipped always-on interval uses 5 minutes, with a hard minimum of 1 minute
 - skipped active window uses `08:00-12:00`
 - skipped outbound mode uses draft-only
+- skipped auto-reply provider uses Ollama
 - auto-send mode can be selected during init, but only after the responsibility check
 - skipped AI pointers are added during the guided quiz
 
@@ -96,13 +98,15 @@ The generated script loops forever and sleeps for `refreshIntervalMinutes`. The
 
 ## WhatsApp Auto-Reply
 
-`digital-brain auto-whatsapp` is separate from refresh automation. It uses WhatsApp Web for live incoming messages and Ollama for local reply generation. On startup it scans unread WhatsApp Web chats, then continues listening for new messages.
+`digital-brain auto-whatsapp` is separate from refresh automation. It uses WhatsApp Web for live incoming messages and either Ollama or a Codex command for reply generation. On startup it scans unread WhatsApp Web chats, then continues listening for new messages.
 
 Draft-only:
 
 ```bash
 digital-brain auto-whatsapp --allow "Mom" --model llama3.1
 digital-brain auto-whatsapp --contact "+15551234567" --model llama3.1
+digital-brain auto-whatsapp --allow-all --provider codex
+digital-brain auto-whatsapp --allow-all --provider codex-app
 ```
 
 Auto-send while the command is running:
@@ -110,6 +114,8 @@ Auto-send while the command is running:
 ```bash
 digital-brain auto-whatsapp --allow "Mom" --model llama3.1 --yes
 digital-brain auto-whatsapp --contact "+15551234567" --model llama3.1 --yes
+digital-brain auto-whatsapp --allow-all --provider codex --yes
+digital-brain auto-whatsapp --allow-all --provider codex-app --yes
 ```
 
 Broad auto-send for personal chats:
@@ -120,6 +126,23 @@ digital-brain auto-whatsapp --allow-all --model llama3.1 --yes
 
 `--allow-all` still skips likely business, notification, OTP, bank, delivery, and support chats by default. Use `--include-businesses` only when you intentionally want those chats included. Prefer explicit `--allow "Name"` or `--contact "+15551234567"` for friends and family.
 
+When `--allow-all` is used, Digital Brain asks once before the first AI reply to each new chat and stores allow/deny decisions in `08 Sources/WhatsApp/Outbound/auto-reply-whitelist.json`. Use `--auto-approve-new-chats` only for fully unattended first sends.
+
+Provider options:
+
+```bash
+digital-brain auto-whatsapp --allow "Mom" --provider ollama --model llama3.1 --yes
+digital-brain auto-whatsapp --allow "Mom" --provider codex --yes
+digital-brain auto-whatsapp --allow "Mom" --provider codex-app --yes
+digital-brain auto-whatsapp --allow "Mom" --provider codex --codex-command "codex exec --skip-git-repo-check" --yes
+```
+
+`--provider codex` runs a local Codex command. If `--codex-command` contains `{promptFile}`, Digital Brain writes the prompt to a temp file and substitutes the path; otherwise it pipes the prompt to stdin.
+
+`--provider codex-app` does not use the Codex CLI. It writes request JSON files to `08 Sources/WhatsApp/Outbound/Codex App Bridge/requests` and waits for response JSON files in `responses`. A Codex desktop automation or live Codex thread must process those request files and write `{"reply":"..."}` to the provided `responsePath`.
+
+When `codex-app` is selected during `init`, Digital Brain creates `Tools/Codex App Bridge Automation.md` with the exact Codex automation prompt and bridge folder paths.
+
 If you selected `Auto-send while running` during init, `auto-whatsapp` can send without `--yes` while it is running:
 
 ```bash
@@ -128,9 +151,12 @@ digital-brain auto-whatsapp --allow "Mom" --model llama3.1
 
 Guardrails:
 
-- requires Ollama running locally
-- requires the selected model, for example `ollama pull llama3.1`
+- with `--provider ollama`, requires Ollama running locally
+- with `--provider ollama`, requires the selected model, for example `ollama pull llama3.1`
+- with `--provider codex`, requires a working local Codex command
+- with `--provider codex-app`, requires a Codex desktop bridge automation/thread that writes response files
 - requires `--allow "Name"` or `--contact "+15551234567"` unless `--allow-all` is explicitly passed
+- single-threads reply generation so multiple incoming chats do not trigger overlapping sends
 - skips likely business, notification, OTP, and service chats unless `--include-businesses` is passed or the chat is explicitly allowlisted by name or contact number
 - processes unread chats on startup unless `--no-process-unread` is passed
 - skips groups unless `--include-groups` is passed

package/docs/PRIVACY.md

@@ -7,7 +7,7 @@ Digital Brain is designed for local use.
 - No cloud API is called by default.
 - Ollama interpretation is local when enabled.
 - WhatsApp sending uses a local WhatsApp Web session.
-- WhatsApp auto-reply uses local Ollama by default, runs only while the command is active, and requires an allowlist unless explicitly overridden. If init is configured for auto-send mode, it can send without `--yes`.
+- WhatsApp auto-reply uses local Ollama by default, a configured local Codex command, or a Codex desktop file bridge. It runs only while the command is active and requires an allowlist unless explicitly overridden. If init is configured for auto-send mode, it can send without `--yes`.
 - Raw source data stays under `08 Sources/`; normal AI context should use `06 AI Memory/` and human notes under `04 People/`.
 - Same-person matching across sources is provisional and file-based; keep source evidence visible when using merged person context.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "digital-brain",
-  "version": "1.1.9",
+  "version": "1.1.15",
   "description": "Your private digital imprint for AI assistants.",
   "type": "module",
   "bin": {

package/whatsapp-web/auto-reply.mjs

@@ -1,6 +1,9 @@
 import fs from "node:fs";
 import crypto from "node:crypto";
 import path from "node:path";
+import readline from "node:readline/promises";
+import { spawn } from "node:child_process";
+import { stdin as input, stdout as output } from "node:process";
 import qrcode from "qrcode-terminal";
 import pkg from "whatsapp-web.js";
 
@@ -16,14 +19,20 @@ const whatsAppDir = path.join(vault, "08 Sources", "WhatsApp");
 const outboundDir = path.join(whatsAppDir, "Outbound");
 const sessionDir = path.join(whatsAppDir, ".session");
 const statePath = path.join(outboundDir, "auto-reply-state.json");
+const whitelistPath = path.join(outboundDir, "auto-reply-whitelist.json");
+const codexAppBridgeDir = path.join(outboundDir, "Codex App Bridge");
 const config = readConfig(vault);
+const provider = args.provider || config.autoReplyProvider || "ollama";
 const model = args.model || config.autoReplyModel || "llama3.1";
+const codexCommand = args["codex-command"] || process.env.DIGITAL_BRAIN_CODEX_COMMAND || config.codexCommand || "codex exec --skip-git-repo-check";
 const allow = parseList(args.allow || "");
 const deny = parseList(args.deny || "");
 const contactNumbers = parseList([args.contact, args.phone, args["contact-number"]].filter(Boolean).join(","))
   .map(normalizePhone)
   .filter(Boolean);
 const allowAll = Boolean(args["allow-all"]);
+let runtimeAllowAll = allowAll;
+const autoApproveNewChats = Boolean(args["auto-approve-new-chats"]);
 const includeGroups = Boolean(args["include-groups"]);
 const includeBusinesses = Boolean(args["include-businesses"]);
 const sendEnabled = Boolean(args.yes) || config.outboundMode === "auto-send";
@@ -33,6 +42,12 @@ const maxRepliesPerChat = numberArg("max-replies-per-chat", 5);
 const maxContextChars = numberArg("max-context-chars", 12000);
 const outboundLogMode = args["log-mode"] || config.outboundLogMode || "metadata";
 const state = loadState();
+const whitelist = loadWhitelist();
+const hasStoredScope = Object.keys(whitelist.allowedChats || {}).length > 0;
+const hasInitialScope = allowAll || allow.length > 0 || contactNumbers.length > 0 || hasStoredScope;
+const interactiveTerminal = Boolean(input.isTTY && output.isTTY);
+let queueTail = Promise.resolve();
+const rl = interactiveTerminal ? readline.createInterface({ input, output }) : null;
 
 fs.mkdirSync(outboundDir, { recursive: true });
 
@@ -41,12 +56,16 @@ if (config.outboundMode === "disabled") {
   process.exit(1);
 }
 
-if (!allowAll && allow.length === 0 && contactNumbers.length === 0) {
+if (!hasInitialScope && !interactiveTerminal) {
   console.error('Refusing to auto-reply without an allowlist. Add --allow "Name", --contact "+15551234567", or pass --allow-all explicitly.');
   process.exit(1);
 }
 
-await assertOllamaModel(model);
+if (provider === "ollama") {
+  await assertOllamaModel(model);
+} else if (!["codex", "codex-app"].includes(provider)) {
+  throw new Error(`Unsupported auto-reply provider "${provider}". Use "ollama", "codex", or "codex-app".`);
+}
 
 const client = new Client({
   authStrategy: new LocalAuth({ clientId: "digital-brain", dataPath: sessionDir }),
@@ -59,9 +78,12 @@ client.on("qr", (qr) => {
 });
 
 client.on("ready", async () => {
-  console.log(`Digital Brain WhatsApp auto-reply running with Ollama model: ${model}`);
+  console.log(`Digital Brain WhatsApp auto-reply running with provider: ${provider}${provider === "ollama" ? ` (${model})` : ""}`);
   console.log(sendEnabled ? "Auto-send is enabled." : "Draft mode. Replies will be logged but not sent. Add --yes or set outboundMode=auto-send to send.");
-  console.log(allowAll ? "Allowlist: all chats." : allowlistSummary());
+  if (!hasInitialScope) await configureInteractiveScope();
+  console.log(runtimeAllowAll ? "Allowlist: all chats, with first-send approval per new chat." : allowlistSummary());
+  if (provider === "codex") console.log(`Codex command: ${codexCommand}`);
+  if (provider === "codex-app") console.log(`Codex App bridge: ${codexAppBridgeDir}`);
   if (!includeBusinesses) console.log("Likely business, notification, OTP, and service chats are skipped by default.");
   try {
     if (processUnreadOnStart) {
@@ -78,7 +100,7 @@ client.on("ready", async () => {
 client.on("message", async (message) => {
   try {
     console.log(`Received WhatsApp message event: ${summarize(message.body || "[non-text message]")}`);
-    await handleMessage(message);
+    enqueueMessage(message);
   } catch (error) {
     console.error(`Auto-reply error: ${error.message}`);
   }
@@ -115,8 +137,86 @@ async function processUnreadChats() {
       continue;
     }
     console.log(`Processing unread chat: ${name}`);
-    await handleMessage(latestInbound, chat);
+    await enqueueMessage(latestInbound, chat);
+  }
+}
+
+async function configureInteractiveScope() {
+  console.log("");
+  console.log("Auto-reply scope:");
+  console.log("  A) all contacts, but ask once before the first AI reply to each new chat");
+  console.log("  S) select contacts from your WhatsApp chat list");
+  console.log("  Q) quit");
+  const answer = (await rl.question("Choose A/S/Q [S]: ")).trim().toLowerCase() || "s";
+  if (answer.startsWith("q")) {
+    await shutdown(0);
+    return;
+  }
+  if (answer.startsWith("a")) {
+    runtimeAllowAll = true;
+    console.log("Scope set to all contacts with first-send approval.");
+    return;
+  }
+  const chats = (await client.getChats())
+    .filter((chat) => includeGroups || !chat.isGroup)
+    .sort((a, b) => Number(b.timestamp || 0) - Number(a.timestamp || 0))
+    .slice(0, numberArg("select-limit", 60));
+  if (chats.length === 0) {
+    console.log("No WhatsApp chats found to select.");
+    return;
+  }
+  console.log("");
+  console.log("Select contacts:");
+  chats.forEach((chat, index) => {
+    console.log(`  ${index + 1}) ${chatName(chat)}`);
+  });
+  const selection = await rl.question("Numbers to whitelist, comma-separated: ");
+  const selected = parseIndexSelection(selection, chats.length).map((index) => chats[index]);
+  for (const chat of selected) {
+    setWhitelistDecision(chat, "allow", "startup-select");
+  }
+  console.log(`Whitelisted ${selected.length} chat(s).`);
+}
+
+function enqueueMessage(message, knownChat = null) {
+  queueTail = queueTail
+    .catch(() => undefined)
+    .then(() => handleMessage(message, knownChat))
+    .catch((error) => console.error(`Auto-reply error: ${error.message}`));
+  return queueTail;
+}
+
+async function ensureChatApproved(chat, recentMessages) {
+  const name = chatName(chat);
+  if (isExplicitlyAllowed(chat) || isChatWhitelisted(chat)) return true;
+  if (isChatDenied(chat)) {
+    console.log(`Skipping stored denied chat: ${name}`);
+    return false;
+  }
+  if (!runtimeAllowAll) return false;
+  if (autoApproveNewChats) {
+    setWhitelistDecision(chat, "allow", "auto-approve-new-chats");
+    return true;
   }
+  if (!interactiveTerminal) {
+    console.log(`Skipping ${name}: first-send approval required but no interactive terminal is available.`);
+    return false;
+  }
+  console.log("");
+  console.log(`New chat needs AI approval: ${name}`);
+  const inbound = recentMessages.filter((item) => !item.fromMe && !item.isStatus).slice(-3);
+  for (const item of inbound) {
+    console.log(`  ${name}: ${summarize(item.body || "[non-text message]")}`);
+  }
+  const answer = (await rl.question("Whitelist this chat for AI auto-replies? [y/N]: ")).trim().toLowerCase();
+  if (answer === "y" || answer === "yes") {
+    setWhitelistDecision(chat, "allow", "first-send-prompt");
+    console.log(`Whitelisted ${name}.`);
+    return true;
+  }
+  setWhitelistDecision(chat, "deny", "first-send-prompt");
+  console.log(`Denied ${name}.`);
+  return false;
 }
 
 async function handleMessage(message, knownChat = null) {
@@ -154,6 +254,10 @@ async function handleMessage(message, knownChat = null) {
     markProcessed(message, name, { sent: false });
     return;
   }
+  if (!(await ensureChatApproved(chat, recentMessages))) {
+    markProcessed(message, name, { sent: false });
+    return;
+  }
   const disclosure = disclosureStatus(name);
   const prompt = buildPrompt({
     chatName: name,
@@ -161,7 +265,7 @@ async function handleMessage(message, knownChat = null) {
     recentMessages,
     disclosureRequired: disclosure.required,
   });
-  console.log(`Generating reply for ${name} with ${model}...`);
+  console.log(`Generating reply for ${name} with ${provider}${provider === "ollama" ? `:${model}` : ""}...`);
   const startedAt = Date.now();
   const reply = await generateReply(prompt);
   console.log(`Generated reply for ${name} in ${Date.now() - startedAt}ms: ${summarize(reply || "[empty reply]")}`);
@@ -192,6 +296,9 @@ function buildPrompt({ chatName, incomingBody, recentMessages, disclosureRequire
     "You are helping the user reply on WhatsApp.",
     "Write exactly one message to send as the user.",
     "Be natural, concise, and relationship-appropriate.",
+    "First infer the immediate intent of the current conversation from the recent chat. Continue that thread only.",
+    "Do not start with hey/hi unless the recent chat itself uses that greeting pattern.",
+    "Mirror the vocabulary, register, and pacing already present in this chat.",
     "Match the user's own communication style from My Communication Style. If it says lowercase-heavy or undercapitalized, prefer lowercase casual texting.",
     "Use lexical signals from My Communication Style: recurring style words, openers, short phrase shapes, punctuation habits, and lowercase-i behavior.",
     "Do not sound like customer support, corporate email, or a generic AI assistant.",
@@ -238,6 +345,12 @@ function readMemoryContext(chatName) {
 }
 
 async function generateReply(prompt) {
+  if (provider === "codex") return generateCodexReply(prompt);
+  if (provider === "codex-app") return generateCodexAppReply(prompt);
+  return generateOllamaReply(prompt);
+}
+
+async function generateOllamaReply(prompt) {
   const response = await fetch("http://127.0.0.1:11434/api/generate", {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -253,6 +366,90 @@ async function generateReply(prompt) {
   return cleanReply(body.response || "");
 }
 
+async function generateCodexReply(prompt) {
+  return runReplyCommand(codexCommand, prompt, "codex");
+}
+
+async function generateCodexAppReply(prompt) {
+  const timeoutMs = numberArg("provider-timeout-ms", 300000);
+  const request = createCodexAppRequest(prompt);
+  console.log(`Waiting for Codex App bridge response: ${request.responsePath}`);
+  return await waitForCodexAppResponse(request.responsePath, timeoutMs);
+}
+
+function createCodexAppRequest(prompt) {
+  const requestId = `${Date.now()}-${crypto.randomBytes(4).toString("hex")}`;
+  const requestsDir = path.join(codexAppBridgeDir, "requests");
+  const responsesDir = path.join(codexAppBridgeDir, "responses");
+  fs.mkdirSync(requestsDir, { recursive: true });
+  fs.mkdirSync(responsesDir, { recursive: true });
+  const requestPath = path.join(requestsDir, `${requestId}.json`);
+  const responsePath = path.join(responsesDir, `${requestId}.json`);
+  writeJsonAtomic(requestPath, {
+    schemaVersion: 1,
+    requestId,
+    createdAt: new Date().toISOString(),
+    responsePath,
+    prompt,
+    instructions: [
+      "Write exactly one WhatsApp reply as the user.",
+      "Return JSON only: {\"reply\":\"...\"}.",
+      "No markdown, no explanations, no surrounding text.",
+    ],
+  });
+  return { requestId, requestPath, responsePath };
+}
+
+async function waitForCodexAppResponse(responsePath, timeoutMs) {
+  const startedAt = Date.now();
+  while (Date.now() - startedAt < timeoutMs) {
+    if (fs.existsSync(responsePath)) {
+      const response = parseJsonLine(fs.readFileSync(responsePath, "utf8"));
+      if (!response) throw new Error(`Codex App bridge wrote invalid JSON: ${responsePath}`);
+      if (response.error) throw new Error(`Codex App bridge error: ${response.error}`);
+      const reply = cleanReply(response.reply || "");
+      if (!reply) throw new Error(`Codex App bridge wrote an empty reply: ${responsePath}`);
+      return reply;
+    }
+    await sleep(1000);
+  }
+  throw new Error(`Codex App bridge timed out after ${timeoutMs}ms. No response at ${responsePath}`);
+}
+
+async function runReplyCommand(command, prompt, label) {
+  const timeoutMs = numberArg("provider-timeout-ms", 120000);
+  const usesPromptFile = command.includes("{promptFile}");
+  const promptFile = usesPromptFile ? path.join(outboundDir, `reply-prompt-${Date.now()}-${Math.random().toString(16).slice(2)}.txt`) : "";
+  if (promptFile) fs.writeFileSync(promptFile, prompt, "utf8");
+  const renderedCommand = promptFile ? command.replaceAll("{promptFile}", shellQuote(promptFile)) : command;
+  return await new Promise((resolve, reject) => {
+    const child = spawn(renderedCommand, { shell: true, cwd: vault, env: process.env });
+    let stdout = "";
+    let stderr = "";
+    const timer = setTimeout(() => {
+      child.kill("SIGTERM");
+      reject(new Error(`${label} reply command timed out after ${timeoutMs}ms`));
+    }, timeoutMs);
+    child.stdout.on("data", (chunk) => { stdout += chunk.toString(); });
+    child.stderr.on("data", (chunk) => { stderr += chunk.toString(); });
+    child.on("error", (error) => {
+      clearTimeout(timer);
+      cleanupPromptFile(promptFile);
+      reject(error);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      cleanupPromptFile(promptFile);
+      if (code !== 0) {
+        reject(new Error(`${label} reply command failed with ${code}: ${summarize(stderr || stdout)}`));
+        return;
+      }
+      resolve(cleanReply(stdout));
+    });
+    if (!usesPromptFile) child.stdin.end(prompt);
+  });
+}
+
 async function assertOllamaModel(modelName) {
   let response;
   try {
@@ -281,7 +478,9 @@ function cleanReply(value) {
 }
 
 function isAllowed(chatOrName) {
-  if (allowAll) return true;
+  if (isChatDenied(chatOrName)) return false;
+  if (isChatWhitelisted(chatOrName)) return true;
+  if (runtimeAllowAll) return true;
   const name = typeof chatOrName === "string" ? chatOrName : chatName(chatOrName);
   if (contactNumbers.some((number) => chatMatchesContact(chatOrName, number))) return true;
   return allow.some((item) => name.toLowerCase().includes(item.toLowerCase()));
@@ -298,7 +497,7 @@ function isDenied(name) {
 }
 
 function shouldSkipNonPersonalChat(chatOrName, recentMessages) {
-  if (includeBusinesses || isExplicitlyAllowed(chatOrName)) return false;
+  if (includeBusinesses || isExplicitlyAllowed(chatOrName) || isChatWhitelisted(chatOrName)) return false;
   const name = typeof chatOrName === "string" ? chatOrName : chatName(chatOrName);
   return isLikelyBusinessOrAutomation(name, recentMessages);
 }
@@ -356,9 +555,71 @@ function allowlistSummary() {
   const parts = [];
   if (allow.length) parts.push(`names: ${allow.join(", ")}`);
   if (contactNumbers.length) parts.push(`contacts: ${contactNumbers.map(maskPhone).join(", ")}`);
+  const storedCount = Object.keys(whitelist.allowedChats || {}).length;
+  if (storedCount) parts.push(`stored: ${storedCount} chat(s)`);
   return `Allowlist: ${parts.join("; ")}`;
 }
 
+function isChatWhitelisted(chatOrName) {
+  return Boolean(whitelist.allowedChats?.[chatKey(chatOrName)]);
+}
+
+function isChatDenied(chatOrName) {
+  return Boolean(whitelist.deniedChats?.[chatKey(chatOrName)]);
+}
+
+function setWhitelistDecision(chat, decision, source) {
+  const key = chatKey(chat);
+  const record = {
+    chatName: chatName(chat),
+    chatId: typeof chat === "string" ? null : chat.id?._serialized || null,
+    source,
+    updatedAt: new Date().toISOString(),
+  };
+  if (decision === "allow") {
+    whitelist.allowedChats[key] = record;
+    delete whitelist.deniedChats[key];
+  } else {
+    whitelist.deniedChats[key] = record;
+    delete whitelist.allowedChats[key];
+  }
+  writeJsonAtomic(whitelistPath, whitelist);
+}
+
+function chatKey(chatOrName) {
+  if (typeof chatOrName === "string") return `name:${chatOrName.toLowerCase()}`;
+  return chatOrName.id?._serialized || `name:${chatName(chatOrName).toLowerCase()}`;
+}
+
+function loadWhitelist() {
+  if (!fs.existsSync(whitelistPath)) return emptyWhitelist();
+  try {
+    return normalizeWhitelist(JSON.parse(fs.readFileSync(whitelistPath, "utf8")));
+  } catch {
+    return emptyWhitelist();
+  }
+}
+
+function normalizeWhitelist(value) {
+  return {
+    schemaVersion: 1,
+    allowedChats: value?.allowedChats || {},
+    deniedChats: value?.deniedChats || {},
+  };
+}
+
+function emptyWhitelist() {
+  return { schemaVersion: 1, allowedChats: {}, deniedChats: {} };
+}
+
+function parseIndexSelection(value, max) {
+  return [...new Set(String(value || "")
+    .split(/[,\s]+/)
+    .map((item) => Number(item.trim()))
+    .filter((item) => Number.isInteger(item) && item >= 1 && item <= max)
+    .map((item) => item - 1))];
+}
+
 function isCoolingDown(name) {
   const last = state.lastSentAtByChat[name];
   if (!last) return false;
@@ -463,6 +724,30 @@ function writeJsonAtomic(file, value) {
   fs.renameSync(temp, file);
 }
 
+function cleanupPromptFile(file) {
+  if (file) {
+    try {
+      fs.unlinkSync(file);
+    } catch {
+      // ignore cleanup errors
+    }
+  }
+}
+
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+function shellQuote(value) {
+  return `'${String(value).replaceAll("'", "'\\''")}'`;
+}
+
+async function shutdown(code) {
+  if (rl) rl.close();
+  await client.destroy().catch(() => undefined);
+  process.exit(code);
+}
+
 function visibleMessage(record, reply) {
   return outboundLogMode === "full" ? reply : `[metadata only, ${record.messageCharCount} chars, ${record.messageHash.slice(0, 12)}]`;
 }
@@ -520,6 +805,6 @@ function parseArgs(argv) {
 }
 
 function usage() {
-  console.error('Usage: digital-brain auto-whatsapp --allow "Name" --contact "+15551234567" --model llama3.1 [--yes] [--allow-all] [--include-groups] [--include-businesses]');
+  console.error('Usage: digital-brain auto-whatsapp --allow "Name" --contact "+15551234567" --provider ollama|codex|codex-app --model llama3.1 [--yes] [--allow-all] [--include-groups] [--include-businesses]');
   process.exit(1);
 }