Initial Codex Telegram admin bot

.env.example

@@ -0,0 +1,33 @@
+# Telegram API credentials (https://my.telegram.org/apps)
+TELEGRAM_API_ID=12345
+TELEGRAM_API_HASH=0123456789abcdef0123456789abcdef
+
+# Bot token from @BotFather
+TELEGRAM_BOT_TOKEN=123456:ABC-DEF1234ghIkl-zyx57W2v1u123ew11
+
+# Comma-separated Telegram user IDs allowed to use the bot
+ADMIN_IDS=123456789,987654321
+
+# Working directory for Codex tasks
+WORK_DIR=/
+
+# Optional: OpenAI API key. Leave empty to reuse an existing Codex login.
+OPENAI_API_KEY=
+
+# Optional: set a default model. Leave empty to use the Codex runtime default.
+CODEX_DEFAULT_MODEL=
+
+# Optional: model buttons in /model. Format: "Label=model,Label=model"
+CODEX_MODEL_CHOICES=GPT-5.5=gpt-5.5,GPT-5.4=gpt-5.4,GPT-5.4 mini=gpt-5.4-mini
+
+# Optional: full-access, workspace-write, or read-only. Server-admin mode defaults to full-access.
+CODEX_SANDBOX=full-access
+
+# Optional: auto_review or deny_all.
+CODEX_APPROVAL_MODE=auto_review
+
+# Optional: path to a specific Codex executable. Usually unnecessary: openai-codex ships a pinned runtime.
+#CODEX_BIN=/usr/local/bin/codex
+
+# Optional: path to the thread persistence file (default: sessions.json next to the bot)
+#SESSIONS_FILE=/opt/codex-tg-bot/sessions.json