Codex CLI has a flexible notify hook that runs every time a task finishes. On macOS, we can use that hook to trigger a Shortcut with elevated permissions so the system plays a sound (or delivers any other notification) without additional prompts.

Update the Codex config

Add the following snippet to your Codex configuration file (for example ~/.codex/config.toml):

notify = ["zsh", "/Users/roger/.codex/notify.sh"]

[tui]
notifications = true

The notify array tells Codex to execute a shell script after each completed task, and the tui flag keeps the built-in notifications enabled.

Run a Shortcut from zsh

Create the script referenced above at /Users/roger/.codex/notify.sh:

#!/bin/zsh
/usr/bin/shortcuts run "Codex Done"

Grant execute permission with chmod +x ~/.codex/notify.sh. The script calls the Shortcuts CLI to run a Shortcut named “Codex Done”. Inside Shortcuts, you can assemble any combination of sounds, alerts, or automations that require higher privileges than a standard CLI hook can access.

Shortcut tips

Use this template Shortcut link to jump-start your automation: Codex Done (iCloud).

• Base64-encode any m4a clip you want to ship with the Shortcut using base64 -i sound.m4a -o sound.b64, then paste that text into a Text block in Shortcuts.
• Add a Base64 Encode/Decode action set to Decode so the Shortcut reconstructs the audio file at runtime and hands it to a Play Sound action.

Why Shortcuts?

Shortcuts runs outside the terminal sandbox and can interact with system-level features such as audio output, spoken notifications, or focus modes. By delegating to Shortcuts, Codex stays lightweight while still giving you a customizable, high-trust way to signal when work is finished.

Official Codex configuration reference: docs/config.md#notify